last executing test programs: 33.949061158s ago: executing program 4 (id=165): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c00000001900674c0000000000000000ff010000000000000000000000000003e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000002000000000000000008001f0012"], 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) 33.842746691s ago: executing program 4 (id=168): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x2, 0x4, 0x2, "07000000008000"}, 0x22}}, 0x0) 33.762005254s ago: executing program 4 (id=170): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 33.716127045s ago: executing program 4 (id=173): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x20440a, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x1527, &(0x7f0000002780)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x185081, 0x0) 33.382365876s ago: executing program 4 (id=181): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000001cc0)="b1d3ef9a8e15455db6db39236c3b", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 33.187829782s ago: executing program 4 (id=184): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x4) write$binfmt_misc(r1, 0x0, 0xfffffecc) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="ad", 0x1}], 0x1, 0xd) 33.032029487s ago: executing program 32 (id=184): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x4) write$binfmt_misc(r1, 0x0, 0xfffffecc) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="ad", 0x1}], 0x1, 0xd) 6.344555333s ago: executing program 0 (id=828): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x1460, 0x10, 0x3, 0x4e}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x614e, 0x2, 0x1, 0x3ab, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x0, 0x9, 0x8, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7cb5, 0x10, 0x1, 0x3bf, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x3, 0xc75, 0x0, 0x0}}, 0x0) 5.334259334s ago: executing program 0 (id=845): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 5.243776728s ago: executing program 0 (id=850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x800, 0x0, 0xffffffffffffffff, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.210458728s ago: executing program 0 (id=853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, 0x0) 5.123238081s ago: executing program 0 (id=857): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0xa, 0x3, 0x1, {0x0, 0x17d, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0x2, 0xc000, 0x20000000, 0x0, 0x0, 0x3ff, 0xb101}}, {0x0, 0x1e}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080)=0x2, 0x7f03) 4.878418959s ago: executing program 0 (id=864): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005"], 0x0, 0x208, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.269707191s ago: executing program 5 (id=964): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)) 1.153590474s ago: executing program 5 (id=967): openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x169042, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.081209466s ago: executing program 3 (id=969): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_create(0x7) 781.960076ms ago: executing program 3 (id=974): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000080), &(0x7f0000000440)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 735.931577ms ago: executing program 3 (id=977): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FREEZING\x00', 0x9) 730.291337ms ago: executing program 1 (id=978): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@flushsa={0x14, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfc, {0x33}}, 0x14}, 0x1, 0x0, 0x0, 0x1081}, 0x4000) 695.204698ms ago: executing program 1 (id=980): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 690.122608ms ago: executing program 3 (id=981): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) select(0x406f205456671cf9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) 664.936079ms ago: executing program 1 (id=983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) 630.5421ms ago: executing program 1 (id=985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r0}, 0x38) unshare(0x2a020400) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000000100)=""/218}, 0x20) 450.200286ms ago: executing program 2 (id=990): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@flushsa={0x14, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfc, {0x33}}, 0x14}, 0x1, 0x0, 0x0, 0x1081}, 0x4000) 422.913827ms ago: executing program 2 (id=991): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000008c0)="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", 0xd37}], 0x1}, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000050000000002000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080), 0x3ff, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000340)=""/10}, 0x20) 379.988808ms ago: executing program 3 (id=992): r0 = socket$inet6(0xa, 0x3, 0x5) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xffffffff}, 0x1c) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="28000000000000002900000002"], 0x28}}], 0x1, 0x0) 374.426048ms ago: executing program 2 (id=993): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r0, 0x400, 0x0) fcntl$setown(r0, 0x8, 0x0) fcntl$setlease(r0, 0x400, 0x2) 356.553549ms ago: executing program 1 (id=994): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x25dfdbfc, {{@in, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x100}, {0x0, 0x4, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x2}, {0x0, 0x3, 0x200000000000, 0x2}}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 334.6026ms ago: executing program 3 (id=995): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f000000cf00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000004, 0x204031, 0xffffffffffffffff, 0xfc777000) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) 334.47792ms ago: executing program 2 (id=996): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f80)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x76f77caf, 0x6, 0x4, {0xd, 0x1, 0x1, 0x0, 0x3ff, 0x61}, {0x1, 0x2, 0x6, 0xfb4, 0x1, 0x1}, 0x3, 0x5, 0x3}}]}]}}]}, 0xfe02}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 312.94846ms ago: executing program 1 (id=997): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readahead(0xffffffffffffffff, 0x3, 0x6) 312.42762ms ago: executing program 2 (id=998): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x180c850, &(0x7f0000002000)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d77696e6e742c6e6f636173652c696f636861727365743d6575632d6a700000c20000006f72746e616d653d6c6f7765722c757466383d302c696f636861727365743d6d6163696e7569742c757365667265652c636f6465704b0a4b2538356e756d7461496c3d302c726f6469722c6e6f6e756d7461696c3d302c757466383d302c00c322b162cd61df25b895def9502bee9e95009810e8069b28a1a7742c279b79301dcd7b7d3dade17faa7db0e638d8c3dc7702220fa1b0bf063448071c7d669c36e87dd73b4ad42b74442db1876e699c757a57781457cf16140ae4101b69cd03670cd0f1b9894365143b2305ed3dc0ad22ee05d0725dab07a69e81dcbee809d71a613dab596c7b53341759ed5a2cdab6d8661110d7a1d2e30704bdf3584a5a8be23d181651970f8dda74906ceae015c894f9caede8bb661b190608430635fed301c23e73976cdf1e140d5296a844720174d3edd4f74486626709442cf6c818c343a9b546409d8285b9ec41d3104d03290efd469d587b34f5a2202df550372f42a4d2bd11a8cfbec3062ae21fc9e3"], 0x1, 0x363, &(0x7f0000000c80)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) 303.21309ms ago: executing program 5 (id=999): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000540)=""/42, 0x2a) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getdents(r0, &(0x7f0000000640)=""/223, 0xdf) 242.269272ms ago: executing program 5 (id=1000): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x4058, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@noquota}, {@stripe={'stripe', 0x3d, 0x6}}, {@sb={'sb', 0x3d, 0x3}}]}, 0x1, 0x502, &(0x7f0000000600)="$eJzs3V9oXFkZAPDvTpOY7WY7FRbUZdGg4C6uJm2T7boUpAX/UZtSG1+0gZK00yR0kgnJRJsIUrFIwRefRKgU7YOCKMbHvqkIWiz6UCj6UooU1EJbqPocuTNzY0gmzWybzm3T3w9O77ln2jnn3m/uzD2n954bwAurNyIORsSOiHgrIoqN8kIjxfl6Sv/e2MDSRJqSWF4efpBEEhGHB5YmsvdKGsuXG2/wZkT8rjOJsQvr651bWDw7Wi6XZhvr/dWpmf65hcVPTU6NjpfGS9MD777z6f0Dbw/uH9iybb09emLqF5WhAz+9e/TXH/74Jx4kcTB6Gq+t3o6t0hu9jX3SGa+sfiGJ+PpWV5az7lX5pCPHhtCyP73z+g/ybgMA0H6Fxrl/R+38vxg7on7y1n1j5GEx7vx5o393eOTyv9rZTgAAAODxLS9/pLEEAAAAtq9E3x8AAAC2uew6gMMDSxNZate1B3e/0K6a2Mi9QxGxux7/7P7u+isdjXt6u6MzInb+O4nVt/Uma+75fRzVz0X0xjf+UD3//TNpiqd0HzbPpqW/590C8tQ1mHcLyNNrX867BeTpLxfzbgF5unEv7xaQp+PDebeAPB3dn3cLyNOlB3m3gN8cqk8AuH78r1Cb8y8b5Vk7/pPmX3rCuu8XInqj+5ery4z/tFc2/je2bvyvsDL+t2OD8b9dLdZx9Ws3P9Ss/ItfTeM/PJaN/31y5EeltP50+cQbRkvufTvitY5m8U9W4p9sEP9ii3X8/vpg05H+3+5K4/+zn6fxzpL4t9fyTyLeiObxzySPnp+1/8xkubSn/mfTOj768B//bVY+/dc0/tc+kx3/aUrrz/4vgKcvPf53bhD/zb7/d7dYx5XJO01Heod70vi/8a1Hx79wtyv5Su3D2NUoOTdarc7ujehKjqwv3/de98CLJdtH2T5M4//mx5r//n+wtmz+/Z9+Jt7fYp1HThQONCsf/FUa/+993vGfnzT+pzc5/jf6/X+11Tpu3h5tVj7x2TT+x6+IPwAAAAAAAAA8mUJE9ERS6FvJFwp9ffVneL8aOwvlylz1rTOV+enTUXtW9u7oLGRXehXr60m6vrdxPVC2vm/N+kDjepGLxZdq632nKuXTeW88AAAAbHM9EbdOfOfqB15e0///Z7He/wcAAACef2n///UfX76U5v/T6kQ+AAAAwHMl7f8//O79a6H/DwAAANuW/j8AAABsf1n//9jQUBwbGlrOnvs3XRmfPDsx8+6+PX1T86f6TlVmZ/rGK5Xx2ox9U5u/b7lSmdn7dsyf66+W5qr9cwuLJ6cq89PVk7Xnxp4sdbZh24DNXfjb1ZG82wAAALRPzwbz/7+yau7+PRGxKyKuFzvfl831DwAAADz7eiJufemH3/zj3MLi2dFyuTQrIyMjs5LJ+xsKAADYav8/6c+7JQAAAAAAAAAAAAAAAAAAAPDiasd0YnlvIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+P/wUAAP//faYBPg==") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 115.417516ms ago: executing program 5 (id=1001): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x8}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 64.709748ms ago: executing program 5 (id=1002): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x31}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 0s ago: executing program 2 (id=1003): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r1, r1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {@in6=@local, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x6, 0xa, 0xa, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x68}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. [ 20.431691][ T28] audit: type=1400 audit(1779147195.510:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.436180][ T278] cgroup: Unknown subsys name 'net' [ 20.455128][ T28] audit: type=1400 audit(1779147195.510:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.481806][ T28] audit: type=1400 audit(1779147195.540:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.482183][ T278] cgroup: Unknown subsys name 'devices' [ 20.629664][ T278] cgroup: Unknown subsys name 