last executing test programs: 2m25.850873259s ago: executing program 4 (id=161): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="b702000009000000b7030000f1030000bfa400000000000007040000f8ffffffb7050000040000008500000039000000b70000000100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m25.819196472s ago: executing program 4 (id=162): unshare(0x6020400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) 2m25.727607811s ago: executing program 4 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000280)}], 0x5, 0x4, 0x6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xa0002, 0x0, {[0xcc0b, 0xfffffffffffffff7, 0xff, 0xcd2a, 0x7f, 0x7ff, 0x10000, 0xffffffffffffff00]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m25.616162293s ago: executing program 4 (id=169): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x12148c5, &(0x7f00000001c0)={[{@shortname_winnt}, {@uni_xlate}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@rodir}, {@utf8no}, {@fat=@sys_immutable}, {@rodir}, {@shortname_lower}, {@numtail}, {@rodir}, {@numtail}, {@rodir}, {@utf8}, {@numtail}, {@fat=@tz_utc}]}, 0x0, 0x2e1, &(0x7f0000002800)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000740)='.\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 2m25.503473834s ago: executing program 4 (id=173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000140055090100000000009500000000000000cd0a010000000000c50000000100000018000000000000000000000009000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 2m25.169416338s ago: executing program 4 (id=176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000800)={0x148, 0x0, 0xb}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000880)={0x148, 0x0, 0xa}) 2m25.169269138s ago: executing program 32 (id=176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000800)={0x148, 0x0, 0xb}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000880)={0x148, 0x0, 0xa}) 23.635429616s ago: executing program 2 (id=2334): r0 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000002380), 0x0, 0x0) symlinkat(&(0x7f0000002340)='./file0\x00', r0, &(0x7f00000023c0)='./file0\x00') 23.583801432s ago: executing program 2 (id=2335): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0xc, 0xb, 0x0, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000008500000004000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1, r0}, 0xc) 23.583529122s ago: executing program 2 (id=2336): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0xfffffff2}], 0x1, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) close(0x3) connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) 23.01578499s ago: executing program 2 (id=2346): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x8410, &(0x7f0000000140)=ANY=[], 0xff, 0x2a0, &(0x7f0000000180)="$eJzs3T9rA2UYAPDnkjSNOqSIiyJ4oINTaV1dGqWC2EmJoA4abAuShEILASsYO/UTOPo9/AguLn4DwVVwa4fKyeXumtSmf2hjCvb3m57ee8/zPrkX0inPffX6sL97kMTJ2e/RaiVR24qtOE9iLWpR+SEaAQD8f5xnWfyVPSSzUVt8NwDAMhT//wtP3QsAsByffPb5R52dne2P07QVr7ZPR90kIoano26x3tmPb2IQe7ER7biIyC4V8Qcf7mxHI82txVvD8aibZw6//LWs3/kzYpK/Ge1Ym5+/mRYu81+sukujs79S/dGOV+bnv/Pv/BiOo9uMt9+c6X892vHb13EQg9iNPHea//1mmr6f/Xj23Rf5Nnl+Uovu6uS+qay+pCMBAAAAAAAAAAAAAAAAAAAAAOAZWE/TpBjfM5nfk1+azM8ZdesXk/X1tDI732dczQdKqkLFfKAsyhE94yx+qubrbKRpmpU3TvMb8VrDiwUAAAAAAAAAAAAAAAAAAAAgd/Ttcb83GOwdLiSopgFUP+t/aJ2tmStvxHG/V7+54Or995qdNpD3euvN0WjEgh7LXcELeT8Lr7w6PdxPowiqg1noXi+/VxQ97vfScql6yP1ectderergfp5dasYjG2uWHWRXz7R12erVrOaCnkbzpblLf2dZdr867/5RnFF5JZmM2Ljf7itlMPcD5kHr+ln8cnPBG78y6o/+0gEAAAAAAAAAAAAAAAAAAOaa/uh3zuLJram1/6wpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFiy6fv/q6AVEVevXAvGZfJt95RBMw6PnvgjAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Az8EwAA//9I2EsX") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f000033b000/0x3000)=nil, 0x3000, 0x3000009, 0x28011, r0, 0x0) syz_clone(0x100480, 0x0, 0x0, 0x0, &(0x7f0000003340), &(0x7f0000003380)="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") ftruncate(r0, 0x4a8e) 22.931178818s ago: executing program 2 (id=2355): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000b00)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=@raw=[@generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1a, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c3, 0x0, 0x0, 0x0, 0x9}, [@alu={0x7, 0x0, 0xc, 0x0, 0x3, 0xc}, @jmp={0x5, 0x0, 0x6, 0x0, 0x2, 0x100}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @jmp={0x5, 0x1, 0x2, 0x9, 0x2, 0x1, 0xffffffffffffffff}]}, 0x0, 0xf9, 0x69, &(0x7f00000003c0)=""/105, 0x41000, 0x62, '\x00', 0x0, @tracing=0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) pipe(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001e80)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22.819466759s ago: executing program 2 (id=2364): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, 0x0, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300d0200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(0xffffffffffffffff, 0x4068aea3, 0x0) 22.819288859s ago: executing program 33 (id=2364): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, 0x0, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300d0200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(0xffffffffffffffff, 0x4068aea3, 0x0) 9.787634855s ago: executing program 6 (id=2365): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r0, &(0x7f0000000040)=""/36, 0x24) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) getdents64(r0, &(0x7f0000000800)=""/4098, 0x1002) 8.043661612s ago: executing program 6 (id=2365): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r0, &(0x7f0000000040)=""/36, 0x24) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) getdents64(r0, &(0x7f0000000800)=""/4098, 0x1002) 6.199637419s ago: executing program 6 (id=2365): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r0, &(0x7f0000000040)=""/36, 0x24) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) getdents64(r0, &(0x7f0000000800)=""/4098, 0x1002) 4.344522998s ago: executing program 5 (id=2509): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, r0, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x83}}, 0x30) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, &(0x7f0000000100)) 4.32212871s ago: executing program 0 (id=2513): mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 4.311184472s ago: executing program 6 (id=2365): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r0, &(0x7f0000000040)=""/36, 0x24) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) getdents64(r0, &(0x7f0000000800)=""/4098, 0x1002) 2.377957868s ago: executing program 0 (id=2514): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000014c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000001500)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000015c0)='bbr', 0x3) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001600)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000001700), 0xffffffffffffff94, 0xe8, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000001740)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2.377683528s ago: executing program 1 (id=2515): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/60, 0x3c}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0}, 0x10001}], 0x3, 0x40000002, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r4], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.377362828s ago: executing program 5 (id=2517): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fa) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r0, &(0x7f0000000240)='0', 0x1) openat(0xffffffffffffff9c, 0x0, 0x880cc2, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.35895976s ago: executing program 1 (id=2518): socket(0x18, 0x2, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x50000, 0x1, 0x10, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x3, 0x5, 0xeb}, {0x3000, 0x80a0000, 0xd, 0xe, 0x5, 0x7, 0x4, 0x14, 0x6, 0x5, 0x0, 0xb}, {0x8000000, 0x102f8000, 0x1e, 0x45, 0x6, 0x7, 0x81, 0x3, 0x80, 0x1, 0xe, 0x78}, {0x41000, 0x6000, 0xa, 0x3, 0x6, 0xb, 0xc0, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x42, 0x6, 0x5, 0x1, 0xd, 0x49}, {0xf000, 0x0, 0x0, 0x1, 0xa, 0x28, 0x4, 0x63, 0x1c, 0x5, 0x0, 0xd}, {0x10000, 0x0, 0xa, 0x23, 0x2, 0x3, 0x9, 0x7, 0x7, 0x8, 0x43, 0x3}, {0xeeee0000, 0x5}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x150690, 0x3, 0x4000, 0xeeee0c00, [0xffffffffffffeffd, 0x2, 0x4, 0x1000]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000240)={"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"}) 2.296167637s ago: executing program 0 (id=2520): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0x8, 0x0, 0x0, 0xf, 0x1, 0x80002}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30]}}, 0x0, 0x2d, 0x0, 0x1}, 0x28) 2.295927526s ago: executing program 1 (id=2521): bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x7f) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./mnt\x00', 0x1ff) mount(&(0x7f0000000880)=@filename='./dev/sda1\x00', &(0x7f00000008c0)='./mnt\x00', &(0x7f0000000900)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./mnt\x00', 0x519001, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.295771246s ago: executing program 5 (id=2522): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000008c80)={0x2, &(0x7f0000008cc0)=[{0x20, 0x2, 0x85, 0xfffff034}, {0x6, 0x2, 0x2, 0xffff}]}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f00000013c0)="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", 0x118) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000001600)={0xa, 0x4e23, 0x8020000c, @loopback={0x91}, 0xfffff803}, 0x1c) 2.295676706s ago: executing program 0 (id=2523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000f80)={0xa3, 0x0, 0xfffffffffffffffe}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000000)={0xb, 0x0, [{0x80000008, 0x2, 0x2, 0x5, 0x7, 0x10002, 0x8}, {0x7, 0x9, 0x5, 0x2, 0x0, 0x3, 0x1}, {0x80000019, 0x6, 0x6, 0x6, 0x899b, 0x6, 0x9c1c}, {0xb, 0x7fffffff, 0x0, 0xc9a9, 0x40000104, 0x5, 0x10000}, {0x40000001, 0x80000001, 0x3, 0x8001, 0x101, 0x39e, 0x2}, {0x6, 0x4, 0x1, 0x8, 0x807, 0x7f, 0x2}, {0xb, 0x67a, 0x5, 0x0, 0xf1, 0x0, 0x6}, {0xa, 0x7ff, 0x0, 0x18000000, 0x82e, 0x7, 0xe}, {0x3, 0x8, 0x1, 0xa, 0xffff8000, 0xd0c, 0xd9}, {0x4000000a, 0x6, 0x4, 0x12000000, 0x2, 0x6}, {0x1, 0x3, 0x0, 0x8000, 0x2, 0x8, 0x6}]}) 2.272183088s ago: executing program 3 (id=2524): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xa0302, 0x0) ioctl$TCSETS(r0, 0x545c, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.271007149s ago: executing program 6 (id=2365): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r0, &(0x7f0000000040)=""/36, 0x24) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) getdents64(r0, &(0x7f0000000800)=""/4098, 0x1002) 2.270656049s ago: executing program 0 (id=2525): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000003c0)={0xe000001a}) read$FUSE(r1, &(0x7f0000003280)={0x2020}, 0x1dfb) epoll_pwait(r0, &(0x7f0000003240)=[{}], 0x1, 0xdf4, 0x0, 0x0) 2.2625418s ago: executing program 3 (id=2526): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) modify_ldt$write2(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0xa3) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') pread64(r3, &(0x7f0000001c80)=""/4103, 0x1007, 0x4b) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000140)="1c0000001a005f0214f9f407000904001f000000fe000000", 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 225.933327ms ago: executing program 0 (id=2527): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) modify_ldt$write2(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0xa3) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') pread64(r4, &(0x7f0000001c80)=""/4103, 0x1007, 0x4b) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000140)="1c0000001a005f0214f9f407000904001f000000fe000000", 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 224.159097ms ago: executing program 1 (id=2528): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/60, 0x3c}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/108, 0x6c}, 0x10001}], 0x2, 0x40000002, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r4], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 223.897917ms ago: executing program 3 (id=2529): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001300), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001340)=r2, 0x4) close(0x3) sendmsg$inet(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}], 0x1}, 0x0) 223.752107ms ago: executing program 5 (id=2530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b40)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)='GPL\x00'}, 0x48) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000780)=r1) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000bc0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000c00)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000c40)=ANY=[], 0x66) 203.093349ms ago: executing program 3 (id=2531): syz_mount_image$exfat(&(0x7f0000002e40), &(0x7f0000002ec0)='./file1\x00', 0x80, &(0x7f0000002f00)=ANY=[], 0x7d, 0x1508, &(0x7f0000002f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) r0 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) setreuid(0xee01, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000013c0), &(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x190d491, 0x0, 0x40, 0x0, &(0x7f0000001500)) mkdir(&(0x7f0000001540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x60) mount(0x0, &(0x7f0000000e00)='.