last executing test programs: 1m8.406500607s ago: executing program 0 (id=679): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1a000001040000000001000001000000000000003652469682b7f94f9c50a5ece414832714097be8cf99a426fe0d7c599cd16352f8e3ce8f5c4f3f5db004d26fb877219c597bbeb3625a6f6dff6229c05f3a8660ca93481b66c26d2470d4b372b33203ad0567e214a942524d97d0c769a8aa28b2fcaba49b94fa7972ec5f0dee4c4f33c4f059fe7b94134981284024a9a2f349830502499ec2e269473fc8b070344e688eba8c08b6b87e6a0a1b283aff", @ANYRES32, @ANYBLOB='#\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000030000000000"], 0x50) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00032bbd7000fddbdf25170000000c00990009000000210000000a000600ffffffffffff00000a001a00ffffffffffff00000a0006000802110000001000000000ffffffffffff00000a001a00ffffffffffff00000a00060008021100"], 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f00000012c0)=""/4095, 0xfff, 0x102, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000f80)={@in6={{0xa, 0x3, 0x4000, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}}, 0x0, 0x0, 0x0, 0x0, "8aac4f23c59b321a1738763829f40de6514263b9b0b7023fb22bdc015174daab26ae82d6f820dd0320e82bc93d0f02bbce4b9f19d856884d638b771a2941e8ac694cb91fd1796fd3f40eb831690c6382"}, 0xd8) fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) syz_fuse_handle_req(r4, &(0x7f0000000ac0)="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", 0x2000, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4) sendto$inet(r5, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) 1m7.522180526s ago: executing program 0 (id=689): syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000000)=ANY=[], 0x0) 1m3.779510828s ago: executing program 0 (id=732): open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0x1}]) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) sendfile(r0, r0, 0x0, 0x400000000008004) 1m3.319206112s ago: executing program 0 (id=742): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@shortname_lower}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@utf8}, {@uni_xlateno}, {@fat=@showexec}, {@fat=@nfs_stale_rw}, {@shortname_win95}, {@utf8}, {@fat=@check_strict}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000001900)=""/4079, 0xfef, 0x66) 1m3.318422892s ago: executing program 0 (id=744): syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 1m3.194192067s ago: executing program 0 (id=748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8, 0xca, 0x0, 0x1000}}}}}}, 0x0) 1m3.116346859s ago: executing program 32 (id=748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8, 0xca, 0x0, 0x1000}}}}}}, 0x0) 32.438227086s ago: executing program 3 (id=1014): chdir(&(0x7f0000000300)='./cgroup\x00') bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x9, 0x8}) prctl$PR_SCHED_CORE(0x1d, 0x1, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0x26000, 0x9, 0x0, 0x8, 0x8, 0x1, 0x9, 0x0, 0x4, 0x9, 0x10}, {0x8080000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xa, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xcffb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4, 0x40}, {0xeeee8000, 0x3000, 0x9, 0x4, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c, 0x4}, {0xed66c422cfa333e0, 0x2000, 0x4, 0x8, 0x0, 0x20, 0x2, 0x0, 0x0, 0x4, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x6, 0x4, 0x3}, {0xf000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x9}, {0x8080000}, {0x58000}, 0xfdfcffdb, 0x0, 0x0, 0x40304, 0xb, 0x0, 0x4, [0x0, 0x0, 0x1]}) 32.282326201s ago: executing program 3 (id=1016): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) read$FUSE(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r5, 0x0, 0xee01) bind$inet(r3, 0x0, 0x0) timerfd_create(0x8, 0x0) pread64(r1, 0x0, 0x0, 0xffff) write$rfkill(r0, &(0x7f0000000080)={0x6, 0x1, 0x3, 0x0, 0x1}, 0x8) 32.197465474s ago: executing program 3 (id=1017): r0 = open(&(0x7f0000000000)='./file0\x00', 0x88141, 0x10) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) open$dir(0x0, 0x0, 0x0) 31.251969854s ago: executing program 3 (id=1024): r0 = syz_open_procfs(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x421e, &(0x7f0000000280)=ANY=[], 0x4, 0x32f, &(0x7f0000000580)="$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") r1 = creat(&(0x7f0000000000)='./file1\x00', 0x4) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa6, 0xb7, 0x8, 0x0, 0xffffffffffffffff}}, 0x10) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0x2000}]) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002440)={0xa0, 0xfffffffffffffff5, 0x0, {{0x5, 0x1, 0x6, 0x6, 0x267, 0x2, {0x2, 0x100000000, 0x100, 0x1, 0x8, 0xa4e, 0x2b9, 0x83, 0x3, 0xc000, 0x8, 0x0, 0x0, 0x5, 0xff}}, {0x0, 0x2}}}, 0xa0) clock_gettime(0x6, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x82) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x141601) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x10, r4) ptrace(0x420e, r4) fchdir(r3) mkdirat(0xffffffffffffff9c, 0x0, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 30.719022571s ago: executing program 3 (id=1027): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xffffffbb, 0x200401, 0x4, 0xc7cf, 0x6, "4f21e8cbb500", 0x240000, 0x201}) ioctl$TCXONC(r1, 0x540a, 0x3) socket$packet(0x11, 0x2, 0x300) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000000c80)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x40000cc, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000", @ANYRES8=r0], 0x4c}}, 0x0) 29.592654048s ago: executing program 3 (id=1035): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000553000/0x3000)=nil, 0x3000, 0x9) 29.592587518s ago: executing program 33 (id=1035): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000553000/0x3000)=nil, 0x3000, 0x9) 8.471175914s ago: executing program 6 (id=1220): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000006240)='mnt/encrypted_dir/file0\x00', &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200011, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0xfffffffffffffff5, 0x2, {0x5, 0x1, 0xfffffffffffffffe, 0xffffffff7ffffae6, 0x8001000, 0x0, {0xfffffffffffffffe, 0x200000000, 0x110000002, 0x3c, 0x3, 0x8000000000000001, 0x3, 0x4, 0x80010000, 0x2000, 0x1002, 0x0, 0x0, 0x1000, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000002440)={0xa0, 0xfffffffffffffff5, 0x0, {{0x5, 0x1, 0x7a4c7a5b, 0x6, 0x267, 0x2, {0x2, 0x100000000, 0x100, 0x3, 0x8, 0xa4e, 0x8000, 0x80, 0x3, 0x1000, 0x8, r2, 0x0, 0x0, 0xff}}, {0x0, 0x2}}}, 0xa0) clock_gettime(0x6, 0x0) pselect6(0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffff7fff, 0x23, 0x1, 0x0, 0x5, 0x5, 0x14}, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x4]}, 0x8}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0x6) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x1, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlink(&(0x7f00000000c0)='mnt/encrypted_dir\x00', &(0x7f0000000000)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) socketpair$unix(0x1, 0x1, 0x0, 0x0) 7.719716519s ago: executing program 2 (id=1230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000040), 0x1003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e40)={0x130, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0xe4, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x64, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 7.667593351s ago: executing program 6 (id=1231): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[], 0x254}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x406, r1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffff0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000001c0)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x94, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) 5.447099873s ago: executing program 6 (id=1241): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xfc}}, {@noauto_da_alloc}, {@bsdgroups}, {@errors_remount}]}, 0x1, 0x504, &(0x7f0000001000)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000800)={0x424, 0x3f3, 0x8, 0x70bd26, 0x25dfdbff, {0x10, 0x1, 0x3, [0x4, 0x1ff, 0x40, 0x200, 0x1, 0x6, 0x40000000, 0x1, 0xd75, 0x1, 0x0, 0x100, 0xf, 0x1, 0x9, 0x5, 0x3ff, 0x2, 0x1, 0xffffffff, 0x6986d29e, 0x9, 0x6591, 0x29f, 0x7fff, 0x7, 0x2, 0x10001, 0x663d90dd, 0x1, 0x4, 0x2, 0x6d, 0xfffffffe, 0x0, 0x9, 0x9, 0x4, 0x5, 0x9fd, 0xd, 0x1, 0x0, 0xfffffff7, 0x0, 0xc, 0x1ff, 0x2, 0x5, 0x20000, 0x4, 0x7, 0x8, 0x7ff, 0x6, 0xfffeffff, 0x4b8, 0x2, 0x2, 0x9, 0x7, 0xdc, 0xfffffff7, 0x2], [0x5, 0x5, 0x1000, 0x0, 0x1, 0x7, 0x664, 0x966, 0xe, 0x1000, 0x6, 0x1ff, 0x8001, 0xb, 0x1, 0x5, 0x1, 0x1, 0x10, 0xffffffff, 0x2, 0x0, 0x4, 0x3, 0x0, 0x5f, 0x88, 0x6, 0x7, 0x9, 0x8, 0x2, 0x6, 0xc, 0x6, 0x2, 0x12000000, 0x21, 0x1, 0xfff, 0xf8d, 0x2ca, 0x5, 0x8, 0xffffffff, 0x5, 0xffff, 0x4e8, 0x5, 0xffffffff, 0x10000, 0x6, 0x8001, 0x7, 0x1, 0x4, 0xf285, 0x80000000, 0x8, 0xe429, 0x7f, 0x81, 0xffffffff, 0x4], [0x2, 0x8, 0xffffffff, 0x5, 0x7, 0x6, 0xb, 0x7, 0x5000, 0x6, 0x800, 0x3, 0xe97, 0x80, 0x0, 0x10000, 0xf, 0x7, 0x8000, 0xe2, 0x1, 0x1, 0x3, 0x2, 0xf559, 0x4, 0x4, 0xde8, 0x1, 0xfffffffc, 0x1, 0x2, 0x8, 0x6, 0x4, 0x9, 0xfe000000, 0xee71, 0x4, 0x200, 0xb7, 0x1, 0xb43d, 0x8, 0x3, 0x401, 0x0, 0x401, 0x4, 0x10000, 0xadeb, 0xfff, 0x5, 0x1, 0x320be0f1, 0x43f, 0xba20, 0x5, 0x7, 0x7, 0x1, 0x0, 0x2, 0x3], [0x49, 0x0, 0x2, 0xffff, 0x1, 0x81, 0x3, 0x10000, 0x4, 0x6, 0x80, 0x4, 0x1, 0x6, 0x10000, 0x5, 0x80000000, 0xe59f, 0x400, 0x2, 0xd, 0xfffffff7, 0xffff, 0x29d, 0xf, 0x6, 0x4, 0x5, 0x8, 0x7, 0x1, 0x3ff, 0xa8, 0x6b, 0x3ff, 0x2, 0xfffffffe, 0x180000, 0x31da6df9, 0x7, 0x0, 0xc350, 0x7, 0x100, 0xcb5, 0x9811, 0x5, 0x6, 0x40, 0x3, 0x9, 0xfff, 0xfffffffc, 0xfe000000, 0x1, 0xc437, 0x7, 0x86, 0x6, 0x582, 0x7, 0x8], 0x2, ['&\x00']}, ["", "", "", "", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x41) ptrace(0x10, 0x0) wait4(0x0, 0x0, 0x8, 0x0) ptrace$poke(0x5, 0x0, &(0x7f00000011c0), 0x5) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8015, &(0x7f0000000000), 0x64, 0x51d, &(0x7f0000000900)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdir(&(0x7f0000000300)='./file0\x00', 0x38) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x8004587d, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x4, 0x0, 0x85c, 0x5}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0xfe37, 0x2) 3.435415048s ago: executing program 2 (id=1245): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x4048001) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0xfffffffc, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x40000000000081, 0x9, 0x5f}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x4, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) 3.433851928s ago: executing program 6 (id=1248): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pselect6(0x0, 0x0, &(0x7f0000000040)={0x1f, 0xfffffffffffffffd, 0x80000005, 0x0, 0xffffffffffffffe3, 0x7, 0x6}, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x16}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) 3.214945085s ago: executing program 4 (id=1262): r0 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x50008000) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ff", 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)}, 0xc4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0xd0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) 2.834913278s ago: executing program 2 (id=1263): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10060}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x48f}]}, 0x3c}}, 0x0) 2.75241868s ago: executing program 2 (id=1265): r0 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x50008000) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ff", 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) socket(0x400000000010, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0) 2.752126211s ago: executing program 5 (id=1266): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000000c0)={[{@journal_checksum}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x457, &(0x7f0000000880)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r4, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x6) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r5, &(0x7f00000024c0)={0x2020}, 0xfffffec1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.74967412s ago: executing program 5 (id=1268): r0 = syz_open_dev$rtc(&(0x7f00000004c0), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 2.741137461s ago: executing program 1 (id=1269): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x18, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.654547914s ago: executing program 1 (id=1270): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='\xb1}\a}\xdf\x1dk%r\x16\x05\xd8\xa4\xa4)\xdb(\xd4\x00\x00d\x87*\xfaU\xf4|\xb5\xddtF\xf4O\xd1\xb7\x87\v@X\xbd\x1a\xed\xf3\xf0Z\xc4\x8f\x00\xfa+=v\xcd\x92\x13\x97U\xd24y\x04\xceMW\"~\xc9aYZ\x8b\x9a\xbe\r\xc9\x1b\xe9\xe3`\xe2\xd8\xafugj\x84mb\xb9\xea\xe6o|2;', &(0x7f0000000200)='i\x8e\xe4u\x89F\r\x9a\x1b\xd0\xa3\xe7{\xbd\xe3T\x06-cH\x98\x90\v\xe1\xfd\x85(\x9ac\xecOkn\x91U=\xe6\xd4\xef\x03\x05\x00\x00\x00\x1c\xa2\xb5\xf1@\xe9Bw\xa8\x0fY+\x96\xb7g\xbb\xeb\xfe1i\xf5\xc7\xc9As{\xf8\xd0\xcfP\xf1\x91,V\\\xf9\x00\x00\x00\x00\x00\x00)r\xdbC\x91\xb6\x0e\x00\x00\x00\x00\x00\x00\x003\xcf\xf7W@\xc3\xf3\xfaJ-m>\xb7\x00\x00\x00\x00', 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) read(r0, 0x0, 0x27) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000ac0)={0x14, 0x22, 0x601, 0x70bd2a, 0xff7ffffc, "", [@nested={0x4, 0x13e}]}, 0x14}], 0x1, 0x0, 0x0, 0x3400c0d0}, 0x0) syz_open_procfs$namespace(0x0, 0x0) setresuid(0x0, 0xee01, 0x0) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000080)) 2.654413404s ago: executing program 5 (id=1271): openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.500665279s ago: executing program 6 (id=1272): pipe2$9p(&(0x7f0000000080), 0x4000) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.312555294s ago: executing program 4 (id=1273): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2.299893625s ago: executing program 4 (id=1274): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x88) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x10, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5a49721c3afd68650e37c5f8ee41", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) ioctl$int_out(r1, 0x5460, &(0x7f0000000000)) r4 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001280)={r2, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="180000001800210a000000000000000004"], 0x18}, 0x1, 0x0, 0x0, 0x2000}, 0x20000000) 2.299377045s ago: executing program 1 (id=1275): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x322000, &(0x7f00000003c0)={[{@grpquota}, {@bh}, {@data_err_ignore}, {@user_xattr}, {@auto_da_alloc}, {@test_dummy_encryption}, {@bsdgroups}, {@noblock_validity}]}, 0x0, 0x504, &(0x7f0000001000)="$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") getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019c80)=""/102400, 0x19000) r4 = accept$inet6(r0, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x2d) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0xff, r3, 'id1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2, 