last executing test programs: 3m34.279361105s ago: executing program 32 (id=318): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xa, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000700)="b9d5e01a991e924ccc78cbc0a3ba", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m30.712254066s ago: executing program 33 (id=445): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m3.159093216s ago: executing program 34 (id=1075): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000a40)=[{&(0x7f0000000280)="f7446c", 0x3}, {0x0}], 0x2, 0x4, 0x3) 3m2.168033798s ago: executing program 35 (id=1105): syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000002a80)=ANY=[@ANYBLOB="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", @ANYBLOB="f5c33a229f58e3c883815dd2ef8c44420e679cbdfd8f114bae9005bc2e65a3ed4cc21ca65c77a0fe84195446c44b5962be4aebe099d3f25731c857fe6311b2d0e7354e46bfce688beb7759d9a15f1063e6c38e92e492669c583b54c2ab191ba4b5c645bce614e5", @ANYRES64], 0x4, 0x153e, &(0x7f0000000240)="$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") fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='(\xed\xef(.(\\-]\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2m45.851327355s ago: executing program 36 (id=1138): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0xdb9776a128fc7f6, {0x42}}, 0x10) 2m27.910071021s ago: executing program 37 (id=1497): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/fscaps', 0xa3002, 0x90) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex_waitv(&(0x7f00000001c0)=[{0x1, 0x0, 0x2}], 0x1, 0x0, &(0x7f00000003c0), 0x0) 2m8.727408469s ago: executing program 3 (id=2176): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x803, @multicast1}, {0x2, 0x0, @local}, {0x2, 0x4e21, @multicast2}, 0x3c, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe41}) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) 2m8.69551921s ago: executing program 3 (id=2177): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000300)='./file0\x00', 0x1008819, &(0x7f0000000cc0)=ANY=[], 0x1, 0x5590, &(0x7f0000005d00)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 2m7.859379315s ago: executing program 3 (id=2184): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) link(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m7.360049596s ago: executing program 38 (id=1972): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) getgroups(0x3, &(0x7f0000004e40)=[0xee00, 0x0, 0xffffffffffffffff]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8401, &(0x7f0000004f80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) 2m6.864076807s ago: executing program 3 (id=2195): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5524, &(0x7f00000108c0)="$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") setgroups(0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) 2m5.768038393s ago: executing program 3 (id=2201): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 2m3.582163415s ago: executing program 3 (id=2218): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() 1m47.502683513s ago: executing program 39 (id=2218): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() 1m24.117128777s ago: executing program 0 (id=2679): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@setlink={0x3c, 0x13, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x2424, 0x4822}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x0) 1m23.765905722s ago: executing program 0 (id=2688): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) read$char_usb(r0, &(0x7f00000002c0)=""/106, 0x6a) sendfile(r1, r0, 0x0, 0x7b) 1m23.752030603s ago: executing program 0 (id=2691): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') lseek(r0, 0x4, 0x1) getdents64(r0, 0xffffffffffffffff, 0x43) 1m23.708659015s ago: executing program 0 (id=2693): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000001100)='./file1\x00', 0x10000c0, &(0x7f0000001140)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp855,errors=remount-ro,utf8,fmask=00000000000000000000004,iocharset=koi8-ru,time_offset=0x0000000000000006,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303430302c646d61736b3d30303030303030303030303034303030303030303030302c616c6c6f775f7574696d653d3030303030303030303030303030303030521e303030312c00b5efd5a5c49860e6033d86a1062aa410763a35d6358f3ec56140261c6ce5becee4b76d651a129b77d4e52b37ca8fdc9a7a3d08e55f6bfc2fdd3440ba22085c942503c30e11081ad5fa75126938c97d581a5cce2f6488388f66fa7e0e33b5b36d"], 0x1, 0x1531, &(0x7f00000014c0)="$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") r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x3000100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 1m23.486319104s ago: executing program 0 (id=2698): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1m23.365861489s ago: executing program 0 (id=2701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/39, 0x27}], 0x1, 0x400, 0x9) 1m23.278010653s ago: executing program 40 (id=2701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/39, 0x27}], 0x1, 0x400, 0x9) 1m15.03825793s ago: executing program 9 (id=2911): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="bbc49e2b") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000002140)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, &(0x7f0000002380)=[{&(0x7f0000002180)=""/123, 0x7b}], 0x1, 0x0) 1m14.916658725s ago: executing program 9 (id=2915): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x1, 0x4) 1m14.872490277s ago: executing program 9 (id=2918): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb5c", 0x6}], 0x2, &(0x7f0000001d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @multicast2}}}], 0x38}, 0x0) 1m14.777025541s ago: executing program 9 (id=2923): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1) recvmsg$unix(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x22) dup3(r1, r0, 0x0) 1m14.685051275s ago: executing program 9 (id=2927): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m14.625308937s ago: executing program 9 (id=2930): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x0, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 59.617868999s ago: executing program 41 (id=2930): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x0, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 57.605904674s ago: executing program 4 (id=3301): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0xffffc000) msync(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4) 57.588489355s ago: executing program 4 (id=3302): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000240)={[{@dioread_lock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe}}, {@abort}, {@user_xattr}, {@user_xattr}, {@grpjquota, 0x2e}, {@max_batch_time={'max_batch_time', 0x3d, 0xd3f}}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c1, &(0x7f0000001940)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}}, 0x20}, 0x1, 0x0, 0x0, 0x240088d0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 56.848618126s ago: executing program 4 (id=3317): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0xc362e63b3f31ba5f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x34}}, 0x800) 56.703018482s ago: executing program 4 (id=3321): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x50, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c6661756c745f747970653d30303030303030303030303030303033323736372c6d656d6f72793d6c6f772c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c646973636172642c6e6f657874656e745f63616368652c6e6f71756f74612c636865636b706f696e743d64697361626c652c00363101be2f2414c1ff59cf0ff87782bcde43f7989389b5df0c89a39b9879753e01c3936df8f39b60655e3609ad58e855a62cde73be8487d7f660b8da7993b53c4bea49f4e3f2d6b81984f7eeaafb913ce47a483219b0f7b60a2b1f30eb272e8137a471ec62a32d98bb77dfeb8bb0c56400"/344], 0x4, 0x5525, &(0x7f00000014c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) mount$bind(&(0x7f0000002cc0)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x81001, 0x0) stat(&(0x7f0000003480)='./file0\x00', &(0x7f0000000140)) 55.439247775s ago: executing program 4 (id=3350): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000140)={&(0x7f0000000200)=""/24, 0x18}) 53.921958069s ago: executing program 4 (id=3373): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f00000001c0)={&(0x7f0000000400)=""/95, 0x5f}) 53.821733023s ago: executing program 42 (id=3373): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f00000001c0)={&(0x7f0000000400)=""/95, 0x5f}) 50.301555352s ago: executing program 2 (id=3475): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x2, 0x1, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 50.224646295s ago: executing program 2 (id=3476): r0 = syz_io_uring_setup(0x315b, &(0x7f00000003c0)={0x0, 0xa83c, 0x40, 0x0, 0x23b, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000040)=[@ioring_restriction_register_op={0x0, 0x18}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) 50.153979628s ago: executing program 2 (id=3477): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @multicast, @val={@val={0x88a8, 0x3}, {0x8100, 0x5}}, {@arp={0x806, @generic={0x102, 0x8864, 0x6, 0x0, 0x3, @link_local, "", @multicast}}}}}, 0x2a) 50.153803928s ago: executing program 2 (id=3478): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@orlov}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@orlov}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) 49.754039935s ago: executing program 2 (id=3487): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000015c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80080001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c040}, 0x4040050) 49.563895893s ago: executing program 2 (id=3489): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x401, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40440c0}, 0x40000) 49.432650019s ago: executing program 43 (id=3489): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x401, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40440c0}, 0x40000) 28.473901551s ago: executing program 8 (id=3826): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000500)=0x13) 26.239672095s ago: executing program 8 (id=3876): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x2201, 0x0) 26.12524128s ago: executing program 8 (id=3880): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 26.024498674s ago: executing program 8 (id=3882): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4061}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x2, &(0x7f0000000040)={{0x77359400}, {0x0, 0x2710}}, 0x0) 25.90426703s ago: executing program 8 (id=3885): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32=r1, @ANYBLOB="08000b00e000000108000200ac1414bb140006"], 0x60}}, 0x814) 25.66283302s ago: executing program 8 (id=3893): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='3', 0x1) 10.657202092s ago: executing program 44 (id=3893): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='3', 0x1) 5.46287344s ago: executing program 1 (id=4191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde6, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.342476327s ago: executing program 6 (id=4194): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x845, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x82, 0xfffffffe, 0xfffffb9a, 0xfffffffc, 0x400004, 0x0, 0x4, 0x24f5, 0x4, 0xf252, 0x0, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0xc46, 0x3ff, 0x3, 0x5, 0x3, 0x1000ba55, 0x1000, 0x2, 0x200, 0x0, 0x1, 0x8, 0x100, 0x2, 0x80, 0x8, 0x0, 0x3, 0x199b, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x25, 0x40, 0x9, 0x7, 0x5], [0x12, 0x1e, 0x762, 0x8000, 0xfffffffe, 0x3, 0x10000, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0xfffe, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x6, 0x981, 0x4, 0x100, 0x3fb, 0x8001, 0xfffffffd, 0x0, 0x1000001, 0xa6, 0xfffffff9, 0x0, 0x957, 0x1, 0x0, 0x6, 0x7, 0x800, 0xffff, 0x6, 0x98, 0xfffffffb, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x4, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x6, 0x9, 0x9, 0xe8b, 0x5, 0x80000001, 0x893, 0x3, 0x1000, 0x2, 0xfffffffe, 0x5, 0xfffffff9, 0xe55, 0x10, 0x2, 0x4, 0x4004, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x7, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x40000c, 0x8, 0x95a, 0xffffffff, 0x4, 0x0, 0x6, 0x100fffd, 0x1, 0x9, 0x4, 0x5, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x800007f, 0x5, 0x3fa6, 0x6, 0x8e8, 0x9, 0x9, 0x4, 0xe48, 0x4, 0x4000, 0xa, 0x200, 0x1000, 0x0, 0x2, 0x5, 0x804, 0xa80a, 0x65f413f9, 0x4, 0x9, 0x8008a8, 0x2, 0x41, 0x7, 0x2, 0x4, 0x4, 0x10, 0x80, 0x0, 0x7fff, 0x10000005, 0x8001, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x4) 4.342114577s ago: executing program 1 (id=4195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="6c506d2fd848", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x3ff, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) 4.341884187s ago: executing program 7 (id=4196): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_net\x00', 0x777) mount(0x0, &(0x7f00000000c0)='./proc_net\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_net/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x1, 0x0) pwrite64$ublk_bdev(r0, &(0x7f0000000f80)='=', 0x1, 0x2) 4.341589897s ago: executing program 5 (id=4197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480), &(0x7f0000000280)=@udp=r1, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) 3.123300819s ago: executing program 6 (id=4198): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) 3.122810029s ago: executing program 1 (id=4199): r0 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLERROR(r1, &(0x7f00000002c0)=ANY=[], 0xfffffd30) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001140)=[{0x0, 0x0, 0x0}], 0x1) 3.122462849s ago: executing program 7 (id=4200): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) 3.122244809s ago: executing program 5 (id=4201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000003000000ef05000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000d000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000340)="c82eeec6d7ca77ed3ff4f312188d2b0e", &(0x7f00000004c0), 0x7, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 1.802979534s ago: executing program 6 (id=4202): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0xd0e, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.802633185s ago: executing program 1 (id=4203): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x7f7) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) 1.802120034s ago: executing program 7 (id=4204): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffa, 0x0) 1.801714825s ago: executing program 5 (id=4205): r0 = timerfd_create(0x9, 0x0) setuid(0xee00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(r0, 0x2, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) 392.770384ms ago: executing program 6 (id=4206): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 392.484034ms ago: executing program 1 (id=4207): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x5, 0x70, 0x80000}, 0x20) 392.271744ms ago: executing program 7 (id=4208): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000500b2e70000000000000002850000002c000000b7080000000000007b8af8ff00000000b7080000068000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="6a49c6f8ab0a67e18e4ef1d11c0d", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 392.171454ms ago: executing program 5 (id=4209): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) fcntl$setlease(r0, 0x400, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x2, 0x713a, 0x65a}) open(&(0x7f0000000080)='./file1\x00', 0x4000, 0x32) 133.276635ms ago: executing program 6 (id=4210): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = dup(r0) bind$802154_raw(r1, &(0x7f00000016c0)={0x27, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x50) 