\x00', 0x0, 0x2200020, 0x0) rename(&(0x7f0000001680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 183.021081ms ago: executing program 5 (id=2532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200f100fffffff500000000000048000880440000801400040016004e227f0000"], 0x70}, 0x1, 0x0, 0x0, 0xc004}, 0xc040) 182.719321ms ago: executing program 1 (id=2533): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs\x00', 0x1ef) mount(0x0, &(0x7f00000000c0)='./tracefs\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='100000', 0x6) write(0xffffffffffffffff, &(0x7f0000000240)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs/instances/foo\x00', 0x1ff) 182.321931ms ago: executing program 3 (id=2534): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000880)='27', 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0xa66f, 0x4, 0x762}, 0xfffffffd, 0x1, 0x3, 0x1, 0x1, 0x12, 0x1e, 0xb, 0x8, 0x7f, {0xb2ac, 0x545, 0x5, 0xffff, 0x200}}}}]}, 0x78}}, 0x4c850) 119.730038ms ago: executing program 1 (id=2535): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 94.40947ms ago: executing program 3 (id=2536): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000140)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "6c06002004dc17a8"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x6) 44.289135ms ago: executing program 5 (id=2537): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f00000005c0)={r2, 0xffffffffffffffff, 0x24, 0x0, @val=@iter={&(0x7f0000000600)=@task, 0x10}}, 0x20) 0s ago: executing program 6 (id=2365): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r0, &(0x7f0000000040)=""/36, 0x24) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) getdents64(r0, &(0x7f0000000800)=""/4098, 0x1002) kernel console output (not intermixed with test programs): esystem without journal. Opts: test_dummy_encryption,nojournal_checksum,nogrpid,debug_want_extra_isize=0x0000000000000080,dioread_nolock,jqfmt=vfsv1,test_dummy_encryption,nodioread_nolock,,errors=continue [ 34.567543][ T563] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 34.597006][ T563] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 34.598081][ T428] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 34.612649][ T428] usb 2-1: USB disconnect, device number 2 [ 34.621886][ T563] syz.3.55 (pid 563) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 34.623003][ T633] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 34.827951][ T420] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.178516][ T420] usb 3-1: Using ep0 maxpacket: 32 [ 35.338475][ T420] usb 3-1: config 192 has an invalid interface number: 162 but max is 0 [ 35.382659][ T420] usb 3-1: config 192 has no interface number 0 [ 35.473627][ T420] usb 3-1: config 192 interface 162 altsetting 161 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 35.582904][ T420] usb 3-1: config 192 interface 162 altsetting 161 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 35.698832][ T420] usb 3-1: config 192 interface 162 altsetting 161 endpoint 0x8 has an invalid bInterval 144, changing to 11 [ 35.711148][ T420] usb 3-1: config 192 interface 162 altsetting 161 has an invalid endpoint with address 0x0, skipping [ 35.723271][ T420] usb 3-1: config 192 interface 162 altsetting 161 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 35.735353][ T420] usb 3-1: config 192 interface 162 has no altsetting 0 [ 35.882145][ T648] kvm [647]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x0 [ 35.898340][ T420] usb 3-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=6c.ca [ 35.907556][ T420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.922049][ T420] usb 3-1: Product: syz [ 35.926408][ T420] usb 3-1: Manufacturer: syz [ 35.931215][ T420] usb 3-1: SerialNumber: syz [ 36.059711][ T652] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.68: Failed to acquire dquot type 1 [ 36.071180][ T652] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.68: Failed to acquire dquot type 1 [ 36.082776][ T652] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.68: bg 0: block 248: padding at end of block bitmap is not set [ 36.097218][ T652] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 36.106175][ T652] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.68: Failed to acquire dquot type 1 [ 36.117638][ T652] EXT4-fs (loop4): 1 orphan inode deleted [ 36.123542][ T652] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 36.132498][ T652] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.163683][ T656] EXT4-fs (loop0): Test dummy encryption mode enabled [ 36.167570][ T652] EXT4-fs error (device loop4): ext4_lookup:1834: inode #2: comm syz.4.68: deleted inode referenced: 12 [ 36.218016][ T656] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 36.228017][ T656] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 36.266122][ T656] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,jqfmt=vfsv1,noinit_itable,norecovery,minixdf,nogrpid,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000007, [ 36.369121][ T420] asix: probe of 3-1:192.162 failed with error -22 [ 36.403169][ T420] usb 3-1: USB disconnect, device number 3 [ 36.515288][ T667] EXT4-fs error (device loop4): ext4_lookup:1834: inode #2: comm syz.4.68: deleted inode referenced: 12 [ 36.527407][ T667] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.68: Failed to acquire dquot type 1 [ 36.989821][ T689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 37.205011][ T420] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 37.212919][ T677] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 37.223662][ T677] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 37.235005][ T24] kauditd_printk_skb: 187 callbacks suppressed [ 37.235017][ T24] audit: type=1400 audit(1794123440.870:358): avc: denied { mounton } for pid=682 comm="syz.2.79" path="/9/file0" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 37.258157][ T690] 9pnet: Insufficient options for proto=fd [ 37.269188][ T677] F2FS-fs (loop0): Unrecognized mount option " " or missing value [ 37.295426][ T668] F2FS-fs (loop3): invalid crc value [ 37.324837][ T668] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.378487][ T668] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 37.391310][ T694] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.401556][ T694] EXT4-fs (loop0): orphan cleanup on readonly fs [ 37.408601][ T694] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3357: comm syz.0.80: Allocating blocks 41-42 which overlap fs metadata [ 37.422470][ T694] Quota error (device loop0): write_blk: dquota write failed [ 37.432566][ T694] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 37.451133][ T663] netlink: 104 bytes leftover after parsing attributes in process `syz.3.69'. [ 37.460222][ T694] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.80: Failed to acquire dquot type 0 [ 37.460482][ T24] audit: type=1400 audit(1794123441.100:359): avc: denied { connect } for pid=662 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.472915][ T694] EXT4-fs error (device loop0): mb_free_blocks:1540: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 37.505586][ T694] EXT4-fs (loop0): 1 truncate cleaned up [ 37.511496][ T694] EXT4-fs (loop0): pa ffff88811a872d20: logic 1, phys. 41, len 23 [ 37.519588][ T694] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4367: group 0, free 22, pa_free 23 [ 37.519727][ T701] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 37.529951][ T420] usb 5-1: device descriptor read/64, error -71 [ 37.538970][ T701] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 37.576872][ T694] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,usrquota,grpjquota=,discard,nouid32,grpjquota=,nogrpid,max_dir_size_kb=0x00000000000004002,errors=continue [ 37.607013][ T694] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 37.618407][ T694] EXT4-fs (loop0): re-mounted. Opts: [ 37.622133][ T24] audit: type=1400 audit(1794123441.250:360): avc: denied { mounton } for pid=700 comm="syz.2.81" path="/10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/config" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.641935][ T694] EXT4-fs (loop0): re-mounted. Opts: (null) [ 37.729093][ T701] overlayfs: upper fs does not support tmpfile. [ 37.746623][ T24] audit: type=1400 audit(1794123441.360:361): avc: denied { write } for pid=700 comm="syz.2.81" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.768238][ T24] audit: type=1400 audit(1794123441.360:362): avc: denied { add_name } for pid=700 comm="syz.2.81" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.788633][ T24] audit: type=1400 audit(1794123441.360:363): avc: denied { setattr } for pid=700 comm="syz.2.81" name="work" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.871602][ T24] audit: type=1400 audit(1794123441.500:364): avc: denied { bind } for pid=710 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.907171][ T24] audit: type=1400 audit(1794123441.530:365): avc: denied { setopt } for pid=710 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.939373][ T714] x_tables: unsorted entry at hook 1 [ 37.957946][ T420] usb 5-1: device descriptor read/64, error -71 [ 37.990521][ T712] EXT4-fs (loop1): Ignoring removed bh option [ 38.037468][ T712] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,jqfmt=vfsv1,auto_da_alloc,abort,bh,,errors=continue [ 38.050567][ T718] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 38.057209][ T722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 38.067383][ T718] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 38.082232][ T712] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.082786][ T718] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 38.103854][ T722] FAULT_INJECTION: forcing a failure. [ 38.103854][ T722] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 38.117578][ T722] CPU: 0 PID: 722 Comm: syz.3.82 Not tainted syzkaller #0 [ 38.124703][ T722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 38.134855][ T722] Call Trace: [ 38.138253][ T722] __dump_stack+0x21/0x24 [ 38.142596][ T722] dump_stack_lvl+0x1a7/0x208 [ 38.147282][ T722] ? show_regs_print_info+0x18/0x18 [ 38.152493][ T722] dump_stack+0x15/0x1c [ 38.156656][ T722] should_fail+0x3ab/0x500 [ 38.161085][ T722] should_fail_alloc_page+0x4f/0x60 [ 38.166288][ T722] __alloc_pages_nodemask+0x11a/0x640 [ 38.171779][ T722] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 38.177338][ T722] ? __kasan_kmalloc+0xe6/0x100 [ 38.182285][ T722] ? __kasan_kmalloc+0xd4/0x100 [ 38.187144][ T722] ? __kmalloc+0x19f/0x330 [ 38.191660][ T722] ? security_prepare_creds+0x4e/0x140 [ 38.197125][ T722] ? prepare_creds+0x3ad/0x560 [ 38.201898][ T722] ? lookup_user_key+0x2b1/0x11b0 [ 38.207014][ T722] ? __se_sys_add_key+0x311/0x410 [ 38.212054][ T722] ? do_syscall_64+0x31/0x40 [ 38.216738][ T722] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.222816][ T722] new_slab+0x84/0x3f0 [ 38.226898][ T722] ___slab_alloc+0x2f8/0x4c0 [ 38.227920][ T420] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 38.231513][ T722] ? key_alloc+0x2c1/0xef0 [ 38.243294][ T722] __slab_alloc+0x63/0xa0 [ 38.247632][ T722] ? key_alloc+0x2c1/0xef0 [ 38.252062][ T722] ? key_alloc+0x2c1/0xef0 [ 38.256487][ T722] kmem_cache_alloc+0x1a4/0x2d0 [ 38.261347][ T722] ? key_alloc+0x2c1/0xef0 [ 38.265769][ T722] key_alloc+0x2c1/0xef0 [ 38.270027][ T722] keyring_alloc+0x47/0xb0 [ 38.274452][ T722] lookup_user_key+0x448/0x11b0 [ 38.279320][ T722] ? lookup_user_key_possessed+0x40/0x40 [ 38.284966][ T722] ? search_process_keyrings_rcu+0x280/0x280 [ 38.290968][ T722] __se_sys_add_key+0x311/0x410 [ 38.295848][ T722] ? __x64_sys_add_key+0xd0/0xd0 [ 38.300804][ T722] __x64_sys_add_key+0xbf/0xd0 [ 38.305593][ T722] do_syscall_64+0x31/0x40 [ 38.310032][ T722] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.315931][ T722] RIP: 0033:0x7fa306212b19 [ 38.320356][ T722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.339975][ T722] RSP: 002b:00007fa304c6a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 38.348402][ T722] RAX: ffffffffffffffda RBX: 00007fa306498fa0 RCX: 00007fa306212b19 [ 38.356397][ T722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 38.364589][ T722] RBP: 00007fa3062aab70 R08: ffffffffffffffff R09: 0000000000000000 [ 38.372585][ T722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.380568][ T722] R13: 00007fa306499038 R14: 00007fa306498fa0 R15: 00007ffcbc8f3308 [ 38.608041][ T420] usb 5-1: device descriptor read/64, error -71 [ 38.779852][ T735] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.799317][ T735] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,journal_dev=0x000000000000007f,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,nogrpid,noauto_da_alloc,dioread_nolock, [ 38.828058][ T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 38.911797][ T750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.92'. [ 38.921060][ T750] Zero length message leads to an empty skb [ 39.007958][ T420] usb 5-1: device descriptor read/64, error -71 [ 39.067950][ T15] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 39.067998][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 39.128646][ T420] usb usb5-port1: attempt power cycle [ 39.208088][ T20] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 39.226161][ T20] usb 3-1: config 0 has no interface number 0 [ 39.256279][ T20] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 39.319993][ T759] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 39.329838][ T759] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 39.342250][ T759] EXT4-fs error (device loop0): ext4_get_journal_inode:5247: inode #5: comm syz.0.94: unexpected bad inode w/o EXT4_IGET_BAD [ 39.357183][ T759] EXT4-fs (loop0): no journal found [ 39.362479][ T759] EXT4-fs (loop0): can't get journal size [ 39.398965][ T759] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue [ 39.426410][ T759] overlayfs: missing 'lowerdir' [ 39.434612][ T759] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1465: inode #12: block 16: comm syz.0.94: path /23/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 39.461340][ T759] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 39.516558][ T757] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 39.558036][ T420] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 39.568184][ T20] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 39.577574][ T757] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 39.591109][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.600487][ T757] F2FS-fs (loop3): fault_type options not supported [ 39.607156][ T20] usb 3-1: Product: syz [ 39.613996][ T20] usb 3-1: Manufacturer: syz [ 39.620135][ T757] F2FS-fs (loop3): invalid crc value [ 39.625855][ T20] usb 3-1: SerialNumber: syz [ 39.634181][ T757] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 39.660921][ T20] usb 3-1: config 0 descriptor?? [ 39.678228][ T733] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 39.758826][ T757] F2FS-fs (loop3): Start checkpoint disabled! [ 39.766750][ T757] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 39.774985][ T757] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 39.903164][ T733] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 39.910260][ T420] usb 5-1: device descriptor read/8, error -71 [ 40.118026][ T420] usb 5-1: device descriptor read/8, error -71 [ 40.147239][ T764] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 40.179578][ T764] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004fffc,i_version,errors=remount-ro,max_batch_time=0x000000000000186b, [ 40.319960][ T803] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 40.388038][ T15] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 40.396222][ T15] usb 2-1: config 0 has no interface number 0 [ 40.402547][ T15] usb 2-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.413702][ T15] usb 2-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.423743][ T15] usb 2-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.436686][ T15] usb 2-1: config 0 interface 16 has no altsetting 0 [ 40.443810][ T15] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 40.452938][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.458235][ T20] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 40.462005][ T15] usb 2-1: config 0 descriptor?? [ 40.479108][ T20] asix: probe of 3-1:0.188 failed with error -71 [ 40.490084][ T20] usb 3-1: USB disconnect, device number 4 [ 40.670326][ T818] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 40.678099][ T818] FAT-fs (loop0): Filesystem has been set read-only [ 40.749740][ T822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.112'. [ 40.766654][ T824] cgroup: syz.0.113 (824) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 40.783149][ T824] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 40.939066][ T833] fuse: root generation should be zero [ 40.950074][ T15] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.16/0003:06A3:0CD0.0001/input/input5 [ 41.030051][ T15] saitek 0003:06A3:0CD0.