0xd55}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.254250787s ago: executing program 4 (id=1276): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x1, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlink(&(0x7f00000000c0)='mnt/encrypted_dir\x00', &(0x7f0000000000)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1100) 2.254092867s ago: executing program 4 (id=1277): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x3, 0xff) sysinfo(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.086614025s ago: executing program 1 (id=1278): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000000c0)={[{@journal_checksum}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x457, &(0x7f0000000880)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r4, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x6) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r5, &(0x7f00000024c0)={0x2020}, 0xfffffec1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.086161014s ago: executing program 1 (id=1279): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x400000, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x2c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xd5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}, @IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x6}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1.086010414s ago: executing program 2 (id=1280): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xffffffbb, 0x200401, 0x4, 0xc7cf, 0x6, "4f21e8cbb500", 0x240000, 0x201}) ioctl$TCXONC(r1, 0x540a, 0x3) socket$packet(0x11, 0x2, 0x300) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000000c80)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x40000cc, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000", @ANYRES8=r0], 0x4c}}, 0x0) 1.085843934s ago: executing program 5 (id=1281): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x8, @local, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) 1.085622345s ago: executing program 1 (id=1282): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300) writev(r5, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) read$char_usb(r0, &(0x7f00000004c0)=""/181, 0xb5) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYRES32=r7], 0x24, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r8, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) 1.085428834s ago: executing program 5 (id=1283): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000280), 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000000)=0xffffffffffffffff, 0x12) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) 1.085246605s ago: executing program 5 (id=1284): r0 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x50008000) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ff", 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)}, 0xc4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x888) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) 1.053038636s ago: executing program 4 (id=1285): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x101400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/49) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000180)='net/hci\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) 450.140655ms ago: executing program 2 (id=1286): openat$ppp(0xffffffffffffff9c, 0x0, 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) wait4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2c) userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) getpgid(r1) syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) 0s ago: executing program 6 (id=1287): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0xe3d, 0x1) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="ff", 0x1}], 0x1, 0x2000002, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7a67fffc) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) kernel console output (not intermixed with test programs): 19 (0x7fffffff) [ 56.688679][ T877] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.164: bg 0: block 112: padding at end of block bitmap is not set [ 56.715611][ T877] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: comm syz.3.164: lblock 0 mapped to illegal pblock 0 (length 4) [ 56.729131][ T877] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 56.743212][ T877] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.743212][ T877] [ 56.774744][ T289] EXT4-fs (loop3): unmounting filesystem. [ 56.913286][ T288] EXT4-fs (loop1): unmounting filesystem. [ 57.299480][ T897] loop4: detected capacity change from 0 to 128 [ 57.343902][ T897] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.356640][ T899] loop0: detected capacity change from 0 to 128 [ 57.386415][ T899] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.419578][ T897] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.436678][ T899] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.453930][ T435] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.076470][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.103927][ T922] loop2: detected capacity change from 0 to 1024 [ 59.129220][ T922] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 59.138018][ T922] System zones: 0-1, 3-8 [ 59.145020][ T922] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 59.250713][ T922] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.285898][ T922] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.177: bg 0: block 112: padding at end of block bitmap is not set [ 59.322494][ T922] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: comm syz.2.177: lblock 0 mapped to illegal pblock 0 (length 4) [ 59.336265][ T922] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 59.363465][ T922] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.363465][ T922] [ 59.383462][ T291] EXT4-fs (loop2): unmounting filesystem. [ 59.431202][ T937] loop2: detected capacity change from 0 to 512 [ 59.437892][ T937] ext4: Unknown parameter 'nouser_xattr' [ 59.556740][ T939] loop1: detected capacity change from 0 to 128 [ 59.600385][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 59.622780][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 59.661432][ T939] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 59.671306][ T939] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.802510][ T24] usb 5-1: config 0 has no interface number 0 [ 59.877766][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 59.915949][ T325] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 59.938782][ T28] audit: type=1400 audit(1778970121.526:306): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 60.019593][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.027928][ T24] usb 5-1: Product: syz [ 60.032195][ T24] usb 5-1: Manufacturer: syz [ 60.036867][ T24] usb 5-1: SerialNumber: syz [ 60.047078][ T24] usb 5-1: config 0 descriptor?? [ 60.060870][ T24] smsc95xx v2.0.0 [ 60.207714][ T949] loop2: detected capacity change from 0 to 256 [ 60.246363][ T949] exFAT-fs (loop2): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 60.287655][ T288] EXT4-fs (loop1): unmounting filesystem. [ 60.365866][ T949] exFAT-fs (loop2): hint_cluster is invalid (521) [ 60.385873][ T949] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000208) [ 60.411975][ T949] exFAT-fs (loop2): Filesystem has been set read-only [ 60.433884][ T949] exFAT-fs (loop2): error, failed to bmap (inode : ffff888133e800d0 iblock : 9, err : -5) [ 60.465639][ T949] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000208) [ 60.491067][ T949] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000208) [ 60.499489][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 60.519885][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 60.595309][ T956] loop2: detected capacity change from 0 to 128 [ 60.620499][ T956] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.634179][ T956] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.564819][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 61.594536][ T24] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 61.651095][ T24] usb 5-1: USB disconnect, device number 2 [ 61.662607][ T971] device syzkaller0 entered promiscuous mode [ 61.691726][ T971] sch_tbf: burst 185 is lower than device syzkaller0 mtu (1500) ! [ 61.699389][ T973] loop0: detected capacity change from 0 to 1024 [ 61.707139][ T28] audit: type=1400 audit(1778970123.296:307): avc: denied { write } for pid=970 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.785243][ T973] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 61.801038][ T973] System zones: 0-1, 3-8 [ 61.827589][ T435] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.837366][ T973] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 61.880918][ T973] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.894249][ T973] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.190: bg 0: block 112: padding at end of block bitmap is not set [ 61.910288][ T973] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: comm syz.0.190: lblock 0 mapped to illegal pblock 0 (length 4) [ 61.928725][ T973] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 61.941437][ T973] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.941437][ T973] [ 61.969038][ T292] EXT4-fs (loop0): unmounting filesystem. [ 61.994110][ T983] loop0: detected capacity change from 0 to 512 [ 62.011427][ T983] EXT4-fs: Mount option(s) incompatible with ext3 [ 62.018913][ T28] audit: type=1400 audit(1778970123.606:308): avc: denied { read } for pid=982 comm="syz.0.193" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.044230][ T28] audit: type=1400 audit(1778970123.636:309): avc: denied { open } for pid=982 comm="syz.0.193" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.099348][ T28] audit: type=1400 audit(1778970123.686:310): avc: denied { ioctl } for pid=982 comm="syz.0.193" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.289716][ T28] audit: type=1400 audit(1778970123.846:311): avc: denied { watch watch_reads } for pid=990 comm="syz.1.195" path="/37" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.661641][ T997] loop4: detected capacity change from 0 to 128 [ 62.751911][ T997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 62.761511][ T997] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.962168][ T1003] loop0: detected capacity change from 0 to 128 [ 62.979910][ T1003] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.007482][ T28] audit: type=1400 audit(1778970124.596:312): avc: denied { connect } for pid=1000 comm="syz.1.198" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.008175][ T1003] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.045755][ T28] audit: type=1400 audit(1778970124.626:313): avc: denied { write } for pid=1000 comm="syz.1.198" laddr=fe80::a lport=60 faddr=fe80::aa fport=20135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.165706][ T290] EXT4-fs (loop4): unmounting filesystem. [ 63.556833][ T1013] loop4: detected capacity change from 0 to 8192 [ 63.574213][ T1013] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.639500][ T28] audit: type=1400 audit(1778970125.226:314): avc: denied { call } for pid=1016 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 63.702081][ T1019] kvm [1018]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x9 [ 63.821562][ T1023] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.831671][ T1023] EXT4-fs (loop4): Test dummy encryption mode enabled [ 63.839275][ T1023] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c128, mo2=0002] [ 63.849606][ T1023] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 63.893405][ T28] audit: type=1400 audit(1778970125.486:315): avc: denied { map } for pid=1026 comm="syz.3.206" path="socket:[18172]" dev="sockfs" ino=18172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.918633][ T28] audit: type=1400 audit(1778970125.506:316): avc: denied { read accept } for pid=1026 comm="syz.3.206" path="socket:[18172]" dev="sockfs" ino=18172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.008992][ T1029] EXT4-fs: Mount option(s) incompatible with ext3 [ 65.228037][ T290] EXT4-fs (loop4): unmounting filesystem. [ 66.314293][ T1075] set_capacity_and_notify: 2 callbacks suppressed [ 66.314340][ T1075] loop4: detected capacity change from 0 to 128 [ 66.333535][ T1075] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.356500][ T1075] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.573737][ T1077] loop1: detected capacity change from 0 to 256 [ 66.588566][ T1077] exfat: Deprecated parameter 'utf8' [ 66.594030][ T1077] exfat: Deprecated parameter 'utf8' [ 66.601992][ T1077] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 66.707498][ T1081] loop0: detected capacity change from 0 to 128 [ 66.789859][ T1081] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 66.798963][ T1081] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.823279][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 66.823319][ T28] audit: type=1400 audit(1778970128.416:319): avc: denied { rename } for pid=1076 comm="syz.1.220" name="file0" dev="loop1" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.853938][ T1077] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 66.855094][ T1085] Zero length message leads to an empty skb [ 68.311026][ T1099] loop1: detected capacity change from 0 to 512 [ 68.335518][ T292] EXT4-fs (loop0): unmounting filesystem. [ 68.359503][ T1099] EXT4-fs: Mount option(s) incompatible with ext3 [ 68.509626][ T1111] loop2: detected capacity change from 0 to 128 [ 68.566201][ T1111] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 68.575495][ T1111] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.247183][ T291] EXT4-fs (loop2): unmounting filesystem. [ 69.766394][ T28] audit: type=1400 audit(1778970131.356:320): avc: denied { execute } for pid=1127 comm="syz.0.234" path="/44/file2" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.808231][ T1131] loop2: detected capacity change from 0 to 256 [ 70.291872][ T1145] loop3: detected capacity change from 0 to 4096 [ 70.304648][ T1145] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.313510][ T1145] EXT4-fs (loop3): Test dummy encryption mode enabled [ 70.321297][ T1145] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c128, mo2=0002] [ 70.330128][ T1043] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.333802][ T1145] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 70.592281][ T1043] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.602979][ T1043] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 70.615184][ T1043] usb 2-1: config 1 has no interface number 1 [ 70.622293][ T1043] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 70.636221][ T1043] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 70.651094][ T1043] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.660754][ T1043] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.669062][ T1043] usb 2-1: Product: syz [ 70.674744][ T1043] usb 2-1: Manufacturer: syz [ 70.679498][ T1043] usb 2-1: SerialNumber: syz [ 70.770741][ T1143] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.784712][ T1154] loop0: detected capacity change from 0 to 512 [ 70.989972][ T1043] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 71.046554][ T1154] EXT4-fs (loop0): orphan cleanup on readonly fs [ 71.069691][ T1043] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 71.078299][ T1154] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.243: ea_inode with extended attributes [ 71.098610][ T1154] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.243: error while reading EA inode 11 err=-117 [ 71.112664][ T1154] EXT4-fs (loop0): 1 orphan inode deleted [ 71.161415][ T289] EXT4-fs (loop3): unmounting filesystem. [ 71.167373][ T1154] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.195790][ T1043] usb 2-1: USB disconnect, device number 2 [ 72.139106][ T292] EXT4-fs (loop0): unmounting filesystem. [ 72.259969][ T1188] loop0: detected capacity change from 0 to 128 [ 72.965410][ T1188] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 72.974151][ T1188] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.016368][ T1197] loop2: detected capacity change from 0 to 256 [ 73.139487][ T1202] loop3: detected capacity change from 0 to 4096 [ 73.149744][ T1202] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.158686][ T1202] EXT4-fs (loop3): Test dummy encryption mode enabled [ 73.179909][ T292] EXT4-fs (loop0): unmounting filesystem. [ 73.186047][ T1202] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c128, mo2=0002] [ 73.202647][ T1202] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 73.233960][ T1206] loop0: detected capacity change from 0 to 1024 [ 73.287074][ T1206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.312344][ T1206] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 73.647008][ T1217] loop4: detected capacity change from 0 to 1024 [ 73.661262][ T1217] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 73.669558][ T1217] System zones: 0-1, 3-8 [ 73.674645][ T1217] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 73.683483][ T1217] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.697081][ T1217] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.259: bg 0: block 112: padding at end of block bitmap is not set [ 73.713579][ T1217] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm syz.4.259: lblock 0 mapped to illegal pblock 0 (length 4) [ 73.727108][ T1217] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 73.739449][ T1217] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.739449][ T1217] [ 73.756925][ T290] EXT4-fs (loop4): unmounting filesystem. [ 73.958825][ T1224] loop2: detected capacity change from 0 to 512 [ 74.035309][ T289] EXT4-fs (loop3): unmounting filesystem. [ 74.050978][ T1224] EXT4-fs (loop2): orphan cleanup on readonly fs [ 74.057878][ T1224] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.261: ea_inode with extended attributes [ 74.071381][ T1224] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.261: error while reading EA inode 11 err=-117 [ 74.084385][ T1224] EXT4-fs (loop2): 1 orphan inode deleted [ 74.090223][ T1224] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 74.119422][ T292] EXT4-fs (loop0): unmounting filesystem. [ 75.711003][ T291] EXT4-fs (loop2): unmounting filesystem. [ 76.385725][ T1265] loop1: detected capacity change from 0 to 1024 [ 76.403187][ T1269] loop0: detected capacity change from 0 to 256 [ 76.439523][ T1265] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 76.457309][ T1265] System zones: 0-1, 3-8 [ 76.471339][ T1265] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 76.485267][ T1265] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.528655][ T1265] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.271: bg 0: block 112: padding at end of block bitmap is not set [ 76.544924][ T1265] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm syz.1.271: lblock 0 mapped to illegal pblock 0 (length 4) [ 76.558698][ T1265] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 76.571385][ T1265] EXT4-fs (loop1): This should not happen!! Data will be lost [ 76.571385][ T1265] [ 76.598396][ T288] EXT4-fs (loop1): unmounting filesystem. [ 76.651760][ T1278] loop2: detected capacity change from 0 to 1024 [ 76.658832][ T1276] loop1: detected capacity change from 0 to 4096 [ 76.674753][ T1278] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.688144][ T1276] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.703335][ T1278] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.726067][ T1276] EXT4-fs (loop1): Test dummy encryption mode enabled [ 76.751521][ T1276] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c128, mo2=0002] [ 76.762015][ T1276] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.571893][ T288] EXT4-fs (loop1): unmounting filesystem. [ 77.578376][ T291] EXT4-fs (loop2): unmounting filesystem. [ 77.647182][ T28] audit: type=1400 audit(1778970139.236:321): avc: denied { listen } for pid=1298 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.667769][ T28] audit: type=1400 audit(1778970139.256:322): avc: denied { accept } for pid=1298 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.513380][ T1317] loop0: detected capacity change from 0 to 1024 [ 78.572668][ T1323] loop4: detected capacity change from 0 to 1024 [ 78.581992][ T1317] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 78.615956][ T1317] System zones: 0-1, 3-8 [ 78.624348][ T1327] loop3: detected capacity change from 0 to 4096 [ 78.642049][ T1323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.663541][ T1317] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 78.681714][ T1323] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 78.702309][ T1317] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.715078][ T1327] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.739086][ T1327] EXT4-fs (loop3): Test dummy encryption mode enabled [ 78.746342][ T1331] loop2: detected capacity change from 0 to 256 [ 78.759762][ T1317] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.285: bg 0: block 112: padding at end of block bitmap is not set [ 78.775386][ T1327] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c128, mo2=0002] [ 78.789781][ T1327] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 78.807496][ T1317] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: comm syz.0.285: lblock 0 mapped to illegal pblock 0 (length 4) [ 78.830950][ T1317] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 78.848534][ T1317] EXT4-fs (loop0): This should not happen!! Data will be lost [ 78.848534][ T1317] [ 78.868473][ T292] EXT4-fs (loop0): unmounting filesystem. [ 78.918989][ T1339] binder: 1338:1339 ioctl c0306201 200000000300 returned -22 [ 79.406593][ T290] EXT4-fs (loop4): unmounting filesystem. [ 79.457935][ T289] EXT4-fs (loop3): unmounting filesystem. [ 79.496396][ T1350] loop3: detected capacity change from 0 to 128 [ 79.513435][ T1350] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.551827][ T1350] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.692647][ T1358] loop2: detected capacity change from 0 to 256 [ 79.813250][ T1358] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 79.894369][ T28] audit: type=1400 audit(1778970141.486:323): avc: denied { ioctl } for pid=1357 comm="syz.2.297" path="/60/file1/file0" dev="loop2" ino=1048624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.613933][ T1384] loop4: detected capacity change from 0 to 4096 [ 80.631566][ T1384] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.646626][ T1384] EXT4-fs (loop4): Test dummy encryption mode enabled [ 80.666568][ T1384] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c128, mo2=0002] [ 80.673006][ T1387] loop0: detected capacity change from 0 to 256 [ 80.685763][ T1384] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 82.432688][ T290] EXT4-fs (loop4): unmounting filesystem. [ 82.857852][ T1418] loop0: detected capacity change from 0 to 512 [ 82.888961][ T1422] loop1: detected capacity change from 0 to 128 [ 82.906130][ T1420] EXT4-fs: Ignoring removed nobh option [ 82.919543][ T1422] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.932154][ T1418] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.968204][ T1420] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.996276][ T1422] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.006939][ T1418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 83.020529][ T1418] System zones: 1-12 [ 83.047317][ T1420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 83.059102][ T1418] EXT4-fs (loop0): 1 truncate cleaned up [ 83.080619][ T1420] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.316: Allocating blocks 385-513 which overlap fs metadata [ 83.103352][ T1418] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.151135][ T1428] EXT4-fs (loop4): pa ffff88815de89540: logic 16, phys. 129, len 24 [ 83.159228][ T1428] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4894: group 0, free 0, pa_free 8 [ 83.190716][ T292] EXT4-fs (loop0): unmounting filesystem. [ 83.330056][ T290] EXT4-fs (loop4): unmounting filesystem. [ 83.355633][ T1432] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.461952][ T1432] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.795940][ T28] audit: type=1400 audit(1778970145.386:324): avc: denied { append } for pid=1446 comm="syz.3.319" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.064280][ T1452] set_capacity_and_notify: 2 callbacks suppressed [ 84.064302][ T1452] loop3: detected capacity change from 0 to 256 [ 84.147306][ T292] EXT4-fs (loop0): unmounting filesystem. [ 84.443147][ T1463] loop2: detected capacity change from 0 to 1024 [ 84.464304][ T1463] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 84.476227][ T1463] System zones: 0-1, 3-8 [ 84.481341][ T1463] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 84.489896][ T1463] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.509639][ T1463] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.328: bg 0: block 112: padding at end of block bitmap is not set [ 84.524177][ T910] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.533826][ T1463] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: comm syz.2.328: lblock 0 mapped to illegal pblock 0 (length 4) [ 84.547988][ T1463] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 84.561788][ T1463] EXT4-fs (loop2): This should not happen!! Data will be lost [ 84.561788][ T1463] [ 84.590960][ T291] EXT4-fs (loop2): unmounting filesystem. [ 84.711820][ T910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.723342][ T910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.733902][ T910] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.747290][ T910] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.756722][ T910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.767015][ T910] usb 2-1: config 0 descriptor?? [ 84.781334][ T1469] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 84.803519][ T1469] pit: kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 84.818975][ T1469] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 84.828094][ T1469] pit: kvm: requested 118171 ns i8254 timer period limited to 200000 ns [ 84.839886][ T1469] pit: kvm: requested 114819 ns i8254 timer period limited to 200000 ns [ 84.851988][ T1469] pit: kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 84.862159][ T1469] pit: kvm: requested 118171 ns i8254 timer period limited to 200000 ns [ 84.872587][ T1469] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 84.882739][ T1469] pit: kvm: requested 171809 ns i8254 timer period limited to 200000 ns [ 84.906155][ T1469] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 85.143793][ T1491] loop2: detected capacity change from 0 to 256 [ 85.172694][ T1491] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 85.206696][ T1491] syz.2.339: attempt to access beyond end of device [ 85.206696][ T1491] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 85.222221][ T910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.232467][ T910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.250249][ T910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.257691][ T910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.269624][ T910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.287508][ T910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.297599][ T910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.327465][ T910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.350139][ T910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.357576][ T910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.390702][ T910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.398148][ T910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.418536][ T910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.429611][ T910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.437286][ T910] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.445775][ T910] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 85.455450][ T910] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 85.477622][ T910] usb 2-1: USB disconnect, device number 3 [ 85.527712][ T1505] fido_id[1505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 85.677315][ T221] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.063934][ T1519] loop1: detected capacity change from 0 to 128 [ 86.087750][ T1519] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.180305][ T1519] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.243672][ T435] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.735059][ T221] usb 3-1: config 0 has no interfaces? [ 86.750615][ T221] usb 3-1: config 0 has no interfaces? [ 86.760503][ T221] usb 3-1: config 0 has no interfaces? [ 86.780483][ T221] usb 3-1: config 0 has no interfaces? [ 86.786696][ T221] usb 3-1: config 0 has no interfaces? [ 86.792365][ T221] usb 3-1: New USB device found, idVendor=046d, idProduct=0000, bcdDevice= 0.00 [ 86.820129][ T221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.840421][ T221] usb 3-1: config 0 descriptor?? [ 86.935706][ T28] audit: type=1400 audit(1778970148.526:325): avc: denied { bind } for pid=1531 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.255512][ T28] audit: type=1400 audit(1778970148.846:326): avc: denied { name_bind } for pid=1548 comm="syz.1.359" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 87.370154][ T524] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.550104][ T524] usb 1-1: Using ep0 maxpacket: 16 [ 87.556480][ T524] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.566803][ T524] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 87.575931][ T524] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 214, changing to 7 [ 87.588976][ T524] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 87.598327][ T524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.606529][ T524] usb 1-1: Product: syz [ 87.610977][ T524] usb 1-1: Manufacturer: syz [ 87.615692][ T524] usb 1-1: SerialNumber: syz [ 87.651878][ T1410] usb 3-1: USB disconnect, device number 2 [ 87.828231][ T524] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 