133.064775ms ago: executing program 1 (id=4211): syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b42181004000010203010902"], 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 123.335485ms ago: executing program 7 (id=4212): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x3, 0x20040001, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x4}}) 123.062755ms ago: executing program 5 (id=4213): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0xa, 0x3, 0x87) close(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 102.959806ms ago: executing program 6 (id=4214): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0)=0xb5a, 0x4) 82.941727ms ago: executing program 5 (id=4215): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x802, 0xfffffb9a, 0x0, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x83, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x80200, 0x2, 0x0, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x7c23, 0x6, 0x6, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x7ff, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x1c709aa8, 0x10, 0xfffffffd, 0x1, 0x1, 0xffffffff, 0x6, 0x3ff, 0x800, 0x7, 0x3, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x100, 0x7, 0x6, 0x2, 0x1, 0x80001, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000004, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x9], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x1, 0x4, 0x4c, 0x2, 0x764, 0xb, 0x402, 0x1, 0xfffffff9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe43, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x8000, 0x5, 0x1, 0x65f413f9, 0x0, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0x2, 0x7fff, 0x80000000, 0xfffffff5, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xd, 0xe, 0x2, 0xf, 0xf, 0x1, 0x80000000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1e) 0s ago: executing program 7 (id=4216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000007000000400000004000000041000000", @ANYRES32, @ANYBLOB="fdffff7f000000000000b77a50bc0fcdcdb10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.333675][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.340888][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.372559][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.397303][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.456825][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.468024][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.539310][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.547543][ T2178] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 144.566951][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.610164][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.667089][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.729788][ T5720] loop0: detected capacity change from 0 to 512 [ 144.738359][ T5644] device veth0_vlan entered promiscuous mode [ 144.748812][ T2178] usb 10-1: Using ep0 maxpacket: 16 [ 144.754992][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.762671][ T2178] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.802455][ T5720] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.2320: inode has both inline data and extents flags [ 144.806623][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.827032][ T5720] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.2320: couldn't read orphan inode 15 (err -117) [ 144.841775][ T5720] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 144.847208][ T2178] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.872911][ T5422] EXT4-fs (loop0): unmounting filesystem. [ 144.905623][ T2178] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 144.926601][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.946162][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.955841][ T2178] usb 10-1: config 0 interface 0 has no altsetting 0 [ 144.978172][ T2178] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 144.988952][ T5644] device veth1_macvtap entered promiscuous mode [ 145.010039][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.029316][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.041284][ T2178] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.050096][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.070684][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.090288][ T2178] usb 10-1: config 0 descriptor?? [ 145.108542][ T5729] input: syz0 as /devices/virtual/input/input29 [ 145.156508][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.703309][ T2178] hid (null): invalid report_count 2075921239 [ 145.709931][ T2178] hid (null): unknown global tag 0xd [ 145.715363][ T2178] hid (null): invalid report_count 38340 [ 145.757007][ T2178] hid (null): invalid report_size 48260 [ 145.762704][ T2178] hid (null): unknown global tag 0xe [ 145.788396][ T2178] hid (null): unknown global tag 0xc [ 145.794982][ T2178] hid (null): unknown global tag 0xe [ 145.817085][ T2178] hid (null): unknown global tag 0x55 [ 147.346442][ T317] usb 10-1: USB disconnect, device number 7 [ 147.951697][ T5797] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 147.972820][ T5797] syzkaller1: linktype set to 6 [ 149.094879][ T5875] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 149.126841][ T5875] syzkaller1: linktype set to 6 [ 149.697097][ T5907] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 149.706890][ T5907] syzkaller1: linktype set to 6 [ 150.714798][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 150.714815][ T28] audit: type=1400 audit(1789686647.552:577): avc: denied { write } for pid=5952 comm="syz.9.2428" name="file2" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.358496][ T5965] Dead loop on virtual device ip6_vti0, fix it urgently! [ 151.542773][ T5983] caif0: tun_chr_ioctl cmd 1074025677 [ 151.549877][ T5983] caif0: linktype set to 776 [ 151.714872][ T5990] netlink: 'syz.0.2448': attribute type 1 has an invalid length. [ 152.253788][ T6027] loop4: detected capacity change from 0 to 512 [ 152.384588][ T6027] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.2463: missing EA_INODE flag [ 152.409049][ T6027] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.2463: error while reading EA inode 2 err=-117 [ 152.448457][ T6027] EXT4-fs (loop4): 1 orphan inode deleted [ 152.469576][ T6027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.548664][ T5644] EXT4-fs (loop4): unmounting filesystem. [ 152.596723][ T2178] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 152.796712][ T2178] usb 10-1: Using ep0 maxpacket: 32 [ 152.827854][ T2178] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.899582][ T2178] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.017061][ T2178] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 153.026501][ T2178] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.141076][ T2178] usb 10-1: config 0 descriptor?? [ 153.177236][ T2178] hub 10-1:0.0: USB hub found [ 153.369207][ T2178] hub 10-1:0.0: config failed, can't read hub descriptor (err -90) [ 153.570947][ T2178] usbhid 10-1:0.0: can't add hid device: -71 [ 153.582899][ T2178] usbhid: probe of 10-1:0.0 failed with error -71 [ 153.647302][ T2178] usb 10-1: USB disconnect, device number 8 [ 154.562191][ T6121] loop4: detected capacity change from 0 to 512 [ 154.602530][ T6121] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 154.654341][ T6121] EXT4-fs (loop4): 1 truncate cleaned up [ 154.673807][ T6121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 154.732557][ T5644] EXT4-fs (loop4): unmounting filesystem. [ 155.459700][ T295] wiimote 0005:057E:0306.0016: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 155.489279][ T295] wiimote 0005:057E:0306.0016: New device registered [ 155.736709][ T320] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 156.586747][ T2178] wiimote 0005:057E:0306.0016: detected device: Nintendo Wii Remote (Gen 1) [ 156.616137][ T2178] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0016/input/input32 [ 156.648173][ T2178] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0016/input/input33 [ 156.686592][ T2178] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0016/input/input31 [ 158.011250][ T320] usb 7-1: unable to get BOS descriptor or descriptor too short [ 158.011402][ T6153] wiimote 0005:057E:0306.0016: Device removed [ 158.037841][ T320] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 158.046732][ T320] usb 7-1: can't read configurations, error -71 [ 162.049519][ T6373] loop4: detected capacity change from 0 to 512 [ 162.102441][ T6373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 162.116775][ T6373] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.179828][ T5644] EXT4-fs (loop4): unmounting filesystem. [ 162.605418][ T6395] input: syz0 as /devices/virtual/input/input34 [ 162.795445][ T6407] loop0: detected capacity change from 0 to 512 [ 162.847996][ T6407] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 162.851417][ T6389] loop4: detected capacity change from 0 to 40427 [ 162.867331][ T6407] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.894301][ T6389] F2FS-fs (loop4): invalid crc value [ 162.925725][ T6389] F2FS-fs (loop4): Found nat_bits in checkpoint [ 162.937848][ T5422] EXT4-fs (loop0): unmounting filesystem. [ 163.034067][ T6389] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 163.085030][ T5644] syz-executor: attempt to access beyond end of device [ 163.085030][ T5644] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 163.973226][ T6420] loop4: detected capacity change from 0 to 512 [ 164.052565][ T6420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 164.076812][ T6420] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.167078][ T5644] EXT4-fs (loop4): unmounting filesystem. [ 164.222392][ T28] audit: type=1400 audit(1789686673.061:578): avc: denied { getopt } for pid=6432 comm="syz.4.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.416914][ T6422] loop0: detected capacity change from 0 to 40427 [ 164.444663][ T6422] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 164.468810][ T6422] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 164.515653][ T6422] F2FS-fs (loop0): Found nat_bits in checkpoint [ 164.601819][ T6422] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 164.611253][ T6422] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 164.719671][ T6447] loop4: detected capacity change from 0 to 8192 [ 164.847070][ T28] audit: type=1400 audit(1789686673.691:579): avc: denied { append } for pid=6450 comm="syz.9.2646" name="cpu_dma_latency" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 165.068154][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2653'. [ 165.176777][ T317] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 165.306702][ T19] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 165.368110][ T317] usb 10-1: unable to get BOS descriptor or descriptor too short [ 165.380018][ T317] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.401113][ T317] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 165.420067][ T317] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 165.442985][ T317] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 165.466720][ T317] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 165.477959][ T317] usb 10-1: config 1 interface 1 has no altsetting 0 [ 165.493839][ T317] usb 10-1: string descriptor 0 read error: -22 [ 165.505654][ T317] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 165.522650][ T19] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 165.537184][ T19] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 165.549695][ T317] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.567100][ T19] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 165.593527][ T19] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 165.622465][ T19] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 165.650281][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.659366][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2669'. [ 165.681107][ T6466] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 165.688738][ T6466] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 165.699475][ T19] pl2303 7-1:1.0: pl2303 converter detected [ 165.710225][ T19] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 165.783918][ T317] usb 10-1: 2:0: failed to get current value for ch 0 (-32) [ 165.863759][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2678'. [ 166.012791][ T6522] device veth1_macvtap left promiscuous mode [ 166.017520][ T317] usb 10-1: 2:0: cannot get min/max values for control 2 (id 2) [ 166.019477][ T6466] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 166.053206][ T317] usb 10-1: USB disconnect, device number 9 [ 166.062247][ T6534] loop4: detected capacity change from 0 to 256 [ 166.079972][ T6466] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 166.097868][ T6522] ipvlan1: renamed from macsec0 [ 166.113686][ T6534] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 166.130780][ T6466] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 166.166957][ T6466] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 166.187201][ T6466] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 166.222584][ T320] usb 7-1: USB disconnect, device number 9 [ 166.242213][ T320] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 166.264624][ T320] pl2303 7-1:1.0: device disconnected [ 166.303262][ T6554] loop0: detected capacity change from 0 to 256 [ 166.330028][ T6554] exfat: Deprecated parameter 'utf8' [ 166.336242][ T6554] exfat: Deprecated parameter 'utf8' [ 166.343724][ T6554] exfat: Deprecated parameter 'utf8' [ 166.359026][ T6554] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 166.402061][ T28] audit: type=1400 audit(1789686676.238:580): avc: denied { watch } for pid=6553 comm="syz.0.2693" path="/90/file1/file0" dev="loop0" ino=1048685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.482397][ T28] audit: type=1400 audit(1789686676.278:581): avc: denied { remove_name } for pid=5422 comm="syz-executor" name="file0" dev="loop0" ino=1048690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.558857][ T28] audit: type=1400 audit(1789686676.278:582): avc: denied { unlink } for pid=5422 comm="syz-executor" name="file0" dev="loop0" ino=1048690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.566345][ T6561] cgroup: fork rejected by pids controller in /syz4 [ 166.633278][ T28] audit: type=1400 audit(1789686676.288:583): avc: denied { rmdir } for pid=5422 comm="syz-executor" name="file0" dev="loop0" ino=1048685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.166713][ T317] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 167.182257][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.225228][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.233624][ T6591] device bridge_slave_0 entered promiscuous mode [ 167.243249][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.250845][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.258658][ T6591] device bridge_slave_1 entered promiscuous mode [ 167.368511][ T317] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 167.397474][ T317] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.448227][ T317] usb 10-1: config 0 descriptor?? [ 167.487802][ T1403] device bridge_slave_1 left promiscuous mode [ 167.494177][ T1403] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.537192][ T1403] device bridge_slave_0 left promiscuous mode [ 167.543734][ T1403] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.578152][ T1403] device veth0_vlan left promiscuous mode [ 167.670798][ T317] usb 10-1: Cannot read MAC address [ 167.676167][ T317] MOSCHIP