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.1-1/input16 [ 41.152533][ T740] udc-core: couldn't find an available UDC or it's busy [ 41.159549][ T740] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 41.621853][ T861] ip_tables: iptables: counters copy to user failed while replacing table [ 41.685104][ T867] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 41.693352][ T867] FAT-fs (loop0): Filesystem has been set read-only [ 41.700372][ T867] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 42.172306][ T859] udevd[859]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 42.317385][ T902] kvm: apic: phys broadcast and lowest prio [ 42.369631][ T906] ip_tables: iptables: counters copy to user failed while replacing table [ 42.378887][ T906] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 42.398720][ T906] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 42.805407][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 42.805418][ T24] audit: type=1400 audit(1794123446.430:397): avc: denied { read } for pid=915 comm="syz.2.150" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.837331][ T24] audit: type=1400 audit(1794123446.430:398): avc: denied { open } for pid=915 comm="syz.2.150" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.870150][ T24] audit: type=1400 audit(1794123446.430:399): avc: denied { ioctl } for pid=915 comm="syz.2.150" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.902500][ T24] audit: type=1400 audit(1794123446.500:400): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 42.923902][ T428] usb 2-1: USB disconnect, device number 3 [ 43.026480][ T24] audit: type=1400 audit(1794123446.650:401): avc: denied { mounton } for pid=931 comm="syz.4.156" path="/22/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 43.077760][ T24] audit: type=1400 audit(1794123446.680:402): avc: denied { unlink } for pid=931 comm="syz.4.156" name="#2" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 43.124352][ T941] overlayfs: unrecognized mount option "userxattr" or missing value [ 43.157945][ T24] audit: type=1400 audit(1794123446.680:403): avc: denied { create } for pid=931 comm="syz.4.156" name="#4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.207389][ T24] audit: type=1400 audit(1794123446.680:404): avc: denied { associate } for pid=931 comm="syz.4.156" name="#4" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.281487][ T954] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.292905][ T24] audit: type=1400 audit(1794123446.680:405): avc: denied { rmdir } for pid=931 comm="syz.4.156" name="#4" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.327715][ T954] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.387263][ T24] audit: type=1400 audit(1794123446.950:406): avc: denied { unmount } for pid=956 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.433159][ T968] FAT-fs (loop4): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 43.544295][ T975] FAULT_INJECTION: forcing a failure. [ 43.544295][ T975] name failslab, interval 1, probability 0, space 0, times 0 [ 43.557089][ T975] CPU: 0 PID: 975 Comm: syz.0.174 Not tainted syzkaller #0 [ 43.564308][ T975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 43.574391][ T975] Call Trace: [ 43.577714][ T975] __dump_stack+0x21/0x24 [ 43.582066][ T975] dump_stack_lvl+0x1a7/0x208 [ 43.586763][ T975] ? thaw_kernel_threads+0x220/0x220 [ 43.592063][ T975] ? stack_trace_save+0xa6/0xf0 [ 43.596927][ T975] ? show_regs_print_info+0x18/0x18 [ 43.602148][ T975] ? __btf_verifier_log_type+0x1fa/0x660 [ 43.607817][ T975] dump_stack+0x15/0x1c [ 43.611992][ T975] should_fail+0x3ab/0x500 [ 43.616430][ T975] ? kvmalloc_node+0x88/0x130 [ 43.621163][ T975] __should_failslab+0xa4/0xe0 [ 43.625936][ T975] should_failslab+0x9/0x20 [ 43.630457][ T975] __kmalloc+0x60/0x330 [ 43.634630][ T975] kvmalloc_node+0x88/0x130 [ 43.639144][ T975] btf_check_all_metas+0x343/0x820 [ 43.644265][ T975] btf_parse_type_sec+0xea/0x1570 [ 43.649317][ T975] ? btf_verifier_log+0x2b0/0x2b0 [ 43.654354][ T975] ? btf_parse_hdr+0x1df/0x7c0 [ 43.659138][ T975] ? memcpy+0x56/0x70 [ 43.663128][ T975] ? btf_parse_hdr+0x5e2/0x7c0 [ 43.667899][ T975] ? btf_parse_str_sec+0x1aa/0x260 [ 43.673026][ T975] btf_new_fd+0x55b/0xa00 [ 43.677383][ T975] bpf_btf_load+0x5e/0x70 [ 43.681726][ T975] __se_sys_bpf+0x4ea/0x740 [ 43.686246][ T975] ? __x64_sys_bpf+0x90/0x90 [ 43.690850][ T975] ? __kasan_check_read+0x11/0x20 [ 43.695880][ T975] __x64_sys_bpf+0x7b/0x90 [ 43.700311][ T975] do_syscall_64+0x31/0x40 [ 43.704741][ T975] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.710649][ T975] RIP: 0033:0x7fd1c1f57b19 [ 43.715090][ T975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.734718][ T975] RSP: 002b:00007fd1c09af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 43.743151][ T975] RAX: ffffffffffffffda RBX: 00007fd1c21ddfa0 RCX: 00007fd1c1f57b19 [ 43.751137][ T975] RDX: 0000000000000020 RSI: 0000200000002ac0 RDI: 0000000000000012 [ 43.759119][ T975] RBP: 00007fd1c1fefb70 R08: 0000000000000000 R09: 0000000000000000 [ 43.767126][ T975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.775105][ T975] R13: 00007fd1c21de038 R14: 00007fd1c21ddfa0 R15: 00007fffedc2d6e8 [ 43.962553][ T984] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.976065][ T1002] Disabled LAPIC found during irq injection [ 43.979938][ T984] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.990174][ T984] device bridge_slave_0 entered promiscuous mode [ 44.001798][ T984] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.009374][ T984] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.018588][ T984] device bridge_slave_1 entered promiscuous mode [ 44.065757][ T1014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 44.111240][ T984] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.118332][ T984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.125618][ T984] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.132699][ T984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.155017][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.156490][ T1019] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 44.171016][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.171695][ T1019] FAT-fs (loop2): Filesystem has been set read-only [ 44.192475][ T1019] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 44.201077][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.221747][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.232954][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.240044][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.247665][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.256065][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.263297][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.271754][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.287243][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.307077][ T984] device veth0_vlan entered promiscuous mode [ 44.322257][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.334073][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.343534][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.353635][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.362374][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.376000][ T984] device veth1_macvtap entered promiscuous mode [ 44.390049][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.401753][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.405266][ T1051] device-mapper: table: 253:0: multipath: unknown target type [ 44.419021][ T1051] device-mapper: ioctl: error adding target to table [ 44.421218][ T9] device bridge_slave_1 left promiscuous mode [ 44.433964][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.443672][ T9] device bridge_slave_0 left promiscuous mode [ 44.450433][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.458391][ T9] device veth1_macvtap left promiscuous mode [ 44.464437][ T9] device veth0_vlan left promiscuous mode [ 44.552335][ T1063] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 44.665794][ T1078] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 45.351608][ T1124] fuse: Bad value for 'fd' [ 45.455881][ T1135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 45.770296][ T1152] kvm [1151]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x0 [ 45.779708][ T1152] kvm [1151]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x0 [ 45.791781][ T1152] kvm [1151]: vcpu0, guest rIP: 0x9134 ignored wrmsr: 0x11e data 0xbe702111 syzkaller syzkaller login: [ 47.134431][ T1255] device syzkaller0 entered promiscuous mode [ 47.287098][ T1272] kvm: pic: non byte write [ 47.905929][ T1280] overlayfs: failed to clone upperpath [ 47.910870][ T1282] FAULT_INJECTION: forcing a failure. [ 47.910870][ T1282] name failslab, interval 1, probability 0, space 0, times 0 [ 47.924482][ T1282] CPU: 1 PID: 1282 Comm: syz.0.303 Not tainted syzkaller #0 [ 47.931784][ T1282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 47.941857][ T1282] Call Trace: [ 47.945168][ T1282] __dump_stack+0x21/0x24 [ 47.949525][ T1282] dump_stack_lvl+0x1a7/0x208 [ 47.954226][ T1282] ? thaw_kernel_threads+0x220/0x220 [ 47.959550][ T1282] ? show_regs_print_info+0x18/0x18 [ 47.964856][ T1282] dump_stack+0x15/0x1c [ 47.969028][ T1282] should_fail+0x3ab/0x500 [ 47.973467][ T1282] ? assoc_array_insert+0x3ff/0x3210 [ 47.978770][ T1282] __should_failslab+0xa4/0xe0 [ 47.983644][ T1282] should_failslab+0x9/0x20 [ 47.988173][ T1282] kmem_cache_alloc_trace+0x3a/0x2e0 [ 47.993475][ T1282] assoc_array_insert+0x3ff/0x3210 [ 47.998605][ T1282] ? __kasan_check_write+0x14/0x20 [ 48.003731][ T1282] ? mutex_lock+0x92/0xf0 [ 48.008082][ T1282] __key_link_begin+0xe1/0x210 [ 48.012875][ T1282] key_link+0x141/0x5b0 [ 48.017046][ T1282] ? __key_link_end+0x130/0x130 [ 48.021915][ T1282] ? key_alloc+0xc5e/0xef0 [ 48.026344][ T1282] ? keyring_alloc+0x86/0xb0 [ 48.030945][ T1282] call_sbin_request_key+0x40e/0xbe0 [ 48.036247][ T1282] ? request_key_rcu+0x1f0/0x1f0 [ 48.041201][ T1282] ? key_payload_reserve+0x3c0/0x3c0 [ 48.046587][ T1282] ? key_alloc+0xc5e/0xef0 [ 48.051037][ T1282] ? request_key_auth_rcu_disposal+0x20/0x20 [ 48.057117][ T1282] ? refcount_dec_and_lock+0x25/0xa0 [ 48.062423][ T1282] request_key_and_link+0xae6/0x1120 [ 48.067744][ T1282] ? key_task_permission+0x36d/0x4a0 [ 48.073048][ T1282] ? complete_request_key+0xa0/0xa0 [ 48.078267][ T1282] ? asymmetric_key_cmp+0x250/0x250 [ 48.083522][ T1282] ? keyring_search_rcu+0x290/0x290 [ 48.088740][ T1282] ? __kasan_check_write+0x14/0x20 [ 48.093879][ T1282] __se_sys_request_key+0x293/0x350 [ 48.099099][ T1282] ? __x64_sys_request_key+0xb0/0xb0 [ 48.104458][ T1282] ? __kasan_check_read+0x11/0x20 [ 48.109501][ T1282] __x64_sys_request_key+0x9b/0xb0 [ 48.114628][ T1282] do_syscall_64+0x31/0x40 [ 48.119051][ T1282] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.124963][ T1282] RIP: 0033:0x7fd1c1f57b19 [ 48.129383][ T1282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.148993][ T1282] RSP: 002b:00007fd1c09af028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 48.157406][ T1282] RAX: ffffffffffffffda RBX: 00007fd1c21ddfa0 RCX: 00007fd1c1f57b19 [ 48.165385][ T1282] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 48.173460][ T1282] RBP: 00007fd1c1fefb70 R08: 0000000000000000 R09: 0000000000000000 [ 48.181422][ T1282] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 48.189386][ T1282] R13: 00007fd1c21de038 R14: 00007fd1c21ddfa0 R15: 00007fffedc2d6e8 [ 48.223691][ T1303] netlink: 'syz.5.312': attribute type 3 has an invalid length. [ 48.231729][ T1303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.312'. [ 48.241056][ T24] kauditd_printk_skb: 47 callbacks suppressed [ 48.241067][ T24] audit: type=1400 audit(1794123451.870:454): avc: denied { map } for pid=1304 comm="syz.0.314" path="socket:[20364]" dev="sockfs" ino=20364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.274318][ T1312] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.318'. [ 48.285163][ T24] audit: type=1400 audit(1794123451.870:455): avc: denied { read } for pid=1304 comm="syz.0.314" path="socket:[20364]" dev="sockfs" ino=20364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.464977][ T1335] ip_tables: iptables: counters copy to user failed while replacing table [ 48.589358][ T1349] erofs: (device loop5): mounted with root inode @ nid 36. [ 48.604038][ T1349] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 48.613579][ T1349] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=3 [ 48.722353][ T1371] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1371 comm=syz.1.344 [ 48.927600][ T1402] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 49.090265][ T1423] FAULT_INJECTION: forcing a failure. [ 49.090265][ T1423] name failslab, interval 1, probability 0, space 0, times 0 [ 49.117369][ T1423] CPU: 1 PID: 1423 Comm: syz.2.363 Not tainted syzkaller #0 [ 49.124696][ T1423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 49.134769][ T1423] Call Trace: [ 49.138096][ T1423] __dump_stack+0x21/0x24 [ 49.142560][ T1423] dump_stack_lvl+0x1a7/0x208 [ 49.147262][ T1423] ? thaw_kernel_threads+0x220/0x220 [ 49.152558][ T1423] ? show_regs_print_info+0x18/0x18 [ 49.157764][ T1423] ? avc_has_perm+0x168/0x3d0 [ 49.162450][ T1423] dump_stack+0x15/0x1c [ 49.166620][ T1423] should_fail+0x3ab/0x500 [ 49.171064][ T1423] ? bpf_map_meta_alloc+0x1c0/0x750 [ 49.176280][ T1423] __should_failslab+0xa4/0xe0 [ 49.181040][ T1423] should_failslab+0x9/0x20 [ 49.185541][ T1423] __kmalloc+0x60/0x330 [ 49.189693][ T1423] ? __fdget+0x1a1/0x230 [ 49.193933][ T1423] bpf_map_meta_alloc+0x1c0/0x750 [ 49.198953][ T1423] array_of_map_alloc+0x38/0xc0 [ 49.203798][ T1423] map_create+0x3dd/0x1f50 [ 49.208210][ T1423] __se_sys_bpf+0x24b/0x740 [ 49.212705][ T1423] ? __x64_sys_bpf+0x90/0x90 [ 49.217293][ T1423] ? __kasan_check_read+0x11/0x20 [ 49.222335][ T1423] __x64_sys_bpf+0x7b/0x90 [ 49.226748][ T1423] do_syscall_64+0x31/0x40 [ 49.231163][ T1423] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.237318][ T1423] RIP: 0033:0x7f9cc7d9bb19 [ 49.241730][ T1423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.261330][ T1423] RSP: 002b:00007f9cc67f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.269736][ T1423] RAX: ffffffffffffffda RBX: 00007f9cc8021fa0 RCX: 00007f9cc7d9bb19 [ 49.277699][ T1423] RDX: 0000000000000050 RSI: 0000200000000ac0 RDI: 0000000000000000 [ 49.285667][ T1423] RBP: 00007f9cc7e33b70 R08: 0000000000000000 R09: 0000000000000000 [ 49.293656][ T1423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.301636][ T1423] R13: 00007f9cc8022038 R14: 00007f9cc8021fa0 R15: 00007ffdb9a01818 [ 49.328488][ T24] audit: type=1400 