87.838269][ T524] usb 1-1: 1:1: invalid format type 0x1004 is detected, processed as PCM [ 87.850464][ T524] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 87.857402][ T524] usb 1-1: 0:2 : does not exist [ 87.869940][ T524] usb 1-1: USB disconnect, device number 2 [ 88.131455][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.275009][ T1579] loop3: detected capacity change from 0 to 512 [ 88.297952][ T1579] EXT4-fs: Mount option(s) incompatible with ext3 [ 88.734184][ T1591] loop0: detected capacity change from 0 to 512 [ 88.778007][ T1591] EXT4-fs: Ignoring removed bh option [ 88.812030][ T1591] ext4: Unknown parameter 'noacl' [ 89.080188][ T28] audit: type=1400 audit(1778970150.646:327): avc: denied { remount } for pid=1590 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.197422][ T1601] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 89.210707][ T1599] loop4: detected capacity change from 0 to 1024 [ 89.267585][ T1599] EXT4-fs: Ignoring removed nobh option [ 89.292230][ T1599] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.342388][ T1599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 89.476035][ T1612] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.375: Allocating blocks 497-513 which overlap fs metadata [ 89.501794][ T1612] EXT4-fs (loop4): pa ffff88811693f690: logic 256, phys. 385, len 8 [ 89.509931][ T1612] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4894: group 0, free 0, pa_free 1 [ 89.638433][ T290] EXT4-fs (loop4): unmounting filesystem. [ 89.837340][ T1619] loop2: detected capacity change from 0 to 32768 [ 89.890862][ T1619] loop2: p1 p3 < p5 p6 > [ 90.263636][ T326] udevd[326]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 90.275612][ T318] udevd[318]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 90.293709][ T309] udevd[309]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 90.381181][ T325] udevd[325]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 90.475292][ T1636] loop3: detected capacity change from 0 to 128 [ 90.550483][ T1636] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.636178][ T1636] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.703099][ T28] audit: type=1400 audit(1778970152.296:328): avc: denied { associate } for pid=1639 comm="syz.0.387" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 91.505629][ T1657] loop4: detected capacity change from 0 to 128 [ 91.596119][ T1657] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 91.605486][ T1657] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.994427][ T1663] loop2: detected capacity change from 0 to 128 [ 92.014930][ T1663] FAT-fs (loop2): Unrecognized mount option "uni_1ŠÁ !rGxlate=1" or missing value [ 92.200257][ T910] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.364075][ T290] EXT4-fs (loop4): unmounting filesystem. [ 92.830320][ T910] usb 1-1: Using ep0 maxpacket: 16 [ 92.837596][ T910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.924120][ T910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.970160][ T910] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 92.981806][ T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.006846][ T1673] Illegal XDP return value 4294967274 on prog (id 14) dev syz_tun, expect packet loss! [ 93.017910][ T910] usb 1-1: config 0 descriptor?? [ 93.190157][ T221] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.431933][ T910] apple 0003:05AC:024B.0002: collection stack underflow [ 93.508133][ T910] apple 0003:05AC:024B.0002: item 0 1 0 12 parsing failed [ 93.548813][ T910] apple 0003:05AC:024B.0002: parse failed [ 93.579904][ T910] apple: probe of 0003:05AC:024B.0002 failed with error -22 [ 93.648040][ T910] usb 1-1: USB disconnect, device number 3 [ 94.192577][ T1690] loop2: detected capacity change from 0 to 512 [ 94.223190][ T1692] loop1: detected capacity change from 0 to 128 [ 94.309325][ T1696] syz.1.404 uses obsolete (PF_INET,SOCK_PACKET) [ 94.336764][ T1690] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.355830][ T1699] loop1: detected capacity change from 0 to 1024 [ 94.392687][ T1690] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.403966][ T1699] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.427035][ T1701] loop3: detected capacity change from 0 to 128 [ 94.521601][ T1699] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.537512][ T1701] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.563957][ T221] usb 5-1: Using ep0 maxpacket: 32 [ 94.572221][ T1701] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.590138][ T221] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 94.598508][ T221] usb 5-1: config 0 has no interface number 0 [ 94.604951][ T221] usb 5-1: config 0 interface 184 has no altsetting 0 [ 94.621536][ T221] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 94.644230][ T221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.656023][ T221] usb 5-1: Product: syz [ 94.662548][ T291] EXT4-fs (loop2): unmounting filesystem. [ 94.668388][ T221] usb 5-1: Manufacturer: syz [ 94.678480][ T221] usb 5-1: SerialNumber: syz [ 94.692840][ T221] usb 5-1: config 0 descriptor?? [ 94.700653][ T221] smsc75xx v1.0.0 [ 94.823950][ T1713] loop2: detected capacity change from 0 to 512 [ 95.075209][ T1713] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.121381][ T1713] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.410: ea_inode with extended attributes [ 95.139544][ T1713] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.410: error while reading EA inode 11 err=-117 [ 95.152326][ T1713] EXT4-fs (loop2): 1 orphan inode deleted [ 95.158116][ T1713] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.194215][ T288] EXT4-fs (loop1): unmounting filesystem. [ 95.248354][ T28] audit: type=1400 audit(1778970156.836:329): avc: denied { getopt } for pid=1718 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.272729][ T1719] loop1: detected capacity change from 0 to 256 [ 95.302984][ T1719] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 95.448423][ T1722] loop1: detected capacity change from 0 to 2048 [ 95.504519][ T1724] loop0: detected capacity change from 0 to 512 [ 95.533203][ T1722] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 95.542435][ T1724] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.560530][ T1722] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.600101][ T28] audit: type=1400 audit(1778970157.186:330): avc: denied { setattr } for pid=1723 comm="syz.0.413" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.634944][ T292] EXT4-fs (loop0): unmounting filesystem. [ 95.709191][ T28] audit: type=1400 audit(1778970157.296:331): avc: denied { ioctl } for pid=1721 comm="syz.1.412" path="/74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 95.781266][ T1722] fs-verity: sha512 using implementation "sha512-avx2" [ 95.808945][ T291] EXT4-fs (loop2): unmounting filesystem. [ 95.820743][ T288] EXT4-fs (loop1): unmounting filesystem. [ 95.842596][ T1734] loop3: detected capacity change from 0 to 512 [ 95.849600][ T1734] EXT4-fs: Ignoring removed bh option [ 95.881013][ T1734] EXT4-fs error (device loop3): ext4_iget_extra_inode:4754: inode #15: comm syz.3.416: corrupted in-inode xattr [ 95.896316][ T1734] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.416: couldn't read orphan inode 15 (err -117) [ 95.912263][ T1734] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.931195][ T28] audit: type=1400 audit(1778970157.526:332): avc: denied { append } for pid=1733 comm="syz.3.416" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.958263][ T28] audit: type=1400 audit(1778970157.526:333): avc: denied { map } for pid=1733 comm="syz.3.416" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.967393][ T325] udevd[325]: incorrect ext4 checksum on /dev/loop3 [ 95.989919][ T289] EXT4-fs (loop3): unmounting filesystem. [ 95.995835][ T28] audit: type=1400 audit(1778970157.526:334): avc: denied { setattr } for pid=1733 comm="syz.3.416" path=2F37302F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 96.034481][ T221] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 96.056210][ T221] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 96.070848][ T221] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 96.095105][ T221] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 96.112589][ T221] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 96.130139][ T221] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 96.139747][ T221] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 96.155661][ T221] usb 5-1: USB disconnect, device number 3 [ 96.190130][ T1347] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.390197][ T1347] usb 3-1: Using ep0 maxpacket: 16 [ 96.398589][ T1347] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 96.407241][ T1347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.417728][ T1347] usb 3-1: config 0 has no interface number 0 [ 96.425886][ T1347] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 96.435466][ T1347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.443719][ T1347] usb 3-1: Product: syz [ 96.448082][ T1347] usb 3-1: Manufacturer: syz [ 96.452934][ T1347] usb 3-1: SerialNumber: syz [ 96.458939][ T1347] usb 3-1: config 0 descriptor?? [ 96.465801][ T1347] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 96.472580][ T1347] usb 3-1: No valid video chain found. [ 96.585323][ T1755] loop0: detected capacity change from 0 to 1024 [ 96.603105][ T1755] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.620499][ T1755] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 96.673123][ T221] usb 3-1: USB disconnect, device number 3 [ 97.077879][ T28] audit: type=1400 audit(1778970158.666:335): avc: denied { ioctl } for pid=1759 comm="syz.4.425" path="socket:[23152]" dev="sockfs" ino=23152 ioctlcmd=0x48de scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.458468][ T292] EXT4-fs (loop0): unmounting filesystem. [ 97.681149][ T1769] loop2: detected capacity change from 0 to 512 [ 97.745208][ T1769] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.747137][ T1771] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.764852][ T1771] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.778299][ T1769] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.427: ea_inode with extended attributes [ 97.792728][ T1769] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.427: error while reading EA inode 11 err=-117 [ 97.805492][ T1769] EXT4-fs (loop2): 1 orphan inode deleted [ 97.820252][ T1769] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.040191][ T522] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.491220][ T522] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 98.505830][ T522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.533289][ T522] usb 2-1: config 0 descriptor?? [ 98.608596][ T291] EXT4-fs (loop2): unmounting filesystem. [ 98.725477][ T1800] EXT4-fs (loop0): Test dummy encryption mode enabled [ 98.732429][ T1800] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.760098][ T1800] EXT4-fs (loop0): SIPHASH is not a valid default hash value [ 98.874098][ T1800] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 99.170141][ T522] usb 2-1: Cannot set autoneg [ 99.174926][ T522] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 99.187502][ T522] usb 2-1: USB disconnect, device number 4 [ 99.509769][ T1810] set_capacity_and_notify: 3 callbacks suppressed [ 99.509790][ T1810] loop4: detected capacity change from 0 to 512 [ 99.530209][ T1810] EXT4-fs: Mount option(s) incompatible with ext3 [ 99.693136][ T28] audit: type=1400 audit(1778970161.276:336): avc: denied { create } for pid=1814 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.718958][ T28] audit: type=1400 audit(1778970161.286:337): avc: denied { setopt } for pid=1814 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.771989][ T28] audit: type=1400 audit(1778970161.336:338): avc: denied { lock } for pid=1818 comm="syz.1.442" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 99.810159][ T1826] loop2: detected capacity change from 0 to 512 [ 99.831728][ T1829] loop3: detected capacity change from 0 to 2048 [ 99.864198][ T1829] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 99.873378][ T1826] EXT4-fs (loop2): orphan cleanup on readonly fs [ 99.880868][ T1826] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.445: ea_inode with extended attributes [ 99.901231][ T1826] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.445: error while reading EA inode 11 err=-117 [ 99.921451][ T1826] EXT4-fs (loop2): 1 orphan inode deleted [ 99.927681][ T289] EXT4-fs (loop3): unmounting filesystem. [ 99.933590][ T1826] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.042276][ T1845] loop3: detected capacity change from 0 to 1024 [ 100.073589][ T1845] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.254276][ T1845] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 100.706799][ T291] EXT4-fs (loop2): unmounting filesystem. [ 100.724984][ T1854] loop2: detected capacity change from 0 to 512 [ 100.747109][ T1854] EXT4-fs: Mount option(s) incompatible with ext3 [ 100.911116][ T289] EXT4-fs (loop3): unmounting filesystem. [ 101.012658][ T1868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.019942][ T1868] IPv6: NLM_F_CREATE should be set when creating new route [ 101.027241][ T1868] IPv6: NLM_F_CREATE should be set when creating new route [ 101.029133][ T28] audit: type=1400 audit(1778970162.626:339): avc: denied { ioctl } for pid=1870 comm="syz.3.458" path="socket:[22416]" dev="sockfs" ino=22416 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.097383][ T28] audit: type=1400 audit(1778970162.656:340): avc: denied { audit_write } for pid=1867 comm="syz.0.457" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 101.701159][ T28] audit: type=1400 audit(1778970163.286:341): avc: denied { connect } for pid=1885 comm="syz.0.