usb-ethernet driver: probe of 10-1:0.0 failed with error -71 [ 167.697153][ T317] usb 10-1: USB disconnect, device number 10 [ 167.839831][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.847044][ T6591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.854376][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.861635][ T6591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.965236][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.990204][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.994453][ T28] audit: type=1400 audit(1789686677.828:584): avc: denied { read write } for pid=6644 comm="syz.6.2736" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 168.007120][ T6613] device bridge_slave_0 entered promiscuous mode [ 168.028082][ T6645] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 168.038597][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.045876][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.053519][ T6613] device bridge_slave_1 entered promiscuous mode [ 168.068023][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.076883][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.087754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.095345][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.137552][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.146256][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.151819][ T28] audit: type=1400 audit(1789686677.868:585): avc: denied { open } for pid=6644 comm="syz.6.2736" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 168.178800][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.204350][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.230553][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.253257][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.276734][ T28] audit: type=1400 audit(1789686677.868:586): avc: denied { module_request } for pid=6591 comm="syz-executor" kmod="netdev-bond0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 168.299346][ T6591] device veth0_vlan entered promiscuous mode [ 168.338064][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.351316][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.382919][ T6591] device veth1_macvtap entered promiscuous mode [ 168.404294][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.427147][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.444742][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.504809][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.537042][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.678096][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.702050][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.744615][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.793453][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.826954][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.834239][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.858134][ T6706] loop5: detected capacity change from 0 to 256 [ 168.868003][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.906286][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.935462][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.942578][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.987664][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.017252][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.033168][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.074003][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.082377][ T6726] fuse: Bad value for 'fd' [ 169.104818][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.124282][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.160338][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.184591][ T6613] device veth0_vlan entered promiscuous mode [ 169.234400][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.266369][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.283677][ T6613] device veth1_macvtap entered promiscuous mode [ 169.311498][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.327389][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.356007][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.379985][ T1403] device bridge_slave_1 left promiscuous mode [ 169.406425][ T1403] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.428850][ T1403] device bridge_slave_0 left promiscuous mode [ 169.430351][ T6755] loop5: detected capacity change from 0 to 16 [ 169.435125][ T1403] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.474093][ T6755] erofs: (device loop5): mounted with root inode @ nid 36. [ 169.492849][ T1403] device veth1_macvtap left promiscuous mode [ 169.511065][ T1403] device veth0_vlan left promiscuous mode [ 169.653425][ T6764] loop5: detected capacity change from 0 to 256 [ 169.693421][ T6764] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 169.781262][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.811234][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.927041][ T6779] ------------[ cut here ]------------ [ 169.932666][ T6779] memcpy: detected field-spanning write (size 128) of single field "&entry->caller" at kernel/trace/trace.c:3090 (size 64) [ 169.945537][ T6779] WARNING: CPU: 1 PID: 6779 at kernel/trace/trace.c:3090 __ftrace_trace_stack+0x3e0/0x550 [ 169.947900][ T28] audit: type=1400 audit(1789686679.788:587): avc: denied { create } for pid=6790 comm="syz.5.2801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.955672][ T6779] Modules linked in: [ 169.979213][ T6779] CPU: 1 PID: 6779 Comm: syz.6.2797 Tainted: G W syzkaller #0 [ 169.988227][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.998419][ T6779] RIP: 0010:__ftrace_trace_stack+0x3e0/0x550 [ 170.004705][ T6779] Code: fe ff ff e8 c2 da fc ff c6 05 54 19 1b 06 01 b9 40 00 00 00 48 c7 c7 80 ea aa 85 48 89 de 48 c7 c2 20 00 ab 85 e8 60 60 cd ff <0f> 0b e9 25 fe ff ff e8 94 da fc ff 48 8b 7d c8 4c 89 f6 e8 18 83 [ 170.024481][ T6779] RSP: 0018:ffffc900010b77b8 EFLAGS: 00010246 [ 170.030783][ T6779] RAX: 957e8b48e8a92f00 RBX: 0000000000000080 RCX: ffff88810fce6540 [ 170.038813][ T6779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 170.046837][ T28] audit: type=1400 audit(1789686679.838:588): avc: denied { bind } for pid=6792 comm="syz.9.2802" laddr=172.20.20.44 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.046913][ T6779] RBP: ffffc900010b7800 R08: ffffc900010b73a7 R09: 1ffff92000216e74 [ 170.079053][ T6779] R10: dffffc0000000000 R11: fffff52000216e75 R12: ffff8881003b6028 [ 170.087250][ T6779] R13: ffff88810fce6b30 R14: ffff8881003b6010 R15: ffff8881003b6018 [ 170.087466][ T28] audit: type=1400 audit(1789686679.838:589): avc: denied { name_bind } for pid=6792 comm="syz.9.2802" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 170.095385][ T6779] FS: 00005555703ef500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 170.126073][ T6779] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.132820][ T6779] CR2: 0000200000534000 CR3: 000000013535c000 CR4: 00000000003526a0 [ 170.137743][ T28] audit: type=1400 audit(1789686679.838:590): avc: denied { node_bind } for pid=6792 comm="syz.9.2802" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 170.141434][ T6779] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 170.170194][ T6779] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 170.178258][ T6779] Call Trace: [ 170.181558][ T6779] [ 170.184506][ T6779] __trace_stack+0x5b/0xb0 [ 170.189197][ T6779] stacktrace_trigger+0xf0/0x140 [ 170.194443][ T6779] ? __cfi_stacktrace_trigger+0x10/0x10 [ 170.200293][ T6779] ? ring_buffer_event_data+0x9d/0x100 [ 170.205835][ T6779] event_triggers_post_call+0x113/0x1a0 [ 170.211440][ T6779] trace_event_buffer_commit+0x24b/0x8a0 [ 170.217223][ T6779] trace_event_raw_event_kvm_hv_stimer_cleanup+0x154/0x230 [ 170.224474][ T6779] ? __cfi_trace_event_raw_event_kvm_hv_stimer_cleanup+0x10/0x10 [ 170.232726][ T6779] ? vunmap+0x60/0x60 [ 170.236786][ T6779] ? __kasan_slab_free+0x11/0x20 [ 170.241854][ T6779] stimer_cleanup+0x298/0x2f0 [ 170.246568][ T6779] kvm_hv_vcpu_uninit+0x53/0xb0 [ 170.251681][ T6779] kvm_arch_vcpu_destroy+0xb6/0x220 [ 170.257029][ T6779] kvm_destroy_vcpus+0xdd/0x250 [ 170.261918][ T6779] ? __cfi_kvm_destroy_vcpus+0x10/0x10 [ 170.267439][ T6779] ? kvm_ioapic_destroy+0xaa/0xc0 [ 170.272484][ T6779] kvm_arch_destroy_vm+0x310/0x3f0 [ 170.277654][ T6779] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 170.283304][ T6779] ? __kasan_check_write+0x14/0x20 [ 170.288569][ T6779] kvm_put_kvm+0xa6a/0x13f0 [ 170.293200][ T6779] kvm_vm_release+0x46/0x50 [ 170.297780][ T6779] ? __cfi_kvm_vm_release+0x10/0x10 [ 170.303009][ T6779] __fput+0x1fd/0x8f0 [ 170.307049][ T6779] ____fput+0x15/0x20 [ 170.311139][ T6779] task_work_run+0x1e1/0x250 [ 170.315749][ T6779] ? __cfi_task_work_run+0x10/0x10 [ 170.320940][ T6779] ? __cfi___close_range+0x10/0x10 [ 170.326069][ T6779] exit_to_user_mode_loop+0x9b/0xb0 [ 170.331314][ T6779] exit_to_user_mode_prepare+0x87/0xd0 [ 170.336898][ T6779] syscall_exit_to_user_mode+0x1a/0x30 [ 170.342379][ T6779] do_syscall_64+0x58/0xa0 [ 170.347445][ T6779] ? clear_bhb_loop+0x30/0x80 [ 170.352155][ T6779] ? clear_bhb_loop+0x30/0x80 [ 170.357110][ T6779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.363027][ T6779] RIP: 0033:0x7f56c9b9e159 [ 170.367482][ T6779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.387406][ T6779] RSP: 002b:00007ffdeb4a33d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 170.395938][ T6779] RAX: 0000000000000000 RBX: 00007ffdeb4a34c0 RCX: 00007f56c9b9e159 [ 170.404064][ T6779] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 170.412171][ T6779] RBP: 0000000000029760 R08: 0000000000000001 R09: 0000000000000000 [ 170.420370][ T6779] R10: 0000001b30320000 R11: 0000000000000246 R12: 00007ffdeb4a3500 [ 170.428411][ T6779] R13: 00007f56c9e25fac R14: 00000000000297bc R15: 00007f56c9e25fa0 [ 170.436777][ T6779] [ 170.439810][ T6779] ---[ end trace 0000000000000000 ]--- [ 170.606057][ T6613] ------------[ cut here ]------------ [ 170.611831][ T6613] WARNING: CPU: 0 PID: 6613 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 170.621458][ T6613] Modules linked in: [ 170.625469][ T6613] CPU: 0 PID: 6613 Comm: syz-executor Tainted: G W syzkaller #0 [ 170.634660][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.645264][ T6613] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 170.651195][ T6613] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ee 7d a3 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 f2 5d ff <0f> 0b e9 17 ff ff ff e8 8b f2 5d ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 170.671350][ T6613] RSP: 0018:ffffc9001a457b60 EFLAGS: 00010293 [ 170.677731][ T6613] RAX: ffffffff82137789 RBX: 1ffff110265c68b0 RCX: ffff88811d54a880 [ 170.685760][ T6613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.693896][ T6613] RBP: ffffc9001a457b90 R08: ffff888117ff9a5f R09: 1ffff11022fff34b [ 170.702122][ T6613] R10: dffffc0000000000 R11: ffffed1022fff34c R12: ffff888132e34550 [ 170.710173][ T6613] R13: 0000000000000000 R14: ffff888117ff99b8 R15: ffff888132e34580 [ 170.718210][ T6613] FS: 0000555581578500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 170.727288][ T6613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.733923][ T6613] CR2: 00007f92975c6bd2 CR3: 00000001303fa000 CR4: 00000000003506b0 [ 170.742647][ T6613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 170.750911][ T6613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 170.758949][ T6613] Call Trace: [ 170.762337][ T6613] [ 170.765281][ T6613] ovl_do_remove+0x6d3/0xa60 [ 170.770201][ T6613] ? ovl_set_redirect+0x6b0/0x6b0 [ 170.775258][ T6613] ? selinux_inode_rmdir+0x22/0x30 [ 170.780548][ T6613] ovl_rmdir+0x1a/0x20 [ 170.784738][ T6613] vfs_rmdir+0x381/0x4f0 [ 170.789054][ T6613] incfs_kill_sb+0xfe/0x210 [ 170.793756][ T6613] deactivate_locked_super+0xb5/0x120 [ 170.799312][ T6613] deactivate_super+0xaf/0xe0 [ 170.804064][ T6613] cleanup_mnt+0x45e/0x4e0 [ 170.808735][ T6613] __cleanup_mnt+0x19/0x20 [ 170.813181][ T6613] task_work_run+0x1e1/0x250 [ 170.817870][ T6613] ? __cfi_task_work_run+0x10/0x10 [ 170.823018][ T6613] ? __x64_sys_umount+0x12d/0x170 [ 170.828184][ T6613] ? __cfi___x64_sys_umount+0x10/0x10 [ 170.833676][ T6613] exit_to_user_mode_loop+0x9b/0xb0 [ 170.839044][ T6613] exit_to_user_mode_prepare+0x87/0xd0 [ 170.844550][ T6613] syscall_exit_to_user_mode+0x1a/0x30 [ 170.850078][ T6613] do_syscall_64+0x58/0xa0 [ 170.854716][ T6613] ? clear_bhb_loop+0x30/0x80 [ 170.859851][ T6613] ? clear_bhb_loop+0x30/0x80 [ 170.864579][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.870890][ T6613] RIP: 0033:0x7fc928d9f397 [ 170.875443][ T6613] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 170.895562][ T6613] RSP: 002b:00007fff9e573f78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 170.904339][ T6613] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc928d9f397 [ 170.912592][ T6613] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9e574030 [ 170.920757][ T6613] RBP: 00007fff9e574030 R08: 00007fff9e575030 R09: 00000000ffffffff [ 170.928898][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9e5750c0 [ 170.937016][ T6613] R13: 00007fc928e344bb R14: 0000000000029a36 R15: 00007fff9e575100 [ 170.945069][ T6613] [ 170.948333][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 170.948340][ T6613] ---[ end trace 0000000000000000 ]--- [ 170.950416][ T6613] ------------[ cut here ]------------ [ 170.967291][ T6613] WARNING: CPU: 0 PID: 6613 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 170.977184][ T6613] Modules linked in: [ 170.981108][ T6613] CPU: 0 PID: 6613 Comm: syz-executor Tainted: G W syzkaller #0 [ 170.991047][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.001747][ T6613] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 171.007834][ T6613] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ee 7d a3 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 f2 5d ff <0f> 0b e9 17 ff ff ff e8 8b f2 5d ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 171.027590][ T6613] RSP: 0018:ffffc9001a457b60 EFLAGS: 00010293 [ 171.033886][ T6613] RAX: ffffffff82137789 RBX: 1ffff110265c68b0 RCX: ffff88811d54a880 [ 171.042094][ T6613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.050288][ T6613] RBP: ffffc9001a457b90 R08: ffff888117ff9a5f R09: 1ffff11022fff34b [ 171.058555][ T6613] R10: dffffc0000000000 R11: ffffed1022fff34c R12: ffff888132e34550 [ 171.066548][ T6613] R13: 0000000000000000 R14: ffff888117ff99b8 R15: ffff888132e34580 [ 171.074680][ T6613] FS: 0000555581578500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 171.083925][ T6613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.090739][ T6613] CR2: 00007f9295ff6ff8 CR3: 00000001303fa000 CR4: 00000000003506b0 [ 171.098825][ T6613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.107007][ T6613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 171.115575][ T6613] Call Trace: [ 171.119170][ T6613] [ 171.122149][ T6613] ovl_do_remove+0x6d3/0xa60 [ 171.126819][ T6613] ? ovl_set_redirect+0x6b0/0x6b0 [ 171.132140][ T6613] ? selinux_inode_rmdir+0x22/0x30 [ 171.137415][ T6613] ovl_rmdir+0x1a/0x20 [ 171.141516][ T6613] vfs_rmdir+0x381/0x4f0 [ 171.145785][ T6613] incfs_kill_sb+0x18f/0x210 [ 171.150598][ T6613] deactivate_locked_super+0xb5/0x120 [ 171.156090][ T6613] deactivate_super+0xaf/0xe0 [ 171.160824][ T6613] cleanup_mnt+0x45e/0x4e0 [ 171.165266][ T6613] __cleanup_mnt+0x19/0x20 [ 171.166690][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 171.169816][ T6613] task_work_run+0x1e1/0x250 [ 171.179539][ T6613] ? __cfi_task_work_run+0x10/0x10 [ 171.184915][ T6613] ? __x64_sys_umount+0x12d/0x170 [ 171.187742][ T24] usb 7-1: config 3 has an invalid interface number: 45 but max