audit(1794123452.960:456): avc: denied { create } for pid=1431 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.388095][ T24] audit: type=1400 audit(1794123452.980:457): avc: denied { connect } for pid=1431 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.413563][ T24] audit: type=1400 audit(1794123452.980:458): avc: denied { setopt } for pid=1431 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.621787][ T24] audit: type=1400 audit(1794123453.250:459): avc: denied { mounton } for pid=1456 comm="syz.2.377" path="/73/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 49.689179][ T1459] xt_hashlimit: size too large, truncated to 1048576 [ 49.763159][ T24] audit: type=1400 audit(1794123453.390:460): avc: denied { read write } for pid=1469 comm="syz.0.382" name="event2" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.819996][ T24] audit: type=1400 audit(1794123453.420:461): avc: denied { open } for pid=1469 comm="syz.0.382" path="/dev/input/event2" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.820203][ T1475] overlayfs: failed to get inode (-116) [ 49.891679][ T1475] overlayfs: failed to get inode (-116) [ 50.041566][ T1496] 9p: Unknown Cache mode readahead [ 50.137157][ T1503] FAT-fs (loop3): bogus number of FAT sectors [ 50.159417][ T1503] FAT-fs (loop3): Can't find a valid FAT filesystem [ 50.224954][ T1514] ip_tables: iptables: counters copy to user failed while replacing table [ 50.239226][ T1514] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 50.280130][ T1516] FAULT_INJECTION: forcing a failure. [ 50.280130][ T1516] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 50.293468][ T1516] CPU: 0 PID: 1516 Comm: syz.2.402 Not tainted syzkaller #0 [ 50.300778][ T1516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 50.311026][ T1516] Call Trace: [ 50.314355][ T1516] __dump_stack+0x21/0x24 [ 50.318676][ T1516] dump_stack_lvl+0x1a7/0x208 [ 50.323371][ T1516] ? show_regs_print_info+0x18/0x18 [ 50.328585][ T1516] dump_stack+0x15/0x1c [ 50.332742][ T1516] should_fail+0x3ab/0x500 [ 50.337152][ T1516] should_fail_alloc_page+0x4f/0x60 [ 50.342434][ T1516] __alloc_pages_nodemask+0x11a/0x640 [ 50.347799][ T1516] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 50.353340][ T1516] __get_free_pages+0xe/0x30 [ 50.357922][ T1516] __tlb_remove_page_size+0x18a/0x310 [ 50.363287][ T1516] unmap_page_range+0x1303/0x2190 [ 50.368310][ T1516] ? lru_cache_disable+0xa0/0xa0 [ 50.373242][ T1516] ? copy_page_range+0x27a0/0x27a0 [ 50.378349][ T1516] unmap_vmas+0x25f/0x360 [ 50.382676][ T1516] ? unmap_page_range+0x2190/0x2190 [ 50.387880][ T1516] ? __kasan_check_write+0x14/0x20 [ 50.392984][ T1516] ? tlb_gather_mmu+0x269/0x330 [ 50.397826][ T1516] exit_mmap+0x309/0x590 [ 50.402062][ T1516] ? vm_brk+0x30/0x30 [ 50.406034][ T1516] ? slab_free_freelist_hook+0xc5/0x190 [ 50.411577][ T1516] ? __kasan_check_write+0x14/0x20 [ 50.416684][ T1516] ? __khugepaged_exit+0x2ad/0x2d0 [ 50.421789][ T1516] __mmput+0x92/0x2d0 [ 50.425935][ T1516] mmput+0x4e/0x150 [ 50.429838][ T1516] do_exit+0x9d8/0x24e0 [ 50.433992][ T1516] ? try_to_wake_up+0x670/0xdf0 [ 50.438835][ T1516] ? wake_up_q+0x123/0x1e0 [ 50.443245][ T1516] ? put_task_struct+0x90/0x90 [ 50.448000][ T1516] ? futex_wake+0x4c4/0x570 [ 50.452517][ T1516] ? __kasan_check_write+0x14/0x20 [ 50.457621][ T1516] ? _raw_spin_lock_irq+0x95/0xf0 [ 50.462660][ T1516] do_group_exit+0x149/0x310 [ 50.467245][ T1516] ? __kasan_check_write+0x14/0x20 [ 50.472348][ T1516] ? recalc_sigpending+0x1ac/0x230 [ 50.477467][ T1516] get_signal+0xfb1/0x1300 [ 50.482035][ T1516] arch_do_signal_or_restart+0xe7/0x11b0 [ 50.487658][ T1516] ? futex_exit_release+0x1e0/0x1e0 [ 50.492848][ T1516] ? make_kuid+0x1d7/0x680 [ 50.497363][ T1516] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 50.502989][ T1516] ? __se_sys_futex+0x2ba/0x370 [ 50.507850][ T1516] exit_to_user_mode_loop+0xa2/0xe0 [ 50.513135][ T1516] exit_to_user_mode_prepare+0x76/0xa0 [ 50.518589][ T1516] syscall_exit_to_user_mode+0x1d/0x40 [ 50.524059][ T1516] do_syscall_64+0x3d/0x40 [ 50.528472][ T1516] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.534357][ T1516] RIP: 0033:0x7f9cc7d9bb19 [ 50.538889][ T1516] Code: Unable to access opcode bytes at RIP 0x7f9cc7d9baef. [ 50.546259][ T1516] RSP: 002b:00007f9cc67f30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 50.554666][ T1516] RAX: 0000000000000001 RBX: 00007f9cc8021fa8 RCX: 00007f9cc7d9bb19 [ 50.562652][ T1516] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9cc8021fac [ 50.570615][ T1516] RBP: 00007f9cc8021fa0 R08: 000e5fbedda2c1de R09: 0000000000000000 [ 50.578581][ T1516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.586545][ T1516] R13: 00007f9cc8022038 R14: 00007ffdb9a01730 R15: 00007ffdb9a01818 [ 50.746020][ T1555] overlayfs: unrecognized mount option "userxattr" or missing value [ 50.759261][ T24] audit: type=1400 audit(1794123454.390:462): avc: denied { remount } for pid=1554 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.794906][ T24] audit: type=1400 audit(1794123454.420:463): avc: denied { mount } for pid=1552 comm="syz.0.417" name="/" dev="ramfs" ino=22181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.821691][ T1560] device bridge_slave_1 left promiscuous mode [ 50.834329][ T1560] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.843886][ T1560] device bridge_slave_0 left promiscuous mode [ 50.850247][ T1560] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.935744][ T1576] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.959042][ T9] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.570746][ T1648] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3276594798 (26212758384 ns) > initial count (15403876168 ns). Using initial count to start timer. [ 51.735395][ T1676] 9pnet: p9_fd_create_unix (1676): problem connecting socket: ./proc: -111 [ 51.784631][ T1682] xt_hashlimit: size too large, truncated to 1048576 [ 52.105797][ T1696] xt_hashlimit: size too large, truncated to 1048576 [ 52.424839][ T1717] ip_tables: iptables: counters copy to user failed while replacing table [ 52.558066][ T1723] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.639687][ T304] print_req_error: 14 callbacks suppressed [ 52.639702][ T304] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 52.670713][ T304] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.691776][ T304] buffer_io_error: 8 callbacks suppressed [ 52.691788][ T304] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 52.726517][ T304] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.732509][ T1748] tmpfs: Unknown parameter 'noswap' [ 52.747773][ T304] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 52.758100][ T304] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.785050][ T304] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 52.793875][ T304] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.808101][ T304] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 52.819198][ T304] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.842725][ T304] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 52.874781][ T1763] overlayfs: failed to clone upperpath [ 53.086046][ T1787] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 53.094611][ T1787] device syzkaller0 entered promiscuous mode [ 53.102454][ T1787] tipc: Started in network mode [ 53.110323][ T1787] tipc: Own node identity 66d8a9b76ca4, cluster identity 4711 [ 53.164830][ T1787] tipc: Enabled bearer , priority 0 [ 53.240100][ T1786] tipc: Resetting bearer [ 53.258624][ T1786] tipc: Disabling bearer [ 53.348550][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 53.348561][ T24] audit: type=1400 audit(1794123456.980:473): avc: denied { mounton } for pid=1793 comm="syz.5.514" path="/file0" dev="ramfs" ino=23155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 53.438174][ T1794] erofs: (device loop5): erofs_read_inode: unsupported chunk format 0 of nid 36 [ 53.448660][ T1803] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 53.461358][ T1803] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 53.461358][ T1803] [ 53.473489][ T1803] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,bsdgroups,,errors=continue [ 53.485983][ T24] audit: type=1326 audit(1794123457.120:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1809 comm="syz.2.520" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7d9bb19 code=0x7ffc0000 [ 53.511104][ T24] audit: type=1326 audit(1794123457.120:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1809 comm="syz.2.520" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7d9bb19 code=0x7ffc0000 [ 53.536011][ T24] audit: type=1326 audit(1794123457.120:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1809 comm="syz.2.520" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7d9bb19 code=0x7ffc0000 [ 53.561257][ T24] audit: type=1326 audit(1794123457.120:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1809 comm="syz.2.520" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7d9bb19 code=0x7ffc0000 [ 53.571607][ T1814] tipc: Started in network mode [ 53.586322][ T24] audit: type=1326 audit(1794123457.120:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1809 comm="syz.2.520" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9cc7d9bb19 code=0x7ffc0000 [ 53.595968][ T1814] tipc: Own node identity ea6318e23ad2, cluster identity 4711 [ 53.616173][ T24] audit: type=1326 audit(1794123457.120:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1809 comm="syz.2.520" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7d9bb19 code=0x7ffc0000 [ 53.625286][ T1814] tipc: Enabled bearer , priority 0 [ 53.648010][ T24] audit: type=1326 audit(1794123457.120:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1809 comm="syz.2.520" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7d9bb19 code=0x7ffc0000 [ 53.655276][ T1816] device syzkaller0 entered promiscuous mode [ 53.679564][ T24] audit: type=1326 audit(1794123457.120:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1809 comm="syz.2.520" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7d9bb19 code=0x7ffc0000 [ 53.711414][ T24] audit: type=1326 audit(1794123457.120:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1809 comm="syz.2.520" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f9cc7d9bb19 code=0x7ffc0000 [ 53.750023][ T1814] tipc: Resetting bearer [ 53.756489][ T1813] tipc: Resetting bearer [ 53.764342][ T1813] tipc: Disabling bearer [ 55.744053][ T1891] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 56.658565][ T1902] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 56.718561][ T1918] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 56.735112][ T1915] EXT4-fs error (device loop5): __ext4_iget:5034: inode #2: block 131072: comm syz.5.557: invalid block [ 56.757992][ T1915] EXT4-fs (loop5): get root inode failed [ 57.334703][ T1915] EXT4-fs (loop5): mount failed [ 57.558454][ T1915] EXT4-fs (loop5): Unrecognized mount option "appraise_type=imasig" or missing value [ 59.036087][ T1970] syz.5.576 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 59.058439][ T24] kauditd_printk_skb: 44 callbacks suppressed [ 59.058519][ T24] audit: type=1400 audit(1794123462.610:527): avc: denied { read append } for pid=1967 comm="syz.5.576" name="usbmon2" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.090819][ T24] audit: type=1400 audit(1794123462.610:528): avc: denied { open } for pid=1967 comm="syz.5.576" path="/dev/usbmon2" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.343984][ T24] audit: type=1400 audit(1794123462.970:529): avc: denied { create } for pid=1981 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 59.483873][ T1991] netlink: 36 bytes leftover after parsing attributes in process `syz.3.585'. [ 59.600296][ T2002] netlink: 44 bytes leftover after parsing attributes in process `syz.3.590'. [ 59.618688][ T2002] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 59.652891][ T2002] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 59.671496][ T2002] FAT-fs (loop3): Filesystem has been set read-only [ 59.727009][ T24] audit: type=1400 audit(1794123463.350:530): avc: denied { create } for pid=2004 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 59.787852][ T24] audit: type=1400 audit(1794123463.410:531): avc: denied { mount } for pid=2006 comm="syz.3.592" name="/" dev="configfs" ino=13745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 59.830799][ T24] audit: type=1400 audit(1794123463.450:532): avc: denied { mount } for pid=2010 comm="syz.5.594" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 59.854520][ T24] audit: type=1400 audit(1794123463.450:533): avc: denied { unmount } for pid=984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 59.885319][ T2016] device-mapper: table: 253:1: crypt: Error decoding and setting key [ 59.897952][ T2016] device-mapper: ioctl: error adding target to table [ 60.100444][ T2031] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 60.202337][ T24] audit: type=1400 audit(1794123463.830:534): avc: denied { write } for pid=2025 comm="syz.5.599" name="fib_trie" dev="proc" ino=4026532929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.328023][ T305] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 60.587925][ T305] usb 3-1: Using ep0 maxpacket: 16 [ 60.718004][ T305] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 60.726281][ T305] usb 3-1: config 0 has no interface number 0 [ 60.732757][ T305] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 60.742769][ T305] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.752839][ T305] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 61.198101][ T305] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 61.207463][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.215488][ T305] usb 3-1: Product: syz [ 61.219687][ T305] usb 3-1: Manufacturer: syz [ 61.224383][ T305] usb 3-1: SerialNumber: syz [ 61.267405][ T305] usb 3-1: config 0 descriptor?? [ 61.284345][ T24] audit: type=1400 audit(1794123464.900:535): avc: denied { mounton } for pid=2055 comm="syz.0.611" path="/134/file0" dev="tmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 61.353952][ T2027] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.548290][ T24] audit: type=1400 audit(1794123465.180:536): avc: denied { bind } for pid=2070 comm="syz.5.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.682655][ T305] usb 3-1: USB disconnect, device number 5 [ 61.746529][ T2091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.626'. [ 62.298057][ T305] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 63.098223][ T305] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.161082][ T305] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.189316][ T305] usb 1-1: config 0 interface 0 has no altsetting 0 [ 63.203174][ T305] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 63.222539][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.239198][ T2155] netlink: 32 bytes leftover after parsing attributes in process `syz.2.656'. [ 63.244673][ T305] usb 1-1: config 0 descriptor?? [ 63.488646][ T2167] x_tables: duplicate underflow at hook 3 [ 63.519588][ T2171] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 63.529977][ T2171] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 63.801577][ T2173] ip_tables: iptables: counters copy to user failed while replacing table [ 64.342672][ T2188] overlayfs: failed to clone upperpath [ 64.411929][ T2198] sch_tbf: peakrate 221 is lower than or equals to rate 4003 ! [ 64.597960][ T305] sony 0003:054C:09CC.0002: failed to retrieve feature report 0x81 with the DualShock 4 MAC address [ 64.611404][ T305] sony 0003:054C:09CC.0002: hidraw0: USB HID vb6.