'hugetlb' [ 20.635300][ T278] cgroup: Unknown subsys name 'rlimit' [ 20.740116][ T28] audit: type=1400 audit(1779147195.820:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.763329][ T28] audit: type=1400 audit(1779147195.820:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.788140][ T28] audit: type=1400 audit(1779147195.820:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.812519][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.821537][ T28] audit: type=1400 audit(1779147195.900:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.847381][ T28] audit: type=1400 audit(1779147195.900:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.883037][ T28] audit: type=1400 audit(1779147195.960:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.908613][ T28] audit: type=1400 audit(1779147195.960:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.908656][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.693707][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.700823][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.708371][ T288] device bridge_slave_0 entered promiscuous mode [ 21.716634][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.724040][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.731572][ T288] device bridge_slave_1 entered promiscuous mode [ 21.800753][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.808017][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.815489][ T287] device bridge_slave_0 entered promiscuous mode [ 21.823644][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.830858][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.838362][ T287] device bridge_slave_1 entered promiscuous mode [ 21.848660][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.855708][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.863198][ T286] device bridge_slave_0 entered promiscuous mode [ 21.891898][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.898998][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.906366][ T286] device bridge_slave_1 entered promiscuous mode [ 21.964439][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.971584][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.979134][ T289] device bridge_slave_0 entered promiscuous mode [ 22.000133][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.007194][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.017758][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.024821][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.032266][ T289] device bridge_slave_1 entered promiscuous mode [ 22.079001][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.086075][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.093585][ T290] device bridge_slave_0 entered promiscuous mode [ 22.107844][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.114902][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.122426][ T290] device bridge_slave_1 entered promiscuous mode [ 22.186790][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.193876][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.201217][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.208364][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.249138][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.256205][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.263534][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.270585][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.298327][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.307168][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.314715][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.322649][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.330218][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.339096][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.346513][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.354105][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.362595][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.370843][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.377888][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.410931][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.419143][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.427107][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.435218][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.443457][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.450532][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.458016][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.466192][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.473269][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.505430][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.513638][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.522220][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.529324][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.548337][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.556448][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.585646][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.594294][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.602559][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.609614][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.617208][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.625546][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.634099][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.641215][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.648765][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.665713][ T288] device veth0_vlan entered promiscuous mode [ 22.688043][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.696580][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.704981][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.712657][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.720796][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.729121][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.740418][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.748499][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.756658][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.763736][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.771923][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.791586][ T288] device veth1_macvtap entered promiscuous mode [ 22.799094][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.807533][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.815572][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.824091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.832635][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.840527][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.848553][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.856837][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.865233][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.872296][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.879869][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.888144][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.896494][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.904245][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.912660][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.921042][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.928136][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.935631][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.943223][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.950765][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.959110][ T286] device veth0_vlan entered promiscuous mode [ 22.971191][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.979400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.988399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.996378][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.016220][ T289] device veth0_vlan entered promiscuous mode [ 23.023007][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.030666][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.038250][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.046288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.054462][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.062869][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.071232][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.079242][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.087284][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.095039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.113984][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.122401][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.131027][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.134671][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 23.142319][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.161705][ T287] device veth0_vlan entered promiscuous mode [ 23.170815][ T286] device veth1_macvtap entered promiscuous mode [ 23.184875][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.197905][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.212134][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.220457][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.228814][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.241997][ T290] device veth0_vlan entered promiscuous mode [ 23.254773][ T289] device veth1_macvtap entered promiscuous mode [ 23.262293][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.276337][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.284093][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.292508][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.306676][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.315245][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.326978][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.336471][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.345211][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.354054][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.384093][ T287] device veth1_macvtap entered promiscuous mode [ 23.391392][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.405765][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.414478][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.422904][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.431325][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.439641][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.448069][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.456261][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.467651][ T290] device veth1_macvtap entered promiscuous mode [ 23.486657][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.502261][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.514467][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.522940][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.561506][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.604546][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.673392][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.692829][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.783603][ T364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 23.795909][ T367] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 23.815206][ T371] loop2: detected capacity change from 0 to 128 [ 23.914769][ T43] kworker/u4:2: attempt to access beyond end of device [ 23.914769][ T43] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 23.943935][ T388] loop0: detected capacity change from 0 to 512 [ 23.993598][ T388] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 24.015037][ T396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 24.025269][ T388] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 24.031004][ T396] tipc: Started in network mode [ 24.045138][ T396] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 24.054912][ T396] tipc: Enabling of bearer rejected, failed to enable media [ 24.063533][ T398] Zero length message leads to an empty skb [ 24.064646][ T388] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.37: bad orphan inode 131083 [ 24.092092][ T388] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 24.121441][ T388] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #2: block 13: comm syz.0.37: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 24.149618][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.162787][ T288] EXT4-fs (loop0): unmounting filesystem. [ 24.237565][ T298] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.247719][ T416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 24.277356][ T416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 24.361403][ T425] loop4: detected capacity change from 0 to 512 [ 24.376958][ T425] EXT4-fs (loop4): Test dummy encryption mode enabled [ 24.392343][ T425] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2750: inode #11: comm syz.4.53: corrupted xattr block 95 [ 24.428458][ T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.442861][ T425] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 24.447534][ T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.477364][ T298] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 24.486451][ T298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.494773][ T425] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.53: bg 0: block 7: invalid block bitmap [ 24.509365][ T298] usb 4-1: config 0 descriptor?? [ 24.538075][ T425] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 24.552337][ T425] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2916: inode #11: comm syz.4.53: corrupted xattr block 95 [ 24.588386][ T425] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 24.598078][ T425] EXT4-fs (loop4): 1 orphan inode deleted [ 24.604051][ T425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 24.718539][ T289] EXT4-fs (loop4): unmounting filesystem. [ 24.795066][ T457] loop2: detected capacity change from 0 to 256 [ 24.814226][ T458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 24.895994][ T466] loop4: detected capacity change from 0 to 512 [ 24.918532][ T298] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 24.936481][ T298] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 24.955820][ T298] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 24.965747][ T466] EXT4-fs error (device loop4): ext4_acquire_dquot:6822: comm syz.4.71: Failed to acquire dquot type 1 [ 24.977981][ T466] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #16: comm syz.4.71: corrupted inode contents [ 24.993579][ T298] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 24.998647][ T466] EXT4-fs error (device loop4): ext4_dirty_inode:6135: inode #16: comm syz.4.71: mark_inode_dirty error [ 25.012597][ T298] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 25.013743][ T466] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #16: comm syz.4.71: corrupted inode contents [ 25.038531][ T466] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.71: mark_inode_dirty error [ 25.043191][ T298] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 25.050163][ T466] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #16: comm syz.4.71: corrupted inode contents [ 25.069665][ T466] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 25.078606][ T466] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #16: comm syz.4.71: corrupted inode contents [ 25.090636][ T466] EXT4-fs error (device loop4): ext4_truncate:4316: inode #16: comm syz.4.71: mark_inode_dirty error [ 25.097618][ T298] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 25.102653][ T466] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 25.120059][ T466] EXT4-fs (loop4): 1 truncate cleaned up [ 25.127490][ T466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 25.136429][ T466] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.151216][ T479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 25.161243][ T298] hid-thrustmaster 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 25.204789][ T298] hid-thrustmaster 0003:044F:B65D.0001: Wrong number of endpoints? [ 25.220840][ T485] loop1: detected capacity change from 0 to 256 [ 25.235458][ C0] hid-thrustmaster 0003:044F:B65D.0001: Unknown wheel's model id 0x0, unable to proceed further with wheel init [ 25.391713][ T289] EXT4-fs (loop4): unmounting filesystem. [ 25.491496][ T298] usb 4-1: USB disconnect, device number 2 [ 25.557503][ T291] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.676029][ T438] loop0: detected capacity change from 0 to 131072 [ 25.701175][ T438] F2FS-fs (loop0): Found nat_bits in checkpoint [ 25.738460][ T291] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.757367][ T291] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.774352][ T438] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 25.782064][ T291] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 25.803745][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 25.817432][ T291] usb 3-1: SerialNumber: syz [ 25.852586][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 25.852602][ T28] audit: type=1400 audit(1779147200.930:166): avc: denied { create } for pid=437 comm="syz.0.58" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 25.869893][ T438] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 25.886844][ T28] audit: type=1400 audit(1779147200.960:167): avc: denied { write } for pid=437 comm="syz.0.58" name="file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.909018][ T28] audit: type=1400 audit(1779147200.960:168): avc: denied { open } for pid=437 comm="syz.0.58" path="/18/file0/file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.931854][ T28] audit: type=1400 audit(1779147200.960:169): avc: denied { ioctl } for pid=437 comm="syz.0.58" path="/18/file0/file1" dev="loop0" ino=7 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.956445][ T298] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.016699][ T28] audit: type=1400 audit(1779147201.090:170): avc: denied { name_bind } for pid=530 comm="syz.3.98" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 26.038489][ T291] usb 3-1: 0:2 : does not exist [ 26.058643][ T291] usb 3-1: USB disconnect, device number 2 [ 26.096581][ T28] audit: type=1400 audit(1779147201.170:171): avc: denied { read } for pid=534 comm="syz.3.100" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.120719][ T535] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.124043][ T28] audit: type=1400 audit(1779147201.200:172): avc: denied { open } for pid=534 comm="syz.3.100" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.169789][ T298] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 26.189848][ T298] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.206283][ T298] usb 2-1: config 0 has no interface number 0 [ 26.212606][ T298] usb 2-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.225772][ T28] audit: type=1400 audit(1779147201.200:173): avc: denied { ioctl } for pid=534 comm="syz.3.100" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.226085][ T298] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 26.259990][ T298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.272206][ T298] usb 2-1: config 0 descriptor?? [ 26.306944][ T543] process 'syz.0.102' launched '/dev/fd/4' with NULL argv: empty string added [ 26.308809][ T382] udevd[382]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.332038][ T28] audit: type=1400 audit(1779147201.410:174): avc: denied { execute } for pid=542 comm="syz.0.102" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.353309][ T28] audit: type=1400 audit(1779147201.420:175): avc: denied { execute_no_trans } for pid=542 comm="syz.0.102" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 28.117315][ C0] sched: RT throttling activated [ 28.155676][ T521] netlink: 79 bytes leftover after parsing attributes in process `syz.1.95'. [ 29.130796][ T298] usb 2-1: USB disconnect, device number 2 [ 29.197431][ T408] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.257796][ T567] netlink: 'syz.0.113': attribute type 11 has an invalid length. [ 29.265572][ T567] netlink: 36 bytes leftover after parsing attributes in process `syz.0.113'. [ 29.388346][ T581] loop3: detected capacity change from 0 to 256 [ 29.405431][ T581] ======================================================= [ 29.405431][ T581] WARNING: The mand mount option has been deprecated and [ 29.405431][ T581] and is ignored by this kernel. Remove the mand [ 29.405431][ T581] option from the mount to silence this warning. [ 29.405431][ T581] ======================================================= [ 29.623226][ T600] capability: warning: `syz.4.129' uses 32-bit capabilities (legacy support in use) [ 29.728418][ T608] loop3: detected capacity change from 0 to 256 [ 30.235934][ T612] loop1: detected capacity change from 0 to 40427 [ 30.262040][ T612] F2FS-fs (loop1): invalid crc value [ 30.285961][ T612] F2FS-fs (loop1): Found nat_bits in checkpoint [ 30.404147][ T612] F2FS-fs (loop1): Start checkpoint disabled! [ 30.427742][ T612] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 