is 0 [ 171.190214][ T6613] ? __cfi___x64_sys_umount+0x10/0x10 [ 171.204158][ T6613] exit_to_user_mode_loop+0x9b/0xb0 [ 171.209423][ T6613] exit_to_user_mode_prepare+0x87/0xd0 [ 171.215251][ T6613] syscall_exit_to_user_mode+0x1a/0x30 [ 171.220989][ T6613] do_syscall_64+0x58/0xa0 [ 171.221121][ T24] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 171.225773][ T6613] ? clear_bhb_loop+0x30/0x80 [ 171.239654][ T6613] ? clear_bhb_loop+0x30/0x80 [ 171.244467][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.250771][ T6613] RIP: 0033:0x7fc928d9f397 [ 171.255197][ T6613] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 171.263856][ T24] usb 7-1: config 3 has no interface number 0 [ 171.275556][ T6613] RSP: 002b:00007fff9e573f78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 171.290586][ T6613] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc928d9f397 [ 171.298961][ T6613] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9e574030 [ 171.307088][ T6613] RBP: 00007fff9e574030 R08: 00007fff9e575030 R09: 00000000ffffffff [ 171.315260][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9e5750c0 [ 171.318324][ T24] usb 7-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.323296][ T6613] R13: 00007fc928e344bb R14: 0000000000029a36 R15: 00007fff9e575100 [ 171.344684][ T6613] [ 171.347742][ T6613] ---[ end trace 0000000000000000 ]--- [ 171.420159][ T24] usb 7-1: config 3 interface 45 has no altsetting 0 [ 171.448183][ T6845] loop5: detected capacity change from 0 to 256 [ 171.458184][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 171.480760][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.509122][ T24] usb 7-1: Product: syz [ 171.516436][ T24] usb 7-1: Manufacturer: syz [ 171.537441][ T24] usb 7-1: SerialNumber: syz [ 171.541720][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2831'. [ 171.598744][ T6859] tipc: Started in network mode [ 171.613803][ T6859] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 171.755592][ T6881] loop4: detected capacity change from 0 to 512 [ 171.761139][ T24] usb 7-1: USB disconnect, device number 10 [ 173.237039][ T6881] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 173.285671][ T6881] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 173.326411][ T6881] System zones: 0-1, 15-15, 18-18, 34-34 [ 173.347212][ T6881] EXT4-fs (loop4): orphan cleanup on readonly fs [ 173.375007][ T6881] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 173.426763][ T6881] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 173.476693][ T6881] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 173.496719][ T6881] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.2839: bad orphan inode 16 [ 173.542371][ T6881] ext4_test_bit(bit=15, block=18) = 1 [ 173.560435][ T6881] is_bad_inode(inode)=0 [ 173.592023][ T6881] NEXT_ORPHAN(inode)=0 [ 173.596264][ T6881] max_ino=32 [ 173.616708][ T6881] i_nlink=2 [ 173.620001][ T6881] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 173.734114][ T6613] EXT4-fs (loop4): unmounting filesystem. [ 173.801922][ T6937] loop5: detected capacity change from 0 to 512 [ 173.809678][ T6935] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2865'. [ 173.876451][ T6937] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 173.940807][ T6937] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 174.002445][ T6937] EXT4-fs (loop5): orphan cleanup on readonly fs [ 174.044611][ T6937] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.2868: bad orphan inode 15 [ 174.059703][ T6937] ext4_test_bit(bit=14, block=18) = 1 [ 174.101652][ T6937] is_bad_inode(inode)=0 [ 174.105872][ T6937] NEXT_ORPHAN(inode)=1023 [ 174.141171][ T6937] max_ino=32 [ 174.144426][ T6937] i_nlink=0 [ 174.191145][ T6937] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2868: bg 0: block 440: padding at end of block bitmap is not set [ 174.233725][ T28] audit: type=1400 audit(1789686684.068:591): avc: denied { bind } for pid=6982 comm="syz.9.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 174.257530][ T6937] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 174.316797][ T6937] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 174.397111][ T6937] EXT4-fs (loop5): shut down requested (0) [ 174.417837][ T28] audit: type=1400 audit(1789686684.258:592): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.457525][ T6591] EXT4-fs (loop5): unmounting filesystem. [ 174.579396][ T7003] loop5: detected capacity change from 0 to 512 [ 174.597056][ T7003] EXT4-fs: Ignoring removed oldalloc option [ 174.662091][ T7003] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.2898: bad orphan inode 15 [ 174.674098][ T7003] ext4_test_bit(bit=14, block=5) = 0 [ 174.696690][ T7003] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 174.726933][ T7003] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.2898: inode has both inline data and extents flags [ 174.757018][ T7003] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 174.803777][ T7023] netlink: 'syz.6.2907': attribute type 11 has an invalid length. [ 174.821737][ T7023] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2907'. [ 174.838263][ T6591] EXT4-fs (loop5): unmounting filesystem. [ 175.052176][ T28] audit: type=1400 audit(1789686684.888:593): avc: denied { map } for pid=7040 comm="syz.9.2915" path="socket:[44790]" dev="sockfs" ino=44790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.146812][ T28] audit: type=1400 audit(1789686684.888:594): avc: denied { read write } for pid=7040 comm="syz.9.2915" path="socket:[44790]" dev="sockfs" ino=44790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.299900][ T7064] loop5: detected capacity change from 0 to 512 [ 175.317140][ T7064] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 175.508987][ T28] audit: type=1400 audit(1789686685.348:595): avc: denied { read } for pid=7086 comm="syz.6.2937" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 175.627281][ T6] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 175.667224][ T7094] cgroup: fork rejected by pids controller in /syz6 [ 175.817757][ T6] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.831143][ T6] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.874216][ T6] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.931734][ T6] usb 6-1: New USB device found, idVendor=045e, idProduct=0712, bcdDevice= 0.00 [ 175.968040][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.242850][ T7126] device veth0 entered promiscuous mode [ 176.267322][ T7126] device veth0 left promiscuous mode [ 176.407098][ T6] hid-generic 0003:045E:0712.0017: unknown main item tag 0x6 [ 176.437147][ T6] hid-generic 0003:045E:0712.0017: hidraw0: USB HID v0.00 Device [HID 045e:0712] on usb-dummy_hcd.5-1/input0 [ 176.451167][ T7132] netlink: 'syz.1.2959': attribute type 1 has an invalid length. [ 176.483768][ T7132] netlink: 'syz.1.2959': attribute type 2 has an invalid length. [ 176.525260][ T7135] netlink: 'syz.1.2959': attribute type 1 has an invalid length. [ 176.563594][ T7135] netlink: 'syz.1.2959': attribute type 2 has an invalid length. [ 176.634698][ T39] usb 6-1: USB disconnect, device number 3 [ 176.731792][ T7133] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.751948][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.785815][ T7133] device bridge_slave_0 entered promiscuous mode [ 176.846597][ T7133] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.867743][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.895587][ T7133] device bridge_slave_1 entered promiscuous mode [ 176.959386][ T330] device bridge_slave_1 left promiscuous mode [ 176.965660][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.006940][ T330] device bridge_slave_0 left promiscuous mode [ 177.013237][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.177700][ T28] audit: type=1400 audit(1789686687.018:596): avc: denied { read } for pid=7154 comm="syz.5.2967" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 177.202094][ T7155] deleting an unspecified loop device is not supported. [ 177.255771][ T28] audit: type=1400 audit(1789686687.018:597): avc: denied { open } for pid=7154 comm="syz.5.2967" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 177.361786][ T28] audit: type=1400 audit(1789686687.048:598): avc: denied { ioctl } for pid=7154 comm="syz.5.2967" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 177.443662][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.453196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.482809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.503478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.534782][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.541919][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.559747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.577129][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.602580][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.609754][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.653281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.673647][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.707029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.722448][ T7133] device veth0_vlan entered promiscuous mode [ 177.750772][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.787022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.809211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.837168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.862483][ T7133] device veth1_macvtap entered promiscuous mode [ 177.878358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.917534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.925883][ T28] audit: type=1400 audit(1789686687.758:599): avc: denied { write } for pid=7191 comm="syz.4.2985" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 177.951937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.008470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.017173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.072969][ T7202] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2955'. [ 178.309780][ T7223] loop6: detected capacity change from 0 to 256 [ 178.335443][ T7176] loop5: detected capacity change from 0 to 40427 [ 178.374101][ T7223] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 178.385038][ T7176] F2FS-fs (loop5): invalid crc value [ 178.407084][ T7223] FAT-fs (loop6): Filesystem has been set read-only [ 178.414548][ T7176] F2FS-fs (loop5): Found nat_bits in checkpoint [ 178.436072][ T7223] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 178.486829][ T7223] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 178.534463][ T7176] F2FS-fs (loop5): Start checkpoint disabled! [ 178.553886][ T7176] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 178.566538][ T7176] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 178.821267][ T8] kworker/u4:0: attempt to access beyond end of device [ 178.821267][ T8] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 179.253189][ T28] audit: type=1400 audit(1789686689.088:600): avc: denied { read } for pid=7254 comm="syz.4.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.614034][ T7268] SELinux: avtab: truncated entry [ 179.789975][ T7268] SELinux: failed to load policy [ 180.124093][ T7317] loop5: detected capacity change from 0 to 1024 [ 180.167795][ T7317] EXT4-fs: Ignoring removed bh option [ 180.184672][ T7317] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.218035][ T7321] loop4: detected capacity change from 0 to 512 [ 180.246288][ T7321] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.283750][ T7317] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 180.390669][ T6591] EXT4-fs (loop5): unmounting filesystem. [ 180.689496][ T7354] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3056'. [ 180.710697][ T28] audit: type=1400 audit(1789686691.553:601): avc: denied { read } for pid=7352 comm="syz.5.3055" path="socket:[46602]" dev="sockfs" ino=46602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.858988][ T7365] loop5: detected capacity change from 0 to 256 [ 180.902146][ T7365] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 181.122627][ T7371] loop5: detected capacity change from 0 to 512 [ 181.187994][ T7371] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.3064: inode #1: comm syz.5.3064: iget: illegal inode # [ 181.216945][ T7371] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3064: error while reading EA inode 1 err=-117 [ 181.244536][ T7371] EXT4-fs (loop5): 1 orphan inode deleted [ 181.269978][ T7371] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 181.326546][ T7371] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.3064: deleted inode referenced: 15 [ 181.388010][ T6591] EXT4-fs (loop5): unmounting filesystem. [ 181.457517][ T28] audit: type=1400 audit(1789686692.303:602): avc: denied { map } for pid=7379 comm="syz.5.3068" path="socket:[46648]" dev="sockfs" ino=46648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.527466][ T7382] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.816963][ T28] audit: type=1400 audit(1789686692.663:603): avc: denied { getopt } for pid=7390 comm="syz.5.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.897533][ T28] audit: type=1400 audit(1789686692.723:604): avc: denied { ioctl } for pid=7397 comm="syz.5.3076" path="/80/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=12837 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 182.100261][ T7417] serio: Serial port ttynull [ 182.445768][ T19] wiimote 0005:057E:0306.0018: unknown main item tag 0x0 [ 182.477147][ T19] wiimote 0005:057E:0306.0018: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 182.507790][ T19] wiimote 0005:057E:0306.0018: New device registered [ 182.716730][ T19] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 182.777311][ T7451] loop5: detected capacity change from 0 to 256 [ 182.807205][ T7451] FAT-fs (loop5): Unrecognized mount option "shortna=iso8859-3" or missing value [ 182.906798][ T19] usb 7-1: Using ep0 maxpacket: 8 [ 182.915111][ T19] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 182.955665][ T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.977368][ T19] usb 7-1: Product: syz [ 182.981674][ T19] usb 7-1: Manufacturer: syz [ 183.006878][ T19] usb 7-1: SerialNumber: syz [ 183.219461][ T7442] wiimote 0005:057E:0306.0018: Device removed [ 183.231625][ T19] usb 7-1: MIDIStreaming interface descriptor not found [ 183.272418][ T19] usb 7-1: USB disconnect, device number 11 [ 183.546883][ T2178] wiimote 0005:057E:0306.0018: detected device: Nintendo Wii Remote (Gen 1) [ 183.574636][ T7492] loop4: detected capacity change from 0 to 256 [ 183.585047][ T2178] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0018/input/input36 [ 183.614752][ T7492] exfat: Deprecated parameter 'namecase' [ 183.633780][ T7492] exfat: Deprecated parameter 'namecase' [ 183.640401][ T2178] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0018/input/input37 [ 183.655428][ T7486] SELinux: avtab: truncated entry [ 183.663897][ T7492] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 183.707410][ T2178] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0018/input/input35 [ 183.805808][ T7494] mmap: syz.4.3119 (7494): VmData 29208576 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 183.810726][ T7486] SELinux: failed to load policy [ 183.982919][ T28] audit: type=1400 audit(1789686694.823:605): avc: denied { connect } for pid=7499 comm="syz.5.3122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 184.046468][ T28] audit: type=1400 audit(1789686694.843:606): avc: denied { write } for pid=7499 comm="syz.5.3122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 184.367374][ T28] audit: type=1400 audit(1789686695.213:607): avc: denied { getopt } for pid=7512 comm="syz.5.3128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.592144][ T7530] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 184.672451][ T7536] netlink: 'syz.1.3139': attribute type 3 has an invalid length. [ 184.712438][ T7536] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3139'. [ 185.423384][ T7561] SELinux: avtab: truncated entry [ 185.513039][ T7561] SELinux: failed to load policy [ 185.578010][ T7582] loop4: detected capacity change from 0 to 512 [ 185.635116][ T7582] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 185.713333][ T7582] fs-verity: sha256 using implementation "sha256-avx2" [ 185.753074][ T7582] EXT4-fs warning (device loop4): ext4_begin_enable_verity:137: inode #15: comm syz.4.3158: verity is only allowed on extent-based files [ 185.838438][ T7602] EXT4-fs warning (device loop4): ext4_begin_enable_verity:137: inode #15: comm syz.4.3158: verity is only allowed on extent-based files [ 185.864643][ T7601] xt_hashlimit: size too large, truncated to 1048576 [ 185.915801][ T6613] EXT4-fs (loop4): unmounting filesystem. [ 185.944310][ T7603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3167'. [ 186.262292][ T19] smpboot: CPU 1 is now offline [ 186.567059][ T7643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3186'. [ 186.895896][ T7658] loop5: detected capacity change from 0 to 512 [ 187.125626][ T7663] loop5: detected capacity change from 0 to 8192 [ 187.307585][ T7672] fuse: Bad value for 'fd' [ 187.598702][ T28] audit: type=1400 audit(1789686698.443:608): avc: denied { connect } for pid=7686 comm="syz.5.