last executing test programs: 22.025400214s ago: executing program 2 (id=229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0x1, 0x3e158d1e, 0x688, 0xfffffff8, 0x7}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000340)={"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"}) 21.944057772s ago: executing program 2 (id=230): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000200)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000002c0)=0x5, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 21.86340453s ago: executing program 2 (id=231): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@nested_create_vm={0x12d, 0x18}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{0xb, 0x8, 0x2, 0x8, 0x7, 0x8, 0x3}, {0x0, 0x3, 0x1, 0x0, 0x4, 0x9, 0x20b1e4}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21.833223053s ago: executing program 2 (id=232): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x210000, &(0x7f0000001380)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000000440)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000009c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000a00)='./bus\x00', &(0x7f0000000a40), 0x2000008, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000b40)='./bus\x00') r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 21.680142939s ago: executing program 2 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1fb) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x8410, 0x0) symlink(&(0x7f0000000240)='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./mnt/file0\x00') unlink(&(0x7f0000003e40)='./mnt/file0\x00') 21.110435578s ago: executing program 2 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="0f20c035000001000f22c0640f01c90f017e000f56e2dcb17476eb1166b887000f00d0c4c27918d264670f062e0f320f0174c200", 0x34}], 0x1, 0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.110243078s ago: executing program 32 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="0f20c035000001000f22c0640f01c90f017e000f56e2dcb17476eb1166b887000f00d0c4c27918d264670f062e0f320f0174c200", 0x34}], 0x1, 0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.727936137s ago: executing program 1 (id=276): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000200)=0x2, &(0x7f0000000240)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f00000002c0)}, 0x20) 10.727281937s ago: executing program 3 (id=277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000884c03010d0002007a9f060003098906"], 0x29) 9.214856583s ago: executing program 0 (id=279): r0 = openat$kvm(0x0, &(0x7f0000000640), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000700)={0x1, 0x0, [{0x2f, 0x2, 0x0, 0x0, @sint={0xffff, 0x2e}}]}) r2 = eventfd2(0x401, 0x80801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000740)={r2, 0x4}) 9.214638333s ago: executing program 1 (id=280): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x700, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x140000000) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x32877000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000500)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd3\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000840)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xbc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?\xd8\xe2\xb2\xb1n\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg@\x90\x14>2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00\x00\xe8\xb3r\f\xed-V\x89\f\xa9\xb8\x911\x8b\xb6Yp\xfe#S') 9.214054123s ago: executing program 3 (id=281): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x4000040, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x30000004}) epoll_pwait2(r1, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) close(0x3) 9.213748013s ago: executing program 4 (id=282): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 7.604969088s ago: executing program 0 (id=283): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000002c0)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2711, @host}, 0x10) 7.604357748s ago: executing program 1 (id=284): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB='nr_inodes=4']) syz_mount_image$fuse(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x107002e, &(0x7f0000000e40)=ANY=[], 0x4, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000e80)='./file0\x00', 0x22000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000ec0)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), 0x8, &(0x7f0000000f80)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 7.604057458s ago: executing program 3 (id=285): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x2aa, &(0x7f0000000c80)="$eJzs3c9OE10Yx/EfpS/wgjBVFAVjPNGNbiZQr6AhkBibaJAa/yQmg0y16dCSToOpMcLOrWsvgbh0Z2K8ATZegQt3bFyyMI7pdIACQ4IEmYLfz+Y8nTNPc06eM81p0pmuP3y3UC76dtGpK9VllJYGtCFllFK3WrqiNhXGPWq3opvD+W9X7j96fCeXz0/NGDOdm72VNcYMXf388vWHa1/qAw8+Dn3q1Vrm6fqP7Pe1kbXR9V+zL0q+KfmmUq0bx8xVq3VnznPNfMkv28bc81zHd02p4ru1Hf1Fr7q42DBOZX6wf7Hm+r5xKg1TdhumXjX1WsM4z51Sxdi2bQb7haa+/btSxzkOJKVWyzmTksb29BRWExkQAABIVMz+f+Uw+/909Jr9/0lSWJ2ZcXJJjwJHyNp7qLn/fxL7dY/9PwAAAAAAAAAAAAAAAAAAAAAAJ8FGEFhBEFjNdvP+gB5JQXT8f0n9kgYknZE0KGkous0gI+mspHOShiWdl3RB0oiki5IuSRpte6+Ep4oY7fVvtv9F9e+m/v+E/eq/6/oPHyJB/U+fA9af6/+UantwT5+08HapsFRota3+XFEleXI1Lks/w1pGWvH07fzUuAlldHlhOcpfXip078yfkNVcMHH5E618szO/N1x3W/lZWc0FFpefjc3v043rbfm2LH19pqo8zYdrcjv/zYQxk3fzu/LHwvN26zne8vx1ttkSWz/b3q+/lX+A9RGMx9YnrbF0snOH5DdelR3Pc2sEBJ0XjHTGMA4dvO+MYRwmSPqTCcdhu+hJjwQAAAAAAAAAAAAAAAAA8CeO5jeDm/8UFn9OwlMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCP3wEAAP//t8JUVA==") bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) r0 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x17) 7.603851998s ago: executing program 4 (id=286): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, &(0x7f0000000ac0)=""/4089, 0x26, 0xff9, 0x1}, 0x28) 5.83932155s ago: executing program 0 (id=287): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000001dc0)=0x13) ioctl$TCSETS(r1, 0x5402, &(0x7f0000001e40)={0x3482, 0x0, 0x0, 0x7fff, 0xa, "db61000000000000000000000800"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000001e80)=0xd) 5.83889963s ago: executing program 1 (id=288): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) unshare(0x2020600) mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0) unshare(0x2020600) chdir(&(0x7f0000000180)='./bus\x00') mount(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x2144486, 0x0) 5.83846376s ago: executing program 3 (id=289): rt_sigprocmask(0x2, &(0x7f0000000380)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x1d, &(0x7f00000003c0)={0x16, 0x2, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0xffffffffbffffff7]}, 0x8, 0x800) read$watch_queue(r2, &(0x7f0000000480)=""/200, 0xc8) 5.83819655s ago: executing program 4 (id=290): mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000010c00)='./file0\x00', &(0x7f0000010c40), 0x0, &(0x7f0000010c80)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000010cc0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000010d00)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000010dc0)={0x0, 0x0, 0x2, 0x8, 0x3}) 4.030683926s ago: executing program 0 (id=291): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) setns(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x1800, &(0x7f0000000040)={0x89, 0x0, 0x100000}, 0x20) 4.030120506s ago: executing program 1 (id=292): r0 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0x5, 0x1, "ef"}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002c00)={0x84, &(0x7f0000002800)={0x40, 0x16, 0x6, "b475df8185b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 4.029870846s ago: executing program 3 (id=293): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x8010, 0x48380}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}]}}}]}, 0x38}}, 0x0) 4.029624996s ago: executing program 4 (id=294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000480)={{0x2000, 0x30000, 0xc, 0x9, 0x3, 0x0, 0xa, 0x2d, 0x0, 0x30, 0x19}, {0x1, 0x3000, 0x5, 0x9, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0x2000, 0xe000, 0xe, 0xf, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x1}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0xa000, 0x9000, 0x10, 0x2, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xc, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x5, 0x3, 0x7, 0x9}, {0x30000, 0x2d}, {0x10000, 0x8000}, 0x80000031, 0x0, 0x50000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000002, 0x3, 0x94, 0x80ff]}) 2.120234522s ago: executing program 0 (id=295): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x4) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r3, 0x0) 2.119671832s ago: executing program 3 (id=296): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x4) 2.119291972s ago: executing program 4 (id=297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1001001}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3de3d7b4cd07ec3ee777de774fc7987cca41989ec53f953f615edc21c4335093450b134"}}]}]}, 0x64}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 1.53471ms ago: executing program 0 (id=298): r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x1, 0x0) 294.29µs ago: executing program 1 (id=299): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x6, 0x10, &(0x7f0000002400)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000002480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000024c0)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000002540)="5c250ed6087361df712bc884fed5", 0x0, 0x2ef8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 4 (id=300): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0x140220}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 18.087406][ T30] audit: type=1400 audit(1793807120.718:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.088378][ T277] cgroup: Unknown subsys name 'net' [ 18.093500][ T30] audit: type=1400 audit(1793807120.718:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.098609][ T30] audit: type=1400 audit(1793807120.728:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.098888][ T277] cgroup: Unknown subsys name 'devices' [ 18.223684][ T277] cgroup: Unknown subsys name 'hugetlb' [ 18.229276][ T277] cgroup: Unknown subsys name 'rlimit' [ 18.365191][ T30] audit: type=1400 audit(1793807120.998:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.388420][ T30] audit: type=1400 audit(1793807120.998:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 