30.445224][ T612] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 30.527046][ T666] overlayfs: workdir and upperdir must reside under the same mount [ 30.634651][ T672] loop3: detected capacity change from 0 to 512 [ 30.664839][ T672] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 30.687825][ T10] kworker/u4:1: attempt to access beyond end of device [ 30.687825][ T10] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 30.709142][ T672] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.163: bad orphan inode 131083 [ 30.730520][ T672] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 30.773935][ T290] EXT4-fs (loop3): unmounting filesystem. [ 30.873592][ T692] loop2: detected capacity change from 0 to 256 [ 30.909455][ T695] loop4: detected capacity change from 0 to 256 [ 30.937739][ T695] exfat: Deprecated parameter 'utf8' [ 30.943120][ T695] exfat: Deprecated parameter 'namecase' [ 30.957231][ T692] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.027005][ T695] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d) [ 31.092817][ T709] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 31.100864][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 31.100880][ T28] audit: type=1400 audit(1779147206.170:199): avc: denied { write } for pid=694 comm="syz.4.173" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.139794][ T709] FAT-fs (loop2): Filesystem has been set read-only [ 31.146515][ T28] audit: type=1400 audit(1779147206.170:200): avc: denied { add_name } for pid=694 comm="syz.4.173" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.167443][ T709] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 31.175508][ T709] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 31.183628][ T28] audit: type=1400 audit(1779147206.170:201): avc: denied { associate } for pid=694 comm="syz.4.173" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.234265][ T713] loop1: detected capacity change from 0 to 512 [ 31.257658][ T28] audit: type=1400 audit(1779147206.170:202): avc: denied { read write open } for pid=694 comm="syz.4.173" path="/38/file0/bus" dev="loop4" ino=1048605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.288979][ T713] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 31.307936][ T713] EXT4-fs warning (device loop1): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 31.323990][ T10] tipc: Left network mode [ 31.332772][ T28] audit: type=1400 audit(1779147206.210:203): avc: denied { mounton } for pid=694 comm="syz.4.173" path="/38/file0/bus" dev="loop4" ino=1048605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.368479][ T713] EXT4-fs (loop1): mount failed [ 31.374417][ T289] syz-executor (289) used greatest stack depth: 21984 bytes left [ 31.387221][ T28] audit: type=1400 audit(1779147206.300:204): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.412964][ T28] audit: type=1400 audit(1779147206.300:205): avc: denied { remove_name } for pid=289 comm="syz-executor" name="file0" dev="loop4" ino=1048612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.457292][ T28] audit: type=1400 audit(1779147206.300:206): avc: denied { unlink } for pid=289 comm="syz-executor" name="file0" dev="loop4" ino=1048612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.480847][ T713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.180'. [ 31.518717][ T28] audit: type=1400 audit(1779147206.300:207): avc: denied { rmdir } for pid=289 comm="syz-executor" name="file0" dev="loop4" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.584385][ T723] loop3: detected capacity change from 0 to 512 [ 31.619252][ T723] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 31.672679][ T723] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.187: invalid indirect mapped block 9 (level 0) [ 31.689271][ T733] netlink: 104 bytes leftover after parsing attributes in process `syz.2.190'. [ 31.717656][ T723] EXT4-fs (loop3): 1 truncate cleaned up [ 31.723388][ T723] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 31.810143][ T739] loop2: detected capacity change from 0 to 512 [ 31.835209][ T742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 31.846004][ T290] EXT4-fs (loop3): unmounting filesystem. [ 31.888406][ T739] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.193: inode has both inline data and extents flags [ 31.901585][ T742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'. [ 31.911239][ T10] device bridge_slave_1 left promiscuous mode [ 31.916702][ T739] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.193: couldn't read orphan inode 15 (err -117) [ 31.929625][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.936902][ T739] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 31.952473][ T10] device bridge_slave_0 left promiscuous mode [ 31.983233][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.998602][ T739] netlink: 44 bytes leftover after parsing attributes in process `syz.2.193'. [ 32.008482][ T10] device veth1_macvtap left promiscuous mode [ 32.014804][ T10] device veth0_vlan left promiscuous mode [ 32.017504][ T739] netlink: 43 bytes leftover after parsing attributes in process `syz.2.193'. [ 32.029671][ T739] netlink: 'syz.2.193': attribute type 6 has an invalid length. [ 32.037518][ T739] netlink: 'syz.2.193': attribute type 5 has an invalid length. [ 32.045195][ T739] netlink: 43 bytes leftover after parsing attributes in process `syz.2.193'. [ 32.074272][ T286] EXT4-fs (loop2): unmounting filesystem. [ 32.121624][ T750] xt_hashlimit: size too large, truncated to 1048576 [ 32.258173][ T753] loop3: detected capacity change from 0 to 128 [ 32.297696][ T753] EXT4-fs (loop3): Test dummy encryption mode enabled [ 32.332429][ T740] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.341576][ T753] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.348516][ T740] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.359146][ T753] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.370138][ T740] device bridge_slave_0 entered promiscuous mode [ 32.378715][ T740] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.392814][ T740] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.401882][ T740] device bridge_slave_1 entered promiscuous mode [ 32.408512][ T753] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 32.470248][ T740] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.477337][ T740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.484640][ T740] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.491705][ T740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.517756][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.525240][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.533273][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.540967][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.557245][ T290] EXT4-fs (loop3): unmounting filesystem. [ 32.567733][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.577385][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.584458][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.593434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.601963][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.609042][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.633774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.650797][ T765] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.202: inode has both inline data and extents flags [ 32.671952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.690476][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.728629][ T765] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.202: couldn't read orphan inode 15 (err -117) [ 32.741109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.749051][ T765] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 32.757940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.758429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.774185][ T740] device veth0_vlan entered promiscuous mode [ 32.789638][ T740] device veth1_macvtap entered promiscuous mode [ 32.798369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.819120][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.837847][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.977211][ T290] EXT4-fs (loop3): unmounting filesystem. [ 33.060750][ T793] netlink: 'syz.5.213': attribute type 12 has an invalid length. [ 33.069313][ T793] netlink: 'syz.5.213': attribute type 29 has an invalid length. [ 33.077121][ T793] netlink: 148 bytes leftover after parsing attributes in process `syz.5.213'. [ 33.089057][ T793] netlink: 'syz.5.213': attribute type 2 has an invalid length. [ 33.096934][ T793] netlink: 'syz.5.213': attribute type 3 has an invalid length. [ 33.104871][ T793] netlink: 19 bytes leftover after parsing attributes in process `syz.5.213'. [ 33.206801][ T816] usb usb1: usbfs: process 816 (syz.5.225) did not claim interface 0 before use [ 33.366905][ T837] netlink: 'syz.0.235': attribute type 11 has an invalid length. [ 33.523850][ T844] overlayfs: statfs failed on './file0' [ 33.992039][ T864] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=864 comm=syz.1.247 [ 34.034505][ T868] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 34.042411][ T868] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 34.152810][ T877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.167574][ T877] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.227173][ T887] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.256373][ T287] EXT4-fs (loop1): unmounting filesystem. [ 34.490688][ T904] set_capacity_and_notify: 4 callbacks suppressed [ 34.490706][ T904] loop3: detected capacity change from 0 to 512 [ 34.527434][ T904] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.539956][ T904] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 34.550909][ T904] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 34.577914][ T904] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 34.599230][ T904] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 34.608439][ T904] EXT4-fs (loop3): orphan cleanup on readonly fs [ 34.615412][ T904] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.262: bg 0: block 34: padding at end of block bitmap is not set [ 34.640078][ T904] EXT4-fs error (device loop3): ext4_acquire_dquot:6822: comm syz.3.262: Failed to acquire dquot type 1 [ 34.669306][ T904] EXT4-fs (loop3): 1 truncate cleaned up [ 34.703724][ T904] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 34.807038][ T924] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 34.848178][ T290] EXT4-fs (loop3): unmounting filesystem. [ 