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 188.448953][ T7726] loop5: detected capacity change from 0 to 512 [ 188.523425][ T7726] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 188.588771][ T7726] ext4 filesystem being mounted at /129/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.682751][ T6591] EXT4-fs (loop5): unmounting filesystem. [ 188.689513][ T7733] x86: Booting SMP configuration: [ 188.742461][ T7733] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 188.799711][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3230'. [ 189.032828][ T7751] loop4: detected capacity change from 0 to 1024 [ 189.088007][ T7753] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3237'. [ 189.108657][ T7751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 189.126795][ T7751] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.175795][ T7751] SELinux: failed to load policy [ 189.228176][ T6613] EXT4-fs (loop4): unmounting filesystem. [ 189.291462][ T7763] loop5: detected capacity change from 0 to 1024 [ 189.331277][ T7763] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.391274][ T7763] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 189.481369][ T6591] EXT4-fs (loop5): unmounting filesystem. [ 190.025838][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3245'. [ 190.169365][ T7783] ACPI: EC: Assuming SCI_EVT clearing on event reads [ 190.205059][ T7791] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3252'. [ 190.258410][ T7794] netlink: 272 bytes leftover after parsing attributes in process `syz.5.3253'. [ 190.631194][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3269'. [ 190.730087][ T330] tipc: Left network mode [ 190.734652][ T7845] netlink: 'syz.5.3278': attribute type 8 has an invalid length. [ 190.792088][ T28] audit: type=1400 audit(1789686701.633:609): avc: denied { append } for pid=7848 comm="syz.6.3280" name="loop8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.882205][ T7855] loop5: detected capacity change from 0 to 2048 [ 190.933943][ T7841] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.009926][ T7841] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.025037][ T7855] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 191.052423][ T7855] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.075775][ T7841] device bridge_slave_0 entered promiscuous mode [ 191.110282][ T7841] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.136696][ T7841] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.157332][ T7841] device bridge_slave_1 entered promiscuous mode [ 191.194126][ T7874] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3282: bg 0: block 345: padding at end of block bitmap is not set [ 191.233557][ T7874] EXT4-fs (loop5): Remounting filesystem read-only [ 191.269765][ T7876] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 191.276980][ T7876] syzkaller1: linktype set to 805 [ 191.412375][ T7841] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.420019][ T7841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.420976][ T6591] EXT4-fs (loop5): unmounting filesystem. [ 191.427420][ T7841] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.440221][ T7841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.577607][ T330] device bridge_slave_1 left promiscuous mode [ 191.583805][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.627270][ T330] device bridge_slave_0 left promiscuous mode [ 191.633463][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.680743][ T7891] loop6: detected capacity change from 0 to 2048 [ 191.692794][ T330] device veth1_macvtap left promiscuous mode [ 191.702831][ T330] device veth0_vlan left promiscuous mode [ 191.785095][ T7891] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 191.843426][ T7891] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.876798][ T19] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 191.948106][ T7897] loop4: detected capacity change from 0 to 512 [ 192.017690][ T7891] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 192.037387][ T7891] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 192.039013][ T7897] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 192.056723][ T7891] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 192.066793][ T19] usb 6-1: Using ep0 maxpacket: 16 [ 192.073185][ T19] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 192.093815][ T19] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 192.103352][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.112377][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.120555][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.128991][ T19] usb 6-1: Product: syz [ 192.133174][ T19] usb 6-1: Manufacturer: syz [ 192.133299][ T7897] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 192.137994][ T19] usb 6-1: SerialNumber: syz [ 192.174432][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.181622][ T28] audit: type=1400 audit(1789686703.013:610): avc: denied { rmdir } for pid=7133 comm="syz-executor" name="work" dev="loop6" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 192.182630][ T7133] EXT4-fs (loop6): unmounting filesystem. [ 192.204705][ T19] usb 6-1: config 0 descriptor?? [ 192.217340][ T19] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 192.225260][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.234231][ T19] usb 6-1: Detected FT232R [ 192.239204][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.248064][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.255125][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.284353][ T7897] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.3299: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 192.304936][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.321271][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.341378][ T6613] EXT4-fs (loop4): unmounting filesystem. [ 192.351545][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.387280][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.415836][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.426856][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 192.438500][ T7906] loop4: detected capacity change from 0 to 512 [ 192.447206][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.471396][ T7841] device veth0_vlan entered promiscuous mode [ 192.485072][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.503607][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.529799][ T7906] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.3302: dx entry: limit 0 != root limit 125 [ 192.579815][ T7841] device veth1_macvtap entered promiscuous mode [ 192.587626][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.609136][ T7906] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.3302: Corrupt directory, running e2fsck is recommended [ 192.636904][ T7906] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 192.638103][ T19] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 192.660733][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.676995][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.697048][ T7906] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.3302: corrupted in-inode xattr [ 192.715902][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.748781][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.769671][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.787652][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.810978][ T7906] EXT4-fs (loop4): Remounting filesystem read-only [ 192.811700][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.847443][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.856998][ T7906] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.3302: couldn't read orphan inode 15 (err -117) [ 192.914347][ T7906] EXT4-fs (loop4): Remounting filesystem read-only [ 192.938319][ T7906] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 193.012785][ T7906] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.3302: dx entry: limit 0 != root limit 125 [ 193.056058][ T6] usb 6-1: USB disconnect, device number 4 [ 193.072183][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 193.086751][ T7906] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.3302: Corrupt directory, running e2fsck is recommended [ 193.127413][ T6] ftdi_sio 6-1:0.0: device disconnected [ 193.152409][ T6613] EXT4-fs (loop4): unmounting filesystem. [ 193.937888][ T7948] loop4: detected capacity change from 0 to 40427 [ 193.979661][ T7948] F2FS-fs (loop4): Invalid log blocks per segment (1) [ 194.016680][ T7948] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 194.035346][ T7948] F2FS-fs (loop4): fault_type options not supported [ 194.075726][ T7948] F2FS-fs (loop4): fault_injection options not supported [ 194.085785][ T7948] F2FS-fs (loop4): Image doesn't support compression [ 194.115849][ T7948] F2FS-fs (loop4): invalid crc value [ 194.137491][ T7948] F2FS-fs (loop4): Found nat_bits in checkpoint [ 194.171125][ T7972] loop6: detected capacity change from 0 to 40427 [ 194.202822][ T7972] F2FS-fs (loop6): invalid crc value [ 194.247626][ T7972] F2FS-fs (loop6): Found nat_bits in checkpoint [ 194.274640][ T7948] F2FS-fs (loop4): Start checkpoint disabled! [ 194.314262][ T7948] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 194.331765][ T7948] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 194.357715][ T7948] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 194.380211][ T7972] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 194.512998][ T28] audit: type=1400 audit(1789686705.353:611): avc: denied { mounton } for pid=7947 comm="syz.4.3321" path="/131/file0/file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 194.553175][ T8007] f2fs_ckpt-7:6: attempt to access beyond end of device [ 194.553175][ T8007] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 194.553617][ T6613] F2FS-fs (loop4): access invalid blkaddr:4043309056 [ 194.595569][ T6613] CPU: 0 PID: 6613 Comm: syz-executor Tainted: G W syzkaller #0 [ 194.604742][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.615263][ T6613] Call Trace: [ 194.618558][ T6613] [ 194.621774][ T6613] __dump_stack+0x21/0x24 [ 194.626306][ T6613] dump_stack_lvl+0x110/0x170 [ 194.631193][ T6613] ? __cfi_dump_stack_lvl+0x8/0x8 [ 194.636427][ T6613] dump_stack+0x15/0x24 [ 194.640780][ T6613] __f2fs_is_valid_blkaddr+0xd2e/0x15a0 [ 194.646698][ T6613] f2fs_is_valid_blkaddr+0x23/0x30 [ 194.652189][ T6613] f2fs_map_blocks+0xcc1/0x4060 [ 194.657681][ T6613] ? kasan_save_alloc_info+0x1f/0x30 [ 194.663571][ T6613] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 194.669294][ T6613] ? __cfi_mempool_alloc+0x10/0x10 [ 194.675266][ T6613] ? bio_associate_blkg_from_css+0x960/0xb10 [ 194.681279][ T6613] ? xas_start+0x31d/0x3e0 [ 194.685704][ T6613] ? xa_load+0xad/0xd0 [ 194.689866][ T6613] f2fs_mpage_readpages+0xa46/0x1b20 [ 194.695163][ T6613] ? dquot_release_reservation_block+0xa0/0xa0 [ 194.701410][ T6613] ? cgroup_rstat_updated+0xf0/0x360 [ 194.706820][ T6613] ? xas_nomem+0x6b/0x1f0 [ 194.711163][ T6613] f2fs_readahead+0xfc/0x240 [ 194.715763][ T6613] ? __cfi_f2fs_readahead+0x10/0x10 [ 194.721176][ T6613] read_pages+0x1bf/0xe10 [ 194.725793][ T6613] ? page_cache_ra_unbounded+0x850/0x850 [ 194.731431][ T6613] ? filemap_add_folio+0x113/0x260 [ 194.736540][ T6613] page_cache_ra_unbounded+0x6ff/0x850 [ 194.742355][ T6613] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 194.748685][ T6613] ? is_bpf_text_address+0x177/0x190 [ 194.753978][ T6613] page_cache_ra_order+0xb0c/0xe50 [ 194.759220][ T6613] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 194.765465][ T6613] ? avc_has_perm_noaudit+0x390/0x490 [ 194.771110][ T6613] ? __cfi_page_cache_ra_order+0x10/0x10 [ 194.776754][ T6613] ondemand_readahead+0x821/0xda0 [ 194.781785][ T6613] ? __x64_sys_openat+0x136/0x160 [ 194.787011][ T6613] ? page_cache_sync_ra+0x4a0/0x4a0 [ 194.792625][ T6613] page_cache_sync_ra+0x427/0x4a0 [ 194.797749][ T6613] f2fs_readdir+0x473/0x990 [ 194.802259][ T6613] ? cgroup_rstat_updated+0xf0/0x360 [ 194.807548][ T6613] ? __cfi_f2fs_readdir+0x10/0x10 [ 194.812616][ T6613] ? handle_mm_fault+0x18d8/0x26b0 [ 194.817737][ T6613] ? down_read_killable+0xbc/0x110 [ 194.822936][ T6613] ? __cfi_down_read_killable+0x10/0x10 [ 194.828672][ T6613] ? security_file_permission+0x94/0xb0 [ 194.834313][ T6613] iterate_dir+0x26d/0x610 [ 194.838819][ T6613] ? __cfi_f2fs_readdir+0x10/0x10 [ 194.843862][ T6613] __se_sys_getdents64+0xf2/0x250 [ 194.848907][ T6613] ? __x64_sys_getdents64+0x90/0x90 [ 194.854127][ T6613] ? __cfi_filldir64+0x10/0x10 [ 194.859090][ T6613] ? do_user_addr_fault+0x9a5/0x1030 [ 194.864477][ T6613] ? debug_smp_processor_id+0x17/0x20 [ 194.869855][ T6613] __x64_sys_getdents64+0x7b/0x90 [ 194.875148][ T6613] x64_sys_call+0x15c/0x9a0 [ 194.879748][ T6613] do_syscall_64+0x4c/0xa0 [ 194.884176][ T6613] ? clear_bhb_loop+0x30/0x80 [ 194.888855][ T6613] ? clear_bhb_loop+0x30/0x80 [ 194.894325][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.900327][ T6613] RIP: 0033:0x7fc928dc6af3 [ 194.904742][ T6613] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 194.924869][ T6613] RSP: 002b:00007fff9e572e58 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 194.933290][ T6613] RAX: ffffffffffffffda RBX: 0000555581593910 RCX: 00007fc928dc6af3 [ 194.941275][ T6613] RDX: 0000000000008000 RSI: 0000555581593940 RDI: 0000000000000005 [ 194.949249][ T6613] RBP: 0000555581593940 R08: 00007fc928ff2e20 R09: 0000000000000001 [ 194.957406][ T6613] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555581593914 [ 194.965466][ T6613] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007fff9e575100 [ 194.973451][ T6613] [ 194.980016][ T7972] syz.6.3331: attempt to access beyond end of device [ 194.980016][ T7972] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 195.017303][ T6613] syz-executor: attempt to access beyond end of device [ 195.017303][ T6613] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 195.038139][ T7972] syz.6.3331: attempt to access beyond end of device [ 195.038139][ T7972] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 195.052251][ T6613] syz-executor: attempt to access beyond end of device [ 195.052251][ T6613] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 195.137737][ T8] kworker/u4:0: attempt to access beyond end of device [ 195.137737][ T8] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 195.227841][ T28] audit: type=1400 audit(1789686706.073:612): avc: denied { getopt } for pid=8023 comm="syz.1.