18.394212][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 18.413490][ T30] audit: type=1400 audit(1793807120.998:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.445222][ T30] audit: type=1400 audit(1793807121.048:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.454742][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.471257][ T30] audit: type=1400 audit(1793807121.048:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.505162][ T30] audit: type=1400 audit(1793807121.088:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.530664][ T30] audit: type=1400 audit(1793807121.088:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.013960][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.021013][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.028478][ T286] device bridge_slave_0 entered promiscuous mode [ 19.035632][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.042750][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.050021][ T286] device bridge_slave_1 entered promiscuous mode [ 19.056609][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.063692][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.071085][ T285] device bridge_slave_0 entered promiscuous mode [ 19.079210][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.086327][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.093787][ T285] device bridge_slave_1 entered promiscuous mode [ 19.115513][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.123017][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.130288][ T288] device bridge_slave_0 entered promiscuous mode [ 19.139708][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.146794][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.154151][ T288] device bridge_slave_1 entered promiscuous mode [ 19.190499][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.197583][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.205121][ T289] device bridge_slave_0 entered promiscuous mode [ 19.224065][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.231103][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.238544][ T289] device bridge_slave_1 entered promiscuous mode [ 19.271640][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.278731][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.286129][ T287] device bridge_slave_0 entered promiscuous mode [ 19.295651][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.302845][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.310275][ T287] device bridge_slave_1 entered promiscuous mode [ 19.446140][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.453204][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.460472][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.467513][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.486947][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.494105][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.501368][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.508414][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.533838][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.540975][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.548254][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.555289][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.566823][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.573875][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.581151][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.588206][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.605477][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.612540][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.619806][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.626847][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.653455][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.662033][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.670763][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.678079][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.685953][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.693571][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.701785][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.710819][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.718181][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.725545][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.732693][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.740323][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.747775][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.774159][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.781782][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.790664][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.802565][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.824096][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.831968][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.840174][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.847216][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.855422][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.862788][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.870099][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.878242][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.885277][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.892600][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.900660][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.907705][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.915055][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.923015][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.939382][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.947542][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.954586][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.962641][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.977766][ T286] device veth0_vlan entered promiscuous mode [ 19.988674][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.997153][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.005301][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.012831][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.020202][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.040667][ T288] device veth0_vlan entered promiscuous mode [ 20.059493][ T285] device veth0_vlan entered promiscuous mode [ 20.066232][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.074849][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.083314][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.091359][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.099731][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.107721][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.115935][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.123459][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.130799][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.139298][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.147461][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.154488][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.161910][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.170335][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.178695][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.186986][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.195450][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.203528][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.211442][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.219001][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.226459][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.233918][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.241768][ T286] device veth1_macvtap entered promiscuous mode [ 20.252494][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.260186][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.268333][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.282474][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.290794][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.299057][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.306110][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.314849][ T288] device veth1_macvtap entered promiscuous mode [ 20.327528][ T285] device veth1_macvtap entered promiscuous mode [ 20.338914][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.346744][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.355145][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.363647][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.371711][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.379904][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.387869][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.396209][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.404605][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.412658][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.420540][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.428751][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.436803][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.445150][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.453643][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.461081][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.469393][ T287] device veth0_vlan entered promiscuous mode [ 20.481729][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.489887][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.497854][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.506321][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.515465][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.523949][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.544203][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 20.555870][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.564845][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.578481][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.587436][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.613620][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.624988][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.639772][ T287] device veth1_macvtap entered promiscuous mode [ 20.654265][ T289] device veth0_vlan entered promiscuous mode [ 