34.855164][ T904] syz.3.262 (904) used greatest stack depth: 21664 bytes left [ 34.961897][ T945] xt_hashlimit: size too large, truncated to 1048576 [ 35.006665][ T947] loop0: detected capacity change from 0 to 1024 [ 35.034818][ T947] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.074354][ T947] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 35.167340][ T331] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.191906][ T943] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.279: Allocating blocks 497-513 which overlap fs metadata [ 35.262118][ T943] EXT4-fs (loop0): pa ffff8881149569d8: logic 48, phys. 177, len 21 [ 35.270223][ T943] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4894: group 0, free 0, pa_free 1 [ 35.345741][ T288] EXT4-fs (loop0): unmounting filesystem. [ 35.358523][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.368389][ T331] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 35.377858][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.387264][ T331] usb 4-1: config 0 descriptor?? [ 35.409183][ T331] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 35.483928][ T968] loop1: detected capacity change from 0 to 512 [ 35.590712][ T968] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.627106][ T968] EXT4-fs (loop1): 1 truncate cleaned up [ 35.637098][ T968] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 35.681472][ T287] EXT4-fs (loop1): unmounting filesystem. [ 35.725803][ T983] __nla_validate_parse: 1 callbacks suppressed [ 35.725820][ T983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.297'. [ 35.775054][ T990] device erspan0 entered promiscuous mode [ 35.799495][ T992] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 35.805229][ T992] pim6reg0: linktype set to 823 [ 36.131335][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 36.131350][ T28] audit: type=1400 audit(1779147211.210:229): avc: denied { load_policy } for pid=1025 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 36.215172][ T1026] SELinux: failed to load policy [ 36.288104][ T1030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 36.386823][ T1024] syz.5.313 (1024) used greatest stack depth: 20992 bytes left [ 36.402237][ T1046] loop0: detected capacity change from 0 to 2048 [ 36.430227][ T1046] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.469482][ T1046] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.484748][ T1046] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 36.497777][ T1046] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.497777][ T1046] [ 36.507759][ T1046] EXT4-fs (loop0): Total free blocks count 0 [ 36.513773][ T1046] EXT4-fs (loop0): Free/Dirty block details [ 36.520258][ T1046] EXT4-fs (loop0): free_blocks=2415919104 [ 36.526022][ T1046] EXT4-fs (loop0): dirty_blocks=32 [ 36.531433][ T1061] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 36.543730][ T1046] EXT4-fs (loop0): Block reservation details [ 36.543828][ T1061] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.543828][ T1061] [ 36.656734][ T1073] loop0: detected capacity change from 0 to 512 [ 36.680421][ T1077] loop5: detected capacity change from 0 to 512 [ 36.687014][ T1073] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.709255][ T1077] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 36.709717][ T1073] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.718362][ T1077] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.740027][ T1073] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.743614][ T28] audit: type=1400 audit(1779147211.820:230): avc: denied { setattr } for pid=1076 comm="syz.5.336" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.784475][ T740] EXT4-fs (loop5): unmounting filesystem. [ 36.791854][ T288] EXT4-fs (loop0): unmounting filesystem. [ 36.815066][ T28] audit: type=1400 audit(1779147211.890:231): avc: denied { sys_module } for pid=1084 comm="syz.0.338" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 36.836351][ T28] audit: type=1400 audit(1779147211.890:232): avc: denied { module_load } for pid=1084 comm="syz.0.338" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 36.869985][ T28] audit: type=1400 audit(1779147211.950:233): avc: denied { connect } for pid=1086 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.897515][ T28] audit: type=1400 audit(1779147211.980:234): avc: denied { bind } for pid=1088 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.983114][ T28] audit: type=1400 audit(1779147212.060:235): avc: denied { mount } for pid=1092 comm="syz.0.342" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 37.087404][ T331] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 37.154401][ T1115] Invalid ELF header len 1 [ 37.186184][ T1119] loop0: detected capacity change from 0 to 256 [ 37.205298][ T1119] exfat: Deprecated parameter 'namecase' [ 37.222125][ T1119] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x20641574, utbl_chksum : 0xe619d30d) [ 37.251552][ T28] audit: type=1400 audit(1779147212.330:236): avc: denied { mounton } for pid=1118 comm="syz.0.355" path="/80/file0/file0" dev="loop0" ino=1048622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.251888][ T1119] overlayfs: filesystem on './file0' not supported [ 37.287431][ T331] usb 6-1: Using ep0 maxpacket: 8 [ 37.298125][ T331] usb 6-1: unable to get BOS descriptor or descriptor too short [ 37.325567][ T331] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.345982][ T331] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.382613][ T331] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= 0.40 [ 37.401547][ T331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.413471][ T331] usb 6-1: Product: syz [ 37.417847][ T331] usb 6-1: Manufacturer: syz [ 37.422531][ T331] usb 6-1: SerialNumber: syz [ 37.453846][ T331] snd-usb-audio: probe of 6-1:1.0 failed with error -2 [ 37.466545][ T28] audit: type=1400 audit(1779147212.540:237): avc: denied { block_suspend } for pid=1144 comm="syz.0.367" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.496435][ T382] udevd[382]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.514749][ T1146] loop2: detected capacity change from 0 to 1024 [ 37.548411][ T1146] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 37.557082][ T1146] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.595535][ T1146] xt_hashlimit: size too large, truncated to 1048576 [ 37.635656][ T331] usb 6-1: USB disconnect, device number 2 [ 37.820394][ T286] EXT4-fs (loop2): unmounting filesystem. [ 37.885765][ T1165] netlink: 2128 bytes leftover after parsing attributes in process `syz.2.374'. [ 37.900663][ T408] usb 4-1: USB disconnect, device number 3 [ 37.986853][ T1179] loop2: detected capacity change from 0 to 256 [ 38.081414][ T1187] netlink: 36 bytes leftover after parsing attributes in process `syz.1.384'. [ 38.091045][ T1187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'. [ 38.100030][ T1187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 38.109263][ T1187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 38.262950][ T28] audit: type=1400 audit(1779147213.340:238): avc: denied { read } for pid=1196 comm="syz.3.389" laddr=172.20.20.10 lport=4 faddr=172.20.20.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.309872][ T1199] xt_hashlimit: size too large, truncated to 1048576 [ 38.317431][ T40] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.352141][ T1194] loop5: detected capacity change from 0 to 40427 [ 38.377571][ T1194] F2FS-fs (loop5): invalid crc value [ 38.399454][ T1194] F2FS-fs (loop5): Found nat_bits in checkpoint [ 38.451496][ T1194] F2FS-fs (loop5): Start checkpoint disabled! [ 38.458670][ T1194] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 38.477502][ T1194] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 38.500157][ T40] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 38.513502][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.536101][ T40] usb 3-1: Product: syz [ 38.544773][ T40] usb 3-1: Manufacturer: syz [ 38.559558][ T40] usb 3-1: SerialNumber: syz [ 38.592032][ T1194] F2FS-fs (loop5): f2fs_enable_checkpoint() starts, meta: 0, node: 0, data: 0 [ 38.639748][ T1194] F2FS-fs (loop5): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3 [ 38.659683][ T1194] F2FS-fs (loop5): f2fs_enable_checkpoint() finishes, writeback:44, sync:5 [ 39.017701][ T1245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.409'. [ 39.053465][ T1240] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 1) [ 39.063041][ T1240] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 39.074579][ T1242] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 39.081625][ T1242] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 39.081666][ T1240] F2FS-fs (loop3): invalid crc value [ 39.095957][ T1240] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root and reserve_node [ 39.098736][ T298] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 39.113755][ T1242] F2FS-fs (loop5): invalid crc value [ 39.119729][ T1240] F2FS-fs (loop3): Found nat_bits in checkpoint [ 39.144720][ T1242] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 39.175208][ T40] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 39.204671][ T1240] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30 [ 39.214606][ T1242] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 39.217459][ T1240] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 39.222359][ T1242] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 41.120626][ T298] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 41.137413][ T298] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 64 [ 41.154146][ T298] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.107352][ T298] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 42.116588][ T298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.138679][ T6] usb 3-1: USB disconnect, device number 3 [ 42.145803][ T298] usb 1-1: config 0 descriptor?? [ 42.151110][ T298] usb 1-1: can't set config #0, error -71 [ 43.118726][ T298] usb 1-1: USB disconnect, device number 2 [ 43.144960][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 43.144974][ T28] audit: type=1400 audit(1779147218.220:246): avc: denied { read } for pid=1272 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.174834][ T28] audit: type=1400 audit(1779147218.230:247): avc: denied { open } for pid=1272 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.213110][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 43.246688][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 43.284291][ T28] audit: type=1400 audit(1779147218.230:248): avc: denied { getattr } for pid=1272 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.355107][ T28] audit: type=1400 audit(1779147218.330:249): avc: denied { nlmsg_write } for pid=1278 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 43.397422][ T28] audit: type=1400 audit(1779147218.430:250): avc: denied { write } for pid=1263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=492 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.460979][ T28] audit: type=1400 audit(1779147218.430:251): avc: denied { add_name } for pid=1263 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.512557][ T28] audit: type=1400 audit(1779147218.430:252): avc: denied { create } for pid=1263 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.535100][ T28] audit: type=1400 audit(1779147218.430:253): avc: denied { write } for pid=1263 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2618 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.594887][ T28] audit: type=1400 audit(1779147218.430:254): avc: denied { append } for pid=1263 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2618 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.627505][ T1300] netlink: 16 bytes leftover after parsing attributes in process `syz.5.415'. [ 43.663308][ T28] audit: type=1400 audit(1779147218.540:255): avc: denied { remove_name } for pid=1292 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2618 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.154666][ T1344] set_capacity_and_notify: 2 callbacks suppressed [ 44.154683][ T1344] loop5: detected capacity change from 0 to 256 [ 44.189139][ T1344] exfat: Deprecated parameter 'namecase' [ 44.205070][ T1344] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x2524ff13, utbl_chksum : 0xe619d30d) [ 44.239662][ T1348] loop0: detected capacity change from 0 to 256 [ 44.279065][ T1348] FAT-fs (loop0): Directory bread(block 64) failed [ 44.293522][ T1348] FAT-fs (loop0): Directory bread(block 65) failed [ 44.311516][ T1348] FAT-fs (loop0): Directory bread(block 66) failed [ 44.348024][ T1348] FAT-fs (loop0): Directory bread(block 67) failed [ 44.355691][ T1348] FAT-fs (loop0): Directory bread(block 68) failed [ 44.376845][ T1360] loop5: detected capacity change from 0 to 128 [ 44.377439][ T1348] FAT-fs (loop0): Directory bread(block 69) failed [ 44.397804][ T1348] FAT-fs (loop0): Directory bread(block 70) failed [ 44.408948][ T1348] FAT-fs (loop0): Directory bread(block 71) failed [ 44.415627][ T1348] FAT-fs (loop0): Directory bread(block 72) failed [ 44.444156][ T1348] FAT-fs (loop0): Directory bread(block 73) failed [ 44.504303][ T1378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.449'. [ 44.652865][ T1350] loop2: detected capacity change from 0 to 40427 [ 44.676942][ T1350] F2FS-fs (loop2): invalid crc value [ 44.691800][ T1350] F2FS-fs (loop2): Found nat_bits in checkpoint [ 44.749790][ T1404] loop5: detected capacity change from 0 to 128 [ 44.786196][ T1350] F2FS-fs (loop2): Start checkpoint disabled! [ 44.797168][ T1404] FAT-fs (loop5): bogus sectors per cluster 7 [ 44.804893][ T1350] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 44.812638][ T1404] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 44.830012][ T1350] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 44.834702][ T1404] FAT-fs (loop5): Can't find a valid FAT filesystem [ 44.963002][ T1266] kworker/u4:5: attempt to access beyond end of device [ 44.963002][ T1266] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 45.047110][ T1428] netlink: 'syz.5.474': attribute type 11 has an invalid length. [ 45.090814][ T1428] netlink: 36 bytes leftover after parsing attributes in process `syz.5.474'. [ 45.423910][ T1478] netlink: 'syz.0.496': attribute type 3 has an invalid length. [ 46.847041][ T1529] loop2: detected capacity change from 0 to 131072 [ 46.859182][ T1529] F2FS-fs (loop2): invalid crc value [ 46.908727][ T1529] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.962315][ T1529] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 47.121800][ T1555] loop5: detected capacity change from 0 to 256 [ 47.132249][ T1559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.527'. [ 47.139890][ T1555] exfat: Bad value for 'uid' [ 47.440098][ T1602] loop0: detected capacity change from 0 to 256 [ 47.498119][ T1602] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 47.648032][ T1619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'. [ 47.725382][ T1629] device erspan0 entered promiscuous mode [ 47.729744][ T1627] netlink: 'syz.1.560': attribute type 298 has an invalid length. [ 48.220494][ T1673] loop2: detected capacity change from 0 to 2048 [ 48.256275][ T1673] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 48.300393][ T1672] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.328570][ T1672] EXT4-fs (loop2): Remounting filesystem read-only [ 48.355601][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 48.355616][ T28] audit: type=1400 audit(1779147223.430:340): avc: denied { bind } for pid=1677 comm="syz.1.581" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.384926][ T286] EXT4-fs (loop2): unmounting filesystem. [ 48.396435][ T28] audit: type=1400 audit(1779147223.460:341): avc: denied { name_bind } for pid=1677 comm="syz.1.581" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 48.417694][ T28] audit: type=1400 audit(1779147223.460:342): avc: denied { node_bind } for pid=1677 comm="syz.1.581" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 48.520881][ T28] audit: type=1400 audit(1779147223.600:343): avc: denied { listen } for pid=1688 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.565217][ T28] audit: type=1400 audit(1779147223.600:344): avc: denied { accept } for pid=1688 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.612950][ T1684] SELinux: failed to load policy [ 51.228393][ T28] audit: type=1400 audit(1779147226.310:345): avc: denied { read write } for pid=1724 comm="syz.0.611" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 51.253405][ T28] audit: type=1400 audit(1779147226.330:346): avc: denied { open } for pid=1724 comm="syz.0.611" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 51.335718][ T1731] loop2: detected capacity change from 0 to 512 [ 51.379015][ T1731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.403474][ T1738] netlink: 104 bytes leftover after parsing attributes in process `syz.5.605'. [ 51.417456][ T1731] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.530617][ T286] EXT4-fs (loop2): unmounting filesystem. [ 51.600997][ T1750] loop5: detected capacity change from 0 to 1024 [ 51.611941][ T1752] loop2: detected capacity change from 0 to 1024 [ 51.644873][ T1752] EXT4-fs: Ignoring removed orlov option [ 51.660205][ T1750] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.676336][ T1752] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.700757][ T28] audit: type=1400 audit(1779147226.780:347): avc: denied { lock } for pid=1751 comm="syz.2.609" path="/113/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.703292][ T1751] EXT4-fs error (device loop2): ext4_free_inode:355: comm syz.2.609: bit already cleared for inode 15 [ 51.735271][ T28] audit: type=1400 audit(1779147226.780:348): avc: denied { unlink } for pid=1751 comm="syz.2.609" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.737185][ T1750] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 51.778232][ T286] EXT4-fs (loop2): unmounting filesystem. [ 51.810132][ T1750] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.847031][ T740] EXT4-fs (loop5): unmounting filesystem. [ 51.885069][ T1769] xt_hashlimit: size too large, truncated to 1048576 [ 51.982936][ T1783] loop2: detected capacity change from 0 to 256 [ 52.014018][ T1783] exfat: Deprecated parameter 'utf8' [ 52.027039][ T1783] exfat: Deprecated parameter 'namecase' [ 52.068291][ T1783] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 52.119289][ T28] audit: type=1400 audit(1779147227.200:349): avc: denied { getopt } for pid=1782 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.225274][ T1789] loop2: detected capacity change from 0 to 512 [ 52.248440][ T1789] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.268315][ T1789] EXT4-fs (loop2): orphan cleanup on readonly fs [ 52.285695][ T1789] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 52.307596][ T1789] EXT4-fs (loop2): Remounting filesystem read-only [ 52.314360][ T1789] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #12: comm syz.2.628: corrupted inode contents [ 52.347657][ T1789] EXT4-fs (loop2): Remounting filesystem read-only [ 52.355376][ T1789] EXT4-fs error (device loop2): ext4_dirty_inode:6135: inode #12: comm syz.2.628: mark_inode_dirty error [ 52.379689][ T1789] EXT4-fs (loop2): Remounting filesystem read-only [ 52.391715][ T1789] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #12: comm syz.2.628: corrupted inode contents [ 52.407540][ T1789] EXT4-fs (loop2): Remounting filesystem read-only [ 52.414105][ T1789] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.628: mark_inode_dirty error [ 52.425812][ T1789] EXT4-fs (loop2): Remounting filesystem read-only [ 52.449496][ T1789] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #12: comm syz.2.628: corrupted inode contents [ 52.497477][ T1789] EXT4-fs (loop2): Remounting filesystem read-only [ 52.504125][ T1789] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 52.521579][ T1789] EXT4-fs (loop2): Remounting filesystem read-only [ 52.528419][ T1789] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #12: comm syz.2.628: corrupted inode contents [ 52.540429][ T1789] EXT4-fs (loop2): Remounting filesystem read-only [ 52.546962][ T1789] EXT4-fs error (device loop2): ext4_truncate:4316: inode #12: comm syz.2.628: mark_inode_dirty error [ 52.558183][ T1789] EXT4-fs (loop2): Remounting filesystem read-only [ 52.586758][ T1789] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 52.614711][ T1789] EXT4-fs (loop2): Remounting filesystem read-only [ 52.631592][ T1789] EXT4-fs (loop2): 1 truncate cleaned up [ 52.647519][ T8] EXT4-fs error (device loop2): ext4_release_dquot:6858: comm kworker/u4:0: Failed to release dquot type 1 [ 52.673733][ T8] EXT4-fs (loop2): Remounting filesystem read-only [ 52.702197][ T1789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 52.764939][ T1820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'. [ 52.781373][ T286] EXT4-fs (loop2): unmounting filesystem. [ 52.895873][ T1839] loop3: detected capacity change from 0 to 4096 [ 52.920888][ T1839] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.943939][ T1839] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #15: comm syz.3.650: corrupted inode contents [ 53.011655][ T1839] EXT4-fs error (device loop3): ext4_dirty_inode:6135: inode #15: comm syz.3.650: mark_inode_dirty error [ 53.063230][ T1839] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #15: comm syz.3.650: corrupted inode contents [ 53.108693][ T1839] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.650: mark_inode_dirty error [ 53.176331][ T1856] xt_hashlimit: max too large, truncated to 1048576 [ 53.187371][ T1839] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #15: comm syz.3.650: corrupted inode contents [ 53.267798][ T1839] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.650: mark_inode_dirty error [ 53.317539][ T1839] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #15: comm syz.3.650: corrupted inode contents [ 53.357537][ T1839] EXT4-fs error (device loop3): ext4_punch_hole:4156: inode #15: comm syz.3.650: mark_inode_dirty error [ 53.434557][ T290] EXT4-fs (loop3): unmounting filesystem. [ 53.440147][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 53.440186][ T28] audit: type=1400 audit(1779147228.510:356): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 53.553882][ T1868] loop3: detected capacity change from 0 to 1024 [ 53.587727][ T1868] EXT4-fs: Ignoring removed orlov option [ 53.615748][ T1868] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.661154][ T290] EXT4-fs (loop3): unmounting filesystem. [ 53.728956][ T1879] netlink: 'syz.3.665': attribute type 1 has an invalid length. [ 53.897240][ T1835] loop5: detected capacity change from 0 to 131072 [ 53.914748][ T1835] F2FS-fs (loop5): invalid crc value [ 53.931952][ T1835] F2FS-fs (loop5): Found nat_bits in checkpoint [ 53.979506][ T1835] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 54.259217][ T1915] caif0: tun_chr_ioctl cmd 1074025677 [ 54.264724][ T1915] caif0: linktype set to 825 [ 54.354613][ T1929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.687'. [ 54.397869][ T28] audit: type=1400 audit(1779147229.480:357): avc: denied { create } for pid=1932 comm="syz.5.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.476130][ T28] audit: type=1400 audit(1779147229.480:358): avc: denied { connect } for pid=1932 comm="syz.5.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.512282][ T1942] loop2: detected capacity change from 0 to 16 [ 54.530133][ T1942] erofs: (device loop2): mounted with root inode @ nid 36. [ 54.563182][ T28] audit: type=1400 audit(1779147229.640:359): avc: denied { mounton } for pid=1941 comm="syz.2.693" path="/130/file0" dev="loop2" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.650040][ T1952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.699'. [ 54.847038][ T28] audit: type=1400 audit(1779147229.920:360): avc: denied { mounton } for pid=1979 comm="syz.2.711" path="/138/file0" dev="tmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 55.227976][ T2007] loop0: detected capacity change from 0 to 2048 [ 55.258224][ T2007] loop0: p3 < > p4 < > [ 55.262449][ T2007] loop0: partition table partially beyond EOD, truncated [ 55.280955][ T2007] loop0: p3 start 4284289 is beyond EOD, truncated [ 55.631818][ T2027] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.730: couldn't read orphan inode 26 (err -116) [ 55.645606][ T2027] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 55.661551][ T2027] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.698299][ T2047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.740'. [ 55.708329][ T2027] netlink: 52 bytes leftover after parsing attributes in process `syz.3.730'. [ 55.729551][ T2027] netlink: 48 bytes leftover after parsing attributes in process `syz.3.730'. [ 55.806425][ T28] audit: type=1400 audit(1779147230.880:361): avc: denied { mount } for pid=2054 comm="syz.5.743" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 55.829606][ T290] EXT4-fs (loop3): unmounting filesystem. [ 55.869366][ T28] audit: type=1400 audit(1779147230.940:362): avc: denied { ioctl } for pid=2059 comm="syz.2.744" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.936536][ T28] audit: type=1400 audit(1779147230.940:363): avc: denied { set_context_mgr } for pid=2059 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 55.965993][ T2073] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.009547][ T2075] FAT-fs (loop3): Directory bread(block 64) failed [ 56.016147][ T28] audit: type=1400 audit(1779147230.990:364): avc: denied { append } for pid=2065 comm="syz.5.747" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.047537][ T2075] FAT-fs (loop3): Directory bread(block 65) failed [ 56.054133][ T2075] FAT-fs (loop3): Directory bread(block 66) failed [ 56.095305][ T2075] FAT-fs (loop3): Directory bread(block 67) failed [ 56.117397][ T2075] FAT-fs (loop3): Directory bread(block 68) failed [ 56.123962][ T2075] FAT-fs (loop3): Directory bread(block 69) failed [ 56.151831][ T2075] FAT-fs (loop3): Directory bread(block 70) failed [ 56.177339][ T2075] FAT-fs (loop3): Directory bread(block 71) failed [ 56.183940][ T2075] FAT-fs (loop3): Directory bread(block 72) failed [ 56.221167][ T2075] FAT-fs (loop3): Directory bread(block 73) failed [ 56.223280][ T2087] syz.0.758[2087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.237537][ T2087] syz.0.758[2087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.420337][ T2108] netlink: 112 bytes leftover after parsing attributes in process `syz.3.767'. [ 56.691578][ T2112] set_capacity_and_notify: 3 callbacks suppressed [ 56.691599][ T2112] loop2: detected capacity change from 0 to 40427 [ 56.716105][ T2112] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 56.732888][ T2112] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 56.741786][ T2112] F2FS-fs (loop2): invalid crc value [ 56.766014][ T2112] F2FS-fs (loop2): Found nat_bits in checkpoint [ 56.823437][ T2112] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 56.830815][ T2112] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 56.940593][ T28] audit: type=1400 audit(1779147232.020:365): avc: denied { watch } for pid=2144 comm="syz.1.782" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 57.085514][ T2162] SELinux: failed to load policy [ 57.179155][ T2176] binder: 2174:2176 ioctl 400c620e 200000000100 returned -22 [ 57.560399][ T2208] xt_hashlimit: size too large, truncated to 1048576 [ 57.656311][ T2215] loop2: detected capacity change from 0 to 512 [ 57.688397][ T2215] EXT4-fs (loop2): 1 truncate cleaned up [ 57.696307][ T2215] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 57.708702][ T2215] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.811: bg 0: block 465: padding at end of block bitmap is not set [ 57.727991][ T2215] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 57.742459][ T2215] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.811: invalid indirect mapped block 234881024 (level 0) [ 57.773805][ T286] EXT4-fs (loop2): unmounting filesystem. [ 57.820918][ T2210] SELinux: failed to load policy [ 58.183153][ T2247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'. [ 58.234342][ T2243] loop3: detected capacity change from 0 to 8192 [ 58.265402][ T2243] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.286599][ T2243] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 58.295916][ T2243] FAT-fs (loop3): Filesystem has been set read-only [ 58.427073][ T2265] loop2: detected capacity change from 0 to 1024 [ 58.465308][ T2265] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.480271][ T2266] loop5: detected capacity change from 0 to 2048 [ 58.504157][ T2265] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a001c01c, mo2=0002] [ 58.528323][ T2272] fuse: Bad value for 'fd' [ 58.553481][ T2265] System zones: 0-1, 3-36 [ 58.562064][ T2266] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 58.578686][ T2265] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.679281][ T2263] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.726712][ T2263] EXT4-fs (loop5): Remounting filesystem read-only [ 58.764120][ T740] EXT4-fs (loop5): unmounting filesystem. [ 58.778064][ T286] EXT4-fs (loop2): unmounting filesystem. [ 58.952116][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 58.952131][ T28] audit: type=1400 audit(1779147234.030:372): avc: denied { create } for pid=2290 comm="syz.2.840" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.005040][ T28] audit: type=1400 audit(1779147234.040:373): avc: denied { write } for pid=2290 comm="syz.2.840" name="file0" dev="tmpfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.050126][ T28] audit: type=1400 audit(1779147234.040:374): avc: denied { open } for pid=2290 comm="syz.2.840" path="/162/file0" dev="tmpfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.095870][ T28] audit: type=1400 audit(1779147234.040:375): avc: denied { ioctl } for pid=2290 comm="syz.2.840" path="/162/file0" dev="tmpfs" ino=861 ioctlcmd=0x125e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.144767][ T28] audit: type=1400 audit(1779147234.070:376): avc: denied { unlink } for pid=286 comm="syz-executor" name="file0" dev="tmpfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.324431][ T28] audit: type=1400 audit(1779147234.400:377): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.444957][ T2323] tun0: tun_chr_ioctl cmd 1074025677 [ 59.450454][ T2323] tun0: linktype set to 780 [ 59.489856][ T2327] loop0: detected capacity change from 0 to 2048 [ 59.540780][ T2327] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 59.602493][ T2326] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.659911][ T2326] EXT4-fs (loop0): Remounting filesystem read-only [ 59.743758][ T28] audit: type=1400 audit(1779147234.820:378): avc: denied { setopt } for pid=2347 comm="syz.1.