last executing test programs: 58.258883028s ago: executing program 32 (id=178): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c00003400028008000100", @ANYRES32, @ANYBLOB="14000200ff02000000000000000000000000001114000300ff"], 0x64}, 0x1, 0x0, 0x0, 0x14000880}, 0x40080) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) 53.201858872s ago: executing program 33 (id=325): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005ec0)=@bpf_lsm={0x1d, 0x12, &(0x7f0000006340)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6a1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000006300), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000006340), 0xf00) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 52.411204352s ago: executing program 0 (id=352): socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000100), 0x2, 0x790, &(0x7f0000004600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004dc0)='./file1\x00', 0x42, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000004e40)=0x2) lremovexattr(&(0x7f0000004580)='./file0\x00', &(0x7f00000045c0)=@known='trusted.overlay.impure\x00') 52.183238826s ago: executing program 0 (id=357): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x40) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in6=@empty, 0x0, 0x1000, 0x2, 0x0, 0x2}, {0x3, 0x5, 0x0, 0x5, 0xfffbfffffffffff6, 0x1fffffc, 0xfffffbfffffffffc, 0x8}, {0x2000000000000007, 0x0, 0x9, 0x4}, 0x4000006, 0x0, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d2, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x3500, 0x4, 0x0, 0x0, 0xffffffff, 0x80000000, 0xec0a}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 52.057292439s ago: executing program 0 (id=364): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040800}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x2, 0x4000) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x3ad, 0x40000000, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 51.968461427s ago: executing program 0 (id=373): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0xa00008, &(0x7f0000000680), 0x1, 0x7c8, &(0x7f00000006c0)="$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") r0 = io_uring_setup(0x6bf5, &(0x7f0000000140)={0x0, 0x0, 0x1, 0xfffffffd, 0x80c4}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[r1]}, 0x1) 51.787865716s ago: executing program 0 (id=377): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xa9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 51.684695206s ago: executing program 0 (id=382): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') close(0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x229) 51.684389216s ago: executing program 34 (id=382): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') close(0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x229) 45.580460267s ago: executing program 3 (id=578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x30}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x6a, &(0x7f0000000880)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "40a76c5cf9d3011ec907e0eaffffff0100000000000800", "047b90670593e17881953d1e429031066797feb6632a4cea988cc9256fe11df4"}}}}}}, 0x0) 45.435485772s ago: executing program 3 (id=582): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 45.25284964s ago: executing program 3 (id=585): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x400) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x103a42, 0x12a) ftruncate(r1, 0x6000000) copy_file_range(r1, 0x0, r1, &(0x7f0000000700)=0x100, 0x9, 0x0) 45.25246387s ago: executing program 3 (id=587): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000004c0)='./file2\x00', 0x404, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@nogrpid}, {@nodioread_nolock}]}, 0x1, 0x446, &(0x7f0000000780)="$eJzs3M1vG0UbAPBn7aR906ZvQlU+mhYIFETER9KkpfTABQQSB5CQ4FCOIUmrULdBTZBoFUFAqBxRJe6IIxJ/ASe4IOCExBXuqFKFcmngZLT2buI4thsHJy7495M2mfGONfN4duyZnTgB9KzR9EcSMRgRv0bEUDW7ucBo9dfa6vLMn6vLM0mUy2/8kVTK3V5dnsmL5s87mGf6IgqfJHGsQb2LV69dnC6V5q5k+YmlS+9OLF699sz8pekLcxfmLk+dPXv61ORzZ6ae7UicaVy3Rz5YOH70lbduvDZz7sbbP36d5PHXxdEho61OPl4ud7i67jpUk076utgQ2lKsDtPor4z/oSjGRucNxcsfd7VxwK4ql8vl+5qfXikD/2FJdLsFQHfkH/Tp+jc/9mjqcVe49UJ1AZTGvZYd1TN9UcjK9NetbztpNCLOrfz1RXrE7tyHAADY5Nt0/vN0o/lfIWrvC/0/20MZjoh7IuJwRJyJiCMRcW9Epez9EfFAm/XXb5Jsnf8Ubu4osG1K53/PZ3tbm+d/+ewvhotZ7lAl/v7k/Hxp7mT2moxF//40P9miju9e+uWzZudq53/pkdafzwWzdtzs27/5ObPTS9P/JOZatz6KGOlrFH+yvhOQRMTRiBjZYR3zT351vNm59fgHokn8LXRgn6n8ZcQT1f5fibr4c0nr/cmJ/0Vp7uREflVs9dPP119vVv+d+393pf1/oOH1vx7/cFK7X7vYfh3Xf/u06Zpmp9f/vuTNPLuWrs/en15aujIZsS95tdro7GTl8amN5+b5vHwa/9iJxuP/cGy8EsciIr2IH4yIhyLi4aztj0TEoxFxokX8P7z42Ds7j393pfHPttX/G4l9Uf9I40Tx4vffbKp0uJ340/4/XUmNZY9s5/1vO+3a2dUMAAAA/z6FiBiMpDC+ni4Uxserf8N/JA4USguLS0+dX3jv8mz1OwLD0V/I73QN1dwPncyW9Xl+qi5/Krtv/HlxoJIfn1kozXY7eOhxB5uM/9TvxW63Dth1vq8Fvcv4h95l/EPvMv6hdzUY/wPdaAew9xp9/n/YhXYAe69u/Nv2gx5i/Q+9y/iH3mX8Q09aHIg7f0leQmJLIgotygw2+ZcRvZYYzIbZ3dKeNhJdfmMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokL8DAAD//5cv4U4=") mkdir(0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000700), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0, 0x8c) openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x27180, 0x1b0) 45.124350883s ago: executing program 3 (id=591): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006bc0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000006d40)={0x0, 0x0, &(0x7f0000006d80)={0x0, 0xfc}}, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) write$binfmt_elf64(r2, 0x0, 0xfffffdcf) 44.528692044s ago: executing program 3 (id=606): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000b00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@mblk_io_submit}, {@nouid32}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@min_batch_time={'min_batch_time', 0x3d, 0x400}}, {@orlov}, {@nobarrier}]}, 0x4, 0xbbf, &(0x7f0000001040)="$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") syz_mount_image$exfat(0x0, &(0x7f0000001c00)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000001c40)) chdir(&(0x7f0000001d40)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000001d80)='./file1\x00', 0x42, 0x40) linkat(0xffffffffffffff9c, &(0x7f0000002ac0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000002b00)='./file7\x00', 0x1000) 44.492045727s ago: executing program 35 (id=606): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000b00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@mblk_io_submit}, {@nouid32}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@min_batch_time={'min_batch_time', 0x3d, 0x400}}, {@orlov}, {@nobarrier}]}, 0x4, 0xbbf, &(0x7f0000001040)="$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") syz_mount_image$exfat(0x0, &(0x7f0000001c00)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000001c40)) chdir(&(0x7f0000001d40)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000001d80)='./file1\x00', 0x42, 0x40) linkat(0xffffffffffffff9c, &(0x7f0000002ac0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000002b00)='./file7\x00', 0x1000) 42.741320815s ago: executing program 6 (id=681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0) 42.644794965s ago: executing program 6 (id=683): r0 = creat(&(0x7f0000000380)='./file0\x00', 0x94) close(r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 42.487709771s ago: executing program 6 (id=690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001340)=@vmx={0xb, 0x0, 0x2080, {0x200000, 0x3cd9c30bb4fdc92d, {0x1}, 0x0, 0xfffffffffffffffa}, {"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", "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"}}) 42.30073204s ago: executing program 6 (id=692): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='\x00', 0x9801) move_mount(r0, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000004c0)='./file0\x00', 0x9) 42.30046896s ago: executing program 6 (id=693): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001a40)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001a80)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000001ac0)=0x6c, 0x4) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=""/4110, 0x100e}, 0x3ffffffe}], 0x1, 0x40002002, 0x0) 42.140212317s ago: executing program 6 (id=695): recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0, 0x0, 0x0, 0x27}, 0x1000}, {{0x0, 0x0, &(0x7f0000003e00)=[{0x0}, {&(0x7f0000001b00)=""/4097, 0xffa}, {0x0, 0x61}], 0x3}, 0x40000ad1}], 0x2, 0x1062, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 42.114154619s ago: executing program 36 (id=695): recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0, 0x0, 0x0, 0x27}, 0x1000}, {{0x0, 0x0, &(0x7f0000003e00)=[{0x0}, {&(0x7f0000001b00)=""/4097, 0xffa}, {0x0, 0x61}], 0x3}, 0x40000ad1}], 0x2, 0x1062, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 27.323317482s ago: executing program 7 (id=1038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000540)={0x1, [{0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x1, 0x8, 0x4da0, &(0x7f0000000700)=':'}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7ff, 0x0}, {0x2, 0x0, 0x80000006, 0x0}, {0x1, 0x0, 0x8, 0xfffffffffffffffd}, {0x2, 0x0, 0xfffffff9, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x5da2, 0x0}, {0x1, 0x8, 0xd1a5, &(0x7f0000000740)="d2"}, {0x2, 0x0, 0x9a93, 0x0}, {0x3, 0x0, 0x818, 0x0}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 27.243312611s ago: executing program 7 (id=1045): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 27.072178468s ago: executing program 7 (id=1049): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="18637075"], 0x5) 27.019026364s ago: executing program 7 (id=1053): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x210000, &(0x7f0000000500)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f00000005c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000b40)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000b80)='./bus\x00', &(0x7f0000000bc0), 0x2000008, &(0x7f0000000c00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000c40)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', &(0x7f0000000cc0), 0x0) 25.504609688s ago: executing program 7 (id=1058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x9) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000240)=""/47, 0x2f}], 0x2, 0x402, 0x7c) 24.727177127s ago: executing program 7 (id=1063): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0) 24.727004847s ago: executing program 37 (id=1063): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0) 20.513326285s ago: executing program 9 (id=1226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.503339436s ago: executing program 9 (id=1227): mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000d80)='./proc\x00', &(0x7f0000000dc0)='proc\x00', 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xc) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./proc/thread-self/fail-nth\x00', 0xffffffffffffff9c, &(0x7f0000000f80)='./proc/thread-self/fail-nth\x00', 0x2) 20.491946707s ago: executing program 9 (id=1229): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='ext4\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='./mnt\x00', 0xee01, 0x0) 20.456181261s ago: executing program 9 (id=1233): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0xa00008, &(0x7f0000000680), 0x1, 0x7c8, &(0x7f00000006c0)="$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") r0 = io_uring_setup(0x6bf5, &(0x7f0000000140)={0x0, 0x0, 0x1, 0xfffffffd, 0x80c4}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[r1]}, 0x1) 20.079709229s ago: executing program 9 (id=1239): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r2, &(0x7f0000000400), 0x0}, 0x20) 20.002021517s ago: executing program 9 (id=1245): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, 0x0) 19.984560559s ago: executing program 38 (id=1245): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, 0x0) 5.61102261s ago: executing program 4 (id=1934): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x161, 0x7, "00020000f7fd00"}) unshare(0x22020600) r1 = syz_open_pts(r0, 0xc0000) ioctl$TIOCSBRK(r1, 0x5427) 5.598661271s ago: executing program 4 (id=1936): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x81081a, &(0x7f0000000240)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES8=0x0, @ANYRES16, @ANYRESOCT, @ANYRES32], 0x21, 0x14fd, &(0x7f0000001340)="$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") fsmount(0xffffffffffffffff, 0x0, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) 5.564425505s ago: executing program 4 (id=1937): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000680)="$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") syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000a80)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 5.564073415s ago: executing program 4 (id=1939): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000002500), 0x10000000009, 0xd18135cf551e1a3d) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000001c0)={r0, 0x7ffd, {0x2a12, 0x80010000, 0x0, 0x4, 0x4, 0x0, 0x0, 0xd, 0xf, "0500000000860600d1f8a0e91dd2aca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f9640000000000000000000000000002000000efffffffff11e4ff", [0x802]}}) 5.563921475s ago: executing program 4 (id=1941): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f00000011c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xc50, &(0x7f0000001380)=ANY=[@ANYBLOB="726f6469722c726f6469722c696f636861727365743d63703837342c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d6d616363656c7469632c756e695f786c6174653d302c73686f72746e616d653d77696e39352c6572726f72733d636f6e74696e75652c73686f72746e616d653d77696e39352c757466383d312c757466383d302c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c726f6469722c636f6465706167653d3835322c726f6469722c0063eeaffbcc50811613a6c020950cb82e74cdc4bb364defda0f6380ade2721d12"], 0x3, 0x27e, &(0x7f0000001680)="$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") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x2000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001dc0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) 5.520677469s ago: executing program 4 (id=1943): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000003ac0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 5.380175273s ago: executing program 5 (id=1955): chdir(&(0x7f0000000d80)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x540) 5.348984526s ago: executing program 5 (id=1957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x40002160, 0x0) 5.348814767s ago: executing program 5 (id=1959): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, 0x0) 5.348622547s ago: executing program 5 (id=1961): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobh}, {@quota}]}, 0x1, 0x560, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f00000007c0)='./bus\x00', 0x818408, 0x0, 0x0, 0x0, &(0x7f0000000800)) lsetxattr$security_selinux(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880), &(0x7f00000008c0)='system_u:object_r:systemd_tmpfiles_exec_t:s0\x00', 0x2d, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000940)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x4) 5.296132332s ago: executing program 5 (id=1963): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f00000003c0)="703a7465735f2f6576656e7431202e2f66696c65303a3078302061727d323d256278d0a55403ee3b529f13a87170468f74d5c2805ab808a8037d342fdbdc4dc53b0e92156a8c2a8e8955a9f9012b5b3099e00ca5", 0x54) 5.252431026s ago: executing program 5 (id=1971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000030000001c0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x20000) 5.252380297s ago: executing program 39 (id=1971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000030000001c0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x20000) 3.704084424s ago: executing program 2 (id=1976): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000400)='1\x00', 0x2) 3.703746354s ago: executing program 8 (id=1977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.64480494s ago: executing program 2 (id=1978): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x80, 0x8) write$tun(r1, 0x0, 0x107c) close(r1) 2.979424608s ago: executing program 2 (id=1981): r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x862b01) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)=""/78, 0x4e}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x2}, 0x9}], 0x1, 0x2, 0x0) write$char_usb(r0, &(0x7f0000000280)="e2", 0x2250) 2.979351968s ago: executing program 8 (id=1982): syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x5a8, &(0x7f00000017c0)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 2.156528171s ago: executing program 1 (id=1984): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="200906"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x10, 0xd, 0x30, "4aeea1140a3dd6ba1308a740c68bc04ffe3c6465140ce77709b27c7156dd84276177839646c256e53c6f65e97e727de0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) 2.156276161s ago: executing program 2 (id=1985): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) 2.156180541s ago: executing program 8 (id=1986): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x52, {"3e66410f14cf0f7877836746c1a203000000d0c4224101500066ba4300ed642e460f01d1f3420f0966baa00066b8000066ef3e2e3e3ef30f1ba289000000f344ad"}}], 0x52}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.241944734s ago: executing program 2 (id=1987): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000011c0)=[{&(0x7f0000001200)="ff", 0x1}], 0x1, 0x25412, 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x6042, 0x101) sendfile(r1, r1, 0x0, 0xe3aa6ea) 1.241761244s ago: executing program 8 (id=1988): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x640100fe, @local, {[@timestamp={0x44, 0xc, 0x7, 0x0, 0x2, [0xf, 0x1ff]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.241697064s ago: executing program 1 (id=1995): socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) setfsuid(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000380)={0x2, 0x0, 0x12, 0x10, 0x1dc, 0x0}) 230.515697ms ago: executing program 1 (id=1989): mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000007000000040000000100000000000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, 0x0, &(0x7f0000000180)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20) 229.676137ms ago: executing program 2 (id=1990): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000200)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240a0001ff23000c2403020703000400070081090401000001022000090401010101022000090501090002030b04082501000040040009040200000102200009040201010102200009240201000f0e07011024010201000400000008b8000000030905820908"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000640)={0x80, 0xd, 0x29, "030095d29c512dcc0b000000000000d4b9cfb6ccd5e3c8c66324d26a6904f419b825f9073b57c7cef6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 229.208867ms ago: executing program 8 (id=1999): syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f0000002b40)="$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") openat(0xffffffffffffff9c, &(0x7f000000d640)='./file1\x00', 0x183341, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001440)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x4) unlink(&(0x7f0000000340)='./file1\x00') rename(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)='./file1\x00') 29.746287ms ago: executing program 1 (id=1991): capset(&(0x7f0000000340)={0x20080522}, &(0x7f00000003c0)={0x200000, 0x200000, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/sda\x00', 0x101042, 0x5) ioctl$FIBMAP(r0, 0x5393, &(0x7f0000000280)=0xfffff32e) 29.209827ms ago: executing program 8 (id=1992): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x6a, &(0x7f0000001780)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x5c, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x6e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "161655ee40edcc6d79812b3a391de2ad03b93013eab7a6dc", "cc7fa90bdd97849215de6ce2549ea8e78f832885d92a1527e45cda3e0a89486a"}}}}}}, 0x0) 28.998087ms ago: executing program 40 (id=1992): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x6a, &(0x7f0000001780)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x5c, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x6e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "161655ee40edcc6d79812b3a391de2ad03b93013eab7a6dc", "cc7fa90bdd97849215de6ce2549ea8e78f832885d92a1527e45cda3e0a89486a"}}}}}}, 0x0) 14.662739ms ago: executing program 1 (id=1993): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000011c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x9, 0xfff2}, {0x5, 0x2}, {0xfff3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) 0s ago: executing program 1 (id=1994): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) kernel console output (not intermixed with test programs): 066][ T2142] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.187598][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.203469][ T30] audit: type=1400 audit(1700000021.209:590): avc: denied { setattr } for pid=2141 comm="syz.8.737" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.225261][ T293] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 45.243881][ T6] usb 8-1: config 0 descriptor?? [ 45.250383][ T293] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 45.260850][ T2149] EXT4-fs (loop9): mounted filesystem without journal. Opts: noquota,nombcache,,errors=continue. Quota mode: none. [ 45.273117][ T293] usb 6-1: config 1 interface 0 has no altsetting 0 [ 45.273401][ T2149] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.295529][ T30] audit: type=1400 audit(1700000021.299:591): avc: denied { append } for pid=2148 comm="syz.9.738" path="/7/file1/cpuset.effective_mems" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.326443][ T30] audit: type=1400 audit(1700000021.329:592): avc: denied { create } for pid=2151 comm="syz.8.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.346001][ T30] audit: type=1400 audit(1700000021.329:593): avc: denied { connect } for pid=2151 comm="syz.8.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.365656][ T30] audit: type=1400 audit(1700000021.329:594): avc: denied { shutdown } for pid=2151 comm="syz.8.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.441690][ T293] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 45.448074][ T2162] input: syz0 as /devices/virtual/input/input13 [ 45.451797][ T293] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.463034][ T30] audit: type=1400 audit(1700000021.459:595): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=846 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.480102][ T293] usb 6-1: Product: syz [ 45.501674][ T293] usb 6-1: Manufacturer: syz [ 45.503143][ T30] audit: type=1400 audit(1700000021.459:596): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=846 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.511876][ T293] usb 6-1: SerialNumber: syz [ 45.533116][ T30] audit: type=1400 audit(1700000021.459:597): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=846 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.582023][ T2125] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 45.591258][ T2125] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 45.645505][ T2164] F2FS-fs (loop9): invalid crc value [ 45.657789][ T2164] F2FS-fs (loop9): Found nat_bits in checkpoint [ 45.691502][ T2164] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 45.763059][ T6] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 45.771197][ T2033] attempt to access beyond end of device [ 45.771197][ T2033] loop9: rw=2049, want=45104, limit=40427 [ 45.772280][ T6] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 45.809267][ T2168] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 45.819254][ T2168] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 45.838222][ T2168] F2FS-fs (loop1): fault_type options not supported [ 45.845912][ T2168] F2FS-fs (loop1): invalid crc value [ 45.852499][ T2168] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 45.880758][ T2168] F2FS-fs (loop1): Start checkpoint disabled! [ 45.887597][ T2168] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 45.894830][ T2168] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 45.942819][ T2178] attempt to access beyond end of device [ 45.942819][ T2178] loop1: rw=2049, want=45104, limit=40427 [ 45.976822][ T30] audit: type=1400 audit(1700000021.979:598): avc: denied { execute_no_trans } for pid=2189 comm="syz.9.754" path="/17/file2" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.163516][ T2203] xt_hashlimit: size too large, truncated to 1048576 [ 46.291624][ T314] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 46.374123][ T2206] F2FS-fs (loop8): Small segment_count (9 < 1 * 24) [ 46.380803][ T2206] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 46.390580][ T2206] F2FS-fs (loop8): invalid crc value [ 46.397073][ T2206] F2FS-fs (loop8): Found nat_bits in checkpoint [ 46.417657][ T2206] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 46.424757][ T2206] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 46.440785][ T1831] attempt to access beyond end of device [ 46.440785][ T1831] loop8: rw=2049, want=45104, limit=40427 [ 46.614062][ T2210] F2FS-fs (loop8): Corrupted extension count (64 + 1 > 64) [ 46.621375][ T2210] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 46.631474][ T2210] F2FS-fs (loop8): invalid crc value [ 46.637613][ T2210] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 46.658794][ T2210] F2FS-fs (loop8): Start checkpoint disabled! [ 46.665842][ T2210] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 46.672940][ T2210] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 46.685386][ T2210] attempt to access beyond end of device [ 46.685386][ T2210] loop8: rw=10241, want=45104, limit=40427 [ 46.691647][ T293] (unnamed net_device) (uninitialized): Assigned a random MAC address: ce:f0:78:06:56:2a [ 46.707350][ T10] attempt to access beyond end of device [ 46.707350][ T10] loop8: rw=2049, want=45120, limit=40427 [ 46.721043][ T293] rtl8150 6-1:1.0: eth1: rtl8150 is detected [ 46.730205][ T293] usb 6-1: USB disconnect, device number 4 [ 46.821364][ T2213] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 46.821668][ T314] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 46.839352][ T314] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.847975][ T314] usb 10-1: Product: syz [ 46.852256][ T314] usb 10-1: Manufacturer: syz [ 46.857028][ T314] usb 10-1: SerialNumber: syz [ 47.162051][ T314] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 47.174334][ T314] usb 10-1: USB disconnect, device number 2 [ 47.181151][ T314] usblp0: removed [ 47.191634][ T60] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 47.199166][ T1359] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 47.322963][ T2241] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 47.336219][ T2241] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 47.351736][ T2241] EXT4-fs error (device loop5) in ext4_setattr:5676: error 28 [ 47.360451][ T2241] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 47.372827][ T2241] EXT4-fs (loop5): This should not happen!! Data will be lost [ 47.372827][ T2241] [ 47.382684][ T2241] EXT4-fs (loop5): Total free blocks count 0 [ 47.388653][ T2241] EXT4-fs (loop5): Free/Dirty block details [ 47.394602][ T2241] EXT4-fs (loop5): free_blocks=2415919504 [ 47.400313][ T2241] EXT4-fs (loop5): dirty_blocks=32 [ 47.405482][ T2241] EXT4-fs (loop5): Block reservation details [ 47.411453][ T2241] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 47.421523][ T10] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 47.433797][ T10] EXT4-fs (loop5): This should not happen!! Data will be lost [ 47.433797][ T10] [ 47.443508][ T1359] usb 2-1: Using ep0 maxpacket: 16 [ 47.470514][ T2248] FAULT_INJECTION: forcing a failure. [ 47.470514][ T2248] name failslab, interval 1, probability 0, space 0, times 0 [ 47.483395][ T2248] CPU: 1 PID: 2248 Comm: syz.5.776 Not tainted syzkaller #0 [ 47.490685][ T2248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 47.500723][ T2248] Call Trace: [ 47.503994][ T2248] [ 47.506908][ T2248] __dump_stack+0x21/0x30 [ 47.511226][ T2248] dump_stack_lvl+0x110/0x170 [ 47.515915][ T2248] ? show_regs_print_info+0x20/0x20 [ 47.521102][ T2248] dump_stack+0x15/0x20 [ 47.525247][ T2248] should_fail+0x3ab/0x500 [ 47.529651][ T2248] __should_failslab+0xa4/0xe0 [ 47.534399][ T2248] should_failslab+0x9/0x20 [ 47.538899][ T2248] slab_pre_alloc_hook+0x39/0xd0 [ 47.543823][ T2248] ? create_new_namespaces+0x34/0x660 [ 47.549176][ T2248] kmem_cache_alloc+0x44/0x260 [ 47.553926][ T2248] create_new_namespaces+0x34/0x660 [ 47.559108][ T2248] ? ns_capable+0x8c/0xf0 [ 47.563415][ T2248] unshare_nsproxy_namespaces+0x120/0x170 [ 47.569115][ T2248] ksys_unshare+0x4d7/0x810 [ 47.573602][ T2248] ? sighand_ctor+0x60/0x60 [ 47.578088][ T2248] ? __kasan_check_write+0x14/0x20 [ 47.583183][ T2248] ? switch_fpu_return+0x15d/0x2c0 [ 47.588278][ T2248] __x64_sys_unshare+0x38/0x40 [ 47.593024][ T2248] x64_sys_call+0x442/0x9a0 [ 47.597507][ T2248] do_syscall_64+0x4c/0xa0 [ 47.601921][ T2248] ? clear_bhb_loop+0x50/0xa0 [ 47.606586][ T2248] ? clear_bhb_loop+0x50/0xa0 [ 47.611249][ T2248] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.617125][ T2248] RIP: 0033:0x7fa8057954d9 [ 47.621523][ T2248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.641121][ T2248] RSP: 002b:00007fa8041e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 47.649531][ T2248] RAX: ffffffffffffffda RBX: 00007fa805a11fa0 RCX: 00007fa8057954d9 [ 47.657493][ T2248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 47.665445][ T2248] RBP: 00007fa80582404e R08: 0000000000000000 R09: 0000000000000000 [ 47.673401][ T2248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.681352][ T2248] R13: 00007fa805a12038 R14: 00007fa805a11fa0 R15: 00007ffd327e6148 [ 47.689321][ T2248] [ 47.709233][ T2253] 9pnet: Insufficient options for proto=fd [ 47.789647][ T2255] set_capacity_and_notify: 7 callbacks suppressed [ 47.789658][ T2255] loop7: detected capacity change from 0 to 40427 [ 47.791673][ T60] usb 9-1: unable to get BOS descriptor or descriptor too short [ 47.813845][ T2255] F2FS-fs (loop7): Mismatch start address, segment0(512) cp_blkaddr(0) [ 47.822946][ T2255] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 47.827359][ T2259] capability: warning: `syz.9.781' uses deprecated v2 capabilities in a way that may be insecure [ 47.832654][ T2255] F2FS-fs (loop7): invalid crc value [ 47.848271][ T2255] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 47.861255][ T2263] loop9: detected capacity change from 0 to 256 [ 47.875587][ T2255] F2FS-fs (loop7): Start checkpoint disabled! [ 47.881983][ T60] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.882583][ T2255] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 47.892377][ T60] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 47.899885][ T2255] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 47.921666][ T1359] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 47.922218][ T2263] FAT-fs (loop9): Directory bread(block 64) failed [ 47.935634][ T2255] attempt to access beyond end of device [ 47.935634][ T2255] loop7: rw=2049, want=45104, limit=40427 [ 47.937268][ T2263] FAT-fs (loop9): Directory bread(block 65) failed [ 47.948975][ T1359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.955031][ T2263] FAT-fs (loop9): Directory bread(block 66) failed [ 47.969120][ T1359] usb 2-1: Product: syz [ 47.969464][ T2263] FAT-fs (loop9): Directory bread(block 67) failed [ 47.973752][ T1359] usb 2-1: Manufacturer: syz [ 47.980734][ T2263] FAT-fs (loop9): Directory bread(block 68) failed [ 47.985511][ T1359] usb 2-1: SerialNumber: syz [ 47.992500][ T2263] FAT-fs (loop9): Directory bread(block 69) failed [ 47.996269][ T2245] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 48.003243][ T914] attempt to access beyond end of device [ 48.003243][ T914] loop7: rw=2049, want=40984, limit=40427 [ 48.010977][ T2263] FAT-fs (loop9): Directory bread(block 70) failed [ 48.028303][ T1359] r8152-cfgselector 2-1: config 0 descriptor?? [ 48.034718][ T2263] FAT-fs (loop9): Directory bread(block 71) failed [ 48.041331][ T2263] FAT-fs (loop9): Directory bread(block 72) failed [ 48.048060][ T2263] FAT-fs (loop9): Directory bread(block 73) failed [ 48.072038][ T60] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 48.081120][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.091961][ T60] usb 9-1: Product: syz [ 48.096147][ T60] usb 9-1: Manufacturer: syz [ 48.101000][ T60] usb 9-1: SerialNumber: syz [ 48.132436][ T293] usb 8-1: USB disconnect, device number 3 [ 48.139946][ T2270] loop7: detected capacity change from 0 to 256 [ 48.198491][ T2272] ip_tables: iptables: counters copy to user failed while replacing table [ 48.213354][ T2276] xt_hashlimit: size too large, truncated to 1048576 [ 48.259935][ T2278] loop7: detected capacity change from 0 to 33280 [ 48.293735][ T2278] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 48.318094][ T2278] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.789: invalid indirect mapped block 256 (level 2) [ 48.332028][ T2278] EXT4-fs (loop7): 2 truncates cleaned up [ 48.337804][ T2278] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 48.361943][ T2245] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.372790][ T60] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 48.379950][ T2245] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 48.384756][ T2284] loop9: detected capacity change from 0 to 33280 [ 48.388976][ T2245] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 48.464499][ T2284] EXT4-fs (loop9): Ignoring removed oldalloc option [ 48.481484][ T2284] EXT4-fs (loop9): Test dummy encryption mode enabled [ 48.490478][ T2284] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 48.501687][ T1359] r8152-cfgselector 2-1: Unknown version 0x0000 [ 48.501907][ T2284] EXT4-fs error (device loop9): ext4_orphan_get:1436: comm syz.9.792: bad orphan inode 131083 [ 48.508021][ T1359] r8152-cfgselector 2-1: bad CDC descriptors [ 48.518492][ T2284] EXT4-fs (loop9): mounted filesystem without journal. Opts: stripe=0x0000000000000008,resgid=0x0000000000000000,inlinecrypt,oldalloc,discard,journal_ioprio=0x0000000000000003,min_batch_time=0x0000000000000001,test_dummy_encryption=v1,noblock_validity,,errors=continue. Quota mode: none. [ 48.561668][ T1359] r8152-cfgselector 2-1: Unknown version 0x0000 [ 48.568431][ T2245] usb 6-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 48.577739][ T60] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 48.598905][ T1359] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 48.608242][ T2245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.623774][ T2245] usb 6-1: Product: syz [ 48.631797][ T2245] usb 6-1: Manufacturer: syz [ 48.636417][ T2245] usb 6-1: SerialNumber: syz [ 48.810940][ T2288] loop7: detected capacity change from 0 to 131072 [ 48.862205][ T2288] F2FS-fs (loop7): Invalid segment/section count (458783, 24 x 150994945) [ 48.870867][ T2288] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 48.879957][ T2288] F2FS-fs (loop7): invalid crc value [ 48.887063][ T2288] F2FS-fs (loop7): Found nat_bits in checkpoint [ 48.909370][ T2288] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 48.916782][ T2288] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 49.251696][ T60] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 49.260461][ T60] usb 9-1: clock source 0 is not valid, cannot use [ 49.281673][ T60] usb 9-1: 2:1: cannot get freq (v2/v3): err -71 [ 49.301673][ T60] usb 9-1: 2:1: cannot set freq 74017490 (v2/v3): err -71 [ 49.349777][ T60] usb 9-1: USB disconnect, device number 2 [ 49.421768][ T2245] usb 6-1: unit 4 not found! [ 49.441584][ T899] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 49.441720][ T2245] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 49.475886][ T2245] usb 6-1: USB disconnect, device number 5 [ 49.726466][ T2358] loop9: detected capacity change from 0 to 256 [ 49.759774][ T2358] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.871644][ T899] usb 8-1: unable to get BOS descriptor or descriptor too short [ 49.894718][ T2384] loop5: detected capacity change from 0 to 32896 [ 49.929578][ T2384] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 49.935211][ T2394] loop1: detected capacity change from 0 to 256 [ 49.950353][ T2384] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.995026][ T2394] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 50.011631][ T899] usb 8-1: config 142 has an invalid interface number: 251 but max is 0 [ 50.019998][ T899] usb 8-1: config 142 has no interface number 0 [ 50.028250][ T899] usb 8-1: config 142 interface 251 altsetting 11 has an invalid endpoint with address 0x9F, skipping [ 50.039248][ T899] usb 8-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 50.049530][ T899] usb 8-1: config 142 interface 251 has no altsetting 0 [ 50.116292][ T2406] ip_tables: iptables: counters copy to user failed while replacing table [ 50.158599][ T2414] loop5: detected capacity change from 0 to 33280 [ 50.195074][ T2416] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 50.207895][ T2414] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 50.217671][ T2416] exFAT-fs (loop8): hint_cluster is invalid (17) [ 50.227620][ T2414] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.241178][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 50.241190][ T30] audit: type=1400 audit(1700000026.249:615): avc: denied { remount } for pid=2415 comm="syz.8.845" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.321622][ T899] usb 8-1: string descriptor 0 read error: -22 [ 50.327861][ T899] usb 8-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 50.341288][ T30] audit: type=1400 audit(1700000026.329:616): avc: denied { connect } for pid=2420 comm="syz.5.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.357175][ T899] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.391656][ T2321] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 50.398719][ T2321] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 50.452600][ T2431] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 50.476167][ T2433] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 50.480038][ T2431] ext4 filesystem being mounted at /144/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.484765][ T2433] System zones: 0-1, 3-12 [ 50.499957][ T2433] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback. [ 50.501162][ T2423] F2FS-fs (loop8): invalid crc value [ 50.533746][ T2423] F2FS-fs (loop8): Found nat_bits in checkpoint [ 50.565333][ T2423] F2FS-fs (loop8): Start checkpoint disabled! [ 50.572226][ T2423] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 50.643613][ T10] attempt to access beyond end of device [ 50.643613][ T10] loop8: rw=1, want=45104, limit=40427 [ 50.660502][ T293] usb 8-1: USB disconnect, device number 4 [ 50.661370][ T10] attempt to access beyond end of device [ 50.661370][ T10] loop8: rw=2049, want=40976, limit=40427 [ 50.769340][ T30] audit: type=1400 audit(1700000026.769:617): avc: denied { append } for pid=2475 comm="syz.1.871" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 50.843265][ T30] audit: type=1400 audit(1700000026.809:618): avc: denied { open } for pid=2475 comm="syz.1.871" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 50.887238][ T30] audit: type=1400 audit(1700000026.889:619): avc: denied { connect } for pid=2492 comm="syz.9.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.960121][ T2504] xt_hashlimit: size too large, truncated to 1048576 [ 51.111592][ T315] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 51.119165][ T899] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 51.146537][ T2513] size and base must be multiples of 4 kiB [ 51.152461][ T2513] CPU: 1 PID: 2513 Comm: syz.5.887 Not tainted syzkaller #0 [ 51.159755][ T2513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 51.169820][ T2513] Call Trace: [ 51.173111][ T2513] [ 51.176043][ T2513] __dump_stack+0x21/0x30 [ 51.180390][ T2513] dump_stack_lvl+0x110/0x170 [ 51.185083][ T2513] ? show_regs_print_info+0x20/0x20 [ 51.190282][ T2513] ? has_cap_mac_admin+0x370/0x370 [ 51.195399][ T2513] dump_stack+0x15/0x20 [ 51.199606][ T2513] mtrr_del+0x84/0x90 [ 51.203599][ T2513] mtrr_ioctl+0x8c1/0xf90 [ 51.207937][ T2513] ? mtrr_close+0x1f0/0x1f0 [ 51.208290][ T2511] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 51.212444][ T2513] ? selinux_file_ioctl+0x3ad/0x4c0 [ 51.212472][ T2513] ? __fget_files+0x2e1/0x340 [ 51.212488][ T2513] ? mtrr_close+0x1f0/0x1f0 [ 51.212506][ T2513] proc_reg_unlocked_ioctl+0x1c6/0x2b0 [ 51.212524][ T2513] ? proc_reg_poll+0x290/0x290 [ 51.212541][ T2513] __se_sys_ioctl+0x121/0x1a0 [ 51.212559][ T2513] __x64_sys_ioctl+0x7b/0x90 [ 51.212575][ T2513] x64_sys_call+0x2f/0x9a0 [ 51.212588][ T2513] do_syscall_64+0x4c/0xa0 [ 51.212602][ T2513] ? clear_bhb_loop+0x50/0xa0 [ 51.212618][ T2513] ? clear_bhb_loop+0x50/0xa0 [ 51.212631][ T2513] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.212648][ T2513] RIP: 0033:0x7fa8057954d9 [ 51.212663][ T2513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.212676][ T2513] RSP: 002b:00007fa8041e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.212694][ T2513] RAX: ffffffffffffffda RBX: 00007fa805a11fa0 RCX: 00007fa8057954d9 [ 51.212706][ T2513] RDX: 0000200000003000 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 51.212717][ T2513] RBP: 00007fa80582404e R08: 0000000000000000 R09: 0000000000000000 [ 51.212728][ T2513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.212737][ T2513] R13: 00007fa805a12038 R14: 00007fa805a11fa0 R15: 00007ffd327e6148 [ 51.212751][ T2513] [ 51.354281][ T2511] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 51.363456][ T30] audit: type=1400 audit(1700000027.369:620): avc: denied { setopt } for pid=2514 comm="syz.7.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.364509][ T2511] F2FS-fs (loop9): invalid crc value [ 51.389898][ T2511] F2FS-fs (loop9): Found nat_bits in checkpoint [ 51.396474][ T30] audit: type=1400 audit(1700000027.399:621): avc: denied { ioctl } for pid=2519 comm="syz.5.889" path="socket:[27981]" dev="sockfs" ino=27981 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.433647][ T2511] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 51.440702][ T2511] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 51.448439][ T30] audit: type=1400 audit(1700000027.449:622): avc: denied { create } for pid=2525 comm="syz.7.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.468158][ T30] audit: type=1400 audit(1700000027.449:623): avc: denied { write } for pid=2525 comm="syz.7.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.497695][ T30] audit: type=1326 audit(1700000027.499:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2529 comm="syz.7.893" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2e8844d9 code=0x7ffc0000 [ 51.523029][ T2511] attempt to access beyond end of device [ 51.523029][ T2511] loop9: rw=2049, want=45104, limit=40427 [ 51.540589][ T2033] attempt to access beyond end of device [ 51.540589][ T2033] loop9: rw=2049, want=40968, limit=40427 [ 51.571727][ T899] usb 9-1: Using ep0 maxpacket: 16 [ 51.578068][ T2535] exfat: Deprecated parameter 'utf8' [ 51.583733][ T2535] exfat: Deprecated parameter 'utf8' [ 51.607997][ T2535] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 51.691768][ T315] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.705813][ T899] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.721001][ T315] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 51.733087][ T899] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.754309][ T899] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 51.768597][ T315] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 51.782949][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.792310][ T899] usb 9-1: config 0 interface 0 has no altsetting 0 [ 51.799412][ T899] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 51.810054][ T899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.825007][ T899] usb 9-1: config 0 descriptor?? [ 51.832320][ T315] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 51.840194][ T315] usb 2-1: 1:1 : unsupported format bits 0x1d58c [ 51.871174][ T2561] FAT-fs (loop9): error, clusters badly computed (1 != 0) [ 51.880447][ T2557] SELinux: failed to load policy [ 51.883436][ T2561] FAT-fs (loop9): error, clusters badly computed (2 != 1) [ 51.965262][ T2581] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 51.976914][ T2581] EXT4-fs (loop7): 1 truncate cleaned up [ 51.982699][ T2581] EXT4-fs (loop7): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 52.063229][ T2485] UDC core: couldn't find an available UDC or it's busy: -16 [ 52.075074][ T2485] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 52.112548][ T2599] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 52.120004][ T2599] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.123791][ T2606] FAULT_INJECTION: forcing a failure. [ 52.123791][ T2606] name failslab, interval 1, probability 0, space 0, times 0 [ 52.145269][ T2606] CPU: 1 PID: 2606 Comm: syz.7.927 Not tainted syzkaller #0 [ 52.147243][ T2599] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0103] [ 52.152570][ T2606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 52.152586][ T2606] Call Trace: [ 52.152592][ T2606] [ 52.152598][ T2606] __dump_stack+0x21/0x30 [ 52.152623][ T2606] dump_stack_lvl+0x110/0x170 [ 52.152639][ T2606] ? show_regs_print_info+0x20/0x20 [ 52.152659][ T2606] dump_stack+0x15/0x20 [ 52.161103][ T2599] System zones: [ 52.170755][ T2606] should_fail+0x3ab/0x500 [ 52.170783][ T2606] __should_failslab+0xa4/0xe0 [ 52.170800][ T2606] should_failslab+0x9/0x20 [ 52.170815][ T2606] slab_pre_alloc_hook+0x39/0xd0 [ 52.170834][ T2606] __kmalloc+0x6d/0x2c0 [ 52.175012][ T2599] 0-1 [ 52.177023][ T2606] ? get_callchain_buffers+0x15b/0x370 [ 52.181363][ T2599] , 3-36 [ 52.185990][ T2606] get_callchain_buffers+0x15b/0x370 [ 52.186010][ T2606] stack_map_alloc+0x39a/0x570 [ 52.186028][ T2606] map_create+0x3f4/0x1fa0 [ 52.186044][ T2606] __sys_bpf+0x2ff/0x7d0 [ 52.191745][ T2599] [ 52.195344][ T2606] ? bpf_link_show_fdinfo+0x330/0x330 [ 52.199568][ T2599] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,abort,,errors=continue. Quota mode: writeback. [ 52.203272][ T2606] ? __kasan_check_write+0x14/0x20 [ 52.203294][ T2606] ? switch_fpu_return+0x15d/0x2c0 [ 52.203311][ T2606] __x64_sys_bpf+0x7c/0x90 [ 52.203327][ T2606] x64_sys_call+0x4b9/0x9a0 [ 52.203342][ T2606] do_syscall_64+0x4c/0xa0 [ 52.251676][ T315] usb 2-1: setting selector (id 3) to 1 failed (current: 0) [ 52.253333][ T2606] ? clear_bhb_loop+0x50/0xa0 [ 52.313117][ T2606] ? clear_bhb_loop+0x50/0xa0 [ 52.317780][ T2606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.323656][ T2606] RIP: 0033:0x7f5c2e8844d9 [ 52.328052][ T2606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.347736][ T2606] RSP: 002b:00007f5c2d2d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.356141][ T2606] RAX: ffffffffffffffda RBX: 00007f5c2eb00fa0 RCX: 00007f5c2e8844d9 [ 52.364096][ T2606] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 52.372066][ T2606] RBP: 00007f5c2e91304e R08: 0000000000000000 R09: 0000000000000000 [ 52.380144][ T2606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.388103][ T2606] R13: 00007f5c2eb01038 R14: 00007f5c2eb00fa0 R15: 00007fff5ccf0d18 [ 52.396061][ T2606] [ 52.413498][ T899] hid (null): unknown global tag 0xd [ 52.418834][ T899] hid (null): unknown global tag 0xe [ 52.471665][ T315] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 52.505418][ T315] usb 2-1: USB disconnect, device number 6 [ 52.524432][ T2615] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 9) [ 52.615026][ T26] usb 9-1: USB disconnect, device number 3 [ 52.711896][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.733665][ T2638] 9pnet: p9_fd_create_unix (2638): problem connecting socket: ./file0: -111 [ 52.749076][ T2630] F2FS-fs (loop9): Found nat_bits in checkpoint [ 52.795408][ T2630] F2FS-fs (loop9): Start checkpoint disabled! [ 52.802300][ T2630] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 52.835606][ T2646] set_capacity_and_notify: 13 callbacks suppressed [ 52.835618][ T2646] loop7: detected capacity change from 0 to 32896 [ 52.856375][ T10] attempt to access beyond end of device [ 52.856375][ T10] loop9: rw=2049, want=40992, limit=40427 [ 52.886783][ T2646] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 52.906840][ T2646] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.967926][ T2653] loop9: detected capacity change from 0 to 33280 [ 53.015391][ T2653] EXT4-fs (loop9): Test dummy encryption mode enabled [ 53.037967][ T2653] EXT4-fs error (device loop9): ext4_orphan_get:1410: inode #15: comm syz.9.946: inode has both inline data and extents flags [ 53.051843][ T2653] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.946: couldn't read orphan inode 15 (err -117) [ 53.063941][ T2653] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 53.148792][ T2677] loop9: detected capacity change from 0 to 33280 [ 53.157733][ T2679] FAULT_INJECTION: forcing a failure. [ 53.157733][ T2679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 53.171234][ T2679] CPU: 0 PID: 2679 Comm: syz.8.959 Not tainted syzkaller #0 [ 53.178530][ T2679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 53.188575][ T2679] Call Trace: [ 53.191847][ T2679] [ 53.194769][ T2679] __dump_stack+0x21/0x30 [ 53.199095][ T2679] dump_stack_lvl+0x110/0x170 [ 53.203763][ T2679] ? show_regs_print_info+0x20/0x20 [ 53.208943][ T2679] ? stack_trace_save+0xf0/0xf0 [ 53.213777][ T2679] dump_stack+0x15/0x20 [ 53.217921][ T2679] should_fail+0x3ab/0x500 [ 53.222339][ T2679] should_fail_alloc_page+0x55/0x80 [ 53.227523][ T2679] prepare_alloc_pages+0x13f/0x590 [ 53.232617][ T2679] ? __alloc_pages_bulk+0xab0/0xab0 [ 53.237798][ T2679] ? __kasan_slab_alloc+0xc9/0xe0 [ 53.242808][ T2679] ? __kasan_slab_alloc+0xb7/0xe0 [ 53.247814][ T2679] ? slab_post_alloc_hook+0x4f/0x2b0 [ 53.253084][ T2679] __alloc_pages+0x11d/0x460 [ 53.257662][ T2679] ? zone_watermark_fast+0x250/0x250 [ 53.262935][ T2679] ? _raw_spin_lock+0x94/0xf0 [ 53.267616][ T2679] ? _raw_spin_trylock_bh+0x150/0x150 [ 53.272989][ T2679] __get_free_pages+0x10/0x30 [ 53.277652][ T2679] kasan_populate_vmalloc_pte+0x29/0x120 [ 53.283270][ T2679] __apply_to_page_range+0x8ca/0xc70 [ 53.288542][ T2679] ? kasan_populate_vmalloc+0x70/0x70 [ 53.293901][ T2679] ? kasan_populate_vmalloc+0x70/0x70 [ 53.299258][ T2679] apply_to_page_range+0x3b/0x50 [ 53.304180][ T2679] kasan_populate_vmalloc+0x60/0x70 [ 53.309386][ T2679] alloc_vmap_area+0x193b/0x1a70 [ 53.314311][ T2679] ? vm_map_ram+0xa70/0xa70 [ 53.318796][ T2679] ? kmem_cache_alloc_trace+0x119/0x270 [ 53.324345][ T2679] __get_vm_area_node+0x14e/0x350 [ 53.329356][ T2679] __vmalloc_node_range+0xe8/0xad0 [ 53.334452][ T2679] ? htab_map_alloc+0xb2f/0x15d0 [ 53.339385][ T2679] bpf_map_area_alloc+0xd5/0xe0 [ 53.344240][ T2679] ? htab_map_alloc+0xb2f/0x15d0 [ 53.349161][ T2679] htab_map_alloc+0xb2f/0x15d0 [ 53.353910][ T2679] map_create+0x3f4/0x1fa0 [ 53.358308][ T2679] __sys_bpf+0x2ff/0x7d0 [ 53.362530][ T2679] ? bpf_link_show_fdinfo+0x330/0x330 [ 53.367887][ T2679] ? __kasan_check_write+0x14/0x20 [ 53.372986][ T2679] ? switch_fpu_return+0x15d/0x2c0 [ 53.378079][ T2679] __x64_sys_bpf+0x7c/0x90 [ 53.382480][ T2679] x64_sys_call+0x4b9/0x9a0 [ 53.386964][ T2679] do_syscall_64+0x4c/0xa0 [ 53.391361][ T2679] ? clear_bhb_loop+0x50/0xa0 [ 53.396018][ T2679] ? clear_bhb_loop+0x50/0xa0 [ 53.400678][ T2679] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.406551][ T2679] RIP: 0033:0x7f43984a24d9 [ 53.410948][ T2679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.430537][ T2679] RSP: 002b:00007f4396ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.438937][ T2679] RAX: ffffffffffffffda RBX: 00007f439871efa0 RCX: 00007f43984a24d9 [ 53.446891][ T2679] RDX: 0000000000000050 RSI: 00002000000014c0 RDI: 4400000000000000 [ 53.454843][ T2679] RBP: 00007f439853104e R08: 0000000000000000 R09: 0000000000000000 [ 53.462803][ T2679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.470759][ T2679] R13: 00007f439871f038 R14: 00007f439871efa0 R15: 00007ffd8f21cce8 [ 53.478721][ T2679] [ 53.517340][ T2677] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.536960][ T2677] ext4 filesystem being mounted at /73/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.540020][ T2685] loop8: detected capacity change from 0 to 128 [ 53.561641][ T26] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 53.595678][ T2687] input: syz1 as /devices/virtual/input/input15 [ 53.641899][ T2691] loop8: detected capacity change from 0 to 33792 [ 53.715160][ T2691] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.772402][ T2691] EXT4-fs (loop8): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 53.803171][ T2695] loop1: detected capacity change from 0 to 40427 [ 53.822834][ T2695] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 53.830269][ T2695] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 53.839596][ T2695] F2FS-fs (loop1): invalid crc value [ 53.847786][ T2695] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 53.910712][ T2695] F2FS-fs (loop1): Start checkpoint disabled! [ 53.931818][ T2695] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 53.949217][ T2695] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 53.961645][ T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 53.981619][ T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.021631][ T26] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 54.044133][ T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.056117][ T26] usb 8-1: config 0 descriptor?? [ 54.060043][ T2711] loop5: detected capacity change from 0 to 33280 [ 54.099659][ T914] attempt to access beyond end of device [ 54.099659][ T914] loop1: rw=2049, want=45104, limit=40427 [ 54.156074][ T2711] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 54.171725][ T2711] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.232259][ T2711] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 54.237410][ T2689] loop9: detected capacity change from 0 to 131072 [ 54.275528][ T2689] F2FS-fs (loop9): Test dummy encryption mode enabled [ 54.287921][ T2689] F2FS-fs (loop9): invalid crc value [ 54.294511][ T2663] UDC core: couldn't find an available UDC or it's busy: -16 [ 54.302363][ T2663] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 54.314243][ T2689] F2FS-fs (loop9): Found nat_bits in checkpoint [ 54.366641][ T2726] loop5: detected capacity change from 0 to 33280 [ 54.379129][ T2689] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 54.422444][ T2726] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.976: inode #1: comm syz.5.976: iget: illegal inode # [ 54.425832][ T2731] loop8: detected capacity change from 0 to 8192 [ 54.443796][ T2726] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.976: error while reading EA inode 1 err=-117 [ 54.457420][ T2689] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 54.457640][ T2726] EXT4-fs (loop5): 1 orphan inode deleted [ 54.471318][ T2726] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 54.481016][ T2731] attempt to access beyond end of device [ 54.481016][ T2731] loop8: rw=0, want=57848, limit=8192 [ 54.520724][ T2731] Buffer I/O error on dev loop8, logical block 57847, async page read [ 54.531647][ T2731] attempt to access beyond end of device [ 54.531647][ T2731] loop8: rw=0, want=57848, limit=8192 [ 54.532478][ T26] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 54.543267][ T2731] Buffer I/O error on dev loop8, logical block 57847, async page read [ 54.558406][ T2731] attempt to access beyond end of device [ 54.558406][ T2731] loop8: rw=0, want=57848, limit=8192 [ 54.569171][ T26] isku 0003:1E7D:319C.0009: item fetching failed at offset 1/7 [ 54.569956][ T2731] Buffer I/O error on dev loop8, logical block 57847, async page read [ 54.591892][ T26] isku 0003:1E7D:319C.0009: parse failed [ 54.597686][ T26] isku: probe of 0003:1E7D:319C.0009 failed with error -22 [ 54.661597][ T60] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 54.776715][ T26] usb 8-1: USB disconnect, device number 5 [ 54.789075][ T2741] Line length is too long: Should be less than 4094 [ 54.833260][ T2743] EXT4-fs (loop8): Ignoring removed nobh option [ 54.839921][ T2743] EXT4-fs (loop8): Ignoring removed bh option [ 54.860007][ T2743] EXT4-fs (loop8): Ignoring removed nobh option [ 54.871642][ T2736] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 54.879226][ T2736] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 54.888844][ T2743] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000007,nolazytime,debug_want_extra_isize=0x0000000000000080,sb=0x0000000000000004,max_batch_time=0x000000000000008d,delalloc,bh,nombcache,auto_da_alloc,nobh,,errors=continue. Quota mode: none. [ 54.917273][ T2736] F2FS-fs (loop5): invalid crc value [ 54.923639][ T2736] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 54.938792][ T2743] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.983: bg 0: block 224: padding at end of block bitmap is not set [ 54.951221][ T2736] F2FS-fs (loop5): Start checkpoint disabled! [ 54.960316][ T2736] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 54.967496][ T2736] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 55.008723][ T914] attempt to access beyond end of device [ 55.008723][ T914] loop5: rw=2049, want=45112, limit=40427 [ 55.036603][ T2752] ip_tables: iptables: counters copy to user failed while replacing table [ 55.093212][ T60] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 55.105103][ T60] usb 2-1: config 127 has no interface number 0 [ 55.111483][ T60] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 55.127652][ T2756] netlink: 'syz.8.988': attribute type 16 has an invalid length. [ 55.135470][ T2756] netlink: 'syz.8.988': attribute type 17 has an invalid length. [ 55.145381][ T2756] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 55.161757][ T1359] kernel read not supported for file /kmsg (pid: 1359 comm: kworker/1:5) [ 55.184912][ T1831] ------------[ cut here ]------------ [ 55.190421][ T1831] WARNING: CPU: 1 PID: 1831 at fs/overlayfs/util.c:475 ovl_dir_modified+0x189/0x1c0 [ 55.199885][ T1831] Modules linked in: [ 55.203950][ T1831] CPU: 1 PID: 1831 Comm: syz-executor Not tainted syzkaller #0 [ 55.211499][ T1831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 55.222365][ T1831] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 55.229042][ T1831] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5e 68 a7 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b7 cc 67 ff <0f> 0b e9 17 ff ff ff e8 ab cc 67 ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 55.248955][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 55.257285][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.267346][ T1831] RSP: 0018:ffffc90000af7be0 EFLAGS: 00010293 [ 55.268133][ T2766] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x62 [ 55.273712][ T1831] RAX: ffffffff820208e9 RBX: 1ffff1102126d6d2 RCX: ffff88811cdd1400 [ 55.281020][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 55.288009][ T1831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.295663][ T60] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 55.303692][ T1831] RBP: ffffc90000af7c10 R08: ffff88812c59c49f R09: 1ffff110258b3893 [ 55.313128][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.325628][ T899] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 55.328620][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.342030][ T1831] R10: dffffc0000000000 R11: ffffed10258b3894 R12: ffff88810936b660 [ 55.344679][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.352794][ T1831] R13: 0000000000000000 R14: ffff88812c59c3f8 R15: ffff88810936b690 [ 55.361899][ T60] usb 2-1: Product: syz [ 55.374347][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.378877][ T1831] FS: 00005555624d6500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 55.385681][ T60] usb 2-1: Manufacturer: syz [ 55.396533][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.401829][ T1831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.404544][ T60] usb 2-1: SerialNumber: syz [ 55.415554][ T1831] CR2: 00007f5c2eb02dac CR3: 0000000123465000 CR4: 00000000003506b0 [ 55.416114][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.431601][ T1831] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.440168][ T1831] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.448273][ T1831] Call Trace: [ 55.451892][ T1831] [ 55.454852][ T1831] ovl_do_remove+0x688/0x960 [ 55.459468][ T1831] ? ovl_set_redirect+0x670/0x670 [ 55.461674][ T2729] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 55.465011][ T1831] ? selinux_inode_rmdir+0x22/0x30 [ 55.477355][ T1831] ovl_rmdir+0x1a/0x20 [ 55.481436][ T1831] vfs_rmdir+0x1ae/0x450 [ 55.486130][ T1831] incfs_kill_sb+0xfe/0x210 [ 55.490783][ T1831] deactivate_locked_super+0xa0/0x100 [ 55.496409][ T1831] deactivate_super+0xaf/0xe0 [ 55.501232][ T1831] cleanup_mnt+0x44f/0x500 [ 55.505952][ T1831] __cleanup_mnt+0x19/0x20 [ 55.510386][ T1831] task_work_run+0x127/0x190 [ 55.515331][ T1831] exit_to_user_mode_loop+0xd0/0xe0 [ 55.525266][ T1831] exit_to_user_mode_prepare+0x87/0xd0 [ 55.530767][ T1831] syscall_exit_to_user_mode+0x1a/0x30 [ 55.537390][ T1831] do_syscall_64+0x58/0xa0 [ 55.542202][ T1831] ? clear_bhb_loop+0x50/0xa0 [ 55.547746][ T1831] ? clear_bhb_loop+0x50/0xa0 [ 55.552873][ T1831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.561502][ T1831] RIP: 0033:0x7f43984a3747 [ 55.566026][ T1831] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 55.585697][ T1831] RSP: 002b:00007ffd8f21bf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 55.594159][ T1831] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f43984a3747 [ 55.602151][ T1831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8f21c010 [ 55.610125][ T1831] RBP: 00007ffd8f21c010 R08: 00007ffd8f21d010 R09: 00000000ffffffff [ 55.618166][ T1831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8f21d0a0 [ 55.626209][ T1831] R13: 00007f4398530433 R14: 000000000000d771 R15: 00007ffd8f21d0e0 [ 55.634246][ T1831] [ 55.637363][ T1831] ---[ end trace f029595c0ad623e3 ]--- [ 55.643275][ T1831] ------------[ cut here ]------------ [ 55.648744][ T1831] WARNING: CPU: 1 PID: 1831 at fs/overlayfs/util.c:475 ovl_dir_modified+0x189/0x1c0 [ 55.658402][ T1831] Modules linked in: [ 55.663733][ T2770] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 55.673106][ T1831] CPU: 0 PID: 1831 Comm: syz-executor Tainted: G W syzkaller #0 [ 55.682414][ T2770] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 55.690719][ T2770] F2FS-fs (loop7): fault_type options not supported [ 55.698000][ T1831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 55.708544][ T1831] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 55.712339][ T2770] F2FS-fs (loop7): invalid crc value [ 55.714508][ T899] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.720327][ T2770] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 55.730573][ T899] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 55.742878][ T1831] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5e 68 a7 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b7 cc 67 ff <0f> 0b e9 17 ff ff ff e8 ab cc 67 ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 55.781661][ T1831] RSP: 0018:ffffc90000af7be0 EFLAGS: 00010293 [ 55.789045][ T1831] RAX: ffffffff820208e9 RBX: 1ffff1102126d6d2 RCX: ffff88811cdd1400 [ 55.792187][ T2770] F2FS-fs (loop7): Start checkpoint disabled! [ 55.803807][ T2770] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 55.807416][ T1831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.810845][ T2770] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 55.825736][ T1831] RBP: ffffc90000af7c10 R08: ffff88812c59c49f R09: 1ffff110258b3893 [ 55.838317][ T1831] R10: dffffc0000000000 R11: ffffed10258b3894 R12: ffff88810936b660 [ 55.856648][ T1831] R13: 0000000000000000 R14: ffff88812c59c3f8 R15: ffff88810936b690 [ 55.859846][ T45] attempt to access beyond end of device [ 55.859846][ T45] loop7: rw=2049, want=45104, limit=40427 [ 55.876773][ T1831] FS: 00005555624d6500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 55.886339][ T1831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.894249][ T1831] CR2: 000000110c2a2c04 CR3: 0000000123465000 CR4: 00000000003526b0 [ 55.902297][ T1831] Call Trace: [ 55.905622][ T1831] [ 55.908544][ T1831] ovl_do_remove+0x688/0x960 [ 55.911722][ T899] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.913196][ T1831] ? ovl_set_redirect+0x670/0x670 [ 55.922884][ T899] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.927288][ T1831] ? selinux_inode_rmdir+0x22/0x30 [ 55.935615][ T899] usb 10-1: Product: syz [ 55.940800][ T1831] ovl_rmdir+0x1a/0x20 [ 55.950910][ T1831] vfs_rmdir+0x1ae/0x450 [ 55.953224][ T899] usb 10-1: Manufacturer: syz [ 55.959912][ T1831] incfs_kill_sb+0x18f/0x210 [ 55.961370][ T899] usb 10-1: SerialNumber: syz [ 55.964728][ T1831] deactivate_locked_super+0xa0/0x100 [ 55.974708][ T1831] deactivate_super+0xaf/0xe0 [ 55.975097][ T2729] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 55.979469][ T1831] cleanup_mnt+0x44f/0x500 [ 55.993348][ T1831] __cleanup_mnt+0x19/0x20 [ 56.004133][ T1831] task_work_run+0x127/0x190 [ 56.008843][ T1831] exit_to_user_mode_loop+0xd0/0xe0 [ 56.014641][ T1831] exit_to_user_mode_prepare+0x87/0xd0 [ 56.020124][ T1831] syscall_exit_to_user_mode+0x1a/0x30 [ 56.025687][ T1831] do_syscall_64+0x58/0xa0 [ 56.030107][ T1831] ? clear_bhb_loop+0x50/0xa0 [ 56.036628][ T1831] ? clear_bhb_loop+0x50/0xa0 [ 56.041330][ T1831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.047529][ T1831] RIP: 0033:0x7f43984a3747 [ 56.052041][ T1831] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 56.076488][ T1831] RSP: 002b:00007ffd8f21bf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 56.085165][ T1831] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f43984a3747 [ 56.095049][ T1831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8f21c010 [ 56.103256][ T1831] RBP: 00007ffd8f21c010 R08: 00007ffd8f21d010 R09: 00000000ffffffff [ 56.111418][ T1831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8f21d0a0 [ 56.121077][ T1831] R13: 00007f4398530433 R14: 000000000000d771 R15: 00007ffd8f21d0e0 [ 56.130300][ T1831] [ 56.145286][ T1831] ---[ end trace f029595c0ad623e4 ]--- [ 56.179436][ T2792] FAULT_INJECTION: forcing a failure. [ 56.179436][ T2792] name failslab, interval 1, probability 0, space 0, times 0 [ 56.197150][ T2792] CPU: 1 PID: 2792 Comm: syz.8.991 Tainted: G W syzkaller #0 [ 56.205848][ T2792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 56.215924][ T2792] Call Trace: [ 56.219207][ T2792] [ 56.222139][ T2792] __dump_stack+0x21/0x30 [ 56.226482][ T2792] dump_stack_lvl+0x110/0x170 [ 56.231163][ T2792] ? show_regs_print_info+0x20/0x20 [ 56.236373][ T2792] ? file_end_write+0x1b0/0x1b0 [ 56.241254][ T2792] dump_stack+0x15/0x20 [ 56.245424][ T2792] should_fail+0x3ab/0x500 [ 56.249858][ T2792] __should_failslab+0xa4/0xe0 [ 56.254635][ T2792] should_failslab+0x9/0x20 [ 56.259150][ T2792] slab_pre_alloc_hook+0x39/0xd0 [ 56.264225][ T2792] ? getname_flags+0xba/0x510 [ 56.268921][ T2792] kmem_cache_alloc+0x44/0x260 [ 56.273710][ T2792] getname_flags+0xba/0x510 [ 56.278237][ T2792] ? __kasan_check_write+0x14/0x20 [ 56.283374][ T2792] ? switch_fpu_return+0x15d/0x2c0 [ 56.288510][ T2792] __x64_sys_mkdirat+0x7c/0xa0 [ 56.293338][ T2792] x64_sys_call+0x37e/0x9a0 [ 56.297864][ T2792] do_syscall_64+0x4c/0xa0 [ 56.302302][ T2792] ? clear_bhb_loop+0x50/0xa0 [ 56.306995][ T2792] ? clear_bhb_loop+0x50/0xa0 [ 56.311680][ T2792] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.317576][ T2792] RIP: 0033:0x7f43984a1347 [ 56.322030][ T2792] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.341632][ T2792] RSP: 002b:00007f4396eefe58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 56.350043][ T2792] RAX: ffffffffffffffda RBX: 00007f4396eefee0 RCX: 00007f43984a1347 [ 56.358007][ T2792] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 00000000ffffff9c [ 56.365968][ T2792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.374031][ T2792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.381994][ T2792] R13: 00007f4396eefea0 R14: 0000000000000000 R15: 0000000000000000 [ 56.389962][ T2792] [ 56.530942][ T2804] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 56.554864][ T2804] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.653274][ T2812] block device autoloading is deprecated and will be removed. [ 56.688195][ T2812] device-mapper: table: 253:4: ram16 too small for target: start=4096, len=18014398509481983, dev_size=16384 [ 56.700376][ T2812] device-mapper: core: Cannot calculate initial queue limits [ 56.707926][ T2812] device-mapper: ioctl: unable to set up device queue for new table. [ 56.717440][ T2820] device-mapper: table: 253:4: striped: Couldn't parse stripe destination [ 56.726301][ T2820] device-mapper: ioctl: error adding target to table [ 56.768614][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 56.768630][ T30] audit: type=1400 audit(1700000032.769:696): avc: denied { write } for pid=2825 comm="syz.8.1013" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 56.821698][ T60] asix 2-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 56.844028][ T60] asix: probe of 2-1:127.57 failed with error -71 [ 56.867207][ T30] audit: type=1400 audit(1700000032.769:697): avc: denied { open } for pid=2825 comm="syz.8.1013" path="/65/dev/kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 56.880083][ T2832] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 56.894099][ T60] usb 2-1: USB disconnect, device number 7 [ 56.907502][ T2832] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.981078][ T30] audit: type=1400 audit(1700000032.979:698): avc: denied { bind } for pid=2838 comm="syz.1.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.072077][ T30] audit: type=1400 audit(1700000033.079:699): avc: denied { getopt } for pid=2847 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.107875][ T2849] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 57.125821][ T30] audit: type=1326 audit(1700000033.129:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2852 comm="syz.8.1024" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43984a24d9 code=0x0 [ 57.150577][ T899] cdc_ncm 10-1:1.0: bind() failure [ 57.171645][ T899] cdc_ncm: probe of 10-1:1.1 failed with error -71 [ 57.191630][ T899] cdc_mbim: probe of 10-1:1.1 failed with error -71 [ 57.201653][ T899] usb 10-1: USB disconnect, device number 3 [ 57.246338][ T2851] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 57.272417][ T2857] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 57.272614][ T2851] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 57.292259][ T2851] F2FS-fs (loop5): invalid crc value [ 57.297872][ T2857] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.313143][ T2857] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 57.317204][ T2851] F2FS-fs (loop5): Found nat_bits in checkpoint [ 57.348991][ T2851] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 57.356498][ T2851] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 57.389257][ T30] audit: type=1400 audit(1700000033.389:701): avc: denied { rename } for pid=2850 comm="syz.5.1023" name="file1" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.419261][ T30] audit: type=1400 audit(1700000033.419:702): avc: denied { unlink } for pid=2850 comm="syz.5.1023" name="file1" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.553883][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 57.564299][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.593955][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 57.602638][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.611178][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.619861][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.628893][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.641892][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.656267][ T2879] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 57.669397][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 57.677010][ T2879] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.688873][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 57.747357][ T30] audit: type=1400 audit(1700000033.749:703): avc: denied { bind } for pid=2887 comm="syz.9.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.811397][ T30] audit: type=1400 audit(1700000033.809:704): avc: denied { remount } for pid=2893 comm="syz.9.1039" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 57.880541][ T2901] set_capacity_and_notify: 10 callbacks suppressed [ 57.880566][ T2901] loop9: detected capacity change from 0 to 36864 [ 57.893687][ T2907] loop5: detected capacity change from 0 to 16 [ 57.897066][ T2908] 9pnet: p9_errstr2errno: server reported unknown error [ 57.918732][ T2901] EXT4-fs (loop9): Test dummy encryption mode enabled [ 57.941703][ T2901] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 57.964370][ T2901] EXT4-fs (loop9): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 57.992958][ T2907] erofs: (device loop5): mounted with root inode @ nid 36. [ 58.073850][ T30] audit: type=1400 audit(1700000034.079:705): avc: denied { mount } for pid=2917 comm="syz.7.1049" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.109965][ T2924] loop7: detected capacity change from 0 to 33792 [ 59.471547][ C1] sched: RT throttling activated [ 59.522216][ T2930] loop1: detected capacity change from 0 to 33280 [ 59.542726][ T2924] EXT4-fs (loop7): Ignoring removed bh option [ 59.563395][ T2924] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 59.617411][ T2930] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 59.631357][ T1294] EXT4-fs error (device loop7): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /118/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 59.653965][ T2930] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.665846][ T1294] EXT4-fs (loop7): Remounting filesystem read-only [ 59.673472][ T1294] EXT4-fs error (device loop7): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /118/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 59.696516][ T1294] EXT4-fs (loop7): Remounting filesystem read-only [ 59.705307][ T1294] EXT4-fs error (device loop7): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 59.725650][ T1294] EXT4-fs (loop7): Remounting filesystem read-only [ 59.732239][ T1294] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 59.746549][ T1294] EXT4-fs error (device loop7): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /118/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 59.768728][ T1294] EXT4-fs (loop7): Remounting filesystem read-only [ 59.775309][ T1294] EXT4-fs error (device loop7): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /118/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 59.801619][ T20] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 59.801994][ T1294] EXT4-fs (loop7): Remounting filesystem read-only [ 59.815809][ T1294] EXT4-fs error (device loop7): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 59.844324][ T1294] EXT4-fs (loop7): Remounting filesystem read-only [ 59.850942][ T1294] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 59.880558][ T1294] EXT4-fs error (device loop7): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /118/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 59.904245][ T1294] EXT4-fs (loop7): Remounting filesystem read-only [ 59.910812][ T1294] EXT4-fs error (device loop7): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /118/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 59.942579][ T1294] EXT4-fs (loop7): Remounting filesystem read-only [ 59.951744][ T1294] EXT4-fs error (device loop7): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 59.973674][ T1294] EXT4-fs (loop7): Remounting filesystem read-only [ 59.980277][ T1294] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 59.994760][ T1294] EXT4-fs error (device loop7): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /118/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 60.017304][ T1294] EXT4-fs (loop7): Remounting filesystem read-only [ 60.024239][ T1294] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 60.039083][ T1294] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 60.062187][ T1294] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 60.083990][ T2934] loop9: detected capacity change from 0 to 131072 [ 60.091720][ T1294] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 60.105502][ T2944] loop1: detected capacity change from 0 to 40427 [ 60.113106][ T2934] F2FS-fs (loop9): Test dummy encryption mode enabled [ 60.120842][ T2934] F2FS-fs (loop9): invalid crc value [ 60.124418][ T1294] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 60.128432][ T2934] F2FS-fs (loop9): Found nat_bits in checkpoint [ 60.141560][ T1294] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 60.165278][ T1294] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 60.176467][ T2944] F2FS-fs (loop1): invalid crc value [ 60.191669][ T20] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.211887][ T2934] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 60.219810][ T20] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.230878][ T2944] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 60.259523][ T2944] F2FS-fs (loop1): Start checkpoint disabled! [ 60.267148][ T2944] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 60.301710][ T20] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 60.311077][ T20] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 60.319344][ T20] usb 9-1: Manufacturer: syz [ 60.329689][ T20] usb 9-1: config 0 descriptor?? [ 60.334954][ T2944] attempt to access beyond end of device [ 60.334954][ T2944] loop1: rw=2049, want=49160, limit=40427 [ 60.359541][ T2957] loop5: detected capacity change from 0 to 33280 [ 60.385591][ T2957] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 60.394148][ T2957] System zones: 0-7 [ 60.395581][ T914] attempt to access beyond end of device [ 60.395581][ T914] loop1: rw=2049, want=40976, limit=40427 [ 60.398748][ T2957] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 60.576547][ T2970] program syz.9.1061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.599421][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.615840][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.623654][ T2961] device bridge_slave_0 entered promiscuous mode [ 60.630886][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.638586][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.646296][ T2961] device bridge_slave_1 entered promiscuous mode [ 60.723558][ T2995] loop5: detected capacity change from 0 to 