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 195.406812][ T8031] tipc: Started in network mode [ 195.411828][ T8031] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 195.434956][ T294] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 195.444878][ T8031] tipc: Enabled bearer , priority 0 [ 195.451622][ T294] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 195.546105][ T8035] fido_id[8035]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 195.552628][ T8039] device bridge_slave_0 left promiscuous mode [ 195.576787][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.630454][ T8039] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 195.881885][ T7996] loop5: detected capacity change from 0 to 131072 [ 195.900533][ T7996] F2FS-fs (loop5): invalid crc value [ 195.907474][ T8054] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3368'. [ 195.954847][ T7996] F2FS-fs (loop5): Found nat_bits in checkpoint [ 196.107372][ T7996] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 196.342195][ T8088] loop2: detected capacity change from 0 to 128 [ 196.386306][ T8090] sch_tbf: peakrate 64 is lower than or equals to rate 17178318408943932896 ! [ 196.433187][ T330] device bridge_slave_1 left promiscuous mode [ 196.442738][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.488498][ T330] device bridge_slave_0 left promiscuous mode [ 196.495121][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.577233][ T330] device veth1_macvtap left promiscuous mode [ 196.583538][ T330] device veth0_vlan left promiscuous mode [ 196.859340][ T294] tipc: Node number set to 43690 [ 197.034569][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.041692][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.052826][ T8095] device bridge_slave_0 entered promiscuous mode [ 197.061820][ T8095] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.071564][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.079713][ T8095] device bridge_slave_1 entered promiscuous mode [ 197.300218][ T28] audit: type=1400 audit(1789686708.137:613): avc: denied { map } for pid=8140 comm="syz.5.3405" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.358814][ T8095] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.365922][ T8095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.373598][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.380654][ T8095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.462170][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.481919][ T1403] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.507270][ T1403] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.512875][ T8158] loop5: detected capacity change from 0 to 512 [ 197.554937][ T8158] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.564189][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.582896][ T1403] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.590011][ T1403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.637764][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.646231][ T1403] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.653421][ T1403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.661826][ T8158] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 197.670903][ T8158] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.688653][ T28] audit: type=1400 audit(1789686708.527:614): avc: denied { create } for pid=8157 comm="syz.5.3413" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 197.712240][ T8158] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3413: bg 0: block 217: padding at end of block bitmap is not set [ 197.731262][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.749763][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.767311][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.793672][ T8095] device veth0_vlan entered promiscuous mode [ 197.811025][ T8158] EXT4-fs (loop5): Remounting filesystem read-only [ 197.837069][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.848111][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.875983][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.895198][ T6591] EXT4-fs (loop5): unmounting filesystem. [ 197.904317][ T8172] program syz.6.3417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.922043][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.937158][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.990784][ T8095] device veth1_macvtap entered promiscuous mode [ 198.014844][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.027839][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.070372][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.107811][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.116581][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.358257][ T8209] syz.8.3434[8209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.358360][ T8209] syz.8.3434[8209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.726154][ T8229] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8229 comm=syz.5.3441 [ 198.971445][ T8249] tipc: New replicast peer: 127.0.0.1 [ 198.996846][ T8249] tipc: Enabled bearer , priority 10 [ 199.014052][ T8249] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0003 [ 199.174722][ T8271] xt_hashlimit: size too large, truncated to 1048576 [ 199.186759][ T6] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 199.376715][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 199.384688][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.432950][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.456787][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 199.521021][ T6] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 199.563272][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.580327][ T6] usb 6-1: config 0 descriptor?? [ 199.883699][ T8307] loop2: detected capacity change from 0 to 1024 [ 199.933767][ T8307] EXT4-fs: Ignoring removed orlov option [ 199.963577][ T8307] EXT4-fs: Ignoring removed orlov option [ 199.984086][ T8307] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 200.003817][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001A/input/input38 [ 200.031048][ T8307] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 200.052762][ T8307] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c01c, mo2=0002] [ 200.082104][ T8307] System zones: 0-1, 3-36 [ 200.087941][ T8307] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 200.107785][ T6] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 200.120274][ T28] audit: type=1400 audit(1789686710.947:615): avc: denied { override_creds } for pid=8316 comm="syz.8.3484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 200.169170][ T8307] incfs: ino conflict with backing FS 2 [ 200.212341][ T294] usb 6-1: USB disconnect, device number 5 [ 200.239424][ T28] audit: type=1400 audit(1789686711.007:616): avc: denied { mounton } for pid=8306 comm="syz.2.3478" path="/53/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 200.270061][ T8323] fido_id[8323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 200.304588][ T7841] tipc: Resetting bearer [ 200.322377][ T7841] tipc: Disabling bearer [ 200.388266][ T1403] tipc: Disabling bearer [ 200.394233][ T1403] tipc: Left network mode [ 200.394580][ T7841] EXT4-fs (loop2): unmounting filesystem. [ 200.666692][ T19] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 200.785719][ T8287] loop6: detected capacity change from 0 to 131072 [ 200.800911][ T8334] loop5: detected capacity change from 0 to 512 [ 200.827144][ T8287] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945) [ 200.845880][ T8287] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 200.855542][ T8334] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.3492: inode has both inline data and extents flags [ 200.858112][ T19] usb 9-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 200.879156][ T8287] F2FS-fs (loop6): invalid crc value [ 200.884617][ T8334] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.3492: couldn't read orphan inode 15 (err -117) [ 200.906719][ T19] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.920762][ T19] usb 9-1: config 0 descriptor?? [ 200.966668][ T8334] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 200.998459][ T1403] device bridge_slave_1 left promiscuous mode [ 201.004721][ T1403] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.017799][ T8287] F2FS-fs (loop6): Found nat_bits in checkpoint [ 201.036835][ T1403] device veth1_macvtap left promiscuous mode [ 201.043009][ T1403] device veth0_vlan left promiscuous mode [ 201.169185][ T6591] EXT4-fs (loop5): unmounting filesystem. [ 201.186981][ T8287] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 201.194323][ T8287] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 201.246470][ T28] audit: type=1400 audit(1789686712.077:617): avc: denied { write } for pid=8344 comm="syz.5.3493" name="usb_gadget" dev="configfs" ino=13937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 201.337273][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x2 [ 201.344946][ T28] audit: type=1400 audit(1789686712.077:618): avc: denied { add_name } for pid=8344 comm="syz.5.3493" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 201.365869][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x1 [ 201.388770][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.406360][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.413928][ T28] audit: type=1400 audit(1789686712.077:619): avc: denied { create } for pid=8344 comm="syz.5.3493" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 201.444061][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.451985][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.469230][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.469259][ T8332] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.486798][ T28] audit: type=1400 audit(1789686712.117:620): avc: denied { remove_name } for pid=8344 comm="syz.5.3493" name="g1" dev="configfs" ino=49797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 201.510428][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.522334][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.542564][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.550989][ T8332] device bridge_slave_0 entered promiscuous mode [ 201.566691][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.576126][ T8332] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.583594][ T28] audit: type=1400 audit(1789686712.117:621): avc: denied { rmdir } for pid=8344 comm="syz.5.3493" name="g1" dev="configfs" ino=49797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 201.616443][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.623861][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.631377][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.639293][ T8332] device bridge_slave_1 entered promiscuous mode [ 201.645766][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.686245][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.699541][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.726687][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.761896][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.779514][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.806276][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.827328][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.861664][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.890025][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.919959][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.939774][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.948451][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.956871][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 201.964490][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.982191][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 202.021751][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.037027][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 202.047150][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.075814][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 202.083583][ T1403] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.090735][ T1403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.098419][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 202.105786][ T19] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 202.126760][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.135197][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.144486][ T19] microsoft 0003:045E:009D.001B: hidraw0: USB HID v0.c4 Device [HID 045e:009d] on usb-dummy_hcd.8-1/input0 [ 202.166774][ T19] microsoft 0003:045E:009D.001B: no inputs found [ 202.173167][ T19] microsoft 0003:045E:009D.001B: could not initialize ff, continuing anyway [ 202.182330][ T1403] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.189663][ T1403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.216854][ T19] usb 9-1: USB disconnect, device number 4 [ 202.223437][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.247013][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.262511][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.314906][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.319573][ T8367] fido_id[8367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 202.369635][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.387040][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.416819][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.431321][ T8375] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3506'. [ 202.457676][ T8332] device veth0_vlan entered promiscuous mode [ 202.496188][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.528793][ T8332] device veth1_macvtap entered promiscuous mode [ 202.554870][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.594679][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.623384][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.782744][ T8384] SELinux: failed to load policy [ 202.864844][ T8396] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 203.314490][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3537'. [ 203.500865][ T8457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.658349][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3549'. [ 204.028570][ T28] audit: type=1326 audit(1789686714.867:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.5.3559" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929759e159 code=0x7ffc0000 [ 204.156712][ T28] audit: type=1326 audit(1789686714.867:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.5.3559" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929759e159 code=0x7ffc0000 [ 204.243060][ T28] audit: type=1326 audit(1789686714.867:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.5.3559" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f929759e159 code=0x7ffc0000 [ 204.610413][ T8519] loop6: detected capacity change from 0 to 256 [ 204.937255][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3577'. [ 205.055292][ T8543] overlayfs: failed to clone upperpath [ 205.080762][ T8527] loop5: detected capacity change from 0 to 40427 [ 205.097914][ T8527] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 205.110029][ T8527] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 205.124225][ T8527] F2FS-fs (loop5): invalid crc value [ 205.167536][ T8527] F2FS-fs (loop5): Found nat_bits in checkpoint [ 205.182767][ T8557] syz.1.3587 uses obsolete (PF_INET,SOCK_PACKET) [ 205.209487][ T8559] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3588'. [ 205.268277][ T8527] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 205.282335][ T8527] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 205.529223][ T8587] tipc: Started in network mode [ 205.544481][ T8587] tipc: Node identity ac14142f, cluster identity 4711 [ 205.556778][ T8587] tipc: New replicast peer: 127.0.0.1 [ 205.562544][ T8587] tipc: Enabled bearer , priority 10 [ 205.586787][ T8588] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0006 [ 205.676712][ T6] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 205.866689][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 205.872958][ T6] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 205.893617][ T6] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 205.926013][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.950232][ T6] usb 7-1: Product: syz [ 205.968083][ T6] usb 7-1: Manufacturer: syz [ 205.973949][ T8606] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8606 comm=syz.1.3609 [ 205.986715][ T6] usb 7-1: SerialNumber: syz [ 206.001205][ T6] usb 7-1: config 0 descriptor?? [ 206.017719][ T6] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 206.025865][ T6] usb 7-1: Detected FT232R [ 206.031754][ T8606] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8606 comm=syz.1.3609 [ 206.220106][ T6] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 206.371178][ T8636] loop5: detected capacity change from 0 to 4096 [ 206.417927][ T8636] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 206.436379][ T8636] EXT4-fs (loop5): Test dummy encryption mode enabled [ 206.453849][ T8636] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 206.458716][ T6] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 206.462343][ T8636] System zones: 0-5 [ 206.485372][ T8636] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 206.628221][ T6591] EXT4-fs (loop5): unmounting filesystem. [ 206.683101][ T39] usb 7-1: USB disconnect, device number 12 [ 206.697100][ T6889] tipc: Node number set to 2886997039 [ 206.709228][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 206.739596][ T39] ftdi_sio 7-1:0.0: device disconnected [ 206.758915][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3631'. [ 206.800936][ T8659] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3634'. [ 207.017148][ T8679] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 207.036834][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 207.036851][ T28] audit: type=1400 audit(1789686717.877:634): avc: denied { relabelto } for pid=8678 comm="syz.1.3644" name="769" dev="tmpfs" ino=4020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 207.100560][ T28] audit: type=1400 audit(1789686717.917:635): avc: denied { associate } for pid=8678 comm="syz.1.3644" name="769" dev="tmpfs" ino=4020 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 207.129325][ T28] audit: type=1400 audit(1789686717.917:636): avc: denied { write } for pid=8678 comm="syz.1.3644" name="769" dev="tmpfs" ino=4020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 207.166711][ T6889] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 207.189783][ T28] audit: type=1400 audit(1789686717.917:637): avc: denied { add_name } for pid=8678 comm="syz.1.3644" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 207.221134][ T28] audit: type=1400 audit(1789686717.917:638): avc: denied { associate } for pid=8678 comm="syz.1.3644" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 207.285495][ T28] audit: type=1400 audit(1789686717.927:639): avc: denied { remove_name } for pid=288 comm="syz-executor" name="file0" dev="tmpfs" ino=4026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 207.356762][ T28] audit: type=1400 audit(1789686717.927:640): avc: denied { rmdir } for pid=288 comm="syz-executor" name="769" dev="tmpfs" ino=4020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 207.359090][ T6889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.457027][ T6889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.477248][ T6889] usb 6-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 207.506663][ T6889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.539587][ T6889] usb 6-1: config 0 descriptor?? [ 207.953437][ T6889] hid-generic 0003:0925:8066.001C: unbalanced collection at end of report description [ 207.972393][ T8704] loop6: detected capacity change from 0 to 40427 [ 207.986845][ T6889] hid-generic: probe of 0003:0925:8066.001C failed with error -22 [ 208.005599][ T8704] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 208.016711][ T8704] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 208.045911][ T8704] F2FS-fs (loop6): invalid crc value [ 208.076685][ T8704] F2FS-fs (loop6): Found nat_bits in checkpoint [ 208.177267][ T8704] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 208.184538][ T8704] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 208.241994][ T39] usb 6-1: USB disconnect, device number 6 [ 208.347576][ T7133] syz-executor: attempt to access beyond end of device [ 208.347576][ T7133] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 208.382205][ T1403] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 208.397067][ T1403] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 208.983118][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3668'. [ 209.308824][ T8733] loop6: detected capacity change from 0 to 40427 [ 209.332993][ T8733] F2FS-fs (loop6): invalid crc value [ 209.366762][ T8733] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 209.465921][ T8733] F2FS-fs (loop6): Start checkpoint disabled! [ 209.490196][ T8733] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 209.529172][ T8733] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 209.656707][ T8733] F2FS-fs (loop6): f2fs_enable_checkpoint() starts, meta: 0, node: 0, data: 0 [ 209.736668][ T8733] F2FS-fs (loop6): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3 [ 209.777234][ T8733] F2FS-fs (loop6): f2fs_enable_checkpoint() finishes, writeback:65, sync:0 [ 210.589414][ T28] audit: type=1400 audit(1789686721.427:641): avc: denied { append } for pid=8809 comm="syz.6.3701" name="file0" dev="tmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 210.936829][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 210.945475][ T330] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 211.095864][ T8827] WARNING! power/level is deprecated; use power/control instead [ 212.986691][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 212.986861][ T336] Bluetooth: hci0: command 0x1003 tx timeout [ 213.057886][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3720'. [ 213.134062][ T8852] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3720'. [ 213.226233][ T8858] xt_hashlimit: size too large, truncated to 1048576 [ 213.367922][ T28] audit: type=1400 audit(1789686724.207:642): avc: denied { listen } for pid=8864 comm="syz.8.3726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 213.469914][ T28] audit: type=1400 audit(1789686724.227:643): avc: denied { accept } for pid=8864 comm="syz.8.3726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.363112][ T8904] ip_tables: iptables: counters copy to user failed while replacing table [ 214.630923][ T8918] netlink: 'syz.1.3749': attribute type 298 has an invalid length. [ 215.011229][ T8914] loop6: detected capacity change from 0 to 40427 [ 215.060119][ T8914] F2FS-fs (loop6): invalid crc value [ 215.095407][ T8914] F2FS-fs (loop6): Found nat_bits in checkpoint [ 215.237946][ T8914] F2FS-fs (loop6): Start checkpoint disabled! [ 215.277222][ T8914] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 215.304943][ T8914] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 218.681827][ T8938] loop5: detected capacity change from 0 to 256 [ 218.737579][ T8938] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.757005][ T310] kworker/u4:3: attempt to access beyond end of device [ 218.757005][ T310] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 218.856737][ T8951] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 218.896662][ T8951] FAT-fs (loop5): Filesystem has been set read-only [ 218.936696][ T8951] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 219.003248][ T8956] loop6: detected capacity change from 0 to 2048 [ 219.097629][ T8956] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 219.126790][ T8956] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.257509][ T8956] fs-verity (loop6, inode 15): fs-verity keyring is empty, rejecting signed file! [ 219.310893][ T7133] EXT4-fs (loop6): unmounting filesystem. [ 219.351146][ T8976] loop5: detected capacity change from 0 to 512 [ 219.399255][ T8976] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 219.433981][ T8976] EXT4-fs (loop5): 1 truncate cleaned up [ 219.439905][ T8976] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 219.468138][ T28] audit: type=1400 audit(1789686730.307:644): avc: denied { create } for pid=8975 comm="syz.5.3775" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 219.499039][ T6591] EXT4-fs (loop5): unmounting filesystem. [ 220.008418][ T28] audit: type=1400 audit(1789686730.847:645): avc: denied { write } for pid=9003 comm="syz.7.3785" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 220.052331][ T9007] loop5: detected capacity change from 0 to 16 [ 220.076693][ T9007] erofs: (device loop5): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 220.092632][ T9007] erofs: (device loop5): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 220.144389][ T9015] loop6: detected capacity change from 0 to 512 [ 220.157482][ T9007] erofs: (device loop5): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 220.176895][ T9007] erofs: (device loop5): mounted with root inode @ nid 36. [ 220.193613][ T9015] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 220.278238][ T9015] EXT4-fs (loop6): orphan cleanup on readonly fs [ 220.295443][ T9015] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.3789: inode #15: comm syz.6.3789: iget: illegal inode # [ 220.346879][ T9015] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.3789: couldn't read orphan inode 15 (err -117) [ 220.436907][ T9015] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 220.475472][ T9015] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 220.511512][ T9015] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 220.558418][ T7133] EXT4-fs (loop6): unmounting filesystem. [ 220.965531][ T28] audit: type=1400 audit(1789686731.797:646): avc: denied { map } for pid=9058 comm="syz.5.3808" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 221.009102][ T28] audit: type=1400 audit(1789686731.827:647): avc: denied { getopt } for pid=9058 comm="syz.5.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 221.031827][ T9061] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.045286][ T28] audit: type=1400 audit(1789686731.877:648): avc: denied { setopt } for pid=9062 comm="syz.5.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 221.046064][ T9061] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.350490][ T9081] loop6: detected capacity change from 0 to 512 [ 221.489416][ T9081] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 221.531224][ T9081] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.552460][ T28] audit: type=1326 audit(1789686732.387:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.6.3819" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c259e159 code=0x7ffc0000 [ 221.579548][ T7133] EXT4-fs (loop6): unmounting filesystem. [ 221.616127][ T9101] loop6: detected capacity change from 0 to 512 [ 221.629466][ T28] audit: type=1326 audit(1789686732.387:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.6.3819" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c259e159 code=0x7ffc0000 [ 221.655818][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 221.663583][ T9100] Bluetooth: hci0: Frame reassembly failed (-84) [ 221.677028][ T9101] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 221.696443][ T9076] loop5: detected capacity change from 0 to 40427 [ 221.708508][ T28] audit: type=1326 audit(1789686732.387:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.6.3819" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c259e159 code=0x7ffc0000 [ 221.733836][ T5640] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.760702][ T9076] F2FS-fs (loop5): invalid crc value [ 221.789767][ T9107] loop6: detected capacity change from 0 to 512 [ 221.793060][ T9108] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3829'. [ 221.808862][ T9076] F2FS-fs (loop5): Found nat_bits in checkpoint [ 221.816666][ T28] audit: type=1326 audit(1789686732.387:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.6.3819" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f22c259e159 code=0x7ffc0000 [ 221.827679][ T9107] EXT4-fs: Ignoring removed oldalloc option [ 221.869384][ T28] audit: type=1326 audit(1789686732.387:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.6.3819" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c259e159 code=0x7ffc0000 [ 221.939304][ T9076] F2FS-fs (loop5): Start checkpoint disabled! [ 221.958280][ T9076] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 221.976156][ T9107] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.3830: bad orphan inode 15 [ 222.006706][ T9107] ext4_test_bit(bit=14, block=5) = 0 [ 222.012060][ T9107] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 222.020758][ T9076] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 222.200135][ T9107] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 222.211365][ T9076] syz.5.3816: attempt to access beyond end of device [ 222.211365][ T9076] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 222.267230][ T7133] EXT4-fs (loop6): unmounting filesystem. [ 222.347290][ T10] kworker/u4:1: attempt to access beyond end of device [ 222.347290][ T10] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 222.460248][ T9130] xt_hashlimit: size too large, truncated to 1048576 [ 222.515605][ T9132] xt_connbytes: Forcing CT accounting to be enabled [ 222.737142][ T9153] loop5: detected capacity change from 0 to 2048 [ 222.887367][ T9153] loop5: p3 < > p4 < > [ 222.892136][ T9153] loop5: partition table partially beyond EOD, truncated [ 222.910107][ T9163] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3855'. [ 222.919894][ T9153] loop5: p3 start 4284289 is beyond EOD, truncated [ 222.950643][ T102] loop5: p3 < > p4 < > [ 222.955225][ T102] loop5: partition table partially beyond EOD, truncated [ 222.972915][ T102] loop5: p3 start 4284289 is beyond EOD, truncated [ 223.133862][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3861'. [ 223.304092][ T9197] input: syz0 as /devices/virtual/input/input39 [ 223.590144][ T9207] netlink: 'syz.7.3875': attribute type 12 has an invalid length. [ 223.627026][ T9207] netlink: 'syz.7.3875': attribute type 29 has an invalid length. [ 223.665598][ T9207] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3875'. [ 223.681617][ T9193] loop6: detected capacity change from 0 to 40427 [ 223.696692][ T9207] netlink: 'syz.7.3875': attribute type 1 has an invalid length. [ 223.715297][ T9193] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 223.723223][ T335] Bluetooth: hci0: command 0x1003 tx timeout [ 223.729493][ T8849] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 223.742703][ T9193] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 223.751871][ T9207] netlink: 'syz.7.3875': attribute type 2 has an invalid length. [ 223.761839][ T9193] F2FS-fs (loop6): invalid crc value [ 223.846901][ T9193] F2FS-fs (loop6): Found nat_bits in checkpoint [ 223.973238][ T9193] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 223.996969][ T9193] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 224.013540][ T9226] netlink: 'syz.1.3883': attribute type 3 has an invalid length. [ 224.029851][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3883'. [ 224.156265][ T9234] MTRR 1 not used [ 224.180911][ T9236] netlink: 'syz.8.3885': attribute type 11 has an invalid length. [ 224.221089][ T9236] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3885'. [ 224.344995][ T9245] xt_hashlimit: size too large, truncated to 1048576 [ 224.780665][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 224.780683][ T28] audit: type=1400 audit(2000000002.230:656): avc: denied { nlmsg_read } for pid=9265 comm="syz.6.