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.211981][ T1907] loop2: detected capacity change from 0 to 256 [ 102.295852][ T1907] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.331474][ T1907] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.755010][ T1923] netlink: 876 bytes leftover after parsing attributes in process `syz.0.476'. [ 102.764351][ T1923] netlink: 32 bytes leftover after parsing attributes in process `syz.0.476'. [ 102.794183][ T1925] loop3: detected capacity change from 0 to 256 [ 102.809883][ T1925] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.505868][ T436] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.789846][ T1953] loop0: detected capacity change from 0 to 128 [ 103.813955][ T221] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.822097][ T436] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.900997][ T1953] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 103.910688][ T1953] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.997008][ T436] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.030834][ T436] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 104.051348][ T436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.112574][ T221] usb 3-1: unable to get BOS descriptor or descriptor too short [ 104.113619][ T436] usb 4-1: config 0 descriptor?? [ 104.124631][ T221] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 104.127129][ T436] hub 4-1:0.0: bad descriptor, ignoring hub [ 104.142437][ T436] hub: probe of 4-1:0.0 failed with error -5 [ 104.158288][ T221] usb 3-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 104.167737][ T221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.175827][ T221] usb 3-1: Product: syz [ 104.180233][ T221] usb 3-1: Manufacturer: syz [ 104.184893][ T221] usb 3-1: SerialNumber: syz [ 104.420682][ T292] EXT4-fs (loop0): unmounting filesystem. [ 104.423881][ T221] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 104.433394][ T1961] loop1: detected capacity change from 0 to 1024 [ 104.440594][ T221] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 104.450379][ T436] usb 4-1: USB disconnect, device number 4 [ 104.470689][ T1961] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.492408][ T28] audit: type=1400 audit(1778970166.086:342): avc: denied { write } for pid=1963 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.519465][ T1961] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 104.556830][ T221] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 104.569760][ T221] usb 3-1: USB disconnect, device number 4 [ 104.577875][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.708512][ T288] EXT4-fs (loop1): unmounting filesystem. [ 106.040687][ T1982] netlink: 'syz.0.496': attribute type 6 has an invalid length. [ 106.264559][ T1989] loop3: detected capacity change from 0 to 256 [ 106.350332][ T28] audit: type=1400 audit(1778970167.936:343): avc: denied { read } for pid=1987 comm="syz.2.495" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 106.562933][ T28] audit: type=1400 audit(1778970167.936:344): avc: denied { open } for pid=1987 comm="syz.2.495" path="/100/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 106.650178][ T28] audit: type=1326 audit(1778970168.216:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.3.501" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cbf9ce59 code=0x7ffc0000 [ 106.765744][ T2004] loop3: detected capacity change from 0 to 1024 [ 106.770438][ T28] audit: type=1326 audit(1778970168.216:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.3.501" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f45cbf9ce59 code=0x7ffc0000 [ 106.807959][ T2009] process 'syz.0.506' launched './file1' with NULL argv: empty string added [ 106.824561][ T28] audit: type=1326 audit(1778970168.216:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.3.501" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cbf9ce59 code=0x7ffc0000 [ 106.860362][ T2004] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 106.905336][ T28] audit: type=1326 audit(1778970168.216:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.3.501" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cbf9ce59 code=0x7ffc0000 [ 106.933340][ T2004] System zones: 0-1, 3-8 [ 106.952121][ T28] audit: type=1326 audit(1778970168.226:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.3.501" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f45cbf9ce59 code=0x7ffc0000 [ 106.976927][ T28] audit: type=1326 audit(1778970168.226:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.3.501" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cbf9ce59 code=0x7ffc0000 [ 106.978240][ T2004] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.072103][ T28] audit: type=1326 audit(1778970168.226:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.3.501" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cbf9ce59 code=0x7ffc0000 [ 107.101150][ T2004] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.145553][ T28] audit: type=1326 audit(1778970168.226:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.3.501" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45cbf9ce59 code=0x7ffc0000 [ 107.187390][ T2004] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.504: bg 0: block 112: padding at end of block bitmap is not set [ 107.231915][ T2004] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: comm syz.3.504: lblock 0 mapped to illegal pblock 0 (length 4) [ 107.282625][ T2023] loop4: detected capacity change from 0 to 512 [ 107.292031][ T2004] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 107.310675][ T2023] EXT4-fs (loop4): orphan cleanup on readonly fs [ 107.321728][ T2026] loop0: detected capacity change from 0 to 128 [ 107.331403][ T2023] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.502: ea_inode with extended attributes [ 107.344298][ T2004] EXT4-fs (loop3): This should not happen!! Data will be lost [ 107.344298][ T2004] [ 107.354104][ T2023] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.502: error while reading EA inode 11 err=-117 [ 107.366832][ T2023] EXT4-fs (loop4): 1 orphan inode deleted [ 107.367255][ T2026] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.376699][ T2023] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.389774][ T2026] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.476032][ T289] EXT4-fs (loop3): unmounting filesystem. [ 107.633845][ T290] EXT4-fs (loop4): unmounting filesystem. [ 108.102677][ T292] EXT4-fs (loop0): unmounting filesystem. [ 108.675021][ T2071] overlayfs: failed to clone upperpath [ 108.697366][ T2072] overlayfs: failed to clone upperpath [ 108.703234][ T2076] bridge0: port 2(bridge_slave_1) entered listening state [ 108.723178][ T2076] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.172908][ T2085] loop0: detected capacity change from 0 to 1024 [ 109.212839][ T2085] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.253997][ T2085] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.336595][ T2093] loop1: detected capacity change from 0 to 128 [ 109.367405][ T2093] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.376109][ T2093] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.011082][ T292] EXT4-fs (loop0): unmounting filesystem. [ 110.026555][ T2110] loop4: detected capacity change from 0 to 512 [ 110.095010][ T2112] loop2: detected capacity change from 0 to 1024 [ 110.185511][ T2112] EXT4-fs: Ignoring removed nobh option [ 110.224012][ T2112] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.281087][ T2112] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.376975][ T288] EXT4-fs (loop1): unmounting filesystem. [ 110.444503][ T2120] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.537: Allocating blocks 497-513 which overlap fs metadata [ 110.470916][ T2120] EXT4-fs (loop2): pa ffff88811693f690: logic 256, phys. 385, len 8 [ 110.478964][ T2120] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4894: group 0, free 0, pa_free 1 [ 110.566263][ T291] EXT4-fs (loop2): unmounting filesystem. [ 110.680135][ T1410] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.821428][ T2146] loop3: detected capacity change from 0 to 128 [ 110.856559][ T2146] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.873939][ T2146] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.973520][ T1410] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.987426][ T1410] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 110.996509][ T1410] usb 5-1: config 1 has no interface number 1 [ 111.002800][ T1410] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 111.015760][ T1410] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 111.031982][ T1410] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.072201][ T1410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.099003][ T1410] usb 5-1: Product: syz [ 111.115147][ T1410] usb 5-1: Manufacturer: syz [ 111.133600][ T1410] usb 5-1: SerialNumber: syz [ 111.155557][ T2117] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 111.375469][ T1410] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 111.387783][ T1410] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 111.416523][ T1410] usb 5-1: USB disconnect, device number 4 [ 111.609568][ T2155] loop0: detected capacity change from 0 to 128 [ 111.629039][ T2155] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 111.637852][ T2155] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.044823][ T435] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.487499][ T292] EXT4-fs (loop0): unmounting filesystem. [ 112.747246][ T2180] loop0: detected capacity change from 0 to 256 [ 113.233104][ T2192] loop3: detected capacity change from 0 to 1024 [ 113.259130][ T2192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.341179][ T2192] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.657501][ C1] hrtimer: interrupt took 12731 ns [ 113.908894][ T2209] loop2: detected capacity change from 0 to 128 [ 113.915826][ T2209] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.935041][ T2209] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.067769][ T289] EXT4-fs (loop3): unmounting filesystem. [ 114.126567][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 114.126584][ T28] audit: type=1400 audit(1778970175.716:367): avc: denied { checkpoint_restore } for pid=2215 comm="syz.3.567" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.284562][ T2219] loop3: detected capacity change from 0 to 1024 [ 114.297940][ T2219] EXT4-fs: Ignoring removed nobh option [ 114.308835][ T2219] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.346501][ T2219] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 114.469074][ T2228] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.568: Allocating blocks 497-513 which overlap fs metadata [ 114.493603][ T2228] EXT4-fs (loop3): pa ffff88811693f930: logic 256, phys. 385, len 8 [ 114.501969][ T2228] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4894: group 0, free 0, pa_free 1 [ 114.592906][ T289] EXT4-fs (loop3): unmounting filesystem. [ 115.001272][ T539] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.476625][ T2254] loop0: detected capacity change from 0 to 256 [ 115.524399][ T2254] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 115.546063][ T2254] FAT-fs (loop0): Filesystem has been set read-only [ 115.558588][ T2254] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 115.572557][ T2254] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 115.585891][ T2254] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 115.599388][ T2254] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 115.615703][ T2254] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 115.644304][ T2254] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 115.666142][ T2254] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 115.689207][ T2254] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 115.706980][ T2254] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 116.227586][ T2249] syz.3.572 (2249) used greatest stack depth: 20496 bytes left [ 116.584632][ T2270] loop0: detected capacity change from 0 to 256 [ 116.604511][ T2274] loop2: detected capacity change from 0 to 1024 [ 116.632350][ T2274] EXT4-fs: Ignoring removed nobh option [ 116.643574][ T2274] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.729613][ T2290] fuse: Bad value for 'fd' [ 116.739874][ T2274] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 116.855941][ T2297] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.583: Allocating blocks 497-513 which overlap fs metadata [ 116.888053][ T2297] EXT4-fs (loop2): pa ffff88815dda3b28: logic 256, phys. 385, len 8 [ 116.896219][ T2297] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4894: group 0, free 0, pa_free 1 [ 116.930142][ T28] audit: type=1400 audit(1778970178.516:368): avc: denied { create } for pid=2299 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.942111][ T2297] syz.2.583 (2297) used greatest stack depth: 19552 bytes left [ 116.968543][ T291] EXT4-fs (loop2): unmounting filesystem. [ 117.937924][ T2323] loop0: detected capacity change from 0 to 512 [ 118.190745][ T2323] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.267710][ T2331] loop2: detected capacity change from 0 to 512 [ 118.302355][ T2339] loop0: detected capacity change from 0 to 256 [ 118.323708][ T2331] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 118.334558][ T2331] FAT-fs (loop2): Filesystem has been set read-only [ 118.341553][ T2331] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 118.349965][ T2331] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 118.853344][ T525] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.010145][ T525] usb 3-1: device descriptor read/64, error -71 [ 119.159257][ T2360] loop0: detected capacity change from 0 to 16 [ 119.166347][ T2360] erofs: (device loop0): mounted with root inode @ nid 36. [ 119.290195][ T525] usb 3-1: device descriptor read/64, error -71 [ 119.822975][ T525] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.171789][ T525] usb 3-1: device descriptor read/64, error -71 [ 120.386683][ T2398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.631'. [ 120.450268][ T525] usb 3-1: device descriptor read/64, error -71 [ 120.570663][ T525] usb usb3-port1: attempt power cycle [ 120.990169][ T525] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.031568][ T525] usb 3-1: device descriptor read/8, error -71 [ 121.181345][ T525] usb 3-1: device descriptor read/8, error -71 [ 121.462963][ T525] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 122.096552][ T2421] loop3: detected capacity change from 0 to 128 [ 122.267810][ T2427] netlink: 292 bytes leftover after parsing attributes in process `syz.4.643'. [ 122.279522][ T2421] syz.3.639: attempt to access beyond end of device [ 122.279522][ T2421] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 122.317766][ T2421] syz.3.639: attempt to access beyond end of device [ 122.317766][ T2421] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 122.328687][ T2439] loop0: detected capacity change from 0 to 16 [ 122.340575][ T2439] erofs: (device loop0): mounted with root inode @ nid 36. [ 122.980106][ T524] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.020860][ T525] usb 3-1: device not accepting address 8, error -71 [ 123.027922][ T525] usb usb3-port1: unable to enumerate USB device [ 123.130140][ T524] usb 4-1: device descriptor read/64, error -71 [ 123.201784][ T2452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'. [ 123.445168][ T524] usb 4-1: device descriptor read/64, error -71 [ 123.664793][ T2466] loop2: detected capacity change from 0 to 128 [ 123.714347][ T2466] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.725969][ T524] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.738020][ T2466] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.900624][ T524] usb 4-1: device descriptor read/64, error -71 [ 124.170108][ T524] usb 4-1: device descriptor read/64, error -71 [ 124.290188][ T524] usb usb4-port1: attempt power cycle [ 124.641631][ T435] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.747883][ T524] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.781224][ T524] usb 4-1: device descriptor read/8, error -71 [ 124.931852][ T524] usb 4-1: device descriptor read/8, error -71 [ 