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 64.623107][ T305] sony 0003:054C:09CC.0002: failed to claim input [ 64.667845][ T305] usb 1-1: USB disconnect, device number 3 [ 64.726654][ T2206] udevd[2206]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 64.813100][ T2218] netlink: 36 bytes leftover after parsing attributes in process `syz.1.677'. [ 64.889334][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 64.889348][ T24] audit: type=1400 audit(1794123468.520:542): avc: denied { ioctl } for pid=2221 comm="syz.5.679" path="/dev/input/event0" dev="devtmpfs" ino=255 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.067966][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 65.176071][ T2190] 9pnet: p9_fd_create_tcp (2190): problem connecting socket to 127.0.0.1 [ 65.547956][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 65.768279][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 65.788179][ T2262] FAT-fs (loop0): Unrecognized mount option "ÿ0xffffffffffffffffÿÿÿÿÿÿÿÿ" or missing value [ 65.847976][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.858522][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 65.867427][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.128056][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 66.142511][ T25] usb 3-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 66.151195][ T25] usb 3-1: Product: syz [ 66.155393][ T25] usb 3-1: Manufacturer: syz [ 66.160054][ T25] usb 3-1: SerialNumber: syz [ 66.534715][ T25] cdc_ncm 3-1:1.0: skipping garbage [ 66.563778][ T25] cdc_ncm 3-1:1.0: skipping garbage [ 66.585111][ T25] cdc_ncm 3-1:1.0: bind() failure [ 66.599444][ T25] usb 3-1: USB disconnect, device number 6 [ 67.622220][ T2301] netlink: 48 bytes leftover after parsing attributes in process `syz.3.705'. [ 67.631141][ T2301] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.654042][ T24] audit: type=1400 audit(1794123471.250:543): avc: denied { setopt } for pid=2296 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.887878][ C0] sched: RT throttling activated [ 68.957970][ T24] audit: type=1400 audit(1794123472.560:544): avc: denied { bind } for pid=2317 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.038890][ T24] audit: type=1400 audit(1794123472.560:545): avc: denied { write } for pid=2317 comm="syz.0.711" path="socket:[25819]" dev="sockfs" ino=25819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.111858][ T2336] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 69.133171][ T2336] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.155703][ T24] audit: type=1400 audit(1794123472.630:546): avc: denied { create } for pid=2327 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.916876][ T2365] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #108: comm syz.0.726: No space for directory leaf checksum. Please run e2fsck -D. [ 71.116194][ T2365] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #108: comm syz.0.726: checksumming directory block 0 [ 71.258198][ T2377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 73.717979][ T428] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 73.892283][ T2430] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 74.197703][ T2445] usb usb1: usbfs: process 2445 (syz.5.753) did not claim interface 0 before use [ 74.357994][ T428] usb 3-1: unable to get BOS descriptor or descriptor too short [ 74.437988][ T287] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 74.445570][ T428] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.455815][ T428] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 74.618001][ T428] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 74.627208][ T428] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.635277][ T428] usb 3-1: Product: syz [ 74.639549][ T428] usb 3-1: Manufacturer: syz [ 74.644173][ T428] usb 3-1: SerialNumber: syz [ 74.688032][ T287] usb 1-1: Using ep0 maxpacket: 32 [ 74.808031][ T287] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 74.816202][ T287] usb 1-1: config 0 has no interface number 0 [ 74.822753][ T287] usb 1-1: config 0 interface 12 has no altsetting 0 [ 74.865985][ T2449] 9pnet: Insufficient options for proto=fd [ 74.988008][ T287] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 75.000524][ T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.008743][ T287] usb 1-1: Product: syz [ 75.012928][ T287] usb 1-1: Manufacturer: syz [ 75.017540][ T287] usb 1-1: SerialNumber: syz [ 75.024783][ T287] usb 1-1: config 0 descriptor?? [ 75.141184][ T2478] device bridge1 entered promiscuous mode [ 75.212236][ T53] usb 3-1: USB disconnect, device number 7 [ 75.335128][ T2480] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.238693][ T287] usb 1-1: USB disconnect, device number 4 [ 77.249536][ T24] audit: type=1400 audit(1794123480.880:547): avc: denied { read } for pid=2508 comm="syz.2.780" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 77.379733][ T24] audit: type=1400 audit(1794123481.010:548): avc: denied { read write } for pid=2528 comm="syz.5.789" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 77.414462][ T422] input: syz0 as /devices/virtual/misc/uhid/0005:0B05:8502.0003/input/input7 [ 77.430734][ T24] audit: type=1400 audit(1794123481.040:549): avc: denied { open } for pid=2528 comm="syz.5.789" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 77.439273][ T422] hid-generic 0005:0B05:8502.0003: input,hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 77.485987][ T2534] udevd[2534]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 77.549153][ T2548] netlink: 44 bytes leftover after parsing attributes in process `syz.1.795'. [ 77.708374][ T2554] attempt to access beyond end of device [ 77.708374][ T2554] loop2: rw=2049, want=1041, limit=128 [ 78.057896][ C1] hrtimer: interrupt took 24813 ns [ 78.227935][ T305] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 78.343372][ T2577] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.377447][ T24] audit: type=1400 audit(1794123482.000:550): avc: denied { accept } for pid=2591 comm="syz.3.811" path="socket:[25573]" dev="sockfs" ino=25573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.395660][ T2577] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue [ 78.537978][ T305] usb 3-1: Using ep0 maxpacket: 8 [ 78.828161][ T305] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.839300][ T305] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.850969][ T305] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.864547][ T305] usb 3-1: config 0 interface 0 has no altsetting 0 [ 78.871704][ T305] usb 3-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 78.881360][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.904719][ T305] usb 3-1: config 0 descriptor?? [ 79.379737][ T305] input: HID 0518:0002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0518:0002.0004/input/input8 [ 79.428023][ T2620] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.435239][ T2620] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.479993][ T305] ezkey 0003:0518:0002.0004: input,hiddev96,hidraw0: USB HID v0.f1 Device [HID 0518:0002] on usb-dummy_hcd.2-1/input0 [ 79.515604][ T2630] udevd[2630]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 79.591375][ T305] usb 3-1: USB disconnect, device number 8 [ 80.217590][ T2658] netlink: 32 bytes leftover after parsing attributes in process `syz.1.835'. [ 80.584165][ T428] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 80.958125][ T428] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.518012][ T428] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 81.521759][ T2689] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 81.527110][ T428] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 81.535207][ T2689] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 81.535908][ T2689] F2FS-fs (loop5): invalid crc value [ 81.543610][ T428] usb 3-1: Product: syz [ 81.586022][ T2689] F2FS-fs (loop5): Found nat_bits in checkpoint [ 81.627919][ T53] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 81.632260][ T428] usb 3-1: Manufacturer: syz [ 81.640784][ T2689] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 81.647832][ T2689] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 81.998136][ T53] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 254, using maximum allowed: 30 [ 82.003875][ T428] usb 3-1: USB disconnect, device number 9 [ 82.019301][ T53] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.039949][ T53] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 82.053733][ T53] usb 1-1: config 0 interface 0 has no altsetting 0 [ 82.060874][ T53] usb 1-1: New USB device found, idVendor=18d1, idProduct=5057, bcdDevice= 0.00 [ 82.071136][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.095350][ T53] usb 1-1: config 0 descriptor?? [ 82.514134][ T2746] device-mapper: table: 253:2: snapshot: Cannot get origin device [ 82.522084][ T2746] device-mapper: ioctl: error adding target to table [ 82.535318][ T2749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.590014][ T53] hid-generic 0003:18D1:5057.0005: ignoring exceeding usage max [ 82.848604][ T53] hid-generic 0003:18D1:5057.0005: hidraw0: USB HID v0.08 Device [HID 18d1:5057] on usb-dummy_hcd.0-1/input0 [ 82.861804][ T24] audit: type=1400 audit(1794123486.500:551): avc: denied { search } for pid=2760 comm="syz.2.877" name="/" dev="configfs" ino=13745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.890745][ T24] audit: type=1400 audit(1794123486.500:552): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 82.893336][ T53] usb 1-1: USB disconnect, device number 5 [ 82.912417][ T2766] udevd[2766]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 82.976129][ T2764] erofs: (device loop2): erofs_read_inode: unsupported chunk format 0 of nid 36 [ 83.704046][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 85.911176][ T2870] EXT4-fs (loop0): Unrecognized mount option "subj_type=keyring" or missing value [ 86.000358][ T2873] overlayfs: failed to clone upperpath [ 86.267338][ T2881] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 86.320886][ T2881] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 86.594525][ T24] audit: type=1400 audit(1794123490.220:553): avc: denied { name_bind } for pid=2903 comm="syz.3.930" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 86.983344][ T24] audit: type=1400 audit(1794123490.610:554): avc: denied { sys_module } for pid=2925 comm="syz.0.938" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 87.148908][ T2935] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.211973][ T2938] overlayfs: upper fs does not support tmpfile. [ 87.218433][ T2938] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 87.225513][ T2938] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 87.235607][ T2938] SELinux: (dev overlay, type overlay) has no security xattr handler [ 87.322615][ T24] audit: type=1400 audit(1794123490.840:555): avc: denied { remount } for pid=2928 comm="syz.0.939" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 87.362217][ T24] audit: type=1400 audit(1794123490.980:556): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 87.390017][ T2935] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue [ 87.850121][ T2959] xt_TCPMSS: Only works on TCP SYN packets [ 87.981124][ T2972] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 88.185717][ T24] audit: type=1400 audit(1794123491.810:557): avc: denied { mounton } for pid=2989 comm="syz.5.962" path="/171/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 88.357921][ T428] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 88.417852][ T24] audit: type=1400 audit(1794123492.040:558): avc: denied { read } for pid=2994 comm="syz.5.964" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 88.442250][ T24] audit: type=1400 audit(1794123492.070:559): avc: denied { open } for pid=2994 comm="syz.5.964" path="/dev/loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 88.718055][ T428] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 88.727982][ T428] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 89.150471][ T3016] overlayfs: upper fs does not support tmpfile. [ 89.157027][ T3016] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 89.164204][ T3016] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 89.174418][ T3016] SELinux: (dev overlay, type overlay) has no security xattr handler [ 89.218136][ T428] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 89.227671][ T428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.235751][ T428] usb 1-1: Product: syz [ 89.239973][ T428] usb 1-1: Manufacturer: syz [ 89.244631][ T428] usb 1-1: SerialNumber: syz [ 89.288470][ T428] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 89.296334][ T428] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 89.296334][ T428] Please send a copy of this message to and [ 90.714968][ T24] audit: type=1400 audit(1794123494.340:560): avc: denied { mounton } for pid=3040 comm="syz.3.981" path="/sys" dev="proc" ino=4026531854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_t tclass=dir permissive=1 [ 90.739619][ T428] ums-sddr09: probe of 1-1:1.0 failed with error -5 [ 90.748585][ T428] usb 1-1: USB disconnect, device number 6 [ 90.773979][ T3052] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 90.783026][ T3052] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.795070][ T3052] EXT4-fs error (device loop5): ext4_group_add:1685: inode #7: comm syz.5.985: iget: checksum invalid [ 90.806347][ T3052] EXT4-fs warning (device loop5): ext4_group_add:1687: Error opening resize inode [ 90.897917][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 91.181606][ T3072] tipc: Failed to remove local publication {66,0,0}/2121740666 [ 91.189401][ T3072] tipc: Failed to remove local publication {66,0,0}/2121740665 [ 91.278175][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.742124][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 91.754206][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.917994][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 91.927152][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.935248][ T25] usb 3-1: Product: syz [ 91.939505][ T25] usb 3-1: Manufacturer: syz [ 91.944118][ T25] usb 3-1: SerialNumber: syz [ 91.988594][ T25] hub 3-1:1.0: bad descriptor, ignoring hub [ 91.994786][ T25] hub: probe of 3-1:1.0 failed with error -5 [ 92.198943][ T25] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 92.318624][ T3104] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1000'. [ 92.400639][ T24] audit: type=1400 audit(1794123496.030:561): avc: denied { read write } for pid=3054 comm="syz.2.986" name="lp0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 92.424255][ T24] audit: type=1400 audit(1794123496.030:562): avc: denied { open } for pid=3054 comm="syz.2.986" path="/dev/usb/lp0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 92.548109][ T428] usb 3-1: USB disconnect, device number 10 [ 92.554847][ T428] usblp0: removed [ 92.774931][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 93.628041][ T25] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.729108][ T25] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.799497][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.813672][ T3137] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 93.822864][ T3137] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.894718][ T3143] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1014'. [ 93.903246][ T24] audit: type=1400 audit(1794123497.520:563): avc: denied { bind } for pid=3142 comm="syz.3.