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 224.817913][ T9266] netlink: 172 bytes leftover after parsing attributes in process `syz.6.3901'. [ 224.833898][ T9268] loop5: detected capacity change from 0 to 1024 [ 224.905333][ T9268] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.3902: lblock 2 mapped to illegal pblock 2 (length 1) [ 224.927147][ T9268] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 224.935391][ T9268] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 48: comm syz.5.3902: lblock 0 mapped to illegal pblock 48 (length 1) [ 224.984353][ T9268] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 225.018284][ T9268] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.3902: Failed to acquire dquot type 0 [ 225.066639][ T9268] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 225.105665][ T9268] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.3902: mark_inode_dirty error [ 225.128174][ T9282] overlayfs: failed to clone upperpath [ 225.139130][ T9268] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 225.159867][ T9268] EXT4-fs (loop5): 1 orphan inode deleted [ 225.171260][ T9268] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 225.180168][ T43] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 225.202459][ T43] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 225.227406][ T43] EXT4-fs error (device loop5): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 0 [ 225.240746][ T9268] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm syz.5.3902: lblock 1 mapped to illegal pblock 1 (length 1) [ 225.264895][ T9268] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 1 [ 225.280663][ T9268] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 16877 [ 225.285898][ T9291] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3912'. [ 225.297239][ T9268] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.3902: Failed to acquire dquot type 0 [ 225.341893][ T6591] EXT4-fs (loop5): unmounting filesystem. [ 225.353421][ T43] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 225.375635][ T43] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 225.400329][ T28] audit: type=1326 audit(2000000002.850:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.1.3915" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62519e159 code=0x7ffc0000 [ 225.425693][ T43] EXT4-fs error (device loop5): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 0 [ 225.456701][ T28] audit: type=1326 audit(2000000002.850:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.1.3915" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62519e159 code=0x7ffc0000 [ 225.456792][ T6591] EXT4-fs error (device loop5): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 225.511362][ T28] audit: type=1326 audit(2000000002.850:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.1.3915" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62519e159 code=0x7ffc0000 [ 225.536507][ T6591] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 225.550663][ T6591] EXT4-fs error (device loop5): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 225.639797][ T9309] loop5: detected capacity change from 0 to 256 [ 225.891651][ T9317] ªªªªªª: renamed from vlan0 [ 225.972765][ T9325] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3927'. [ 226.086282][ T9336] loop5: detected capacity change from 0 to 256 [ 226.107366][ T9336] FAT-fs (loop5): codepage cp73 not found [ 226.221422][ T9340] input: syz1 as /devices/virtual/input/input40 [ 226.226663][ T295] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 226.417722][ T295] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 226.440590][ T295] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.458307][ T295] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 226.486015][ T295] usb 7-1: SerialNumber: syz [ 227.106813][ T295] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 227.213453][ T9352] input: syz0 as /devices/virtual/input/input41 [ 227.268001][ T9351] udevd[9351]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Exec format error [ 227.313861][ T320] usb 7-1: USB disconnect, device number 13 [ 227.322888][ T320] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 227.912604][ T9359] ªªªªªª: renamed from vlan0 [ 228.107114][ T9381] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3954'. [ 228.140815][ T9381] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.177464][ T9381] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 228.236693][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.400388][ T9396] loop5: detected capacity change from 0 to 8192 [ 229.065315][ T9435] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3976'. [ 229.373518][ T9450] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3985'. [ 229.410303][ T9450] device ip6gre1 entered promiscuous mode [ 229.681295][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3992'. [ 229.862766][ T9477] input: syz1 as /devices/virtual/input/input42 [ 230.386699][ T39] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 230.578340][ T39] usb 6-1: unable to get BOS descriptor or descriptor too short [ 230.607071][ T39] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.639536][ T39] usb 6-1: string descriptor 0 read error: -22 [ 230.645805][ T39] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 230.695585][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.724965][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 230.724984][ T28] audit: type=1400 audit(2000000008.170:718): avc: denied { read write } for pid=9526 comm="syz.1.4020" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 230.826957][ T28] audit: type=1400 audit(2000000008.210:719): avc: denied { open } for pid=9526 comm="syz.1.4020" path="/901/proc/kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 231.149232][ T9543] zram0: detected capacity change from 8 to 0 [ 231.566810][ T39] usb 6-1: USB disconnect, device number 7 [ 232.369459][ T9588] SELinux: failed to load policy [ 232.453122][ T9553] loop6: detected capacity change from 0 to 131072 [ 232.466439][ T9553] F2FS-fs (loop6): Invalid segment/section count (31, 24 x 150994945) [ 232.485143][ T9553] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 232.497808][ T9553] F2FS-fs (loop6): invalid crc value [ 232.529261][ T9553] F2FS-fs (loop6): Found nat_bits in checkpoint [ 232.626922][ T9553] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 232.634028][ T9553] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 233.293115][ T9606] loop6: detected capacity change from 0 to 512 [ 233.370919][ T9606] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 233.417514][ T9606] EXT4-fs (loop6): 1 truncate cleaned up [ 233.423239][ T9606] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 233.456689][ T19] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 233.519071][ T7133] EXT4-fs (loop6): unmounting filesystem. [ 233.569571][ T9614] input: syz0 as /devices/virtual/input/input43 [ 233.657756][ T19] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 233.687373][ T19] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.713977][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 233.738211][ T19] usb 6-1: SerialNumber: syz [ 234.128977][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4063'. [ 234.362857][ T19] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 234.460041][ T9633] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4066'. [ 234.570460][ T19] usb 6-1: USB disconnect, device number 8 [ 234.627029][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 234.629201][ T19] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 234.653410][ T9638] device hsr0 entered promiscuous mode [ 234.770133][ T9649] overlayfs: failed to clone upperpath [ 234.853160][ T9651] SELinux: failed to load policy [ 235.113415][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 235.136032][ T310] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 235.267731][ T9684] loop6: detected capacity change from 0 to 256 [ 235.294791][ T9684] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 235.328039][ T28] audit: type=1400 audit(2000000012.780:720): avc: denied { mount } for pid=9683 comm="syz.6.4089" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 235.386643][ T28] audit: type=1400 audit(2000000012.800:721): avc: denied { unmount } for pid=7133 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 235.474127][ T28] audit: type=1400 audit(2000000012.840:722): avc: denied { mount } for pid=9686 comm="syz.6.4090" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 236.627299][ T9685] loop5: detected capacity change from 0 to 131072 [ 236.664746][ T9685] F2FS-fs (loop5): invalid crc value [ 236.715812][ T9685] F2FS-fs (loop5): Found nat_bits in checkpoint [ 236.785858][ T9685] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 236.839110][ T9691] loop6: detected capacity change from 0 to 131072 [ 236.848167][ T9685] F2FS-fs (loop5): Corrupted max_depth of 3: 16842753 [ 236.855445][ T28] audit: type=1400 audit(2000000014.300:723): avc: denied { watch } for pid=9682 comm="syz.5.4088" path="/260/file1" dev="loop5" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.887337][ T9691] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945) [ 236.892812][ T9685] F2FS-fs (loop5): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 236.906732][ T9691] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 236.916964][ T9691] F2FS-fs (loop6): invalid crc value [ 236.923144][ T28] audit: type=1400 audit(2000000014.340:724): avc: denied { setattr } for pid=9682 comm="syz.5.4088" name="file1" dev="loop5" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.997250][ T9691] F2FS-fs (loop6): Found nat_bits in checkpoint [ 237.075303][ T28] audit: type=1400 audit(2000000014.520:725): avc: denied { getopt } for pid=9703 comm="syz.1.4096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.103082][ T9691] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 237.126686][ T9691] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 237.146676][ T335] Bluetooth: hci0: command 0x1003 tx timeout [ 237.152823][ T8849] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 237.243447][ T28] audit: type=1400 audit(2000000014.690:726): avc: denied { read write } for pid=9690 comm="syz.6.4092" name="file1" dev="loop6" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 237.287130][ T28] audit: type=1400 audit(2000000014.690:727): avc: denied { open } for pid=9690 comm="syz.6.4092" path="/213/file1/file1" dev="loop6" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 237.298551][ T9691] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix. [ 237.330667][ T9715] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4101'. [ 237.434176][ T6889] hid-generic 0000:0000:0001.001D: unknown main item tag 0x0 [ 237.449963][ T6889] hid-generic 0000:0000:0001.001D: unknown main item tag 0x0 [ 237.466717][ T6889] hid-generic 0000:0000:0001.001D: unknown main item tag 0x0 [ 237.485175][ T6889] hid-generic 0000:0000:0001.001D: unknown main item tag 0x0 [ 237.503095][ T6889] hid-generic 0000:0000:0001.001D: unknown main item tag 0x0 [ 237.516719][ T6889] hid-generic 0000:0000:0001.001D: unknown main item tag 0x0 [ 237.536683][ T6889] hid-generic 0000:0000:0001.001D: unknown main item tag 0x0 [ 237.555827][ T6889] hid-generic 0000:0000:0001.001D: unknown main item tag 0x0 [ 237.578682][ T6889] hid-generic 0000:0000:0001.001D: hidraw0: HID v0.10 Device [syz0] on syz1 [ 237.657141][ T9737] udevd[9737]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 237.872128][ T9751] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4117'. [ 237.999136][ T9760] fuse: Bad value for 'fd' [ 238.241625][ T9786] netlink: 'syz.5.4132': attribute type 2 has an invalid length. [ 238.279240][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4132'. [ 238.389153][ T9800] netlink: 292 bytes leftover after parsing attributes in process `syz.6.4138'. [ 238.423445][ T9800] netlink: 'syz.6.4138': attribute type 1 has an invalid length. [ 238.447321][ T9800] netlink: 'syz.6.4138': attribute type 2 has an invalid length. [ 238.456692][ T9800] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4138'. [ 239.080375][ T9830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4152'. [ 239.169887][ T28] audit: type=1400 audit(2000000016.620:728): avc: denied { ioctl } for pid=9838 comm="syz.6.4156" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 240.415025][ T9873] netem: change failed [ 241.043582][ T9879] loop6: detected capacity change from 0 to 512 [ 241.079126][ T9879] EXT4-fs: Ignoring removed orlov option [ 241.085011][ T9879] EXT4-fs: Ignoring removed oldalloc option [ 241.127207][ T9879] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.4173: iget: bad extended attribute block 1 [ 241.141164][ T9879] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.4173: couldn't read orphan inode 15 (err -117) [ 241.157587][ T9879] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 241.208519][ T7133] EXT4-fs (loop6): unmounting filesystem. [ 245.676361][ T9938] input: syz1 as /devices/virtual/input/input44 [ 249.730101][ T310] tipc: Disabling bearer [ 249.735417][ T310] tipc: Left network mode [ 249.932989][ T9988] input: syz1 as /devices/virtual/input/input45 SYZFAIL: repeatedly failed to execute the program proc=3 req=4161 state=1 status=11 (errno 9: Bad file descriptor) [ 249.991415][ T28] audit: type=1400 audit(2000000027.440:729): avc: denied { write } for pid=278 comm="syz-executor" path="pipe:[14617]" dev="pipefs" ino=14617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 250.359797][ T310] device bridge_slave_1 left promiscuous mode [ 250.366052][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.387730][ T310] device veth1_macvtap left promiscuous mode [ 250.799404][ T310] tipc: Disabling bearer [ 250.806653][ T310] tipc: Left network mode [ 251.288000][ T310] device bridge_slave_1 left promiscuous mode [ 251.294460][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.317067][ T310] device bridge_slave_0 left promiscuous mode [ 251.323314][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.357776][ T310] device bridge_slave_1 left promiscuous mode [ 251.364041][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.387190][ T310] device bridge_slave_0 left promiscuous mode [ 251.393784][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.417747][ T310] device bridge_slave_1 left promiscuous mode [ 251.423984][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.447165][ T310] device bridge_slave_0 left promiscuous mode [ 251.453355][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.488214][ T310] device veth1_macvtap left promiscuous mode [ 251.494376][ T310] device veth0_vlan left promiscuous mode [ 251.507034][ T310] device veth1_macvtap left promiscuous mode [ 251.526878][ T310] device veth1_macvtap left promiscuous mode