125.151804][ T2499] loop0: detected capacity change from 0 to 1024 [ 125.173783][ T2499] EXT4-fs: Ignoring removed nobh option [ 125.185748][ T2499] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.198581][ T2503] fuse: Bad value for 'fd' [ 125.210161][ T524] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.234811][ T2499] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.252002][ T524] usb 4-1: device descriptor read/8, error -71 [ 125.277529][ T2511] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.667: Allocating blocks 497-513 which overlap fs metadata [ 125.299213][ T2511] EXT4-fs (loop0): pa ffff88815dda39d8: logic 256, phys. 385, len 8 [ 125.307287][ T2511] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4894: group 0, free 0, pa_free 1 [ 125.337440][ T292] EXT4-fs (loop0): unmounting filesystem. [ 125.463834][ T2522] loop0: detected capacity change from 0 to 256 [ 125.481372][ T524] usb 4-1: device descriptor read/8, error -71 [ 125.608057][ T524] usb usb4-port1: unable to enumerate USB device [ 126.308506][ T2534] loop3: detected capacity change from 0 to 1024 [ 126.350917][ T2534] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.409825][ T2534] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 127.085353][ T289] EXT4-fs (loop3): unmounting filesystem. [ 127.360409][ T2567] loop3: detected capacity change from 0 to 16 [ 127.369633][ T2567] erofs: (device loop3): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 127.392523][ T2567] erofs: (device loop3): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 127.417671][ T2567] erofs: (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 127.440565][ T2567] erofs: (device loop3): mounted with root inode @ nid 36. [ 127.478700][ T2567] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 127.489970][ T2567] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 127.505196][ T2572] overlayfs: failed to clone upperpath [ 127.852920][ T910] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.893885][ T28] audit: type=1400 audit(1778970189.486:369): avc: denied { mount } for pid=2582 comm="syz.1.696" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 128.010250][ T910] usb 1-1: device descriptor read/64, error -71 [ 128.300197][ T910] usb 1-1: device descriptor read/64, error -71 [ 128.570117][ T910] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.720117][ T910] usb 1-1: device descriptor read/64, error -71 [ 128.795060][ T2603] overlayfs: failed to clone upperpath [ 128.990142][ T910] usb 1-1: device descriptor read/64, error -71 [ 129.110258][ T910] usb usb1-port1: attempt power cycle [ 129.147846][ T2628] loop2: detected capacity change from 0 to 1024 [ 129.242095][ T2628] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.371859][ T2628] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 129.520238][ T910] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.572050][ T910] usb 1-1: device descriptor read/8, error -71 [ 129.731156][ T910] usb 1-1: device descriptor read/8, error -71 [ 129.799001][ T2636] loop3: detected capacity change from 0 to 512 [ 129.815983][ T2636] EXT4-fs (loop3): orphan cleanup on readonly fs [ 129.823573][ T2636] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.714: ea_inode with extended attributes [ 129.836863][ T2636] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.714: error while reading EA inode 11 err=-117 [ 129.849748][ T2636] EXT4-fs (loop3): 1 orphan inode deleted [ 129.855696][ T2636] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 129.987937][ T291] EXT4-fs (loop2): unmounting filesystem. [ 130.002030][ T910] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.035146][ T289] EXT4-fs (loop3): unmounting filesystem. [ 130.042752][ T910] usb 1-1: device descriptor read/8, error -71 [ 130.703398][ T910] usb 1-1: device descriptor read/8, error -71 [ 131.016685][ T910] usb usb1-port1: unable to enumerate USB device [ 131.052995][ T2681] loop0: detected capacity change from 0 to 256 [ 131.100209][ T28] audit: type=1400 audit(1778970192.686:370): avc: denied { mounton } for pid=2679 comm="syz.0.732" path="/146/bus" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.136814][ T2681] FAT-fs (loop0): Directory bread(block 64) failed [ 131.152917][ T2681] FAT-fs (loop0): Directory bread(block 65) failed [ 131.171948][ T2681] FAT-fs (loop0): Directory bread(block 66) failed [ 131.183006][ T2690] loop2: detected capacity change from 0 to 512 [ 131.189383][ T2681] FAT-fs (loop0): Directory bread(block 67) failed [ 131.211943][ T2681] FAT-fs (loop0): Directory bread(block 68) failed [ 131.220436][ T2690] EXT4-fs (loop2): orphan cleanup on readonly fs [ 131.229761][ T2690] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.735: ea_inode with extended attributes [ 131.244023][ T2681] FAT-fs (loop0): Directory bread(block 69) failed [ 131.265769][ T2681] FAT-fs (loop0): Directory bread(block 70) failed [ 131.277029][ T2690] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.735: error while reading EA inode 11 err=-117 [ 131.291918][ T2681] FAT-fs (loop0): Directory bread(block 71) failed [ 131.306160][ T2681] FAT-fs (loop0): Directory bread(block 72) failed [ 131.317267][ T2690] EXT4-fs (loop2): 1 orphan inode deleted [ 131.326428][ T2681] FAT-fs (loop0): Directory bread(block 73) failed [ 131.336516][ T2690] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 131.420070][ C0] sched: RT throttling activated [ 131.475284][ T2707] loop0: detected capacity change from 0 to 128 [ 131.508442][ T28] audit: type=1400 audit(1778970193.096:371): avc: denied { mounton } for pid=2706 comm="syz.0.742" path="/147/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 131.638106][ T291] EXT4-fs (loop2): unmounting filesystem. [ 131.981016][ T28] audit: type=1400 audit(1778970193.576:372): avc: denied { mounton } for pid=2727 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 132.145764][ T2727] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.159109][ T2727] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.175263][ T2727] device bridge_slave_0 entered promiscuous mode [ 132.188962][ T2727] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.218770][ T2727] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.254563][ T2727] device bridge_slave_1 entered promiscuous mode [ 132.476315][ T2727] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.483454][ T2727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.490890][ T2727] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.497998][ T2727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.600866][ T435] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.608357][ T435] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.622912][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.639345][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.722450][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.736403][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.754142][ T28] audit: type=1400 audit(1778970194.346:373): avc: denied { name_bind } for pid=2745 comm="syz.2.757" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 132.775591][ T435] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.782692][ T435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.937616][ T2727] device veth0_vlan entered promiscuous mode [ 133.011502][ T2727] device veth1_macvtap entered promiscuous mode [ 133.065939][ T28] audit: type=1400 audit(1778970194.656:374): avc: denied { mounton } for pid=2727 comm="syz-executor" path="/root/syzkaller.sN5NCj/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 133.187597][ T2758] loop3: detected capacity change from 0 to 512 [ 133.257233][ T2758] EXT4-fs (loop3): orphan cleanup on readonly fs [ 133.268228][ T28] audit: type=1400 audit(1778970194.686:375): avc: denied { mount } for pid=2727 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 133.303232][ T2758] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.761: ea_inode with extended attributes [ 133.319648][ T2763] loop5: detected capacity change from 0 to 128 [ 133.352339][ T2763] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.379818][ T2758] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.761: error while reading EA inode 11 err=-117 [ 133.407357][ T28] audit: type=1400 audit(1778970194.686:376): avc: denied { mounton } for pid=2727 comm="syz-executor" path="/root/syzkaller.sN5NCj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 133.438937][ T2763] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.458093][ T2758] EXT4-fs (loop3): 1 orphan inode deleted [ 133.492089][ T2758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.552475][ T28] audit: type=1400 audit(1778970194.686:377): avc: denied { mounton } for pid=2727 comm="syz-executor" path="/root/syzkaller.sN5NCj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 133.655633][ T28] audit: type=1400 audit(1778970194.686:378): avc: denied { mounton } for pid=2727 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 133.696278][ T28] audit: type=1400 audit(1778970194.686:379): avc: denied { mounton } for pid=2727 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 133.696572][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.737442][ T289] EXT4-fs (loop3): unmounting filesystem. [ 133.770680][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.789502][ T435] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.796609][ T435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.825254][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.850251][ T381] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.880354][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.027629][ T2772] loop2: detected capacity change from 0 to 256 [ 134.036663][ T2772] FAT-fs (loop2): Unrecognized mount option "nodoÃØ" or missing value [ 134.233066][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.393366][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.538459][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.693675][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.738378][ T28] audit: type=1400 audit(1778970196.326:380): avc: denied { bind } for pid=2776 comm="syz.5.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 134.805678][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.883665][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.896899][ T28] audit: type=1400 audit(1778970196.356:381): avc: denied { setopt } for pid=2776 comm="syz.5.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 134.989478][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.075619][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.085373][ T309] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.129180][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.146742][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.156709][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.167799][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.176633][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.185289][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.192888][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.213211][ T2750] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.226931][ T2753] netlink: 'syz.1.758': attribute type 16 has an invalid length. [ 135.236857][ T2753] netlink: 'syz.1.758': attribute type 17 has an invalid length. [ 135.252094][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.259532][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.271019][ T2753] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.278121][ T2753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.304327][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready [ 135.365951][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.656574][ T435] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.663726][ T435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.673662][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 135.750304][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.758642][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 135.766905][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.775331][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.783763][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.792374][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.800790][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.960127][ T1043] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 136.110133][ T1043] usb 4-1: device descriptor read/64, error -71 [ 136.176313][ T2800] loop2: detected capacity change from 0 to 1024 [ 136.186249][ T2800] EXT4-fs: Ignoring removed nobh option [ 136.238905][ T2800] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.256073][ T2806] loop5: detected capacity change from 0 to 128 [ 136.266954][ T2806] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.279409][ T2806] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.324384][ T43] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.340644][ T2806] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.379570][ T2800] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 136.417104][ T2818] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.774: Allocating blocks 497-513 which overlap fs metadata [ 136.433642][ T2818] EXT4-fs (loop2): pa ffff88815de891f8: logic 128, phys. 385, len 8 [ 136.441734][ T2818] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4894: group 0, free 0, pa_free 1 [ 136.596085][ T1043] usb 4-1: device descriptor read/64, error -71 [ 136.660118][ T2821] fuse: Bad value for 'fd' [ 136.776086][ T2823] netlink: 24 bytes leftover after parsing attributes in process `syz.5.782'. [ 136.894923][ T1043] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 136.915695][ T291] EXT4-fs (loop2): unmounting filesystem. [ 136.968731][ T2829] loop2: detected capacity change from 0 to 16 [ 137.000482][ T2829] erofs: (device loop2): mounted with root inode @ nid 36. [ 137.018659][ T28] audit: type=1400 audit(1778970198.606:382): avc: denied { execute } for pid=2828 comm="syz.2.784" name="file0" dev="loop2" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.042175][ T28] audit: type=1400 audit(1778970198.606:383): avc: denied { execute_no_trans } for pid=2828 comm="syz.2.784" path="/143/file1/file0/file0" dev="loop2" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.070193][ T1043] usb 4-1: device descriptor read/64, error -71 [ 137.524854][ T1043] usb 4-1: device descriptor read/64, error -71 [ 137.650526][ T1043] usb usb4-port1: attempt power cycle [ 138.128740][ T1043] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 138.161295][ T1043] usb 4-1: device descriptor read/8, error -71 [ 138.451670][ T1043] usb 4-1: device descriptor read/8, error -71 [ 138.720166][ T1043] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 139.193633][ T1043] usb 4-1: device not accepting address 12, error -71 [ 139.201297][ T1043] usb usb4-port1: unable to enumerate USB device [ 140.094894][ T2902] xt_hashlimit: size too large, truncated to 1048576 [ 140.470114][ T2900] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 