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.924770][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 93.934523][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.937994][ T15] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 93.948396][ T25] usb 1-1: config 0 descriptor?? [ 94.187898][ T15] usb 6-1: Using ep0 maxpacket: 32 [ 94.308082][ T15] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 94.316378][ T15] usb 6-1: config 0 has no interface number 0 [ 94.508186][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 94.514951][ T25] usbhid: probe of 1-1:0.0 failed with error -71 [ 94.527063][ T25] usb 1-1: USB disconnect, device number 7 [ 94.529053][ T15] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 94.554376][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.070260][ T15] usb 6-1: Product: syz [ 95.074439][ T15] usb 6-1: Manufacturer: syz [ 95.079556][ T15] usb 6-1: SerialNumber: syz [ 95.091439][ T15] usb 6-1: config 0 descriptor?? [ 95.128433][ T15] smsc95xx v2.0.0 [ 96.017983][ T15] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 96.029579][ T15] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 97.031472][ T15] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 97.042444][ T15] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 97.050209][ T15] usb 6-1: USB disconnect, device number 2 [ 98.609582][ T3434] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 99.736217][ T24] audit: type=1400 audit(1794123503.360:564): avc: denied { read } for pid=3502 comm="syz.1.1176" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 100.840159][ T15] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 101.467968][ T15] usb 3-1: Using ep0 maxpacket: 8 [ 101.506085][ T3599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1215'. [ 101.509041][ T24] audit: type=1400 audit(1794123505.130:565): avc: denied { connect } for pid=3598 comm="syz.1.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.535156][ T24] audit: type=1400 audit(1794123505.130:566): avc: denied { write } for pid=3598 comm="syz.1.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.570168][ T3605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=3605 comm=syz.0.1217 [ 101.589082][ T15] usb 3-1: config index 0 descriptor too short (expected 1060, got 36) [ 101.611568][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.500945][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.754973][ T15] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.767898][ T15] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 102.776943][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.788970][ T15] usb 3-1: config 0 descriptor?? [ 102.830548][ T3630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 102.858621][ T3634] overlayfs: failed to clone upperpath [ 102.868640][ T3628] device syzkaller0 entered promiscuous mode [ 102.881236][ T3628] tipc: Started in network mode [ 102.887940][ T24] audit: type=1400 audit(1794123506.460:567): avc: denied { map } for pid=3629 comm="syz.3.1226" path="socket:[30787]" dev="sockfs" ino=30787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.908403][ T3628] tipc: Own node identity ce891641e1ad, cluster identity 4711 [ 102.919271][ T3628] tipc: Enabled bearer , priority 0 [ 102.921443][ T24] audit: type=1400 audit(1794123506.460:568): avc: denied { read } for pid=3629 comm="syz.3.1226" path="socket:[30787]" dev="sockfs" ino=30787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.978505][ T3627] tipc: Resetting bearer [ 102.986261][ T3627] tipc: Disabling bearer [ 103.046837][ T3645] device-mapper: table: 253:2: linear: Device lookup failed [ 103.048002][ T15] usbhid 3-1:0.0: can't add hid device: -71 [ 103.054203][ T3645] device-mapper: ioctl: error adding target to table [ 103.060715][ T15] usbhid: probe of 3-1:0.0 failed with error -71 [ 103.080058][ T15] usb 3-1: USB disconnect, device number 11 [ 103.139366][ T3653] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 2: comm syz.5.1236: lblock 2 mapped to illegal pblock 2 (length 1) [ 103.154377][ T3653] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 103.162808][ T3653] EXT4-fs error (device loop5): __ext4_get_inode_loc:4451: comm syz.5.1236: Invalid inode table block 1 in block_group 0 [ 103.177157][ T3653] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 103.187418][ T3653] EXT4-fs error (device loop5): __ext4_ext_dirty:182: inode #3: comm syz.5.1236: mark_inode_dirty error [ 103.199230][ T3653] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 103.208312][ T3653] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.1236: Failed to acquire dquot type 0 [ 103.220270][ T3653] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 103.230393][ T3653] EXT4-fs error (device loop5): ext4_evict_inode:285: inode #11: comm syz.5.1236: mark_inode_dirty error [ 103.242051][ T3653] EXT4-fs warning (device loop5): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 103.252680][ T3653] EXT4-fs (loop5): 1 orphan inode deleted [ 103.258607][ T3653] EXT4-fs (loop5): mounted filesystem without journal. Opts: acl,noblock_validity,journal_dev=0x000000000000000f,max_batch_time=0x00000000000008c9,inlinecrypt,noauto_da_alloc,,errors=continue [ 103.277746][ T9] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.292316][ T9] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 103.301494][ T9] EXT4-fs error (device loop5): ext4_release_dquot:6266: comm kworker/u4:1: Failed to release dquot type 0 [ 103.315684][ T984] EXT4-fs error (device loop5): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 103.329216][ T984] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 103.338856][ T984] EXT4-fs error (device loop5): ext4_quota_off:6549: inode #3: comm syz-executor: mark_inode_dirty error [ 103.936299][ T3673] device-mapper: ioctl: Unable to rename non-existent device, syzc0 to CRP-syzc1 [ 103.977834][ T419] hid-generic 0005:0B05:8502.0006: item fetching failed at offset 2/3 [ 104.045390][ T419] hid-generic: probe of 0005:0B05:8502.0006 failed with error -22 [ 104.224031][ T3687] EXT4-fs (loop5): dax option not supported [ 105.780971][ T3723] EXT4-fs (loop0): Invalid log cluster size: 10756 [ 106.631162][ T3757] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 106.668428][ T3757] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,nodelalloc,auto_da_alloc=0x00000000000007ff,auto_da_alloc=0x0000000000000003,,errors=continue [ 106.696684][ T3757] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.042719][ T3779] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 107.066085][ T24] audit: type=1400 audit(1794123510.680:569): avc: denied { write } for pid=3778 comm="syz.0.1270" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.088525][ T24] audit: type=1400 audit(1794123510.680:570): avc: denied { add_name } for pid=3778 comm="syz.0.1270" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.109505][ T24] audit: type=1400 audit(1794123510.680:571): avc: denied { associate } for pid=3778 comm="syz.0.1270" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 107.182784][ T419] input: syz0 as /devices/virtual/misc/uhid/0005:0B05:8502.0007/input/input9 [ 107.194944][ T419] hid-generic 0005:0B05:8502.0007: input,hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 107.231812][ T3790] udevd[3790]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 107.596471][ T24] audit: type=1400 audit(1794123511.220:572): avc: denied { ioctl } for pid=3795 comm="syz.0.1284" path="/dev/usbmon0" dev="devtmpfs" ino=154 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 109.628906][ T3859] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 109.655460][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 109.874328][ T3866] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 110.028001][ T3875] tipc: Cannot configure node identity twice [ 110.307540][ T24] audit: type=1400 audit(1794123513.930:573): avc: denied { remount } for pid=3865 comm="syz.2.1312" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 110.526229][ T24] audit: type=1400 audit(1794123513.960:574): avc: denied { remove_name } for pid=3865 comm="syz.2.1312" name="file0" dev="loop2" ino=1048692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.669987][ T24] audit: type=1400 audit(1794123513.960:575): avc: denied { rename } for pid=3865 comm="syz.2.1312" name="file0" dev="loop2" ino=1048692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.702870][ T24] audit: type=1400 audit(1794123513.960:576): avc: denied { reparent } for pid=3865 comm="syz.2.1312" name="file0" dev="loop2" ino=1048692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.725460][ T3896] ip_tables: iptables: counters copy to user failed while replacing table [ 111.683852][ T3930] overlayfs: failed to clone upperpath [ 113.194845][ T3982] FAULT_INJECTION: forcing a failure. [ 113.194845][ T3982] name failslab, interval 1, probability 0, space 0, times 1 [ 113.213936][ T3982] CPU: 0 PID: 3982 Comm: syz.2.1358 Not tainted syzkaller #0 [ 113.221337][ T3982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 113.231406][ T3982] Call Trace: [ 113.234713][ T3982] __dump_stack+0x21/0x24 [ 113.239146][ T3982] dump_stack_lvl+0x1a7/0x208 [ 113.243834][ T3982] ? show_regs_print_info+0x18/0x18 [ 113.249051][ T3982] ? selinux_capable+0x2b6/0x3b0 [ 113.254005][ T3982] dump_stack+0x15/0x1c [ 113.258175][ T3982] should_fail+0x3ab/0x500 [ 113.262697][ T3982] ? prepare_creds+0x2c/0x560 [ 113.267383][ T3982] __should_failslab+0xa4/0xe0 [ 113.272155][ T3982] should_failslab+0x9/0x20 [ 113.276840][ T3982] kmem_cache_alloc+0x3d/0x2d0 [ 113.281611][ T3982] prepare_creds+0x2c/0x560 [ 113.286130][ T3982] ? __sys_setresuid+0x604/0xb80 [ 113.291079][ T3982] __sys_setresuid+0x609/0xb80 [ 113.295851][ T3982] __x64_sys_setresuid+0x7a/0x90 [ 113.300934][ T3982] do_syscall_64+0x31/0x40 [ 113.305372][ T3982] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 113.311281][ T3982] RIP: 0033:0x7f9cc7d9bb19 [ 113.315712][ T3982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.335324][ T3982] RSP: 002b:00007f9cc67f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 113.343754][ T3982] RAX: ffffffffffffffda RBX: 00007f9cc8021fa0 RCX: 00007f9cc7d9bb19 [ 113.351740][ T3982] RDX: ffffffffffffffff RSI: 000000000000ee01 RDI: 0000000000000000 [ 113.359719][ T3982] RBP: 00007f9cc7e33b70 R08: 0000000000000000 R09: 0000000000000000 [ 113.367905][ T3982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.375898][ T3982] R13: 00007f9cc8022038 R14: 00007f9cc8021fa0 R15: 00007ffdb9a01818 [ 113.708044][ T24] audit: type=1400 audit(1794123517.280:577): avc: denied { nlmsg_read } for pid=3986 comm="syz.3.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 113.757327][ T24] audit: type=1400 audit(1794123517.280:578): avc: denied { audit_write } for pid=3986 comm="syz.3.1360" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 113.779030][ T24] audit: type=1107 audit(1794123517.280:579): pid=3986 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 116.217751][ T4089] overlayfs: failed to clone upperpath [ 116.639972][ T4101] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.844594][ T24] audit: type=1400 audit(1794123520.470:580): avc: denied { associate } for pid=4113 comm="syz.5.1409" name="file1" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 116.845365][ T4114] overlayfs: upper fs does not support tmpfile. [ 117.122298][ T4114] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 117.144879][ T4112] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1408: iget: bad i_size value: 38620345925642 [ 117.158118][ T4114] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 117.183886][ T4114] SELinux: (dev overlay, type overlay) has no security xattr handler [ 117.198123][ T4112] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1408: couldn't read orphan inode 15 (err -117) [ 117.218772][ T4112] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 117.391319][ T4112] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1408: bg 0: block 5: invalid block bitmap [ 117.518087][ T4112] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1496 with error 28 [ 117.545242][ T4112] EXT4-fs (loop2): This should not happen!! Data will be lost [ 117.545242][ T4112] [ 117.591803][ T4112] EXT4-fs (loop2): Total free blocks count 0 [ 117.597842][ T4112] EXT4-fs (loop2): Free/Dirty block details [ 117.633253][ T4112] EXT4-fs (loop2): free_blocks=0 [ 117.643336][ T4112] EXT4-fs (loop2): dirty_blocks=1500 [ 117.673651][ T4112] EXT4-fs (loop2): Block reservation details [ 117.680643][ T4112] EXT4-fs (loop2): i_reserved_data_blocks=1500 [ 117.783457][ T4139] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1418'. [ 117.792704][ T4138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1417'. [ 117.820994][ T4138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 118.827741][ T4173] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 119.858423][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 120.097983][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 120.177937][ T24] audit: type=1400 audit(1794123523.800:581): avc: denied { write } for pid=4207 comm="syz.1.1446" path="socket:[32003]" dev="sockfs" ino=32003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.238047][ T25] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 120.252007][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.259618][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 120.268928][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.277751][ T25] usb 3-1: config 0 descriptor?? [ 120.813954][ T24] audit: type=1400 audit(1794123524.440:582): avc: denied { create } for pid=4231 comm="syz.0.