20.662257][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.674521][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.682908][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.707700][ T289] device veth1_macvtap entered promiscuous mode [ 20.718111][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.726538][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.735514][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.744167][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.752896][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.761216][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.770257][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.779118][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.787952][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.826852][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.832107][ T332] loop4: detected capacity change from 0 to 512 [ 20.836468][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.851561][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.866211][ T338] loop2: detected capacity change from 0 to 256 [ 20.878928][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.939331][ T345] loop0: detected capacity change from 0 to 512 [ 20.966048][ T338] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 20.978107][ T338] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 20.987194][ T345] ======================================================= [ 20.987194][ T345] WARNING: The mand mount option has been deprecated and [ 20.987194][ T345] and is ignored by this kernel. Remove the mand [ 20.987194][ T345] option from the mount to silence this warning. [ 20.987194][ T345] ======================================================= [ 21.020372][ T338] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b889, utbl_chksum : 0xe619d30d) [ 21.042107][ T347] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 21.055155][ T345] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 21.069648][ T345] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d) [ 21.080632][ T345] FAT-fs (loop0): Filesystem has been set read-only [ 21.107700][ T355] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.137964][ T360] loop4: detected capacity change from 0 to 512 [ 21.145348][ T362] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 21.172881][ T360] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 21.191800][ T360] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 21.201798][ T368] loop2: detected capacity change from 0 to 1024 [ 21.229310][ T360] EXT4-fs (loop4): 1 truncate cleaned up [ 21.235040][ T360] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 21.260364][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.267614][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.279643][ T368] EXT4-fs (loop2): Ignoring removed oldalloc option [ 21.290659][ T342] udevd[342]: symlink '../../loop2' '/dev/disk/by-diskseq/56.tmp-b7:2' failed: Read-only file system [ 21.290944][ T368] EXT4-fs (loop2): Ignoring removed oldalloc option [ 21.322104][ T368] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 21.328626][ T342] udevd[342]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 21.373089][ T368] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,block_validity,usrquota,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: writeback. [ 21.389326][ T316] udevd[316]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 21.418514][ T342] udevd[342]: symlink '../../loop2' '/dev/disk/by-diskseq/56.tmp-b7:2' failed: Read-only file system [ 21.467684][ T342] udevd[342]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 21.636518][ T402] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 21.853074][ T342] udevd[342]: symlink '../../loop2' '/dev/disk/by-diskseq/56.tmp-b7:2' failed: Read-only file system [ 21.912687][ T342] udevd[342]: symlink '../../loop2' '/dev/disk/by-diskseq/56.tmp-b7:2' failed: Read-only file system [ 21.946332][ T409] loop1: detected capacity change from 0 to 40427 [ 21.965837][ T409] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 21.979207][ T421] loop2: detected capacity change from 0 to 2048 [ 21.981129][ T342] udevd[342]: symlink '../../loop1' '/dev/disk/by-diskseq/60.tmp-b7:1' failed: Read-only file system [ 21.990386][ T409] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 22.007157][ T409] F2FS-fs (loop1): invalid crc value [ 22.010113][ T342] udevd[342]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 22.014132][ T409] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 22.044638][ T316] Alternate GPT is invalid, using primary GPT. [ 22.050937][ T316] loop2: p2 p3 p7 [ 22.056583][ T409] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 22.060334][ T316] udevd[316]: symlink '../../loop2' '/dev/disk/by-diskseq/61.tmp-b7:2' failed: Read-only file system [ 22.064032][ T409] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 22.086970][ T421] Alternate GPT is invalid, using primary GPT. [ 22.094204][ T421] loop2: p2 p3 p7 [ 22.115949][ T101] Alternate GPT is invalid, using primary GPT. [ 22.124437][ T101] loop2: p2 p3 p7 [ 22.127998][ T409] attempt to access beyond end of device [ 22.127998][ T409] loop1: rw=2049, want=53264, limit=40427 [ 22.153902][ T430] loop3: detected capacity change from 0 to 128 [ 22.157853][ T409] attempt to access beyond end of device [ 22.157853][ T409] loop1: rw=2049, want=53272, limit=40427 [ 22.180285][ T286] attempt to access beyond end of device [ 22.180285][ T286] loop1: rw=2049, want=45104, limit=40427 [ 22.464001][ T453] loop3: detected capacity change from 0 to 4096 [ 22.492758][ T453] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 22.921339][ T493] loop3: detected capacity change from 0 to 1024 [ 23.019329][ T493] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 23.035578][ T466] syz.4.62 (466) used greatest stack depth: 21192 bytes left [ 23.053616][ T493] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 23.061200][ T493] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,quota,,errors=continue. Quota mode: writeback. [ 23.108913][ T493] syz.3.73 (pid 493) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 23.277295][ T500] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 23.332510][ T30] kauditd_printk_skb: 121 callbacks suppressed [ 23.332525][ T30] audit: type=1400 audit(1793807125.968:195): avc: denied { lock } for pid=499 comm="syz.3.75" path="socket:[16656]" dev="sockfs" ino=16656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 23.468473][ T30] audit: type=1400 audit(1793807126.098:196): avc: denied { name_bind } for pid=507 comm="syz.3.78" src=24096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 23.536545][ T468] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 23.561737][ T468] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 23.581319][ T468] F2FS-fs (loop1): invalid crc value [ 23.588370][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 23.608273][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 23.617679][ T468] F2FS-fs (loop1): Found nat_bits in checkpoint [ 23.642969][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 23.671642][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 23.688637][ T468] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 23.700119][ T468] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 23.701918][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 23.736514][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 23.762434][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 23.776360][ T30] audit: type=1400 audit(1793807126.408:197): avc: denied { mmap_zero } for pid=467 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 23.784500][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 23.804241][ T503] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 23.824412][ T471] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 3440) [ 23.832376][ T503] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 23.842630][ T471] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 23.851121][ T30] audit: type=1400 audit(1793807126.408:198): avc: denied { read } for pid=467 comm="syz.1.63" name="file1" dev="loop1" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 23.874491][ T471] F2FS-fs (loop0): invalid crc value [ 23.893100][ T503] F2FS-fs (loop4): invalid crc value [ 23.893140][ T471] F2FS-fs (loop0): invalid crc_offset: 528380 [ 23.915782][ T471] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 23.946083][ T503] F2FS-fs (loop4): Found nat_bits in checkpoint [ 24.054018][ T30] audit: type=1400 audit(1793807126.688:199): avc: denied { create } for pid=526 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 24.083725][ T503] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 24.090796][ T503] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 24.164775][ T527] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 24.179030][ T485] F2FS-fs (loop2): invalid crc value [ 24.199207][ T30] audit: type=1400 audit(1793807126.828:200): avc: denied { map } for pid=526 comm="syz.0.83" path="/9/file0/file1" dev="loop0" ino=1048649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.216309][ T485] F2FS-fs (loop2): Found nat_bits in checkpoint [ 24.223973][ T527] attempt to access beyond end of device [ 24.223973][ T527] loop0: rw=524288, want=34359738496, limit=256 [ 24.303590][ T532] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 24.316054][ T30] audit: type=1400 audit(1793807126.948:201): avc: denied { remove_name } for pid=502 comm="syz.4.76" name="bus" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.317661][ T485] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 24.358316][ T485] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 24.394287][ T543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 24.416627][ T30] audit: type=1400 audit(1793807127.048:202): avc: denied { append } for pid=531 comm="syz.3.85" path="/25/file1/file0/cpuacct.usage_percpu_user" dev="overlay" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.482842][ T30] audit: type=1400 audit(1793807127.048:203): avc: denied { map } for pid=531 comm="syz.3.85" path="/25/file1/file0/cpuacct.usage_percpu_user" dev="overlay" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.514035][ T30] audit: type=1400 audit(1793807127.088:204): avc: denied { rmdir } for pid=289 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.562612][ T288] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 24.571499][ T288] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 24.624848][ T288] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 24.643944][ T288] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 24.665095][ T288] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 24.700243][ T288] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 24.719509][ T288] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 24.728632][ T288] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 24.739217][ T288] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 24.749154][ T288] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 24.791654][ T288] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 24.801471][ T288] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 24.811057][ T288] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 24.820081][ T288] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 24.841728][ T567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 24.851130][ T288] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 24.860344][ T567] System zones: 1-12 [ 24.870489][ T567] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.98: missing EA_INODE flag [ 24.883205][ T570] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 24.893787][ T567] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.98: error while reading EA inode 12 err=-117 [ 24.912255][ T567] EXT4-fs (loop0): 1 orphan inode deleted [ 24.918176][ T567] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 25.101984][ T20] kernel write not supported for file bpf-prog (pid: 20 comm: kworker/0:1) [ 25.343763][ T8] tipc: Subscription rejected, illegal request [ 25.665110][ T614] xt_hashlimit: size too large, truncated to 1048576 [ 25.712434][ T584] F2FS-fs (loop4): Test dummy encryption mode enabled [ 25.720148][ T584] F2FS-fs (loop4): invalid crc value [ 25.753167][ T584] F2FS-fs (loop4): Found nat_bits in checkpoint [ 25.821153][ T584] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 25.852477][ T622] netlink: 'syz.0.115': attribute type 16 has an invalid length. [ 25.881119][ T622] netlink: 'syz.0.115': attribute type 17 has an invalid length. [ 25.936393][ T622] device veth0_vlan left promiscuous mode [ 25.942459][ T584] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 25.942648][ T622] device veth0_vlan entered promiscuous mode [ 25.957135][ T622] device veth1_macvtap left promiscuous mode [ 25.964473][ T622] device veth1_macvtap entered promiscuous mode [ 25.975371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.984015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.992105][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.001140][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.008224][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.034711][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.043385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.058520][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.065623][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.098702][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.107598][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 26.116450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 26.132652][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 26.150943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 26.168741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 26.178533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 26.186864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 26.195568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 26.205339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.222559][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.238527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.255664][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.272854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.289726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.306848][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.323820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.341022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.358237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.376778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.392580][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.409281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.425596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.440843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.458127][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.481144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.489692][ T639] ip_tables: iptables: counters copy to user failed while replacing table [ 26.508152][ T625] tap0: tun_chr_ioctl cmd 1074025677 [ 26.513553][ T625] tap0: Linktype set failed because interface is up [ 26.520759][ T636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 26.524726][ T639] raw_sendmsg: syz.2.122 forgot to set AF_INET. Fix it! [ 26.536763][ T637] device ip6erspan0 entered promiscuous mode [ 26.545718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.564423][ T643] set_capacity_and_notify: 10 callbacks suppressed [ 26.564436][ T643] loop3: detected capacity change from 0 to 1024 [ 26.582352][ T20] tap0: tun_net_xmit 90 [ 26.586918][ T643] EXT4-fs (loop3): Ignoring removed oldalloc option [ 26.595549][ T342] udevd[342]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 26.602594][ T643] EXT4-fs (loop3): Ignoring removed oldalloc option [ 26.607174][ T342] udevd[342]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 26.613224][ T643] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 26.691940][ T643] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,block_validity,usrquota,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: writeback. [ 26.719898][ T622] syz.0.115 (622) used greatest stack depth: 20576 bytes left [ 27.032176][ T290] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 27.161058][ T342] udevd[342]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 27.187358][ T342] udevd[342]: symlink '../../loop3' '/dev/disk/by-diskseq/90.tmp-b7:3' failed: Read-only file system [ 27.314434][ T681] netlink: 'syz.1.137': attribute type 16 has an invalid length. [ 27.322493][ T681] netlink: 'syz.1.137': attribute type 17 has an invalid length. [ 27.349879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 27.357945][ T290] usb 1-1: not running at top speed; connect to a high speed hub [ 27.369401][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.384768][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 27.400932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.409703][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.418260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.426850][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.435451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.443586][ T290] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.454313][ T290] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 27.454351][ T681] tap0: tun_chr_ioctl cmd 1074025677 [ 27.463445][ T290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.477301][ T681] tap0: Linktype set failed because interface is up [ 27.513039][ T290] usb 1-1: Found UVC 1.00 device (046d:0825) [ 27.521123][ T290] usb 1-1: No streaming interface found for terminal 2. [ 27.556220][ T683] loop1: detected capacity change from 0 to 16 [ 27.604444][ T683] erofs: (device loop1): mounted with root inode @ nid 36. [ 27.610965][ T342] udevd[342]: symlink '../../loop1' '/dev/disk/by-diskseq/92.tmp-b7:1' failed: Read-only file system [ 27.623640][ T342] udevd[342]: symlink '../../loop1' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 27.676116][ T342] udevd[342]: symlink '../../loop1' '/dev/disk/by-diskseq/92.tmp-b7:1' failed: Read-only file system [ 27.690957][ T342] udevd[342]: symlink '../../loop1' '/dev/disk/by-diskseq/92.tmp-b7:1' failed: Read-only file system [ 27.704353][ T342] udevd[342]: symlink '../../loop1' '/dev/disk/by-diskseq/92.tmp-b7:1' failed: Read-only file system [ 27.723580][ T290] usb 1-1: USB disconnect, device number 2 [ 27.793116][ T694] loop1: detected capacity change from 0 to 32768 [ 27.824897][ T342] loop1: p1 p3 < > [ 27.831494][ T694] loop1: p1 p3 < > [ 27.851406][ T342] udevd[342]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 27.863649][ T698] ------------[ cut here ]------------ [ 27.869460][ T698] WARNING: CPU: 0 PID: 698 at mm/page_alloc.c:5804 __alloc_pages+0x392/0x460 [ 27.879037][ T698] Modules linked in: [ 27.883452][ T698] CPU: 1 PID: 698 Comm: syz.4.144 Not tainted syzkaller #0 [ 27.890726][ T698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 27.900891][ T698] RIP: 0010:__alloc_pages+0x392/0x460 [ 27.906445][ T698] Code: ff e8 72 5b 0b 03 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 6c fd ff ff 41 89 ff 4c 89 e7 e8 16 ce 04 00 44 89 ff e9 59 fd ff ff <0f> 0b e9 16 ff ff ff 65 8b 05 e8 6d 5d 7e 89 44 24 08 c1 e8 06 48 [ 27.926288][ T698] RSP: 0018:ffffc90000c47720 EFLAGS: 00010246 [ 27.932586][ T698] RAX: ffffc90000c47780 RBX: 0000000000000015 RCX: 0000000000000000 [ 27.940636][ T698] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90000c47798 [ 27.948694][ T698] RBP: ffffc90000c47808 R08: ffffc90000c47797 R09: ffffc90000c47780 [ 27.956777][ T698] R10: dffffc0000000000 R11: fffff52000188ef3 R12: ffffc90000c47760 [ 27.965230][ T698] R13: dffffc0000000000 R14: 1ffff92000188ee8 R15: 0000000000000000 [ 27.973254][ T698] FS: 00007fbf66c0b6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.982252][ T698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.988859][ T698] CR2: 0000555580107908 CR3: 0000000119c60000 CR4: 00000000003506a0 [ 27.997129][ T698] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.005295][ T698] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.013457][ T698] Call Trace: [ 28.016755][ T698] [ 28.020689][ T698] ? zone_watermark_fast+0x250/0x250 [ 28.026351][ T698] kmalloc_order+0x4c/0x160 [ 28.030881][ T698] ? slab_post_alloc_hook+0x6d/0x2b0 [ 28.036435][ T698] kmalloc_order_trace+0x18/0xb0 [ 28.041400][ T698] __kmalloc+0x199/0x2c0 [ 28.046270][ T698] hashtab_init+0xca/0x160 [ 28.050755][ T698] symtab_init+0x40/0x60 [ 28.055232][ T698] policydb_read+0x9a6/0x2d10 [ 28.059939][ T698] security_load_policy+0x158/0xf00 [ 28.065363][ T698] ? irqentry_exit+0x37/0x40 [ 28.069975][ T698] ? exc_page_fault+0x5e/0xb0 [ 28.074901][ T698] ? asm_exc_page_fault+0x27/0x30 [ 28.079990][ T698] ? selinux_policy_commit+0x560/0x560 [ 28.085708][ T698] ? copy_user_enhanced_fast_string+0xe/0x40 [ 28.091885][ T698] ? _copy_from_user+0x95/0xd0 [ 28.096871][ T698] sel_write_load+0x386/0x600 [ 28.101573][ T698] ? sel_make_dir+0x270/0x270 [ 28.106489][ T698] ? security_file_permission+0x83/0xa0 [ 28.112058][ T698] ? sel_make_dir+0x270/0x270 [ 28.116987][ T698] vfs_write+0x404/0xfd0 [ 28.121281][ T698] ? file_end_write+0x1b0/0x1b0 [ 28.126327][ T698] ? __kasan_check_write+0x14/0x20 [ 28.131494][ T698] ? mutex_lock+0x9b/0x1c0 [ 28.135939][ T698] ? wait_for_completion_killable_timeout+0x10/0x10 [ 28.142564][ T698] ? __fget_files+0x2e1/0x340 [ 28.147224][ T698] ? __fdget_pos+0x2d2/0x380 [ 28.151816][ T698] ? ksys_write+0x70/0x260 [ 28.156236][ T698] ksys_write+0x14a/0x260 [ 28.160560][ T698] ? __ia32_sys_read+0x90/0x90 [ 28.165320][ T698] ? __kasan_check_write+0x14/0x20 [ 28.170428][ T698] ? switch_fpu_return+0x15d/0x2c0 [ 28.175560][ T698] __x64_sys_write+0x7b/0x90 [ 28.180155][ T698] x64_sys_call+0x8ef/0x9a0 [ 28.184656][ T698] do_syscall_64+0x4c/0xa0 [ 28.189067][ T698] ? clear_bhb_loop+0x50/0xa0 [ 28.193755][ T698] ? clear_bhb_loop+0x50/0xa0 [ 28.198440][ T698] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 28.204712][ T698] RIP: 0033:0x7fbf681b3b19 [ 28.209140][ T698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.228784][ T698] RSP: 002b:00007fbf66c0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 28.237233][ T698] RAX: ffffffffffffffda RBX: 00007fbf68439fa0 RCX: 00007fbf681b3b19 [ 28.252227][ T698] RDX: 00000000000190ec RSI: 0000200000000000 RDI: 0000000000000003 [ 28.260251][ T698] RBP: 00007fbf6824bb70 R08: 0000000000000000 R09: 0000000000000000 [ 28.268393][ T698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.276402][ T698] R13: 00007fbf6843a038 R14: 00007fbf68439fa0 R15: 00007ffce0563f28 [ 28.284541][ T698] [ 28.287599][ T698] ---[ end trace f6a82eca471f2fcc ]--- [ 28.293123][ T698] SELinux: failed to load policy [ 28.327546][ T710] netlink: 'syz.4.149': attribute type 16 has an invalid length. [ 28.335657][ T710] netlink: 'syz.4.149': attribute type 17 has an invalid length. [ 28.361067][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 28.378739][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.397393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 28.415953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.428742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.437300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.445752][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.460907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.479360][ T710] tap0: tun_chr_ioctl cmd 1074025677 [ 28.485923][ T710] tap0: Linktype set failed because interface is up [ 28.490445][ T712] loop0: detected capacity change from 0 to 40427 [ 28.514608][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 28.514620][ T30] audit: type=1400 audit(1793807131.148:247): avc: denied { create } for pid=719 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 28.541087][ T30] audit: type=1400 audit(1793807131.148:248): avc: denied { write } for pid=719 comm="syz.2.153" path="socket:[17472]" dev="sockfs" ino=17472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 28.575461][ T712] F2FS-fs (loop0): invalid crc value [ 28.579112][ T724] netlink: 'syz.4.155': attribute type 4 has an invalid length. [ 28.581133][ T30] audit: type=1400 audit(1793807131.208:249): avc: denied { setopt } for pid=721 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.609777][ T724] netlink: 'syz.4.155': attribute type 4 has an invalid length. [ 28.614542][ T30] audit: type=1400 audit(1793807131.238:250): avc: denied { shutdown } for pid=721 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.628758][ T712] F2FS-fs (loop0): Found nat_bits in checkpoint [ 28.653804][ T731] FAULT_INJECTION: forcing a failure. [ 28.653804][ T731] name failslab, interval 1, probability 0, space 0, times 1 [ 28.666471][ T731] CPU: 0 PID: 731 Comm: syz.4.157 Tainted: G W syzkaller #0 [ 28.671103][ T712] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 28.675069][ T731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 28.675083][ T731] Call Trace: [ 28.675089][ T731] [ 28.675094][ T731] __dump_stack+0x21/0x30 [ 28.675119][ T731] dump_stack_lvl+0x110/0x170 [ 28.675137][ T731] ? show_regs_print_info+0x20/0x20 [ 28.675155][ T731] ? _raw_write_lock+0x94/0xf0 [ 28.675173][ T731] dump_stack+0x15/0x20 [ 28.675189][ T731] should_fail+0x3ab/0x500 [ 28.675207][ T731] __should_failslab+0xa4/0xe0 [ 28.675249][ T731] should_failslab+0x9/0x20 [ 28.675266][ T731] slab_pre_alloc_hook+0x39/0xd0 [ 28.675287][ T731] ? nf_log_net_init+0x8c/0x590 [ 28.675306][ T731] __kmalloc_track_caller+0x6c/0x2c0 [ 28.675326][ T731] ? nf_log_net_init+0x8c/0x590 [ 28.710371][ T30] audit: type=1400 audit(1793807131.298:251): avc: denied { ioctl } for pid=711 comm="syz.0.159" path="/18/file1/file1" dev="loop0" ino=10 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.713229][ T731] kmemdup+0x26/0x60 [ 28.713255][ T731] nf_log_net_init+0x8c/0x590 [ 28.713274][ T731] ? netfilter_net_init+0x342/0x370 [ 28.793173][ T731] ops_init+0x2c0/0x470 [ 28.797421][ T731] setup_net+0x331/0xa30 [ 28.801651][ T731] ? copy_net_ns+0x5c0/0x5c0 [ 28.806227][ T731] copy_net_ns+0x355/0x5c0 [ 28.810631][ T731] create_new_namespaces+0x3a8/0x660 [ 28.815895][ T731] unshare_nsproxy_namespaces+0x120/0x170 [ 28.821597][ T731] ksys_unshare+0x4d7/0x810 [ 28.826090][ T731] ? sighand_ctor+0x60/0x60 [ 28.830572][ T731] ? __kasan_check_write+0x14/0x20 [ 28.835664][ T731] ? switch_fpu_return+0x15d/0x2c0 [ 28.840763][ T731] __x64_sys_unshare+0x38/0x40 [ 28.845512][ T731] x64_sys_call+0x442/0x9a0 [ 28.850011][ T731] do_syscall_64+0x4c/0xa0 [ 28.854428][ T731] ? clear_bhb_loop+0x50/0xa0 [ 28.859101][ T731] ? clear_bhb_loop+0x50/0xa0 [ 28.863767][ T731] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 28.869658][ T731] RIP: 0033:0x7fbf681b3b19 [ 28.874053][ T731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.893656][ T731] RSP: 002b:00007fbf66c0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 28.902050][ T731] RAX: ffffffffffffffda RBX: 00007fbf68439fa0 RCX: 00007fbf681b3b19 [ 28.910013][ T731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 28.917990][ T731] RBP: 00007fbf6824bb70 R08: 0000000000000000 R09: 0000000000000000 [ 28.925961][ T731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.933928][ T731] R13: 00007fbf6843a038 R14: 00007fbf68439fa0 R15: 00007ffce0563f28 [ 28.941899][ T731] [ 28.948141][ T287] attempt to access beyond end of device [ 28.948141][ T287] loop0: rw=2049, want=45104, limit=40427 [ 28.976630][ T735] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 29.043798][ T744] loop4: detected capacity change from 0 to 512 [ 29.108186][ T744] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.164: missing EA_INODE flag [ 29.120316][ T744] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.164: error while reading EA inode 12 err=-117 [ 29.132709][ T744] EXT4-fs (loop4): 1 orphan inode deleted [ 29.138446][ T744] EXT4-fs (loop4): mounted filesystem without journal. Opts: commit=0x0000000000000005,journal_ioprio=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 29.195836][ T750] loop0: detected capacity change from 0 to 256 [ 29.260152][ T745] loop1: detected capacity change from 0 to 40427 [ 29.339020][ T745] F2FS-fs (loop1): fault_injection options not supported [ 29.347122][ T745] F2FS-fs (loop1): fault_type options not supported [ 29.354756][ T745] F2FS-fs (loop1): invalid crc value [ 29.361466][ T745] F2FS-fs (loop1): Found nat_bits in checkpoint [ 29.398984][ T745] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 29.442457][ T745] attempt to access beyond end of device [ 29.442457][ T745] loop1: rw=2049, want=45104, limit=40427 [ 29.449175][ T767] netlink: 'syz.4.171': attribute type 4 has an invalid length. [ 29.457546][ T30] audit: type=1400 audit(1793807132.078:252): avc: denied { read } for pid=758 comm="syz.0.169" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.640339][ T782] capability: warning: `syz.1.172' uses deprecated v2 capabilities in a way that may be insecure [ 29.731309][ T8] blk_update_request: I/O error, dev sda, sector 1114454 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 29.742707][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139307) [ 29.754339][ T8] blk_update_request: I/O error, dev sda, sector 1114494 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 29.765731][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139321) [ 29.777340][ T8] blk_update_request: I/O error, dev sda, sector 1114582 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 29.788649][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139326) [ 29.792274][ T516] Buffer I/O error on device sda1, logical block 139268 [ 29.800236][ T8] blk_update_request: I/O error, dev sda, sector 1114630 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 0 [ 29.809835][ T516] Buffer I/O error on device sda1, logical block 139273 [ 29.818456][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139388) [ 29.825549][ T516] Buffer I/O error on device sda1, logical block 139274 [ 29.846638][ T796] loop1: detected capacity change from 0 to 256 [ 29.854270][ T516] Buffer I/O error on device sda1, logical block 139275 [ 29.872497][ T516] Buffer I/O error on device sda1, logical block 139276 [ 29.879890][ T516] Buffer I/O error on device sda1, logical block 139277 [ 29.888835][ T8] blk_update_request: I/O error, dev sda, sector 1115118 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 29.895075][ T516] Buffer I/O error on device sda1, logical block 139278 [ 29.900212][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139411) [ 29.918682][ T8] blk_update_request: I/O error, dev sda, sector 1115302 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 0 [ 29.920176][ T516] Buffer I/O error on device sda1, logical block 139279 [ 29.930048][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139448) [ 29.949233][ T8] blk_update_request: I/O error, dev sda, sector 1115606 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 0 [ 29.954348][ T516] Buffer I/O error on device sda1, logical block 139280 [ 29.960591][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139487) [ 29.974308][ T796] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 29.981862][ T8] blk_update_request: I/O error, dev sda, sector 1115910 