140.771600][ T2900] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.584969][ T2900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.594376][ T2900] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 141.634389][ T2900] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.660582][ T2900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.928583][ T2900] usb 4-1: Product: syz [ 141.933616][ T2900] usb 4-1: Manufacturer: syz [ 141.938545][ T2900] usb 4-1: SerialNumber: syz [ 141.963683][ T2928] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 142.046386][ T2906] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.055387][ T2928] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 142.258329][ T2900] usb 4-1: 0:2 : does not exist [ 142.265418][ T2900] usb 4-1: USB disconnect, device number 13 [ 142.470590][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 142.616283][ T2949] xt_hashlimit: size too large, truncated to 1048576 [ 145.604660][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 145.604676][ T28] audit: type=1400 audit(1778970207.196:385): avc: denied { mount } for pid=3001 comm="syz.2.844" name="/" dev="configfs" ino=11942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 145.634678][ T28] audit: type=1400 audit(1778970207.226:386): avc: denied { search } for pid=3001 comm="syz.2.844" name="/" dev="configfs" ino=11942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.195082][ T3025] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 147.204191][ T3025] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 147.564937][ T3033] loop2: detected capacity change from 0 to 512 [ 147.585415][ T3033] EXT4-fs: Mount option(s) incompatible with ext3 [ 147.607563][ T3035] loop3: detected capacity change from 0 to 128 [ 147.617269][ T3035] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.630108][ T3035] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.655333][ T539] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.974662][ T221] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 148.271567][ T221] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.282171][ T221] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.502875][ T221] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 148.518480][ T221] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.528925][ T221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.537619][ T221] usb 4-1: Product: syz [ 148.543337][ T221] usb 4-1: Manufacturer: syz [ 148.548065][ T221] usb 4-1: SerialNumber: syz [ 148.558925][ T3038] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.774704][ T221] usb 4-1: 0:2 : does not exist [ 148.782001][ T221] usb 4-1: USB disconnect, device number 14 [ 149.666877][ T3079] loop3: detected capacity change from 0 to 256 [ 149.795863][ T3091] fuse: Bad value for 'fd' [ 149.873762][ T3094] loop3: detected capacity change from 0 to 128 [ 149.892501][ T3094] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 149.901362][ T3094] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.920993][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 150.067761][ T28] audit: type=1400 audit(1778970211.656:387): avc: denied { getopt } for pid=3099 comm="syz.2.880" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.088334][ T3100] loop2: detected capacity change from 0 to 256 [ 150.097598][ T3100] exFAT-fs (loop2): failed to load upcase table (idx : 0x000103c2, chksum : 0xe64499b9, utbl_chksum : 0xe619d30d) [ 150.697721][ T3111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.885'. [ 150.746209][ T289] EXT4-fs (loop3): unmounting filesystem. [ 150.866696][ T3127] loop3: detected capacity change from 0 to 1024 [ 150.884493][ T3127] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.979555][ T3127] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 151.051099][ T289] EXT4-fs (loop3): unmounting filesystem. [ 151.170793][ T3148] loop2: detected capacity change from 0 to 128 [ 151.195627][ T3148] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 151.204554][ T3148] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.356295][ T28] audit: type=1400 audit(1778970212.946:388): avc: denied { create } for pid=3157 comm="syz.4.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 151.376872][ T3158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.906'. [ 151.799035][ T3165] fuse: Bad value for 'fd' [ 152.185236][ T291] EXT4-fs (loop2): unmounting filesystem. [ 152.613172][ T3194] loop3: detected capacity change from 0 to 128 [ 152.623269][ T28] audit: type=1400 audit(1778970214.216:389): avc: denied { watch } for pid=3195 comm="syz.5.921" path="/48/file1" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 152.646482][ T3194] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.658864][ T3194] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.210002][ T435] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.234008][ T3180] 9pnet_fd: Insufficient options for proto=fd [ 154.242746][ T3211] loop3: detected capacity change from 0 to 512 [ 154.252813][ T3211] EXT4-fs: Mount option(s) incompatible with ext3 [ 155.181640][ T3233] fuse: Bad value for 'fd' [ 155.236527][ T3235] loop3: detected capacity change from 0 to 1024 [ 155.334660][ T3235] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.717049][ T3235] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 156.774572][ T3250] loop2: detected capacity change from 0 to 2048 [ 156.831021][ T3250] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 156.850130][ T3250] System zones: 0-4 [ 156.854497][ T3250] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 156.870243][ T3250] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.941515][ T291] EXT4-fs (loop2): unmounting filesystem. [ 157.010640][ T289] EXT4-fs (loop3): unmounting filesystem. [ 157.358843][ T3281] loop3: detected capacity change from 0 to 1024 [ 157.376604][ T3281] EXT4-fs: Ignoring removed nobh option [ 157.390400][ T3281] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.609180][ T3281] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 157.835150][ T3286] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.950: Allocating blocks 497-513 which overlap fs metadata [ 157.849726][ T3286] EXT4-fs (loop3): pa ffff88815dda31f8: logic 128, phys. 385, len 8 [ 157.857816][ T3286] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4894: group 0, free 0, pa_free 1 [ 157.876704][ T289] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 157.905202][ T289] EXT4-fs (loop3): unmounting filesystem. [ 157.955990][ T28] audit: type=1400 audit(1778970219.546:390): avc: denied { nlmsg_read } for pid=3295 comm="syz.5.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.210254][ T39] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 158.501203][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.516738][ T39] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 158.546392][ T39] usb 4-1: config 1 has no interface number 1 [ 158.565990][ T39] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 158.607287][ T39] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.650383][ T39] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.679022][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.704644][ T39] usb 4-1: Product: syz [ 158.713543][ T39] usb 4-1: Manufacturer: syz [ 158.723362][ T39] usb 4-1: SerialNumber: syz [ 158.736386][ T3294] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.992927][ T39] usb 4-1: USB disconnect, device number 15 [ 159.221970][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.485124][ T3351] loop3: detected capacity change from 0 to 512 [ 159.533573][ T3351] EXT4-fs (loop3): orphan cleanup on readonly fs [ 159.549293][ T3351] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.979: ea_inode with extended attributes [ 159.568223][ T3353] loop2: detected capacity change from 0 to 4096 [ 159.589924][ T3353] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 159.606660][ T3351] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.979: error while reading EA inode 11 err=-117 [ 159.638013][ T3351] EXT4-fs (loop3): 1 orphan inode deleted [ 159.645883][ T3353] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 159.692701][ T3351] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 159.772090][ T28] audit: type=1400 audit(1778970221.366:391): avc: denied { write } for pid=3352 comm="syz.2.978" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 159.802871][ T291] EXT4-fs (loop2): unmounting filesystem. [ 159.900502][ T28] audit: type=1400 audit(1778970221.366:392): avc: denied { add_name } for pid=3352 comm="syz.2.978" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 160.133251][ T3374] loop2: detected capacity change from 0 to 1024 [ 160.144669][ T3374] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.161033][ T3374] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 160.237819][ T289] EXT4-fs (loop3): unmounting filesystem. [ 160.278921][ T3381] loop3: detected capacity change from 0 to 512 [ 160.296793][ T3381] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.384988][ T3385] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 161.067256][ T291] EXT4-fs (loop2): unmounting filesystem. [ 161.271902][ T3401] loop3: detected capacity change from 0 to 512 [ 161.299002][ T3401] EXT4-fs (loop3): orphan cleanup on readonly fs [ 161.305667][ T3401] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.997: ea_inode with extended attributes [ 161.318571][ T3401] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.997: error while reading EA inode 11 err=-117 [ 161.333213][ T3401] EXT4-fs (loop3): 1 orphan inode deleted [ 161.343013][ T3401] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 162.178693][ T289] EXT4-fs (loop3): unmounting filesystem. [ 162.214334][ T3445] loop3: detected capacity change from 0 to 1024 [ 162.378077][ T3445] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 162.390762][ T3445] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.435848][ T289] EXT4-fs (loop3): unmounting filesystem. [ 163.584119][ T3490] loop3: detected capacity change from 0 to 128 [ 163.646530][ T3490] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.839842][ T28] audit: type=1400 audit(1778970225.426:393): avc: denied { mounton } for pid=3498 comm="syz.4.1026" path="/249/file0" dev="tmpfs" ino=1399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 163.918309][ T289] FAT-fs (loop3): error, invalid access to FAT (entry 0x72656c61) [ 163.943648][ T289] FAT-fs (loop3): Filesystem has been set read-only [ 163.965307][ T289] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 73726c6c) [ 164.007537][ T289] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 73726c6c) [ 164.139528][ T3487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3487 comm=syz.5.1023 [ 164.783474][ T3509] loop2: detected capacity change from 0 to 512 [ 164.795514][ T3509] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 164.905424][ T3509] EXT4-fs (loop2): 1 orphan inode deleted [ 164.920120][ T3509] EXT4-fs (loop2): 1 truncate cleaned up [ 164.939605][ T3509] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.995967][ T28] audit: type=1400 audit(1778970226.586:394): avc: denied { mounton } for pid=3508 comm="syz.2.1031" path="/182/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.029739][ T3509] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #12: block 7: comm syz.2.1031: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 165.099822][ T3509] EXT4-fs (loop2): Remounting filesystem read-only [ 165.107060][ T3517] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #12: block 7: comm syz.2.1031: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 165.173238][ T3517] EXT4-fs (loop2): Remounting filesystem read-only [ 165.200187][ T3519] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #12: block 7: comm syz.2.1031: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 165.269875][ T3519] EXT4-fs (loop2): Remounting filesystem read-only [ 165.307691][ T291] EXT4-fs (loop2): unmounting filesystem. [ 165.398790][ T3513] 9pnet_fd: Insufficient options for proto=fd [ 165.460928][ T43] device bridge_slave_1 left promiscuous mode [ 165.470164][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.488022][ T43] device bridge_slave_0 left promiscuous mode [ 165.498002][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.520756][ T43] device veth1_macvtap left promiscuous mode [ 165.526948][ T43] device veth0_vlan left promiscuous mode [ 165.823689][ T2900] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 165.900417][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.907642][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.915717][ T3528] device bridge_slave_0 entered promiscuous mode [ 165.923715][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.930936][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.938605][ T3528] device bridge_slave_1 entered promiscuous mode [ 166.007413][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.014557][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.021891][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.028930][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.037821][ T2900] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.071017][ T2900] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 166.080140][ T2900] usb 3-1: config 1 has no interface number 1 [ 166.086419][ T2900] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 166.121977][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.122541][ T2900] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.143808][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.152047][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.154222][ T2900] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.168449][ T2900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.176673][ T2900] usb 3-1: Product: syz [ 166.181376][ T2900] usb 3-1: Manufacturer: syz [ 166.186065][ T2900] usb 3-1: SerialNumber: syz [ 166.196861][ T3527] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.205315][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.213671][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.220767][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.228280][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.237496][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.244607][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.265240][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.283732][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.405152][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.429842][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.451029][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.477000][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.494891][ T3528] device veth0_vlan entered promiscuous mode [ 166.513842][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.528563][ T3528] device veth1_macvtap entered promiscuous mode [ 166.548074][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.568250][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.862099][ T2900] usb 3-1: USB disconnect, device number 9 [ 167.129521][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 168.328786][ T3596] loop6: detected capacity change from 0 to 1024 [ 168.400936][ T3596] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.840680][ T3596] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 169.931058][ T3620] loop2: detected capacity change from 0 to 256 [ 170.035178][ T3620] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.066196][ T3620] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 170.120603][ T3620] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 170.224403][ T3528] EXT4-fs (loop6): unmounting filesystem. [ 170.792152][ T28] audit: type=1400 audit(1778970232.366:395): avc: denied { connect } for pid=3657 comm="syz.5.