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 120.836440][ T25] wacom 0003:056A:037A.0008: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 121.015725][ T25] wacom 0003:056A:037A.0008: hidraw0: USB HID v0.02 Device [HID 056a:037a] on usb-dummy_hcd.2-1/input0 [ 121.087403][ T25] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:037A.0008/input/input10 [ 121.212955][ T25] usb 3-1: USB disconnect, device number 12 [ 121.236142][ T4243] udevd[4243]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 121.288719][ T4245] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 121.319716][ T4245] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,nodelalloc,auto_da_alloc=0x00000000000007ff,auto_da_alloc=0x0000000000000003,,errors=continue [ 121.336774][ T4245] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.459224][ T4253] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,data_err=ignore,init_itable,nodelalloc,abort,,errors=continue [ 121.476190][ T24] audit: type=1400 audit(1794123525.100:583): avc: denied { remove_name } for pid=4252 comm="syz.0.1462" name="file1" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.086716][ T4356] tipc: Enabling of bearer rejected, failed to enable media [ 124.596507][ T4381] FAULT_INJECTION: forcing a failure. [ 124.596507][ T4381] name failslab, interval 1, probability 0, space 0, times 0 [ 124.665375][ T4381] CPU: 1 PID: 4381 Comm: syz.0.1511 Not tainted syzkaller #0 [ 124.672996][ T4381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 124.683083][ T4381] Call Trace: [ 124.686483][ T4381] __dump_stack+0x21/0x24 [ 124.690821][ T4381] dump_stack_lvl+0x1a7/0x208 [ 124.695504][ T4381] ? show_regs_print_info+0x18/0x18 [ 124.700717][ T4381] ? __schedule+0xc0b/0x13e0 [ 124.705346][ T4381] dump_stack+0x15/0x1c [ 124.709588][ T4381] should_fail+0x3ab/0x500 [ 124.714001][ T4381] ? __d_alloc+0x2d/0x690 [ 124.718327][ T4381] __should_failslab+0xa4/0xe0 [ 124.723086][ T4381] should_failslab+0x9/0x20 [ 124.727584][ T4381] kmem_cache_alloc+0x3d/0x2d0 [ 124.732342][ T4381] ? schedule_preempt_disabled+0x20/0x20 [ 124.737969][ T4381] __d_alloc+0x2d/0x690 [ 124.742114][ T4381] d_alloc_pseudo+0x1d/0x70 [ 124.746627][ T4381] alloc_file_pseudo+0xe0/0x200 [ 124.751476][ T4381] ? alloc_empty_file_noaccount+0x80/0x80 [ 124.757277][ T4381] __anon_inode_getfd+0x26b/0x3d0 [ 124.762298][ T4381] ? anon_inode_getfd+0x40/0x40 [ 124.767143][ T4381] ? memset+0x35/0x40 [ 124.771116][ T4381] anon_inode_getfd+0x31/0x40 [ 124.775787][ T4381] __se_sys_timerfd_create+0x2fd/0x490 [ 124.781236][ T4381] ? __x64_sys_futex+0x100/0x100 [ 124.786180][ T4381] ? __x64_sys_timerfd_create+0x70/0x70 [ 124.791731][ T4381] ? __kasan_check_read+0x11/0x20 [ 124.796745][ T4381] __x64_sys_timerfd_create+0x5b/0x70 [ 124.802113][ T4381] do_syscall_64+0x31/0x40 [ 124.806527][ T4381] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 124.812415][ T4381] RIP: 0033:0x7fd1c1f57b19 [ 124.816824][ T4381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.836422][ T4381] RSP: 002b:00007fd1c09af028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 124.844831][ T4381] RAX: ffffffffffffffda RBX: 00007fd1c21ddfa0 RCX: 00007fd1c1f57b19 [ 124.852797][ T4381] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000007 [ 124.860759][ T4381] RBP: 00007fd1c1fefb70 R08: 0000000000000000 R09: 0000000000000000 [ 124.868723][ T4381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.876688][ T4381] R13: 00007fd1c21de038 R14: 00007fd1c21ddfa0 R15: 00007fffedc2d6e8 [ 126.138002][ T24] audit: type=1326 audit(1794123529.670:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.1533" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2301e67b19 code=0x7ffc0000 [ 126.287370][ T24] audit: type=1326 audit(1794123529.670:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.1533" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2301e67b19 code=0x7ffc0000 [ 126.316303][ T24] audit: type=1326 audit(1794123529.670:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.1533" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2301e67b19 code=0x7ffc0000 [ 126.341449][ T24] audit: type=1326 audit(1794123529.680:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.1533" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2301e67b19 code=0x7ffc0000 [ 126.383924][ T24] audit: type=1326 audit(1794123529.680:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.1533" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2301e67b19 code=0x7ffc0000 [ 126.410563][ T24] audit: type=1326 audit(1794123529.680:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4457 comm="syz.5.1533" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2301e2834e code=0x7ffc0000 [ 126.472013][ T24] audit: type=1326 audit(1794123529.690:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.1533" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2301e67b19 code=0x7ffc0000 [ 126.502531][ T24] audit: type=1326 audit(1794123529.690:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.1533" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2301e67b19 code=0x7ffc0000 [ 126.527693][ T24] audit: type=1326 audit(1794123529.690:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.1533" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2301e67b19 code=0x7ffc0000 [ 127.153776][ T24] audit: type=1326 audit(1794123529.690:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.1533" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f2301e67b19 code=0x7ffc0000 [ 127.310059][ T4482] loop0: [ 127.524368][ T4520] overlayfs: failed to clone upperpath [ 127.891986][ T422] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 127.977943][ T305] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 128.157914][ T422] usb 3-1: Using ep0 maxpacket: 8 [ 128.378132][ T305] usb 1-1: not running at top speed; connect to a high speed hub [ 128.443461][ T422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.532584][ T422] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 128.588058][ T305] usb 1-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 128.607119][ T305] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.618423][ T422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.629486][ T305] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 128.639697][ T422] usb 3-1: config 0 descriptor?? [ 128.644877][ T305] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 128.656363][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.665820][ T305] usb 1-1: config 0 descriptor?? [ 128.708697][ T305] uvcvideo: Unknown video format 32595559-0000-0010-0000-000000000000 [ 128.721118][ T305] uvcvideo: Found UVC 9.00 device (046d:0825) [ 129.686738][ T305] uvcvideo: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 129.708038][ T305] uvcvideo: Failed to query (129) UVC probe control : -71 (exp. 48). [ 129.716174][ T305] uvcvideo: Failed to initialize the device (-5). [ 129.727542][ T305] usb 1-1: USB disconnect, device number 8 [ 130.611222][ T305] usb 3-1: USB disconnect, device number 13 [ 131.452152][ T4658] device ip6erspan0 entered promiscuous mode [ 131.577919][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 131.577933][ T24] audit: type=1400 audit(1794123535.150:628): avc: denied { ioctl } for pid=4661 comm="syz.1.1618" path="/439/file0" dev="tmpfs" ino=2367 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.231244][ T4695] overlayfs: failed to clone upperpath [ 134.118758][ T4745] FAT-fs (loop0): Directory bread(block 64) failed [ 134.145744][ T4745] FAT-fs (loop0): Directory bread(block 65) failed [ 134.158415][ T4745] FAT-fs (loop0): Directory bread(block 66) failed [ 134.167534][ T4745] FAT-fs (loop0): Directory bread(block 67) failed [ 134.184841][ T4745] FAT-fs (loop0): Directory bread(block 68) failed [ 134.191605][ T4745] FAT-fs (loop0): Directory bread(block 69) failed [ 134.198336][ T4745] FAT-fs (loop0): Directory bread(block 70) failed [ 134.206689][ T4745] FAT-fs (loop0): Directory bread(block 71) failed [ 134.214398][ T4745] FAT-fs (loop0): Directory bread(block 72) failed [ 134.221253][ T4745] FAT-fs (loop0): Directory bread(block 73) failed [ 134.338871][ T24] audit: type=1400 audit(1794123537.970:629): avc: denied { ioctl } for pid=4753 comm="syz.1.1654" path="socket:[34054]" dev="sockfs" ino=34054 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.166790][ T429] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 135.485486][ T4787] ip_tables: iptables: counters copy to user failed while replacing table [ 135.541325][ T4795] overlayfs: failed to clone upperpath [ 135.565412][ T24] audit: type=1400 audit(1794123539.190:630): avc: denied { lock } for pid=4798 comm="syz.0.1663" path="socket:[34146]" dev="sockfs" ino=34146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 135.567931][ T429] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.604092][ T429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.619139][ T429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.629145][ T429] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.642194][ T429] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.652136][ T429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.662077][ T429] usb 3-1: config 0 descriptor?? [ 135.760731][ T4806] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 135.767212][ T4806] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 135.776484][ T4806] F2FS-fs (loop0): invalid crc value [ 135.783358][ T4806] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 135.805454][ T4806] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 135.812727][ T4806] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 135.828053][ T281] attempt to access beyond end of device [ 135.828053][ T281] loop0: rw=2049, want=45104, limit=40427 [ 136.036394][ T4816] netlink: 'syz.0.1675': attribute type 4 has an invalid length. [ 136.119185][ T4825] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 136.128254][ T4825] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.149336][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.149617][ T24] audit: type=1400 audit(1794123539.780:631): avc: denied { ioctl } for pid=4824 comm="syz.0.1679" path="/294/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 136.156881][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.209810][ T4825] fs-verity: sha512 using implementation "sha512-avx2" [ 136.217307][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.224835][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.235945][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.236499][ T24] audit: type=1400 audit(1794123539.860:632): avc: denied { setattr } for pid=4824 comm="syz.0.1679" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.243410][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.272779][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.280229][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.287715][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.295397][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.302818][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.310240][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.317628][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.325030][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.332583][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.339987][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.347379][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.357116][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.364726][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.374859][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.382633][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.390739][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.398711][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.406241][ T429] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 136.414127][ T429] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 136.428458][ T429] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 136.443784][ T429] usb 3-1: USB disconnect, device number 14 [ 136.479408][ T4846] udevd[4846]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 137.683138][ T4877] capability: warning: `syz.5.1695' uses 32-bit capabilities (legacy support in use) [ 139.954293][ T4910] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 139.964176][ T4910] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 139.985147][ T4910] F2FS-fs (loop2): invalid crc value [ 139.998661][ T4910] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 140.031098][ T4910] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 140.038268][ T4910] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 140.078008][ T285] attempt to access beyond end of device [ 140.078008][ T285] loop2: rw=2049, want=45104, limit=40427 [ 140.554717][ T4937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'. [ 140.770569][ T4981] exFAT-fs (loop2): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 140.852849][ T5007] fuse: Invalid rootmode [ 140.986961][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1754'. [ 141.024868][ T5029] Illegal XDP return value 4294967274, expect packet loss! [ 141.061247][ T5022] EXT4-fs (loop2): Ignoring removed orlov option [ 141.082091][ T5022] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.108535][ T5022] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #16: comm syz.2.1751: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 141.140560][ T5022] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1751: couldn't read orphan inode 16 (err -117) [ 141.153170][ T5022] EXT4-fs (loop2): 1 orphan inode deleted [ 141.162057][ T5022] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,nombcache,debug_want_extra_isize=0x000000000000002a,commit=0x0000000000000005,orlov,lazytime,,errors=continue [ 141.461090][ T5054] EXT4-fs (loop2): Ignoring removed oldalloc option [ 141.484306][ T5054] EXT4-fs (loop2): can't mount with commit=6, fs mounted w/o journal [ 141.951635][ T5078] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 141.968053][ T5078] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.988969][ T5078] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:404: inode #2: comm syz.2.1777: No space for directory leaf checksum. Please run e2fsck -D. [ 142.008017][ T5078] EXT4-fs error (device loop2): htree_dirblock_to_tree:1063: inode #2: comm syz.2.1777: Directory block failed checksum [ 142.477530][ T5120] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1791'. [ 143.348318][ T5143] erofs: (device loop2): mounted with root inode @ nid 36. [ 143.434176][ T24] audit: type=1400 audit(1794123547.030:633): avc: denied { read } for pid=5141 comm="syz.2.1802" name="file1" dev="loop2" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 144.007917][ T24] audit: type=1400 audit(1794123547.620:634): avc: denied { map } for pid=5177 comm="syz.0.1814" path="socket:[34678]" dev="sockfs" ino=34678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 144.466685][ T24] audit: type=1400 audit(1794123548.090:635): avc: denied { write } for pid=5198 comm="syz.2.1825" name="usb_gadget" dev="configfs" ino=13746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 144.491514][ T5199] using random self ethernet address [ 144.496826][ T5199] using