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 30.000997][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139491) [ 30.012637][ T8] blk_update_request: I/O error, dev sda, sector 1115942 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 30.023952][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139496) [ 30.035547][ T8] blk_update_request: I/O error, dev sda, sector 1115982 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 30.046912][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139506) [ 30.058843][ T796] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 30.067739][ T516] Buffer I/O error on device sda1, logical block 139281 [ 30.076301][ T796] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 30.097225][ T793] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 30.105765][ T793] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 30.114257][ T793] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 30.122826][ T793] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 30.123162][ T64] Aborting journal on device sda1-8. [ 30.131275][ T793] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 30.136614][ T54] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 30.144996][ T793] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 30.153685][ T30] audit: type=1400 audit(1793807132.738:253): avc: denied { remove_name } for pid=795 comm="syz.1.184" name="bus" dev="loop1" ino=1048650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.162014][ T793] Buffer I/O error on dev sda1, logical block 157, lost async page write [ 30.184807][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 30.193082][ T793] Buffer I/O error on dev sda1, logical block 158, lost async page write [ 30.212658][ T793] Buffer I/O error on dev sda1, logical block 159, lost async page write [ 30.223849][ T64] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 30.232242][ T30] audit: type=1400 audit(1793807132.738:254): avc: denied { rename } for pid=795 comm="syz.1.184" name="bus" dev="loop1" ino=1048650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.232295][ T277] EXT4-fs (sda1): I/O error while writing superblock [ 30.254518][ T30] audit: type=1400 audit(1793807132.738:255): avc: denied { reparent } for pid=795 comm="syz.1.184" name="bus" dev="loop1" ino=1048650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.268077][ T770] loop0: detected capacity change from 0 to 131072 [ 30.283580][ T30] audit: type=1400 audit(1793807132.738:256): avc: denied { rmdir } for pid=795 comm="syz.1.184" name="file0" dev="loop1" ino=1048652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.290115][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 30.321962][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 30.333388][ T277] EXT4-fs (sda1): I/O error while writing superblock [ 30.340105][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 30.346840][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 30.358254][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 30.364915][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 30.368267][ T797] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.185: Detected aborted journal [ 30.377540][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 30.387143][ T793] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 30.399972][ T770] F2FS-fs (loop0): invalid crc value [ 30.403023][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 30.405704][ T797] EXT4-fs (sda1): Remounting filesystem read-only [ 30.416828][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 30.441416][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 30.454513][ T797] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.185: Detected aborted journal [ 30.473409][ T797] EXT4-fs (sda1): Remounting filesystem read-only [ 30.475043][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 30.480710][ T770] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.486611][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 30.516877][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 30.556445][ T770] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 30.568341][ T770] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 30.587792][ T770] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 30.595517][ T794] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 30.624275][ T794] pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc03f] [ 30.644317][ T794] pci 0000:00:03.0: reg 0x14: [mem 0xfe800000-0xfe80007f] [ 30.714938][ T794] virtio-pci 0000:00:03.0: can't enable device: BAR 0 [io 0xc000-0xc03f] not claimed [ 30.724614][ T794] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 30.759829][ T814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.192'. [ 30.770277][ T814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.192'. [ 30.795252][ T818] loop4: detected capacity change from 0 to 512 [ 30.825495][ T818] EXT4-fs (loop4): Ignoring removed nobh option [ 30.882891][ T818] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 30.902264][ T818] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.943023][ T818] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #2: comm syz.4.194: corrupted inode contents [ 30.962364][ T818] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #2: comm syz.4.194: mark_inode_dirty error [ 30.975317][ T818] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #2: comm syz.4.194: corrupted inode contents [ 30.998665][ T818] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.194: mark_inode_dirty error [ 31.020106][ T832] SELinux: Context system_u:object_r:systemd_tmpfiles_exec_t:s0 is not valid (left unmapped). [ 31.049972][ T818] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 22: comm syz.4.194: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 31.317546][ T864] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.335705][ T864] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.359112][ T875] Illegal XDP return value 4294967199, expect packet loss! [ 31.518922][ T885] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 31.532775][ T885] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 31.603489][ T342] udevd[342]: symlink '../../loop1' '/dev/disk/by-diskseq/112.tmp-b7:1' failed: Read-only file system [ 31.630140][ T342] udevd[342]: symlink '../../loop1' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:1' failed: Read-only file system [ 31.666164][ T895] set_capacity_and_notify: 2 callbacks suppressed [ 31.666180][ T895] loop2: detected capacity change from 0 to 128 [ 31.684276][ T342] udevd[342]: symlink '../../loop2' '/dev/disk/by-diskseq/113.tmp-b7:2' failed: Read-only file system [ 31.692468][ T895] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.711367][ T342] udevd[342]: symlink '../../loop1' '/dev/disk/by-diskseq/112.tmp-b7:1' failed: Read-only file system [ 31.715392][ T895] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.736727][ T342] udevd[342]: symlink '../../loop1' '/dev/disk/by-diskseq/112.tmp-b7:1' failed: Read-only file system [ 31.765622][ T8] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.807787][ T342] udevd[342]: symlink '../../loop2' '/dev/disk/by-diskseq/113.tmp-b7:2' failed: Read-only file system [ 31.832457][ T342] udevd[342]: symlink '../../loop2' '/dev/disk/by-diskseq/113.tmp-b7:2' failed: Read-only file system [ 32.076529][ T918] loop2: detected capacity change from 0 to 1024 [ 32.106192][ T918] EXT4-fs (loop2): Ignoring removed bh option [ 32.107320][ T342] udevd[342]: symlink '../../loop2' '/dev/disk/by-diskseq/116.tmp-b7:2' failed: Read-only file system [ 32.124671][ T342] udevd[342]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 32.138589][ T918] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 32.144576][ T342] udevd[342]: symlink '../../loop2' '/dev/disk/by-diskseq/116.tmp-b7:2' failed: Read-only file system [ 32.169497][ T918] EXT4-fs error (device loop2): ext4_find_dest_de:2117: inode #12: block 7: comm syz.2.232: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 32.191759][ T918] EXT4-fs (loop2): Remounting filesystem read-only [ 32.202847][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /50/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 32.225482][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 32.232522][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /50/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 32.254652][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 32.261300][ T288] EXT4-fs error (device loop2): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 32.281258][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 32.287923][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.302253][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /50/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 32.324318][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 32.330840][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /50/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 32.353038][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 32.359639][ T288] EXT4-fs error (device loop2): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 32.379613][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 32.386161][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.400495][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /50/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 32.422477][ T60] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.423292][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 32.436551][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /50/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 32.458784][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 32.465384][ T288] EXT4-fs error (device loop2): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 32.485169][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 32.491661][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.506496][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.521539][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.536467][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.553651][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.568542][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.583354][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.598219][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.662183][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 