128 [ 60.734865][ T2995] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.752749][ T2995] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.760580][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.768896][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.776200][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.783236][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.817016][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.832388][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.846586][ T914] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.846662][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.872076][ T3010] loop9: detected capacity change from 0 to 256 [ 60.878886][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.880457][ T3012] Invalid argument reading file caps for ./file0 [ 60.905585][ T914] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.912688][ T914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.920274][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.930608][ T914] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.937725][ T914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.951715][ T3010] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.962461][ T3010] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 60.962927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.981947][ T3010] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b889, utbl_chksum : 0xe619d30d) [ 61.003336][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.016672][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.025847][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.033425][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.041056][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.051152][ T45] device bridge_slave_1 left promiscuous mode [ 61.057641][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.065552][ T45] device bridge_slave_0 left promiscuous mode [ 61.072110][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.080690][ T3021] loop5: detected capacity change from 0 to 256 [ 61.088876][ T45] device veth1_macvtap left promiscuous mode [ 61.095546][ T45] device veth0_vlan left promiscuous mode [ 61.112457][ T3021] exfat: Deprecated parameter 'namecase' [ 61.128824][ T3021] exfat: Deprecated parameter 'namecase' [ 61.158389][ T2961] device veth0_vlan entered promiscuous mode [ 61.169357][ T3021] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 61.183535][ T3028] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1093'. [ 61.200858][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.209011][ T3030] sd 0:0:1:0: PR command failed: 2 [ 61.215724][ T3030] sd 0:0:1:0: Sense Key : 0x5 [current] [ 61.217909][ T2961] device veth1_macvtap entered promiscuous mode [ 61.227713][ T3030] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 61.238611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.273648][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.283235][ T20] input: syz Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.000A/input/input16 [ 61.302231][ T20] input: syz Pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.000A/input/input17 [ 61.328721][ T20] uclogic 0003:256C:006D.000A: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.8-1/input0 [ 61.345449][ T3045] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1100'. [ 61.358499][ T3040] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 61.358499][ T3040] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 61.358499][ T3040] [ 61.382370][ T3040] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.393386][ T3038] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,noblock_validity,,errors=continue. Quota mode: writeback. [ 61.452491][ T3038] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.495784][ T20] usb 9-1: USB disconnect, device number 4 [ 61.497230][ T3040] EXT4-fs (loop1): 1 truncate cleaned up [ 61.507301][ T3040] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nouser_xattr,journal_dev=0x0000000000000001,noauto_da_alloc,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 61.551184][ T285] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 61.565967][ T3043] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 61.574150][ T3043] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 61.583771][ T3043] F2FS-fs (loop4): invalid crc value [ 61.620408][ T3043] F2FS-fs (loop4): Found nat_bits in checkpoint [ 61.672510][ T3043] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 61.679580][ T3043] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 61.741183][ T3043] attempt to access beyond end of device [ 61.741183][ T3043] loop4: rw=2049, want=45104, limit=40427 [ 61.760383][ T3043] attempt to access beyond end of device [ 61.760383][ T3043] loop4: rw=0, want=45104, limit=40427 [ 61.846933][ T3083] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1113'. [ 61.864042][ T3083] 8021q: VLANs not supported on ip_vti0 [ 61.912595][ T3066] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 61.919223][ T3066] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 61.971935][ T3066] F2FS-fs (loop5): invalid crc value [ 62.002395][ T3066] F2FS-fs (loop5): Found nat_bits in checkpoint [ 62.034055][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 62.034069][ T30] audit: type=1400 audit(1700000038.039:723): avc: denied { append } for pid=3103 comm="syz.1.1121" name="usbmon5" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.057077][ T3066] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 62.072023][ T3066] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 62.128177][ T762] attempt to access beyond end of device [ 62.128177][ T762] loop5: rw=2049, want=45104, limit=40427 [ 62.212513][ T3119] EXT4-fs (loop9): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 62.238248][ T3119] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.346911][ T3125] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 62.362631][ T3117] F2FS-fs (loop4): fault_injection options not supported [ 62.370450][ T3117] F2FS-fs (loop4): invalid crc value [ 62.383501][ T3117] F2FS-fs (loop4): Found nat_bits in checkpoint [ 62.429437][ T3117] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.437877][ T3132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1132'. [ 62.447064][ T45] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 62.459549][ T45] EXT4-fs (loop9): This should not happen!! Data will be lost [ 62.459549][ T45] [ 62.468608][ T30] audit: type=1400 audit(1700000038.469:724): avc: denied { lock } for pid=3116 comm="syz.4.1128" path="/5/file1/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.471327][ T45] EXT4-fs (loop9): Total free blocks count 0 [ 62.498365][ T30] audit: type=1400 audit(1700000038.469:725): avc: denied { link } for pid=3116 comm="syz.4.1128" name="file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.500217][ T2961] attempt to access beyond end of device [ 62.500217][ T2961] loop4: rw=2049, want=45112, limit=40427 [ 62.520074][ T45] EXT4-fs (loop9): Free/Dirty block details [ 62.537543][ T45] EXT4-fs (loop9): free_blocks=65281 [ 62.544198][ T45] EXT4-fs (loop9): dirty_blocks=65 [ 62.549470][ T45] EXT4-fs (loop9): Block reservation details [ 62.555568][ T45] EXT4-fs (loop9): i_reserved_data_blocks=65 [ 62.568994][ T10] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2976 with max blocks 32 with error 28 [ 62.581849][ T10] EXT4-fs (loop9): This should not happen!! Data will be lost [ 62.581849][ T10] [ 62.691023][ T3150] 9pnet: p9_errstr2errno: server reported unknown error š¦#ò [ 62.691023][ T3150] \,æÃ7Æ͈»Î^Õ [ 62.691023][ T3150] d# [ 62.868462][ T3182] FAULT_INJECTION: forcing a failure. [ 62.868462][ T3182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 62.882515][ T3182] CPU: 1 PID: 3182 Comm: syz.1.1153 Tainted: G W syzkaller #0 [ 62.891296][ T3182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 62.901362][ T3182] Call Trace: [ 62.904624][ T3182] [ 62.907540][ T3182] __dump_stack+0x21/0x30 [ 62.911863][ T3182] dump_stack_lvl+0x110/0x170 [ 62.916536][ T3182] ? show_regs_print_info+0x20/0x20 [ 62.921725][ T3182] dump_stack+0x15/0x20 [ 62.925878][ T3182] should_fail+0x3ab/0x500 [ 62.930282][ T3182] should_fail_alloc_page+0x55/0x80 [ 62.935506][ T3182] prepare_alloc_pages+0x13f/0x590 [ 62.940604][ T3182] ? __alloc_pages_bulk+0xab0/0xab0 [ 62.945797][ T3182] ? __schedule+0xbd7/0x14a0 [ 62.950389][ T3182] __alloc_pages+0x11d/0x460 [ 62.954974][ T3182] ? zone_watermark_fast+0x250/0x250 [ 62.960243][ T3182] ? preempt_schedule+0xbc/0xd0 [ 62.965078][ T3182] ? schedule_preempt_disabled+0x20/0x20 [ 62.970693][ T3182] pcpu_populate_chunk+0x184/0xcb0 [ 62.976423][ T3182] ? _find_next_bit+0x1b5/0x200 [ 62.981259][ T3182] pcpu_alloc+0xc8c/0x16f0 [ 62.985658][ T3182] __alloc_percpu_gfp+0x25/0x30 [ 62.990489][ T3182] bpf_map_alloc_percpu+0xc5/0x150 [ 62.995601][ T3182] htab_map_alloc+0xc32/0x15d0 [ 63.000372][ T3182] map_create+0x3f4/0x1fa0 [ 63.004773][ T3182] __sys_bpf+0x2ff/0x7d0 [ 63.008995][ T3182] ? bpf_link_show_fdinfo+0x330/0x330 [ 63.014347][ T3182] ? __kasan_check_write+0x14/0x20 [ 63.019442][ T3182] ? switch_fpu_return+0x15d/0x2c0 [ 63.024543][ T3182] __x64_sys_bpf+0x7c/0x90 [ 63.028942][ T3182] x64_sys_call+0x4b9/0x9a0 [ 63.033520][ T3182] do_syscall_64+0x4c/0xa0 [ 63.037937][ T3182] ? clear_bhb_loop+0x50/0xa0 [ 63.042604][ T3182] ? clear_bhb_loop+0x50/0xa0 [ 63.047268][ T3182] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.053158][ T3182] RIP: 0033:0x7f401ec5f4d9 [ 63.057557][ T3182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.077165][ T3182] RSP: 002b:00007f401d6ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.085584][ T3182] RAX: ffffffffffffffda RBX: 00007f401eedbfa0 RCX: 00007f401ec5f4d9 [ 63.093545][ T3182] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 4400000000000000 [ 63.101511][ T3182] RBP: 00007f401ecee04e R08: 0000000000000000 R09: 0000000000000000 [ 63.109469][ T3182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.117429][ T3182] R13: 00007f401eedc038 R14: 00007f401eedbfa0 R15: 00007fff1712bf28 [ 63.125391][ T3182] [ 63.172130][ T30] audit: type=1400 audit(1700000039.179:726): avc: denied { bind } for pid=3190 comm="syz.4.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.214343][ T3196] set_capacity_and_notify: 7 callbacks suppressed [ 63.214360][ T3196] loop1: detected capacity change from 0 to 33280 [ 63.249314][ T3196] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.271797][ T3196] EXT4-fs (loop1): 1 truncate cleaned up [ 63.279689][ T3196] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 63.366983][ T3223] loop1: detected capacity change from 0 to 256 [ 63.437726][ T3230] loop4: detected capacity change from 0 to 512 [ 63.444530][ T30] audit: type=1326 audit(1700000039.449:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.8.1172" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43984a24d9 code=0x7ffc0000 [ 63.469592][ T30] audit: type=1326 audit(1700000039.449:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.8.1172" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f43984a24d9 code=0x7ffc0000 [ 63.500298][ T30] audit: type=1326 audit(1700000039.449:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.8.1172" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43984a24d9 code=0x7ffc0000 [ 63.525283][ T30] audit: type=1326 audit(1700000039.449:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.8.1172" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43984a24d9 code=0x7ffc0000 [ 63.551578][ T30] audit: type=1326 audit(1700000039.449:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.8.1172" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f43984a24d9 code=0x7ffc0000 [ 63.578547][ T3242] loop1: detected capacity change from 0 to 33280 [ 63.587071][ T30] audit: type=1326 audit(1700000039.469:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.8.1172" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43984a24d9 code=0x7ffc0000 [ 63.627498][ T3242] EXT4-fs (loop1): Ignoring removed oldalloc option [ 63.636623][ T3242] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.653820][ T3242] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,oldalloc,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 63.670710][ T3242] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.717131][ T3253] loop9: detected capacity change from 0 to 512 [ 63.979545][ T3286] loop8: detected capacity change from 0 to 32896 [ 64.008940][ T3286] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.019645][ T3286] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.021599][ T3294] loop1: detected capacity change from 0 to 32896 [ 64.070248][ T3294] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.086508][ T3294] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.118517][ T293] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 64.156508][ T3303] loop9: detected capacity change from 0 to 33280 [ 64.189372][ T3303] EXT4-fs (loop9): 1 truncate cleaned up [ 64.200382][ T3310] input: syz1 as /devices/virtual/input/input18 [ 64.204053][ T3303] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 64.231185][ T3303] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1204: bg 0: block 465: padding at end of block bitmap is not set [ 64.246052][ T3303] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 64.258954][ T3303] EXT4-fs (loop9): This should not happen!! Data will be lost [ 64.258954][ T3303] [ 64.268637][ T3303] EXT4-fs (loop9): Total free blocks count 0 [ 64.275004][ T3303] EXT4-fs (loop9): Free/Dirty block details [ 64.278330][ T3319] loop8: detected capacity change from 0 to 256 [ 64.280910][ T3303] EXT4-fs (loop9): free_blocks=0 [ 64.298760][ T3303] EXT4-fs (loop9): dirty_blocks=1 [ 64.308808][ T3303] EXT4-fs (loop9): Block reservation details [ 64.314900][ T3303] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 64.315968][ T3319] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 64.463926][ T3336] loop1: detected capacity change from 0 to 33280 [ 64.481808][ T293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.494614][ T293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.501686][ T3336] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.1218: Attempting to read directory block (0) that is past i_size (16) [ 64.518281][ T293] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.518961][ T3336] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 64.540752][ T3336] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000080,data_err=ignore,grpid,discard,norecovery,grpjquota=.test_dummy_encryption=v1,sysvgroups,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 64.554130][ T293] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.598922][ T293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.612304][ T293] usb 6-1: config 0 descriptor?? [ 64.629010][ T3356] FAULT_INJECTION: forcing a failure. [ 64.629010][ T3356] name failslab, interval 1, probability 0, space 0, times 0 [ 64.658744][ T3356] CPU: 1 PID: 3356 Comm: syz.8.1228 Tainted: G W syzkaller #0 [ 64.667546][ T3356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 64.677616][ T3356] Call Trace: [ 64.680903][ T3356] [ 64.683836][ T3356] __dump_stack+0x21/0x30 [ 64.688181][ T3356] dump_stack_lvl+0x110/0x170 [ 64.693220][ T3356] ? show_regs_print_info+0x20/0x20 [ 64.698435][ T3356] ? __kasan_check_write+0x14/0x20 [ 64.703561][ T3356] dump_stack+0x15/0x20 [ 64.707740][ T3356] should_fail+0x3ab/0x500 [ 64.712170][ T3356] __should_failslab+0xa4/0xe0 [ 64.716945][ T3356] should_failslab+0x9/0x20 [ 64.721455][ T3356] slab_pre_alloc_hook+0x39/0xd0 [ 64.726382][ T3356] kmem_cache_alloc_trace+0x48/0x270 [ 64.731661][ T3356] ? alloc_tty_struct+0xa6/0x750 [ 64.736581][ T3356] alloc_tty_struct+0xa6/0x750 [ 64.741327][ T3356] ? idr_replace+0x1a0/0x1a0 [ 64.745902][ T3356] ? tty_init_dev+0x500/0x500 [ 64.750572][ T3356] ? __kasan_check_write+0x14/0x20 [ 64.755679][ T3356] ? mutex_lock+0x9b/0x1c0 [ 64.760094][ T3356] ? wait_for_completion_killable_timeout+0x10/0x10 [ 64.766676][ T3356] tty_init_dev+0x59/0x500 [ 64.771085][ T3356] ptmx_open+0xdd/0x2e0 [ 64.775243][ T3356] chrdev_open+0x585/0x5f0 [ 64.779644][ T3356] ? cd_forget+0x170/0x170 [ 64.784046][ T3356] ? fsnotify_perm+0x3e9/0x5b0 [ 64.788799][ T3356] ? cd_forget+0x170/0x170 [ 64.793201][ T3356] do_dentry_open+0x82a/0x1010 [ 64.797954][ T3356] vfs_open+0x73/0x80 [ 64.801919][ T3356] path_openat+0x26e6/0x2f80 [ 64.806494][ T3356] ? __kasan_slab_alloc+0xc9/0xe0 [ 64.811504][ T3356] ? slab_post_alloc_hook+0x4f/0x2b0 [ 64.816775][ T3356] ? __x64_sys_openat+0x136/0x160 [ 64.821782][ T3356] ? x64_sys_call+0x219/0x9a0 [ 64.826447][ T3356] ? do_syscall_64+0x4c/0xa0 [ 64.831022][ T3356] ? do_filp_open+0x400/0x400 [ 64.835688][ T3356] do_filp_open+0x1df/0x400 [ 64.840176][ T3356] ? vfs_tmpfile+0x2d0/0x2d0 [ 64.844762][ T3356] do_sys_openat2+0x15e/0x7f0 [ 64.849423][ T3356] ? __se_sys_futex+0x135/0x330 [ 64.854263][ T3356] ? do_sys_open+0xe0/0xe0 [ 64.858664][ T3356] ? __x64_sys_futex+0x100/0x100 [ 64.863593][ T3356] ? ksys_write+0x1fa/0x260 [ 64.868084][ T3356] __x64_sys_openat+0x136/0x160 [ 64.872922][ T3356] x64_sys_call+0x219/0x9a0 [ 64.877428][ T3356] do_syscall_64+0x4c/0xa0 [ 64.881832][ T3356] ? clear_bhb_loop+0x50/0xa0 [ 64.886498][ T3356] ? clear_bhb_loop+0x50/0xa0 [ 64.891180][ T3356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.897081][ T3356] RIP: 0033:0x7f43984a24d9 [ 64.901485][ T3356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.921081][ T3356] RSP: 002b:00007f4396ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 64.929484][ T3356] RAX: ffffffffffffffda RBX: 00007f439871efa0 RCX: 00007f43984a24d9 [ 64.937445][ T3356] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 64.945404][ T3356] RBP: 00007f439853104e R08: 0000000000000000 R09: 0000000000000000 [ 64.953393][ T3356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.961350][ T3356] R13: 00007f439871f038 R14: 00007f439871efa0 R15: 00007ffd8f21cce8 [ 64.969314][ T3356] [ 65.019777][ T3377] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.041197][ T2033] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 65.212510][ T293] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 65.224206][ T293] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 65.239535][ T293] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 65.259730][ T3398] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.267152][ T3398] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.275190][ T3398] device bridge_slave_0 entered promiscuous mode [ 65.282261][ T3408] input: syz0 as /devices/virtual/input/input20 [ 65.282762][ T3398] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.295738][ T3398] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.303627][ T3398] device bridge_slave_1 entered promiscuous mode [ 65.319188][ T3394] F2FS-fs (loop4): invalid crc value [ 65.350422][ T3394] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.410815][ T3398] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.417915][ T3398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.425209][ T3398] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.432237][ T3398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.500241][ T3398] device veth0_vlan entered promiscuous mode [ 65.515326][ T3398] device veth1_macvtap entered promiscuous mode [ 65.530876][ T3394] F2FS-fs (loop4): Start checkpoint disabled! [ 65.540501][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.540849][ T60] usb 6-1: USB disconnect, device number 6 [ 65.548634][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.566947][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.577497][ T3394] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 65.613260][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.632021][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.642801][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.658092][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.668773][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.678479][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.692182][ T413] attempt to access beyond end of device [ 65.692182][ T413] loop4: rw=2049, want=40976, limit=40427 [ 65.704228][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.712181][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.719987][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.968285][ T3433] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 66.002306][ T3433] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 66.020494][ T3444] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 66.032872][ T3433] F2FS-fs (loop1): invalid crc value [ 66.074134][ T3433] F2FS-fs (loop1): Found nat_bits in checkpoint [ 66.132091][ T3433] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 66.154517][ T3433] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 66.156832][ T3450] EXT4-fs (loop8): Test dummy encryption mode enabled [ 66.188987][ T3450] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 66.212144][ T3450] EXT4-fs (loop8): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 66.230820][ T3464] xt_hashlimit: size too large, truncated to 1048576 [ 66.246256][ T10] device bridge_slave_1 left promiscuous mode [ 66.254919][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.298365][ T10] device bridge_slave_0 left promiscuous mode [ 66.332639][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.359546][ T10] device veth1_macvtap left promiscuous mode [ 66.386557][ T10] device veth0_vlan left promiscuous mode [ 66.501304][ T3467] program syz.8.1272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.653488][ T3487] program syz.5.1279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.873043][ T3504] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 66.900848][ T3490] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 66.925027][ T3490] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 66.939206][ T45] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 66.939664][ T3490] F2FS-fs (loop8): invalid crc_offset: 33558524 [ 66.958400][ T3490] F2FS-fs (loop8): Found nat_bits in checkpoint [ 67.017670][ T3490] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 67.032196][ T3490] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 67.076003][ T3524] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 67.088719][ T3525] EXT4-fs (loop5): Ignoring removed oldalloc option [ 67.099611][ T899] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 67.129289][ T3525] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,oldalloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 67.332345][ T3555] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nolazytime,errors=remount-ro,grpjquota=,acl,. Quota mode: none. [ 67.355098][ T3555] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.371744][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 67.371758][ T30] audit: type=1400 audit(1700000043.359:749): avc: denied { execute } for pid=3558 comm="syz.4.1307" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.424217][ T3555] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.5.1306: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 67.470336][ T3565] FAULT_INJECTION: forcing a failure. [ 67.470336][ T3565] name failslab, interval 1, probability 0, space 0, times 0 [ 67.490038][ T3555] EXT4-fs (loop5): Remounting filesystem read-only [ 67.501779][ T899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.503534][ T3565] CPU: 1 PID: 3565 Comm: syz.8.1309 Tainted: G W syzkaller #0 [ 67.520620][ T3565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 67.521613][ T899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 67.530675][ T3565] Call Trace: [ 67.530684][ T3565] [ 67.545797][ T3565] __dump_stack+0x21/0x30 [ 67.550139][ T3565] dump_stack_lvl+0x110/0x170 [ 67.551592][ T899] usb 2-1: config 1 has no interface number 0 [ 67.554814][ T3565] ? show_regs_print_info+0x20/0x20 [ 67.560874][ T899] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.566031][ T3565] dump_stack+0x15/0x20 [ 67.566053][ T3565] should_fail+0x3ab/0x500 [ 67.566068][ T3565] __should_failslab+0xa4/0xe0 [ 67.566086][ T3565] should_failslab+0x9/0x20 [ 67.566100][ T3565] slab_pre_alloc_hook+0x39/0xd0 [ 67.566117][ T3565] ? prepare_creds+0x2f/0x610 [ 67.606303][ T3565] kmem_cache_alloc+0x44/0x260 [ 67.611078][ T3565] prepare_creds+0x2f/0x610 [ 67.615583][ T3565] cap_task_prctl+0x2f3/0x950 [ 67.620270][ T3565] security_task_prctl+0x78/0x100 [ 67.625300][ T3565] __se_sys_prctl+0xd4/0x1210 [ 67.629983][ T3565] ? __x64_sys_prctl+0xd0/0xd0 [ 67.634752][ T3565] ? __kasan_check_write+0x14/0x20 [ 67.639865][ T3565] __x64_sys_prctl+0xbf/0xd0 [ 67.644460][ T3565] x64_sys_call+0x633/0x9a0 [ 67.648970][ T3565] do_syscall_64+0x4c/0xa0 [ 67.653386][ T3565] ? clear_bhb_loop+0x50/0xa0 [ 67.658069][ T3565] ? clear_bhb_loop+0x50/0xa0 [ 67.662747][ T3565] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.668643][ T3565] RIP: 0033:0x7f43984a24d9 [ 67.673062][ T3565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.692671][ T3565] RSP: 002b:00007f4396ef0028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 67.701088][ T3565] RAX: ffffffffffffffda RBX: 00007f439871efa0 RCX: 00007f43984a24d9 [ 67.709061][ T3565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 67.717035][ T3565] RBP: 00007f439853104e R08: 0000000000000000 R09: 0000000000000000 [ 67.725007][ T3565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.731740][ T30] audit: type=1400 audit(1700000043.449:750): avc: denied { mounton } for pid=3560 comm="syz.8.1308" path="/124/file0" dev="tmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.732971][ T3565] R13: 00007f439871f038 R14: 00007f439871efa0 R15: 00007ffd8f21cce8 [ 67.763733][ T3565] [ 67.771650][ T899] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.780732][ T899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.791602][ T899] usb 2-1: Product: syz [ 67.795777][ T899] usb 2-1: Manufacturer: syz [ 67.800364][ T899] usb 2-1: SerialNumber: syz [ 67.859922][ T30] audit: type=1400 audit(1700000043.859:751): avc: denied { read } for pid=3574 comm="syz.5.1312" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 67.882084][ T899] usb 2-1: selecting invalid altsetting 1 [ 67.901681][ T30] audit: type=1400 audit(1700000043.889:752): avc: denied { open } for pid=3574 comm="syz.5.1312" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 67.973325][ T3570] loop4: p1 p3 < p5 p6 p7 > p4 [ 67.978270][ T3570] loop4: partition table partially beyond EOD, truncated [ 67.995601][ T3570] loop4: p4 start 1426063360 is beyond EOD, truncated [ 68.011598][ T3570] loop4: p5 size 16777216 extends beyond EOD, truncated [ 68.019682][ T3570] loop4: p7 start 75776 is beyond EOD, truncated [ 68.192220][ T30] audit: type=1400 audit(1700000044.199:753): avc: denied { write } for pid=3589 comm="syz.4.1319" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.247324][ T409] udevd[409]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 68.247364][ T407] udevd[407]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 68.258409][ T311] udevd[311]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 68.268538][ T411] udevd[411]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 68.455392][ T3605] set_capacity_and_notify: 10 callbacks suppressed [ 68.455404][ T3605] loop4: detected capacity change from 0 to 40427 [ 68.504217][ T3605] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 68.510624][ T3605] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 68.520451][ T3605] F2FS-fs (loop4): invalid crc value [ 68.527247][ T3605] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 68.531656][ T899] cdc_ncm 2-1:1.1: SET_NTB_FORMAT failed [ 68.552632][ T3605] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 68.559725][ T3605] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 68.561953][ T899] usb 2-1: selecting invalid altsetting 1 [ 68.573077][ T899] cdc_ncm 2-1:1.1: bind() failure [ 68.584614][ T899] usb 2-1: USB disconnect, device number 8 [ 69.184050][ T3661] loop1: detected capacity change from 0 to 40427 [ 69.224515][ T3661] F2FS-fs (loop1): invalid crc value [ 69.231396][ T3661] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 69.269478][ T3661] F2FS-fs (loop1): Start checkpoint disabled! [ 69.277282][ T3661] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 69.342851][ T413] attempt to access beyond end of device [ 69.342851][ T413] loop1: rw=2049, want=40968, limit=40427 [ 69.361596][ T26] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.412419][ T3676] loop1: detected capacity change from 0 to 33280 [ 69.432479][ T3676] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.455463][ T3676] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.1352: Allocating blocks 41-42 which overlap fs metadata [ 69.469482][ T3676] EXT4-fs (loop1): Remounting filesystem read-only [ 69.476292][ T3676] Quota error (device loop1): write_blk: dquota write failed [ 69.484161][ T3676] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 69.488197][ T3681] FAULT_INJECTION: forcing a failure. [ 69.488197][ T3681] name failslab, interval 1, probability 0, space 0, times 0 [ 69.493770][ T3676] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.1352: Allocating blocks 41-42 which overlap fs metadata [ 69.506609][ T3681] CPU: 1 PID: 3681 Comm: syz.8.1353 Tainted: G W syzkaller #0 [ 69.520043][ T3676] EXT4-fs (loop1): Remounting filesystem read-only [ 69.528508][ T3681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 69.528521][ T3681] Call Trace: [ 69.528525][ T3681] [ 69.528531][ T3681] __dump_stack+0x21/0x30 [ 69.528554][ T3681] dump_stack_lvl+0x110/0x170 [ 69.535496][ T3676] Quota error (device loop1): write_blk: dquota write failed [ 69.545060][ T3681] ? show_regs_print_info+0x20/0x20 [ 69.545085][ T3681] dump_stack+0x15/0x20 [ 69.545098][ T3681] should_fail+0x3ab/0x500 [ 69.545121][ T3681] __should_failslab+0xa4/0xe0 [ 69.548757][ T3676] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 69.551302][ T3681] should_failslab+0x9/0x20 [ 69.555806][ T3676] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.1352: Failed to acquire dquot type 1 [ 69.560248][ T3681] slab_pre_alloc_hook+0x39/0xd0 [ 69.567947][ T3676] EXT4-fs (loop1): Remounting filesystem read-only [ 69.572769][ T3681] kmem_cache_alloc_trace+0x48/0x270 [ 69.572792][ T3681] ? assoc_array_insert+0x90/0x3210 [ 69.572811][ T3681] assoc_array_insert+0x90/0x3210 [ 69.577221][ T3676] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, [ 69.581330][ T3681] ? slab_free_freelist_hook+0xc2/0x190 [ 69.586101][ T3676] inode 12: [ 69.595920][ T3681] ? rwsem_write_trylock+0x136/0x300 [ 69.595943][ T3681] ? clear_nonspinnable+0x60/0x60 [ 69.595958][ T3681] ? memcpy+0x56/0x70 [ 69.595974][ T3681] __key_link_begin+0xe1/0x210 [ 69.600449][ T3676] block 14: [ 69.611609][ T3681] key_create_or_update+0x4d4/0x9c0 [ 69.611630][ T3681] ? key_type_put+0x20/0x20 [ 69.616540][ T3676] freeing already freed block (bit 14); block bitmap corrupt. [ 69.623011][ T3681] ? lookup_user_key_possessed+0x40/0x40 [ 69.623033][ T3681] ? __kasan_check_write+0x14/0x20 [ 69.629258][ T3676] EXT4-fs (loop1): Remounting filesystem read-only [ 69.633468][ T3681] __se_sys_add_key+0x34b/0x410 [ 69.633489][ T3681] ? __x64_sys_add_key+0xd0/0xd0 [ 69.633502][ T3681] ? ksys_write+0x1fa/0x260 [ 69.638524][ T3676] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #12: comm syz.1.1352: corrupted inode contents [ 69.646015][ T3681] ? __kasan_check_write+0x14/0x20 [ 69.646033][ T3681] __x64_sys_add_key+0xbf/0xd0 [ 69.646048][ T3681] x64_sys_call+0x713/0x9a0 [ 69.646063][ T3681] do_syscall_64+0x4c/0xa0 [ 69.652414][ T3676] EXT4-fs (loop1): Remounting filesystem read-only [ 69.654754][ T3681] ? clear_bhb_loop+0x50/0xa0 [ 69.660014][ T3676] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #12: comm syz.1.1352: mark_inode_dirty error [ 69.665008][ T3681] ? clear_bhb_loop+0x50/0xa0 [ 69.665026][ T3681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.665042][ T3681] RIP: 0033:0x7f43984a24d9 [ 69.665057][ T3681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.669749][ T3676] EXT4-fs (loop1): Remounting filesystem read-only [ 69.673752][ T3681] RSP: 002b:00007f4396ef0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 69.673771][ T3681] RAX: ffffffffffffffda RBX: 00007f439871efa0 RCX: 00007f43984a24d9 [ 69.673782][ T3681] RDX: 0000200000000340 RSI: 0000200000000200 RDI: 00002000000001c0 [ 69.673793][ T3681] RBP: 00007f439853104e R08: ffffffffffffffff R09: 0000000000000000 [ 69.673804][ T3681] R10: 00000000000000da R11: 0000000000000246 R12: 0000000000000000 [ 69.677200][ T3676] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #12: comm syz.1.1352: corrupted inode contents [ 69.682058][ T3681] R13: 00007f439871f038 R14: 00007f439871efa0 R15: 00007ffd8f21cce8 [ 69.682075][ T3681] [ 69.744769][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 69.785883][ T3676] EXT4-fs (loop1): Remounting filesystem read-only [ 69.895515][ T3676] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.1352: mark_inode_dirty error [ 69.908405][ T3676] EXT4-fs (loop1): Remounting filesystem read-only [ 69.917817][ T3676] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #12: comm syz.1.1352: corrupted inode contents [ 69.927423][ T3690] loop4: detected capacity change from 0 to 34816 [ 69.936403][ T3676] EXT4-fs (loop1): Remounting filesystem read-only [ 69.951703][ T26] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 146, using maximum allowed: 30 [ 69.962695][ T3676] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 69.973898][ T26] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.982716][ T3676] EXT4-fs (loop1): Remounting filesystem read-only [ 69.987181][ T26] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 146 [ 69.992517][ T3676] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #12: comm syz.1.1352: corrupted inode contents [ 70.005275][ T26] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.017267][ T3676] EXT4-fs (loop1): Remounting filesystem read-only [ 70.023358][ T26] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 70.030547][ T3690] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.038552][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.057686][ T26] usb 3-1: config 0 descriptor?? [ 70.063035][ T3676] EXT4-fs error (device loop1): ext4_truncate:4317: inode #12: comm syz.1.1352: mark_inode_dirty error [ 70.085732][ T3676] EXT4-fs (loop1): Remounting filesystem read-only [ 70.109719][ T3676] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 70.123951][ T3698] loop8: detected capacity change from 0 to 256 [ 70.131377][ T3676] EXT4-fs (loop1): Remounting filesystem read-only [ 70.138473][ T3676] EXT4-fs (loop1): 1 truncate cleaned up [ 70.144868][ T3676] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,resgid=0x00000000000000002. Quota mode: writeback. [ 70.196161][ T3676] EXT4-fs (loop1): shut down requested (2) [ 70.222221][ T3676] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 70.247492][ T3706] loop4: detected capacity change from 0 to 33280 [ 70.268746][ T3706] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.284524][ T3710] loop1: detected capacity change from 0 to 33280 [ 70.309246][ T3710] EXT4-fs (loop1): Ignoring removed nobh option [ 70.326196][ T3706] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.1362: bad orphan inode 13 [ 70.338714][ T3706] ext4_test_bit(bit=12, block=18) = 1 [ 70.344389][ T3706] is_bad_inode(inode)=0 [ 70.348664][ T3706] NEXT_ORPHAN(inode)=0 [ 70.352896][ T3706] max_ino=32 [ 70.356182][ T3706] i_nlink=1 [ 70.360346][ T3710] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,quota,,errors=continue. Quota mode: writeback. [ 70.378250][ T3706] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.400521][ T3710] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.440269][ T3710] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.1364: corrupted inode contents [ 70.440577][ T30] audit: type=1400 audit(1700000046.439:754): avc: denied { create } for pid=3704 comm="syz.4.1362" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 70.452419][ T3706] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 70.492680][ T3710] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #2: comm syz.1.1364: mark_inode_dirty error [ 70.509411][ T3706] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1362: bg 0: block 248: padding at end of block bitmap is not set [ 70.509741][ T3710] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.1364: corrupted inode contents [ 70.528604][ T3706] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.1362: Failed to acquire dquot type 1 [ 70.537429][ T26] input: HID 17ef:60a3 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:17EF:60A3.000C/input/input22 [ 70.558542][ T3710] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.1364: mark_inode_dirty error [ 70.564543][ T3729] loop5: detected capacity change from 0 to 32896 [ 70.592875][ T3729] EXT4-fs (loop5): Test dummy encryption mode enabled [ 70.628214][ T3729] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,block_validity,data_err=ignore,test_dummy_encryption=v1,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 70.671722][ T3729] ext4 filesystem being mounted at /273/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.673182][ T26] lenovo 0003:17EF:60A3.000C: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0 [ 70.718345][ T3729] device-mapper: table: 253:3: snapshot: Cannot get origin device [ 70.726585][ T3729] device-mapper: ioctl: error adding target to table [ 70.761040][ T3744] device-mapper: table: 253:5: linear: Device lookup failed [ 70.768634][ T3744] device-mapper: ioctl: error adding target to table [ 70.778264][ T3744] device-mapper: ioctl: The device has no table. [ 70.831281][ T899] usb 3-1: USB disconnect, device number 3 [ 71.394684][ T3790] loop4: detected capacity change from 0 to 256 [ 71.579192][ T3804] loop4: detected capacity change from 0 to 33280 [ 71.602380][ T3804] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 71.652364][ T3804] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002] [ 71.661928][ T3804] System zones: 0-2, 18-18, 34-35 [ 71.669637][ T3804] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 71.694930][ T3804] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.818867][ T3829] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.848942][ T3829] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 72.006076][ T3853] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,grpquota,journal_ioprio=0x0000000000000002,block_validity,nodioread_nolock,nodelalloc,norecovery,inode_readahead_blks=0x0000000002000000,,errors=continue. Quota mode: writeback. [ 72.058310][ T3853] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.097716][ T3852] EXT4-fs error (device loop4): ext4_map_blocks:742: inode #15: comm syz.4.1433: lblock 0 mapped to illegal pblock 0 (length 1) [ 72.121786][ T3853] EXT4-fs (loop4): shut down requested (0) [ 72.129119][ T3876] Invalid argument reading file caps for ./file0 [ 72.394272][ T3849] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 72.403731][ T3849] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 72.434011][ T3849] F2FS-fs (loop5): invalid crc value [ 72.439357][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 72.439371][ T30] audit: type=1400 audit(1700000304.440:763): avc: denied { bind } for pid=3897 comm="syz.1.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.477581][ T3849] F2FS-fs (loop5): Found nat_bits in checkpoint [ 72.513147][ T3849] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 72.520353][ T3849] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 72.647182][ T3907] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.658176][ T3907] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.761610][ T30] audit: type=1404 audit(1700000304.760:764): enforcing=1 old_enforcing=0 auid=0 ses=1 enabled=1 old-enabled=1 lsm=selinux res=1 [ 72.795297][ T30] audit: type=1400 audit(1700000304.790:765): avc: denied { read } for pid=762 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 72.821363][ T30] audit: type=1400 audit(1700000304.800:766): avc: denied { read } for pid=3398 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 72.861156][ T30] audit: type=1400 audit(1700000304.800:767): avc: denied { mounton } for pid=3920 comm="syz.2.1449" path="/18/sys" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 72.883883][ T30] audit: type=1400 audit(1700000304.860:768): avc: denied { create } for pid=3922 comm="syz.5.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 72.903921][ T30] audit: type=1400 audit(1700000304.860:769): avc: denied { read } for pid=3398 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 72.930752][ T30] audit: type=1400 audit(1700000304.860:770): avc: denied { read } for pid=762 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 72.955125][ T30] audit: type=1400 audit(1700000304.920:771): avc: denied { read } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 72.979911][ T30] audit: type=1400 audit(1700000304.920:772): avc: denied { read } for pid=3398 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 75.243999][ T4290] device sit0 entered promiscuous mode [ 75.269733][ T4290] netlink: 'syz.5.1625': attribute type 1 has an invalid length. [ 75.291651][ T4290] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1625'. [ 75.740836][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 75.750757][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.759089][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 75.767454][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.784523][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.792906][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.801140][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.809401][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.968048][ T4418] netlink: 'syz.4.1681': attribute type 15 has an invalid length. [ 75.990496][ T4422] netlink: 'syz.8.1686': attribute type 3 has an invalid length. [ 75.998498][ T4422] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1686'. [ 76.189473][ T4447] ip_tables: iptables: counters copy to user failed while replacing table [ 77.551906][ T30] kauditd_printk_skb: 923 callbacks suppressed [ 77.551921][ T30] audit: type=1400 audit(1700000309.560:1696): avc: denied { read } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.582256][ T30] audit: type=1400 audit(1700000309.560:1697): avc: denied { bpf } for pid=4639 comm="syz.1.1789" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 77.603181][ T30] audit: type=1400 audit(1700000309.560:1698): avc: denied { map_create } for pid=4639 comm="syz.1.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 77.622485][ T30] audit: type=1400 audit(1700000309.560:1699): avc: denied { bpf } for pid=4639 comm="syz.1.1789" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 77.643247][ T30] audit: type=1400 audit(1700000309.560:1700): avc: denied { bpf } for pid=4639 comm="syz.1.1789" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 77.663895][ T30] audit: type=1400 audit(1700000309.560:1701): avc: denied { map_create } for pid=4639 comm="syz.1.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 77.683124][ T30] audit: type=1400 audit(1700000309.560:1702): avc: denied { bpf } for pid=4639 comm="syz.1.1789" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 77.704040][ T30] audit: type=1400 audit(1700000309.560:1703): avc: denied { prog_load } for pid=4639 comm="syz.1.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 77.723348][ T30] audit: type=1400 audit(1700000309.560:1704): avc: denied { bpf } for pid=4639 comm="syz.1.1789" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 77.744317][ T30] audit: type=1400 audit(1700000309.570:1705): avc: denied { read } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.504456][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1866'. [ 78.790719][ T4838] ip_tables: iptables: counters copy to user failed while replacing table [ 79.523883][ T4946] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 79.879787][ T5024] capability: warning: `syz.1.1968' uses 32-bit capabilities (legacy support in use) [ 82.967385][ T30] kauditd_printk_skb: 531 callbacks suppressed [ 82.967401][ T30] audit: type=1400 audit(1700000314.970:2237): avc: denied { read } for pid=5053 comm="syz.8.1986" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 82.996309][ T30] audit: type=1400 audit(1700000314.970:2238): avc: denied { read write } for pid=5052 comm="syz.2.1985" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 83.019884][ T30] audit: type=1400 audit(1700000314.970:2239): avc: denied { execmem } for pid=5051 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 83.039326][ T30] audit: type=1400 audit(1700000314.990:2240): avc: denied { read } for pid=1831 comm="syz-executor" name="loop8" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.063158][ T30] audit: type=1400 audit(1700000315.010:2241): avc: denied { read write } for pid=5056 comm="syz.1.1984" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 83.490385][ T30] audit: type=1400 audit(1700000315.490:2242): avc: denied { read } for pid=3398 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.514101][ T30] audit: type=1400 audit(1700000315.510:2243): avc: denied { read } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.886303][ T30] audit: type=1400 audit(1700000315.880:2244): avc: denied { execmem } for pid=5058 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 83.906624][ T30] audit: type=1400 audit(1700000315.890:2245): avc: denied { read write } for pid=5059 comm="syz.2.1987" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.930909][ T30] audit: type=1400 audit(1700000315.900:2246): avc: denied { name_bind } for pid=5061 comm="syz.8.1988" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 85.722215][ T8] device bridge_slave_1 left promiscuous mode [ 85.728879][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.736376][ T8] device bridge_slave_0 left promiscuous mode [ 85.742682][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.750495][ T8] device veth1_macvtap left promiscuous mode [ 85.756535][ T8] device veth0_vlan left promiscuous mode [ 86.862342][ T8] device bridge_slave_1 left promiscuous mode [ 86.868465][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.876017][ T8] device bridge_slave_0 left promiscuous mode [ 86.882213][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.889993][ T8] device bridge_slave_1 left promiscuous mode [ 86.896171][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.903677][ T8] device bridge_slave_0 left promiscuous mode [ 86.909931][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.918124][ T8] device veth1_macvtap left promiscuous mode [ 86.924183][ T8] device veth0_vlan left promiscuous mode [ 86.930164][ T8] device veth1_macvtap left promiscuous mode [ 86.936183][ T8] device veth0_vlan left promiscuous mode [ 90.302234][ T8] device bridge_slave_1 left promiscuous mode [ 90.308352][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.315916][ T8] device bridge_slave_0 left promiscuous mode [ 90.322082][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.329897][ T8] device veth1_macvtap left promiscuous mode [ 90.335960][ T8] device veth0_vlan left promiscuous mode