random host ethernet address [ 144.569517][ T24] audit: type=1400 audit(1794123548.120:636): avc: denied { add_name } for pid=5198 comm="syz.2.1825" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 144.665433][ T24] audit: type=1400 audit(1794123548.120:637): avc: denied { create } for pid=5198 comm="syz.2.1825" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 144.685251][ T24] audit: type=1400 audit(1794123548.180:638): avc: denied { write } for pid=5198 comm="syz.2.1825" name="ifname" dev="configfs" ino=33318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 144.707883][ T24] audit: type=1400 audit(1794123548.180:639): avc: denied { open } for pid=5198 comm="syz.2.1825" path="/307/cfg/usb_gadget/g1/functions/eem.usb0/ifname" dev="configfs" ino=33318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 144.757913][ T24] audit: type=1400 audit(1794123548.180:640): avc: denied { read } for pid=5198 comm="syz.2.1825" name="ifname" dev="configfs" ino=33318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 144.799474][ T5212] xt_TCPMSS: Only works on TCP SYN packets [ 144.844418][ T5210] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 145.169093][ T5231] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 145.182609][ T5231] ext4 filesystem being mounted at /312/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.001058][ T5278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1855'. [ 146.018355][ T5278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1855'. [ 146.092081][ T5300] netlink: 'syz.1.1866': attribute type 21 has an invalid length. [ 147.038937][ T5348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=5348 comm=syz.1.1888 [ 147.066459][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1891'. [ 147.076251][ T5353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1891'. [ 147.085297][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1891'. [ 147.107154][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1891'. [ 147.592150][ T24] audit: type=1326 audit(1794123551.220:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.2.1902" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9cc7d9bb19 code=0x0 [ 147.667901][ T24] audit: type=1400 audit(1794123551.280:642): avc: denied { transfer } for pid=5382 comm="syz.2.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 148.475158][ T5423] ip_tables: iptables: counters copy to user failed while replacing table [ 148.538997][ T5418] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 148.896379][ T5418] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,mblk_io_submit,grpquota,nojournal_checksum,grpid,nobarrier,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue [ 149.422597][ T5455] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 149.607581][ T5487] EXT4-fs (loop2): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 149.756727][ T5494] xt_TCPMSS: Only works on TCP SYN packets [ 150.256837][ T5462] 9pnet: p9_fd_create_tcp (5462): problem connecting socket to 127.0.0.1 [ 150.477949][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 150.477962][ T24] audit: type=1400 audit(1794123554.070:644): avc: denied { accept } for pid=5501 comm="syz.2.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 150.586175][ T5543] device bridge1 entered promiscuous mode [ 150.708511][ T24] audit: type=1400 audit(1794123554.340:645): avc: denied { create } for pid=5550 comm="syz.1.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.955856][ T5557] netlink: 'syz.0.1977': attribute type 15 has an invalid length. [ 150.988443][ T24] audit: type=1400 audit(1794123554.540:646): avc: denied { ioctl } for pid=5545 comm="syz.3.1972" path="socket:[35194]" dev="sockfs" ino=35194 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 151.021187][ T5557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1977'. [ 151.057625][ T5556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1978'. [ 151.136724][ T24] audit: type=1400 audit(1794123554.570:647): avc: denied { ioctl } for pid=5550 comm="syz.1.1975" path="socket:[35189]" dev="sockfs" ino=35189 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.006905][ T5602] xt_SECMARK: invalid mode: 2 [ 152.646227][ T24] audit: type=1400 audit(1794123556.270:648): avc: denied { create } for pid=5641 comm="syz.3.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 152.703568][ T5644] netlink: 'syz.1.2011': attribute type 7 has an invalid length. [ 152.712657][ T5644] netlink: 'syz.1.2011': attribute type 7 has an invalid length. [ 152.844857][ T24] audit: type=1400 audit(1794123556.400:649): avc: denied { write } for pid=5641 comm="syz.3.2012" path="socket:[35365]" dev="sockfs" ino=35365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 153.318992][ T24] audit: type=1400 audit(1794123556.950:650): avc: denied { read } for pid=5678 comm="syz.2.2028" name="g1" dev="configfs" ino=33308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.341201][ T24] audit: type=1400 audit(1794123556.950:651): avc: denied { open } for pid=5678 comm="syz.2.2028" path="/337/config/usb_gadget/g1" dev="configfs" ino=33308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.796626][ T24] audit: type=1400 audit(1794123557.420:652): avc: denied { write } for pid=5693 comm="syz.3.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.878946][ T5707] ip_tables: iptables: counters copy to user failed while replacing table [ 153.920949][ T24] audit: type=1400 audit(1794123557.450:653): avc: denied { nlmsg_write } for pid=5693 comm="syz.3.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.951588][ T5698] EXT4-fs (loop2): Ignoring removed oldalloc option [ 153.978224][ T5698] EXT4-fs (loop2): Ignoring removed orlov option [ 154.017596][ T5698] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,oldalloc,orlov,dioread_lock,,errors=continue [ 154.046680][ T5698] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.087581][ T5698] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2037: bg 0: block 112: padding at end of block bitmap is not set [ 154.465281][ T5747] syz.5.2057 uses obsolete (PF_INET,SOCK_PACKET) [ 154.862184][ T5769] xt_hashlimit: size too large, truncated to 1048576 [ 155.065259][ T5788] netlink: 'syz.5.2075': attribute type 12 has an invalid length. [ 155.157746][ T5791] ip_tables: iptables: counters copy to user failed while replacing table [ 156.008084][ T5795] ip_tables: iptables: counters copy to user failed while replacing table [ 156.757358][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 156.768247][ T24] audit: type=1326 audit(1794123560.370:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.5.2089" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2301e67b19 code=0x0 [ 158.564552][ T24] audit: type=1400 audit(1794123562.190:664): avc: denied { read write } for pid=5944 comm="syz.2.2119" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.590598][ T24] audit: type=1400 audit(1794123562.220:665): avc: denied { open } for pid=5944 comm="syz.2.2119" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.617217][ T24] audit: type=1400 audit(1794123562.220:666): avc: denied { ioctl } for pid=5944 comm="syz.2.2119" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.659898][ T24] audit: type=1326 audit(1794123562.290:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.3.2138" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa306212b19 code=0x0 [ 158.867940][ T305] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 158.903501][ T5977] ip_tables: iptables: counters copy to user failed while replacing table [ 159.228101][ T305] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 159.237370][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.246349][ T305] usb 3-1: config 0 descriptor?? [ 160.237922][ T24] audit: type=1400 audit(1794123563.830:668): avc: denied { wake_alarm } for pid=6057 comm="syz.3.2186" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.286895][ T24] audit: type=1400 audit(1794123563.860:669): avc: denied { name_bind } for pid=6061 comm="syz.5.2187" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 160.548768][ T6088] 9pnet: Insufficient options for proto=fd [ 161.211271][ T6115] device veth2 entered promiscuous mode [ 161.545179][ T24] audit: type=1400 audit(1794123565.170:670): avc: denied { watch } for pid=6148 comm="syz.3.2226" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 161.576007][ T15] usb 3-1: USB disconnect, device number 15 [ 161.687146][ T24] audit: type=1400 audit(1794123565.310:671): avc: denied { bind } for pid=6175 comm="syz.3.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.712922][ T24] audit: type=1400 audit(1794123565.330:672): avc: denied { create } for pid=6177 comm="syz.2.2240" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 161.859341][ T6185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2244'. [ 161.868500][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2244'. [ 161.877447][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2244'. [ 161.886364][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2244'. [ 162.293252][ T6210] ip_tables: iptables: counters copy to user failed while replacing table [ 162.984522][ T6267] Config c/1 of g1 needs at least one function. [ 162.990970][ T6267] udc dummy_udc.0: failed to start g1: -22 [ 163.032222][ T6271] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.043785][ T6271] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.2283: bad orphan inode 131083 [ 163.055811][ T6271] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,,errors=continue [ 163.522794][ T6289] EXT4-fs error (device loop2): ext4_lookup:1830: inode #15: comm syz.2.2283: iget: bad extra_isize 1312 (inode size 256) [ 163.967287][ T6296] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 163.977374][ T24] audit: type=1400 audit(1794123567.610:673): avc: denied { relabelto } for pid=6292 comm="syz.5.2290" name="459" dev="tmpfs" ino=2466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 164.004482][ T24] audit: type=1400 audit(1794123567.610:674): avc: denied { associate } for pid=6292 comm="syz.5.2290" name="459" dev="tmpfs" ino=2466 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 164.447422][ T6357] x_tables: ip6_tables: hashlimit.2 match: invalid size 304 (kernel) != (user) 352 [ 165.048135][ T6378] SELinux: Context system_u:object_r:systemd_tmpfiles_exec_t:s0 is not valid (left unmapped). [ 165.058936][ T24] audit: type=1400 audit(1794123568.690:675): avc: denied { relabelto } for pid=6377 comm="syz.1.2326" name="bus" dev="tmpfs" ino=3030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_tmpfiles_exec_t:s0" [ 165.087258][ T24] audit: type=1400 audit(1794123568.690:676): avc: denied { associate } for pid=6377 comm="syz.1.2326" name="bus" dev="tmpfs" ino=3030 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_tmpfiles_exec_t:s0" [ 165.124942][ T24] audit: type=1400 audit(1794123568.700:677): avc: denied { rename } for pid=6377 comm="syz.1.2326" name="bus" dev="tmpfs" ino=3030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_tmpfiles_exec_t:s0" [ 165.153697][ T24] audit: type=1400 audit(1794123568.710:678): avc: denied { rmdir } for pid=279 comm="syz-executor" name="file0" dev="tmpfs" ino=3030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_tmpfiles_exec_t:s0" [ 165.462321][ T24] audit: type=1400 audit(1794123569.090:679): avc: denied { setattr } for pid=6405 comm="syz.5.2337" name="file0" dev="tmpfs" ino=2482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 166.048385][ T285] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 166.056158][ T285] FAT-fs (loop2): Filesystem has been set read-only [ 166.068411][ T285] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 166.081977][ T6445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2357'. [ 166.102611][ T6445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2357'. [ 166.835489][ T24] audit: type=1400 audit(1794123570.460:680): avc: denied { watch watch_reads } for pid=6494 comm="syz.1.2379" path="/571/file0" dev="tmpfs" ino=3080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 168.129874][ T24] audit: type=1326 audit(1794123571.760:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.5.2391" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2301e67b19 code=0x7ffc0000 [ 168.178475][ T24] audit: type=1326 audit(1794123571.760:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.5.2391" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2301e67b19 code=0x7ffc0000 [ 172.041621][ T6614] overlayfs: failed to clone upperpath [ 172.208666][ T6635] mmap: syz.1.2435 (6635) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 173.286540][ T6646] overlayfs: failed to clone upperpath [ 173.362316][ T6661] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 176.001051][ T6690] overlayfs: failed to clone upperpath [ 176.046915][ T6696] ip_tables: iptables: counters copy to user failed while replacing table [ 176.058377][ T6698] sock: sock_set_timeout: `syz.5.2461' (pid 6698) tries to set negative timeout [ 177.524436][ T777] kernel write not supported for file [eventfd] (pid: 777 comm: kworker/0:6) [ 177.534653][ T6707] overlayfs: failed to clone upperpath [ 180.828234][ T6741] netlink: 'syz.1.2478': attribute type 12 has an invalid length. [ 180.901891][ T6756] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2485'. [ 182.724739][ T6781] ip_tables: iptables: counters copy to user failed while replacing table [ 184.639404][ T6808] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2506'. [ 184.687188][ T6818] overlayfs: failed to clone upperpath [ 184.694796][ T6818] overlayfs: failed to clone upperpath [ 188.820004][ T6869] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2532'. SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=2365 state=3 status=67 (errno 9: Bad file descriptor) [ 189.225964][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 189.225976][ T24] audit: type=1400 audit(1794123592.850:703): avc: denied { write } for pid=271 comm="syz-executor" path="pipe:[13038]" dev="pipefs" ino=13038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 189.409271][ T9] tipc: Left network mode [ 190.168557][ T9] device bridge_slave_1 left promiscuous mode [ 190.174690][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.182252][ T9] device bridge_slave_0 left promiscuous mode [ 190.188433][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.196109][ T9] device veth1_macvtap left promiscuous mode [ 190.202256][ T9] device veth0_vlan left promiscuous mode [ 191.218955][ T9] device bridge_slave_1 left promiscuous mode [ 191.225074][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.232472][ T9] device bridge_slave_0 left promiscuous mode [ 191.238626][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.246277][ T9] device bridge_slave_1 left promiscuous mode [ 191.252682][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.260064][ T9] device bridge_slave_0 left promiscuous mode [ 191.266151][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.273939][ T9] device veth0_vlan left promiscuous mode