32.782301][ T60] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.801621][ T60] usb 1-1: config 0 interface 0 has no altsetting 0 [ 32.815471][ T60] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 32.837336][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.851160][ T60] usb 1-1: config 0 descriptor?? [ 33.244607][ T516] device bridge_slave_1 left promiscuous mode [ 33.250933][ T516] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.254237][ T945] loop4: detected capacity change from 0 to 1024 [ 33.269592][ T516] device bridge_slave_0 left promiscuous mode [ 33.276259][ T516] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.285736][ T516] device veth1_macvtap left promiscuous mode [ 33.285978][ T945] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.291823][ T516] device veth0_vlan left promiscuous mode [ 33.323960][ T60] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 33.337354][ T60] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 33.351193][ T60] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 33.359660][ T60] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 33.366785][ T60] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 33.375010][ T60] uclogic 0003:5543:0064.0001: No inputs registered, leaving [ 33.384573][ T60] uclogic 0003:5543:0064.0001: hiddev96,hidraw0: USB HID v0.01 Device [HID 5543:0064] on usb-dummy_hcd.0-1/input0 [ 33.777383][ T955] loop4: detected capacity change from 0 to 256 [ 34.388274][ T962] loop4: detected capacity change from 0 to 512 [ 34.413933][ T962] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 34.425466][ T962] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.133597][ T290] usb 1-1: USB disconnect, device number 3 [ 35.895590][ T277] EXT4-fs error: 194 callbacks suppressed [ 35.895606][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 35.900115][ T970] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 35.901351][ T277] EXT4-fs: 170 callbacks suppressed [ 35.901361][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 35.912787][ T970] EXT4-fs (sda1): Remounting filesystem read-only [ 35.926540][ T971] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.251: Detected aborted journal [ 35.928970][ T970] EXT4-fs error (device sda1) in __ext4_new_inode:1097: Journal has aborted [ 35.935290][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 35.944124][ T971] EXT4-fs (sda1): Remounting filesystem read-only [ 35.952596][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 35.962096][ T971] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.251: Detected aborted journal [ 35.976250][ T973] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.252: Detected aborted journal [ 35.978908][ T971] EXT4-fs (sda1): Remounting filesystem read-only [ 35.985336][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 36.001432][ T973] EXT4-fs (sda1): Remounting filesystem read-only [ 36.009581][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 36.016422][ T974] loop1: detected capacity change from 0 to 512 [ 36.027509][ T975] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.253: Detected aborted journal [ 36.031367][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #259: comm udevd: reading directory lblock 0 [ 36.037626][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 36.045155][ T975] EXT4-fs (sda1): Remounting filesystem read-only [ 36.058155][ T976] EXT4-fs (sda1): Remounting filesystem read-only [ 36.113668][ T974] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,init_itable=0x00000000000000ff,grpid,,errors=continue. Quota mode: writeback. [ 36.129167][ T974] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.997767][ T995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'. [ 38.006874][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 38.006889][ T30] audit: type=1400 audit(1793807140.628:282): avc: denied { create } for pid=992 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.033637][ T30] audit: type=1400 audit(1793807140.638:283): avc: denied { setopt } for pid=992 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.053130][ T30] audit: type=1400 audit(1793807140.688:284): avc: denied { bind } for pid=992 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.136579][ T30] audit: type=1400 audit(1793807141.758:285): avc: denied { remount } for pid=1010 comm="syz.4.266" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.637318][ T277] EXT4-fs error: 71 callbacks suppressed [ 41.637333][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 41.641919][ T1024] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 41.643265][ T277] EXT4-fs: 54 callbacks suppressed [ 41.643275][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 41.654144][ T1024] EXT4-fs (sda1): Remounting filesystem read-only [ 41.654158][ T1024] EXT4-fs error (device sda1) in __ext4_new_inode:1097: Journal has aborted [ 41.668339][ T1025] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.271: Detected aborted journal [ 41.676093][ T1026] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.272: Detected aborted journal [ 41.676924][ T1025] EXT4-fs (sda1): Remounting filesystem read-only [ 41.683252][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 41.693052][ T1025] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.271: Detected aborted journal [ 41.702831][ T1026] EXT4-fs (sda1): Remounting filesystem read-only [ 41.713987][ T1025] EXT4-fs (sda1): Remounting filesystem read-only [ 41.720423][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 41.732040][ T1025] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.271: Detected aborted journal [ 41.742889][ T1026] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.272: Detected aborted journal [ 41.748970][ T1025] EXT4-fs (sda1): Remounting filesystem read-only [ 41.758367][ T1029] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.273: Detected aborted journal [ 41.762213][ T1025] EXT4-fs (sda1): Remounting filesystem read-only [ 41.774907][ T1026] EXT4-fs (sda1): Remounting filesystem read-only [ 41.784235][ T1030] EXT4-fs (sda1): Remounting filesystem read-only [ 41.822300][ T1032] loop4: detected capacity change from 0 to 128 [ 41.831753][ T342] udevd[342]: symlink '../../loop4' '/dev/disk/by-diskseq/126.tmp-b7:4' failed: Read-only file system [ 41.846093][ T1031] kvm: vcpu 1024: requested lapic timer restore with starting count register 0x390=3868095612 (7736191224 ns) > initial count (6304519390 ns). Using initial count to start timer. [ 41.908159][ T342] udevd[342]: symlink '../../loop4' '/dev/disk/by-diskseq/126.tmp-b7:4' failed: Read-only file system [ 41.921129][ T342] udevd[342]: symlink '../../loop4' '/dev/disk/by-diskseq/126.tmp-b7:4' failed: Read-only file system [ 43.211181][ T1040] x86/PAT: syz.0.275:1040 freeing invalid memtype [mem 0xfe800000-0xfe800fff] [ 44.701359][ T30] audit: type=1400 audit(1793807147.328:286): avc: denied { append } for pid=1047 comm="syz.1.280" name="ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.310360][ T1060] FAULT_INJECTION: forcing a failure. [ 46.310360][ T1060] name failslab, interval 1, probability 0, space 0, times 0 [ 46.312429][ T1061] overlayfs: upper fs does not support tmpfile. [ 46.323074][ T30] audit: type=1400 audit(1793807148.938:287): avc: denied { bind } for pid=1057 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.334397][ T1060] CPU: 1 PID: 1060 Comm: syz.4.286 Tainted: G W syzkaller #0 [ 46.350177][ T1064] loop3: detected capacity change from 0 to 128 [ 46.357130][ T1060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 46.357145][ T1060] Call Trace: [ 46.357151][ T1060] [ 46.357157][ T1060] __dump_stack+0x21/0x30 [ 46.357183][ T1060] dump_stack_lvl+0x110/0x170 [ 46.363700][ T30] audit: type=1400 audit(1793807148.938:288): avc: denied { setopt } for pid=1057 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.373461][ T1060] ? show_regs_print_info+0x20/0x20 [ 46.373489][ T1060] dump_stack+0x15/0x20 [ 46.373506][ T1060] should_fail+0x3ab/0x500 [ 46.381897][ T342] udevd[342]: symlink '../../loop3' '/dev/disk/by-diskseq/128.tmp-b7:3' failed: Read-only file system [ 46.384047][ T1060] __should_failslab+0xa4/0xe0 [ 46.384074][ T1060] should_failslab+0x9/0x20 [ 46.441941][ T1060] slab_pre_alloc_hook+0x39/0xd0 [ 46.446887][ T1060] __kmalloc+0x6d/0x2c0 [ 46.451039][ T1060] ? kvmalloc_node+0x211/0x320 [ 46.455808][ T1060] ? sort_r+0xe04/0xe20 [ 46.459958][ T1060] kvmalloc_node+0x211/0x320 [ 46.464550][ T1060] ? vm_mmap+0xb0/0xb0 [ 46.468617][ T1060] btf_check_all_metas+0x4b7/0xab0 [ 46.473726][ T1060] ? __btf_verifier_log+0x130/0x130 [ 46.478921][ T1060] btf_parse_type_sec+0x106/0x1b50 [ 46.484034][ T1060] ? btf_verifier_log+0x2b0/0x2b0 [ 46.489053][ T1060] ? btf_parse_hdr+0x1df/0x840 [ 46.493815][ T1060] ? btf_parse_hdr+0x659/0x840 [ 46.498660][ T1060] ? btf_parse_str_sec+0x224/0x2c0 [ 46.503769][ T1060] btf_new_fd+0x4c2/0x930 [ 46.508094][ T1060] bpf_btf_load+0x6f/0x90 [ 46.512421][ T1060] __sys_bpf+0x577/0x7d0 [ 46.516657][ T1060] ? bpf_link_show_fdinfo+0x330/0x330 [ 46.522031][ T1060] ? __kasan_check_write+0x14/0x20 [ 46.527224][ T1060] ? switch_fpu_return+0x15d/0x2c0 [ 46.532334][ T1060] __x64_sys_bpf+0x7c/0x90 [ 46.536741][ T1060] x64_sys_call+0x4b9/0x9a0 [ 46.541240][ T1060] do_syscall_64+0x4c/0xa0 [ 46.545651][ T1060] ? clear_bhb_loop+0x50/0xa0 [ 46.550321][ T1060] ? clear_bhb_loop+0x50/0xa0 [ 46.554998][ T1060] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.560886][ T1060] RIP: 0033:0x7fbf681b3b19 [ 46.565300][ T1060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.584917][ T1060] RSP: 002b:00007fbf66c0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.593339][ T1060] RAX: ffffffffffffffda RBX: 00007fbf68439fa0 RCX: 00007fbf681b3b19 [ 46.601306][ T1060] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 46.609273][ T1060] RBP: 00007fbf6824bb70 R08: 0000000000000000 R09: 0000000000000000 [ 46.617243][ T1060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.625207][ T1060] R13: 00007fbf6843a038 R14: 00007fbf68439fa0 R15: 00007ffce0563f28 [ 46.633188][ T1060] [ 46.642841][ T1058] EXT4-fs error: 53 callbacks suppressed [ 46.642857][ T1058] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.284: Detected aborted journal [ 46.659680][ T30] audit: type=1400 audit(1793807148.938:289): avc: denied { remount } for pid=1058 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.661547][ T1059] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.286: Detected