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.789391][ T2352] /dev/loop1: Can't open blockdev [ 60.095329][ T2343] loop3: detected capacity change from 0 to 40427 [ 60.113100][ T2343] F2FS-fs (loop3): invalid crc value [ 60.128482][ T2343] F2FS-fs (loop3): Found nat_bits in checkpoint [ 60.209268][ T2343] F2FS-fs (loop3): Start checkpoint disabled! [ 60.225993][ T2343] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 60.244209][ T2343] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 60.270913][ T2343] SELinux: ebitmap: map size 742133304 does not match my size 64 (high bit was 1495777109) [ 60.297476][ T2343] SELinux: failed to load policy [ 60.443141][ T28] audit: type=1400 audit(1779147235.520:379): avc: denied { mount } for pid=2379 comm="syz.1.881" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 60.552757][ T2388] loop3: detected capacity change from 0 to 2048 [ 60.629514][ T2388] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 60.679443][ T2402] loop2: detected capacity change from 0 to 512 [ 60.711477][ T2402] EXT4-fs (loop2): Test dummy encryption mode enabled [ 60.724110][ T2402] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.743683][ T2387] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.765812][ T2402] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.891: bad orphan inode 131083 [ 60.777646][ T2402] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 60.837327][ T2387] EXT4-fs (loop3): Remounting filesystem read-only [ 60.865886][ T286] EXT4-fs (loop2): unmounting filesystem. [ 60.907238][ T290] EXT4-fs (loop3): unmounting filesystem. [ 61.011288][ T28] audit: type=1400 audit(1779147236.090:380): avc: denied { sqpoll } for pid=2431 comm="syz.3.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.135490][ T2453] netlink: 36 bytes leftover after parsing attributes in process `syz.2.915'. [ 61.157583][ T2453] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.236194][ T2461] loop2: detected capacity change from 0 to 512 [ 61.244642][ T28] audit: type=1400 audit(1779147236.320:381): avc: denied { unlink } for pid=287 comm="syz-executor" name="file0" dev="tmpfs" ino=1222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.286704][ T2461] EXT4-fs (loop2): 1 truncate cleaned up [ 61.297459][ T2461] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 61.394727][ T286] EXT4-fs (loop2): unmounting filesystem. [ 61.496326][ T2480] tipc: Started in network mode [ 61.506966][ T2480] tipc: Node identity ac14140f, cluster identity 4711 [ 61.521805][ T2480] tipc: New replicast peer: 172.20.20.187 [ 61.537669][ T2480] tipc: Enabled bearer , priority 10 [ 61.684209][ T2503] capability: warning: `syz.3.939' uses deprecated v2 capabilities in a way that may be insecure [ 61.769885][ T2512] syz.5.942 uses obsolete (PF_INET,SOCK_PACKET) [ 61.779201][ T2514] loop2: detected capacity change from 0 to 128 [ 62.241842][ T2537] loop3: detected capacity change from 0 to 512 [ 62.337256][ T2533] loop2: detected capacity change from 0 to 40427 [ 62.339646][ T2541] loop3: detected capacity change from 0 to 512 [ 62.367244][ T2533] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 62.375129][ T2533] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 62.398845][ T2533] F2FS-fs (loop2): invalid crc value [ 62.420003][ T2541] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.433227][ T2533] F2FS-fs (loop2): Found nat_bits in checkpoint [ 62.468167][ T2541] EXT4-fs (loop3): 1 truncate cleaned up [ 62.478163][ T2541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 62.536635][ T290] EXT4-fs (loop3): unmounting filesystem. [ 62.543804][ T2533] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 62.555323][ T2533] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 62.657369][ T408] tipc: Node number set to 2886997007 [ 62.692195][ T2557] loop5: detected capacity change from 0 to 512 [ 62.728526][ T2557] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.757489][ T2557] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.959: iget: bad extra_isize 90 (inode size 256) [ 62.791333][ T2557] EXT4-fs (loop5): Remounting filesystem read-only [ 62.807388][ T2557] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.959: error while reading EA inode 11 err=-117 [ 62.847522][ T2557] EXT4-fs (loop5): Remounting filesystem read-only [ 62.857766][ T2551] loop3: detected capacity change from 0 to 40427 [ 62.865083][ T2557] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.959: iget: bad extra_isize 90 (inode size 256) [ 62.878537][ T2551] F2FS-fs (loop3): Invalid log blocks per segment (1) [ 62.887362][ T2551] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 62.898378][ T2551] F2FS-fs (loop3): fault_type options not supported [ 62.905270][ T2551] F2FS-fs (loop3): fault_injection options not supported [ 62.917410][ T2551] F2FS-fs (loop3): Image doesn't support compression [ 62.924221][ T2557] EXT4-fs (loop5): Remounting filesystem read-only [ 62.944809][ T2551] F2FS-fs (loop3): invalid crc value [ 62.950536][ T2557] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.959: error while reading EA inode 11 err=-117 [ 62.966494][ T2551] F2FS-fs (loop3): Found nat_bits in checkpoint [ 62.983241][ T2557] EXT4-fs (loop5): Remounting filesystem read-only [ 63.007353][ T2557] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #18: comm syz.5.959: iget: bad extra_isize 90 (inode size 256) [ 63.047489][ T2557] EXT4-fs (loop5): Remounting filesystem read-only [ 63.064175][ T2557] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.959: error while reading EA inode 18 err=-117 [ 63.078032][ T2551] F2FS-fs (loop3): Start checkpoint disabled! [ 63.088316][ T2551] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 63.107164][ T2557] EXT4-fs (loop5): Remounting filesystem read-only [ 63.113940][ T2557] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #18: comm syz.5.959: iget: bad extra_isize 90 (inode size 256) [ 63.137755][ T2551] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 63.144815][ T2551] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 63.157631][ T2557] EXT4-fs (loop5): Remounting filesystem read-only [ 63.164187][ T2557] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.959: error while reading EA inode 18 err=-117 [ 63.211126][ T2557] EXT4-fs (loop5): Remounting filesystem read-only [ 63.218072][ T2557] EXT4-fs (loop5): 1 orphan inode deleted [ 63.223827][ T2557] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 63.278445][ T740] EXT4-fs (loop5): unmounting filesystem. [ 63.694820][ T2589] SELinux: failed to load policy [ 63.773012][ T2592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.973'. [ 64.319987][ T2647] loop2: detected capacity change from 0 to 256 [ 64.347932][ T2647] FAT-fs (loop2): Directory bread(block 64) failed [ 64.361733][ T2647] FAT-fs (loop2): Directory bread(block 65) failed [ 64.371773][ T2649] loop5: detected capacity change from 0 to 512 [ 64.377700][ T2647] FAT-fs (loop2): Directory bread(block 66) failed [ 64.384665][ T2647] FAT-fs (loop2): Directory bread(block 67) failed [ 64.397360][ T2647] FAT-fs (loop2): Directory bread(block 68) failed [ 64.414033][ T2647] FAT-fs (loop2): Directory bread(block 69) failed [ 64.423445][ T2649] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 64.423723][ T2647] FAT-fs (loop2): Directory bread(block 70) failed [ 64.450348][ T2647] FAT-fs (loop2): Directory bread(block 71) failed [ 64.463781][ T2647] FAT-fs (loop2): Directory bread(block 72) failed [ 64.484787][ T2647] FAT-fs (loop2): Directory bread(block 73) failed [ 64.547462][ T2330] ------------[ cut here ]------------ [ 64.552962][ T2330] kernel BUG at fs/buffer.c:2714! [ 64.577744][ T2330] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 64.583882][ T2330] CPU: 1 PID: 2330 Comm: kmmpd-loop0 Not tainted syzkaller #0 [ 64.591366][ T2330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 64.601451][ T2330] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 64.606864][ T2330] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 68 d5 e7 ff e9 b0 fe ff ff e8 de 38 a2 ff 0f 0b e8 d7 38 a2 ff <0f> 0b e8 d0 38 a2 ff 0f 0b e8 c9 38 a2 ff 0f 0b e8 c2 38 a2 ff 0f [ 64.626511][ T2330] RSP: 0018:ffffc90011d2fca0 EFLAGS: 00010293 [ 64.632614][ T2330] RAX: ffffffff81cf3e99 RBX: 0000000000000000 RCX: ffff888118f1e540 [ 64.640615][ T2330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.648611][ T2330] RBP: ffffc90011d2fcf0 R08: ffff888114bde007 R09: 1ffff1102297bc00 [ 64.656618][ T2330] R10: dffffc0000000000 R11: ffffed102297bc01 R12: 0000000000000000 [ 64.664617][ T2330] R13: 1ffff1102297bc00 R14: ffff888114bde000 R15: 0000000000003801 [ 64.672613][ T2330] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 64.681566][ T2330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.688173][ T2330] CR2: 00007f9d82412ff8 CR3: 000000013031f000 CR4: 00000000003506a0 [ 64.696169][ T2330] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.704164][ T2330] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.712153][ T2330] Call Trace: [ 64.715454][ T2330] [ 64.718407][ T2330] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 64.724254][ T2330] submit_bh+0x1f/0x30 [ 64.728354][ T2330] write_mmp_block_thawed+0x397/0x510 [ 64.733757][ T2330] ? __cfi_schedule_timeout+0x10/0x10 [ 64.739263][ T2330] ? read_mmp_block+0x720/0x720 [ 64.740602][ T2641] loop3: detected capacity change from 0 to 40427 [ 64.744151][ T2330] ? __cfi_process_timeout+0x10/0x10 [ 64.755883][ T2330] write_mmp_block+0x138/0x2b0 [ 64.760691][ T2330] kmmpd+0x3ce/0x950 [ 64.764620][ T2330] kthread+0x281/0x320 [ 64.768723][ T2330] ? __cfi_kmmpd+0x10/0x10 [ 64.773168][ T2330] ? __cfi_kthread+0x10/0x10 [ 64.777799][ T2330] ret_from_fork+0x1f/0x30 [ 64.779197][ T2641] F2FS-fs (loop3): invalid crc value [ 64.782251][ T2330] [ 64.782271][ T2330] Modules linked in: [ 64.812715][ T2641] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.900884][ T2641] F2FS-fs (loop3): Start checkpoint disabled! [ 64.915136][ T2641] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 64.927056][ T2641] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 64.937964][ T2330] ---[ end trace 0000000000000000 ]--- [ 64.943696][ T2330] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 64.949400][ T2330] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 68 d5 e7 ff e9 b0 fe ff ff e8 de 38 a2 ff 0f 0b e8 d7 38 a2 ff <0f> 0b e8 d0 38 a2 ff 0f 0b e8 c9 38 a2 ff 0f 0b e8 c2 38 a2 ff 0f [ 64.969989][ T2330] RSP: 0018:ffffc90011d2fca0 EFLAGS: 00010293 [ 64.976164][ T2330] RAX: ffffffff81cf3e99 RBX: 0000000000000000 RCX: ffff888118f1e540 [ 64.984497][ T2330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.992724][ T2330] RBP: ffffc90011d2fcf0 R08: ffff888114bde007 R09: 1ffff1102297bc00 [ 65.000967][ T2330] R10: dffffc0000000000 R11: ffffed102297bc01 R12: 0000000000000000 [ 65.009294][ T2330] R13: 1ffff1102297bc00 R14: ffff888114bde000 R15: 0000000000003801 [ 65.017548][ T2330] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 65.026600][ T2330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.033616][ T2330] CR2: 00007f9d817ea2f8 CR3: 0000000110240000 CR4: 00000000003506b0 [ 65.041867][ T2330] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.050097][ T2330] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.058255][ T2330] Kernel panic - not syncing: Fatal exception [ 65.064898][ T2330] Kernel Offset: disabled [ 65.069231][ T2330] Rebooting in 86400 seconds..