aborted journal [ 46.679525][ T1058] EXT4-fs: 43 callbacks suppressed [ 46.679536][ T1058] EXT4-fs (sda1): Remounting filesystem read-only [ 46.690473][ T1059] EXT4-fs (sda1): Remounting filesystem read-only [ 46.704856][ T1058] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.284: Detected aborted journal [ 46.715231][ T342] udevd[342]: symlink '../../loop3' '/dev/disk/by-diskseq/128.tmp-b7:3' failed: Read-only file system [ 46.719875][ T1064] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 46.738546][ T1058] EXT4-fs (sda1): Remounting filesystem read-only [ 46.746536][ T1058] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.284: Detected aborted journal [ 46.757075][ T1063] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.285: Detected aborted journal [ 46.757782][ T1058] EXT4-fs (sda1): Remounting filesystem read-only [ 46.768307][ T1063] EXT4-fs (sda1): Remounting filesystem read-only [ 46.774854][ T1058] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.284: Detected aborted journal [ 46.781161][ T1063] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.285: Detected aborted journal [ 46.792372][ T1058] EXT4-fs (sda1): Remounting filesystem read-only [ 46.803245][ T1063] EXT4-fs (sda1): Remounting filesystem read-only [ 46.814584][ T30] audit: type=1400 audit(1793807149.438:290): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.816196][ T1063] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.285: Detected aborted journal [ 46.846456][ T1063] EXT4-fs (sda1): Remounting filesystem read-only [ 46.857906][ T1063] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.285: Detected aborted journal [ 46.869023][ T1063] EXT4-fs (sda1): Remounting filesystem read-only [ 46.875496][ T1063] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.285: Detected aborted journal [ 46.886476][ T1063] EXT4-fs (sda1): Remounting filesystem read-only [ 46.896899][ T10] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 47.004718][ T342] udevd[342]: symlink '../../loop3' '/dev/disk/by-diskseq/128.tmp-b7:3' failed: Read-only file system [ 47.017732][ T342] udevd[342]: symlink '../../loop3' '/dev/disk/by-diskseq/128.tmp-b7:3' failed: Read-only file system [ 48.086929][ T30] audit: type=1400 audit(1793807150.718:291): avc: denied { mounton } for pid=1068 comm="syz.1.288" path="/80/bus/bus" dev="incremental-fs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.152196][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 50.672223][ T20] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 50.681280][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.689310][ T20] usb 2-1: Product: syz [ 50.693483][ T20] usb 2-1: Manufacturer: syz [ 50.698052][ T20] usb 2-1: SerialNumber: syz [ 51.403378][ T20] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 51.413886][ T101] udevd[101]: worker [342] terminated by signal 7 (Bus error) [ 51.421407][ T101] udevd[101]: worker [342] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 51.609271][ T20] usb 2-1: USB disconnect, device number 2 [ 51.609398][ T101] udevd[101]: worker [428] terminated by signal 7 (Bus error) [ 51.622715][ T101] udevd[101]: worker [428] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0' [ 51.707091][ T1079] EXT4-fs error: 31 callbacks suppressed [ 51.707103][ T1079] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.292: Detected aborted journal [ 51.723965][ T1079] EXT4-fs: 23 callbacks suppressed [ 51.723989][ T1079] EXT4-fs (sda1): Remounting filesystem read-only [ 51.789124][ T1085] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 51.791995][ T1087] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.296: Detected aborted journal [ 51.801168][ T1088] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.297: Detected aborted journal [ 51.812810][ T1086] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.295: Detected aborted journal [ 51.823758][ T1085] EXT4-fs (sda1): Remounting filesystem read-only [ 51.833562][ T1087] EXT4-fs (sda1): Remounting filesystem read-only [ 51.840192][ T1088] EXT4-fs (sda1): Remounting filesystem read-only [ 51.846533][ T1086] EXT4-fs (sda1): Remounting filesystem read-only [ 51.853011][ T1085] EXT4-fs error (device sda1) in __ext4_new_inode:1097: Journal has aborted [ 51.860895][ T1087] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.296: Detected aborted journal [ 51.869360][ T1088] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.297: Detected aborted journal [ 51.880754][ T1086] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.295: Detected aborted journal [ 51.893302][ T1088] EXT4-fs (sda1): Remounting filesystem read-only [ 51.901929][ T1087] EXT4-fs (sda1): Remounting filesystem read-only [ 51.909393][ T1088] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.297: Detected aborted journal [ 51.914541][ T1086] EXT4-fs (sda1): Remounting filesystem read-only [ 51.925594][ T1088] EXT4-fs (sda1): Remounting filesystem read-only [ 51.932236][ T1087] EXT4-fs (sda1): Remounting filesystem read-only [ 51.938703][ T1090] tipc: Started in network mode [ 51.946468][ T30] audit: type=1400 audit(1793807154.578:292): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 51.953118][ T1090] tipc: Node identity 1001001, cluster identity 4711 [ 51.981525][ T101] udevd[101]: worker [433] terminated by signal 7 (Bus error) [ 51.984703][ T1090] tipc: Node number set to 16781313 [ 51.989142][ T101] udevd[101]: worker [433] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0' [ 52.007898][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.017490][ T1089] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.029035][ T1090] tipc: New replicast peer: 127.0.0.1 [ 52.034845][ T1090] tipc: Enabled bearer , priority 10 SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: repeatedly failed to execute the program proc=5 req=240 state=1 status=67 (errno 9: Bad file descriptor) [ 53.927221][ T30] audit: type=1400 audit(1793807156.548:293): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[14544]" dev="pipefs" ino=14544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 53.929927][ T30] audit: type=1326 audit(1793807156.558:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1096 comm="syz.0.298" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1b7532b19 code=0x0 [ 54.042343][ T308] Bluetooth: hci0: command 0x1003 tx timeout [ 54.048949][ T677] Bluetooth: hci0: sending frame failed (-49) [ 54.782769][ T10] device bridge_slave_1 left promiscuous mode [ 54.788882][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.796472][ T10] device bridge_slave_0 left promiscuous mode [ 54.802742][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.810422][ T10] device veth1_macvtap left promiscuous mode [ 54.816437][ T10] device veth0_vlan left promiscuous mode [ 55.243157][ T10] tipc: Disabling bearer [ 55.248457][ T10] tipc: Left network mode [ 55.822797][ T10] device bridge_slave_1 left promiscuous mode [ 55.828907][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.836501][ T10] device bridge_slave_0 left promiscuous mode [ 55.842635][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.850257][ T10] device bridge_slave_1 left promiscuous mode [ 55.856417][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.863742][ T10] device bridge_slave_0 left promiscuous mode [ 55.870031][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.878019][ T10] device veth1_macvtap left promiscuous mode [ 55.884048][ T10] device veth0_vlan left promiscuous mode [ 55.890134][ T10] device veth1_macvtap left promiscuous mode [ 55.896286][ T10] device veth0_vlan left promiscuous mode [ 56.122281][ T308] Bluetooth: hci0: command 0x1001 tx timeout [ 56.129448][ T677] Bluetooth: hci0: sending frame failed (-49) [ 56.975628][ T101] EXT4-fs error: 82 callbacks suppressed [ 56.975645][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #259: comm udevd: reading directory lblock 0 [ 56.992918][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 57.004736][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 57.016455][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 57.028166][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1642: comm udevd: reading directory lblock 0 [ 57.039663][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1480: comm udevd: reading directory lblock 0 [ 58.202223][ T308] Bluetooth: hci0: command 0x1009 tx timeout [ 58.284145][ T185] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #121: comm crond: reading directory lblock 0 [ 58.295608][ T185] EXT4-fs warning: 22 callbacks suppressed [ 58.295617][ T185] EXT4-fs warning (device sda1): htree_dirblock_to_tree:1083: inode #121: lblock 0: comm crond: error -5 reading directory block [ 58.314861][ T185] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #121: comm crond: reading directory lblock 0 [ 58.326287][ T185] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm crond: reading directory lblock 0 [ 62.042837][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #259: comm udevd: reading directory lblock 0 [ 62.054608][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 62.066311][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 62.077800][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 62.089229][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1642: comm udevd: reading directory lblock 0 [ 62.100760][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1480: comm udevd: reading directory lblock 0 [ 62.203756][ T1087] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.296: Detected aborted journal [ 62.214848][ T1087] EXT4-fs: 24 callbacks suppressed [ 62.214859][ T1087] EXT4-fs (sda1): Remounting filesystem read-only [ 62.226803][ T1087] EXT4-fs error (device sda1) in ext4_evict_inode:260: Journal has aborted [ 62.235806][ T1087] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.296: Detected aborted journal [ 62.246808][ T1087] EXT4-fs (sda1): Remounting filesystem read-only [ 62.253267][ T1087] EXT4-fs error (device sda1) in ext4_evict_inode:260: Journal has aborted [ 62.265462][ T1087] EXT4-fs (sda1): Remounting filesystem read-only [ 62.822680][ T10] device bridge_slave_1 left promiscuous mode [ 62.828875][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.836370][ T10] device bridge_slave_0 left promiscuous mode [ 62.842567][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.850276][ T10] device veth1_macvtap left promiscuous mode [ 62.856308][ T10] device veth0_vlan left promiscuous mode