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.315759][ T28] audit: type=1400 audit(1778970232.906:396): avc: denied { ioctl } for pid=3677 comm="syz.6.1093" path="socket:[30128]" dev="sockfs" ino=30128 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.460963][ T2900] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 171.650183][ T2900] usb 3-1: Using ep0 maxpacket: 8 [ 171.656972][ T2900] usb 3-1: config 0 has an invalid interface number: 128 but max is 2 [ 171.690226][ T2900] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 171.723040][ T2900] usb 3-1: config 0 has no interface number 1 [ 171.746902][ T2900] usb 3-1: config 0 has no interface number 2 [ 171.792572][ T2900] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 171.837091][ T2900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.880158][ T28] audit: type=1400 audit(1778970233.396:397): avc: denied { read write } for pid=3694 comm="syz.6.1100" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 171.907298][ T2900] usb 3-1: config 0 descriptor?? [ 172.024404][ T28] audit: type=1400 audit(1778970233.396:398): avc: denied { open } for pid=3694 comm="syz.6.1100" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 172.970677][ T3725] loop6: detected capacity change from 0 to 512 [ 172.997511][ T3725] EXT4-fs (loop6): Test dummy encryption mode enabled [ 173.039416][ T3721] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1110'. [ 173.053661][ T3725] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1112: inode has both inline data and extents flags [ 173.077913][ T3725] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1112: couldn't read orphan inode 15 (err -117) [ 173.096197][ T3725] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 173.140172][ T3725] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 173.149982][ T28] audit: type=1400 audit(1778970234.736:399): avc: denied { bind } for pid=3730 comm="syz.5.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.180547][ T3528] EXT4-fs (loop6): unmounting filesystem. [ 173.186399][ T28] audit: type=1400 audit(1778970234.766:400): avc: denied { listen } for pid=3730 comm="syz.5.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.885560][ T3744] loop6: detected capacity change from 0 to 512 [ 174.898160][ T2900] usb 3-1: USB disconnect, device number 10 [ 174.936970][ T3744] EXT4-fs: Mount option(s) incompatible with ext3 [ 174.984739][ T3750] loop2: detected capacity change from 0 to 1024 [ 175.031308][ T3750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.132177][ T3750] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 175.388851][ T291] EXT4-fs (loop2): unmounting filesystem. [ 175.778714][ T3773] loop6: detected capacity change from 0 to 128 [ 175.881157][ T3773] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 175.922764][ T3773] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.972974][ T522] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 176.454690][ T3794] fuse: Bad value for 'fd' [ 176.471161][ T522] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.483383][ T522] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 176.495545][ T522] usb 3-1: config 1 has no interface number 1 [ 176.503810][ T522] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 176.544711][ T522] usb 3-1: config 1 interface 2 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 176.565627][ T522] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.581997][ T522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.596383][ T522] usb 3-1: Product: syz [ 176.603866][ T522] usb 3-1: Manufacturer: syz [ 176.613744][ T522] usb 3-1: SerialNumber: syz [ 176.663822][ T3767] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 176.768918][ T28] audit: type=1400 audit(1778970238.356:401): avc: denied { create } for pid=3805 comm="syz.1.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 176.894296][ T522] usb 3-1: USB disconnect, device number 11 [ 177.025668][ T3528] EXT4-fs (loop6): unmounting filesystem. [ 178.393918][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 178.482320][ T3825] fuse: Bad value for 'fd' [ 178.657234][ T28] audit: type=1326 audit(1778970240.236:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.1151" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f137619ce59 code=0x0 [ 178.726081][ T28] audit: type=1400 audit(1778970240.316:403): avc: denied { read } for pid=3834 comm="syz.4.1152" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 179.597075][ T522] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 179.998415][ T3875] loop2: detected capacity change from 0 to 128 [ 180.218975][ T3875] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 180.229086][ T3875] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.372593][ T522] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 180.392470][ T522] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 180.410085][ T522] usb 7-1: Product: syz [ 180.414385][ T522] usb 7-1: Manufacturer: syz [ 180.444548][ T522] usb 7-1: SerialNumber: syz [ 180.459581][ T522] usb 7-1: config 0 descriptor?? [ 180.478639][ T522] hub 7-1:0.0: bad descriptor, ignoring hub [ 180.495534][ T522] hub: probe of 7-1:0.0 failed with error -5 [ 180.520282][ T291] EXT4-fs (loop2): unmounting filesystem. [ 180.605160][ T3883] loop2: detected capacity change from 0 to 1024 [ 180.632152][ T3883] EXT4-fs: Ignoring removed nobh option [ 180.648641][ T3883] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.777567][ T3883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 180.800239][ T522] usb 7-1: USB disconnect, device number 2 [ 180.811961][ T3894] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.1170: Allocating blocks 497-513 which overlap fs metadata [ 180.851553][ T3894] EXT4-fs (loop2): pa ffff88815de89e70: logic 256, phys. 385, len 8 [ 180.859669][ T3894] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4894: group 0, free 0, pa_free 1 [ 181.118865][ T291] EXT4-fs (loop2): unmounting filesystem. [ 181.464882][ T28] audit: type=1326 audit(1778970243.056:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.5.1176" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1959b9ce59 code=0x7ffc0000 [ 181.960284][ T28] audit: type=1326 audit(1778970243.086:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.5.1176" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1959b9ce59 code=0x7ffc0000 [ 182.027216][ T3921] loop6: detected capacity change from 0 to 512 [ 182.038557][ T3921] EXT4-fs: Ignoring removed bh option [ 182.070329][ T3921] EXT4-fs (loop6): Test dummy encryption mode enabled [ 182.090369][ T3921] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 182.121756][ T3921] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 182.129523][ T3921] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 182.154866][ T3921] EXT4-fs warning (device loop6): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 2648233661 [ 182.437686][ T28] audit: type=1400 audit(1778970244.026:406): avc: denied { watch watch_reads } for pid=3926 comm="syz.2.1183" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 182.745498][ T28] audit: type=1400 audit(1778970244.336:407): avc: denied { shutdown } for pid=3933 comm="syz.5.1185" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.788095][ T3528] EXT4-fs (loop6): unmounting filesystem. [ 182.853354][ T28] audit: type=1400 audit(1778970244.376:408): avc: denied { read } for pid=3933 comm="syz.5.1185" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.220156][ T2900] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 183.294141][ T3946] loop2: detected capacity change from 0 to 256 [ 183.350438][ T3946] exfat: Bad value for 'uid' [ 183.449001][ T3958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'. [ 183.465450][ T2900] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.480095][ T2900] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 183.490760][ T325] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.580824][ T2900] usb 7-1: config 1 has no interface number 1 [ 183.587014][ T2900] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 183.610138][ T2900] usb 7-1: config 1 interface 2 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 184.845452][ T2900] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.961547][ T2900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.094612][ T2900] usb 7-1: Product: syz [ 185.152545][ T2900] usb 7-1: Manufacturer: syz [ 185.180122][ T2900] usb 7-1: SerialNumber: syz [ 185.209362][ T3938] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 185.437762][ T2900] usb 7-1: USB disconnect, device number 3 [ 185.443718][ T3985] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1205'. [ 185.460380][ T3985] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1205'. [ 185.478116][ T3985] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1205'. [ 185.513919][ T3987] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1201'. [ 185.604663][ T28] audit: type=1326 audit(1778970247.196:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.1.1212" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137619ce59 code=0x7ffc0000 [ 185.641745][ T28] audit: type=1326 audit(1778970247.196:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.1.1212" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137619ce59 code=0x7ffc0000 [ 185.667312][ T28] audit: type=1326 audit(1778970247.196:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.1.1212" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f137619ce59 code=0x7ffc0000 [ 185.694956][ T28] audit: type=1326 audit(1778970247.196:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.1.1212" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137619ce59 code=0x7ffc0000 [ 185.719821][ T28] audit: type=1326 audit(1778970247.196:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.1.1212" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137619ce59 code=0x7ffc0000 [ 185.745336][ T28] audit: type=1326 audit(1778970247.196:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.1.1212" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f137619ce59 code=0x7ffc0000 [ 185.771430][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 186.204951][ T4020] loop6: detected capacity change from 0 to 256 [ 186.290534][ T4025] fuse: Unknown parameter '00000000000000000000' [ 186.349691][ T4026] loop6: detected capacity change from 0 to 128 [ 186.366525][ T4005] syz.1.1214 (4005) used greatest stack depth: 19488 bytes left [ 186.387142][ T4026] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 186.430711][ T4026] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.465126][ T4026] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 186.496417][ T4026] fscrypt: loop6: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 187.036402][ T4035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.160906][ T3528] EXT4-fs (loop6): unmounting filesystem. [ 187.263870][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 187.263885][ T28] audit: type=1400 audit(1778970248.856:418): avc: denied { append } for pid=4048 comm="syz.6.1231" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 187.511595][ T4056] xt_hashlimit: max too large, truncated to 1048576 [ 187.770095][ T28] audit: type=1400 audit(1778970249.356:419): avc: denied { mount } for pid=4046 comm="syz.2.1230" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 189.446579][ T4082] loop6: detected capacity change from 0 to 512 [ 189.550758][ T4082] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 189.560171][ T4082] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.789275][ T28] audit: type=1400 audit(1778970251.376:420): avc: denied { nlmsg_write } for pid=4081 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 190.009332][ T4082] EXT4-fs error (device loop6): ext4_lookup:1858: inode #12: comm syz.6.1241: iget: bad i_size value: 2533274857506816 [ 190.022266][ T4082] EXT4-fs (loop6): Remounting filesystem read-only [ 190.031897][ T4082] EXT4-fs error (device loop6): ext4_lookup:1858: inode #12: comm syz.6.1241: iget: bad i_size value: 2533274857506816 [ 190.044879][ T4082] EXT4-fs (loop6): Remounting filesystem read-only [ 190.053935][ T4082] EXT4-fs (loop6): shut down requested (0) [ 190.061261][ T28] audit: type=1400 audit(1778970251.656:421): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 190.101180][ T4082] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 190.150897][ T28] audit: type=1400 audit(1778970251.656:422): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.178241][ T3528] EXT4-fs (loop6): unmounting filesystem. [ 190.204828][ T28] audit: type=1400 audit(1778970251.656:423): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.305887][ T28] audit: type=1400 audit(1778970251.656:424): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.327199][ T28] audit: type=1400 audit(1778970251.656:425): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 190.348368][ T28] audit: type=1400 audit(1778970251.656:426): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 190.394910][ T28] audit: type=1400 audit(1778970251.656:427): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 190.460540][ T436] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 190.673302][ T436] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.693892][ T436] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 190.726385][ T436] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 190.757263][ T436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.814352][ T436] usb 3-1: config 0 descriptor?? [ 190.997637][ T4116] SELinux: Context /usr/sbin/ntpd is not valid (left unmapped). [ 191.298211][ T910] usb 3-1: USB disconnect, device number 12 [ 192.110857][ T4150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.545231][ T4164] 9pnet_fd: Insufficient options for proto=fd [ 192.600108][ T910] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 192.914688][ T4179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.924159][ T910] usb 7-1: Using ep0 maxpacket: 8 [ 193.021007][ T910] usb 7-1: config 0 has no interfaces? [ 193.026661][ T910] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.045959][ T910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.458038][ T910] usb 7-1: config 0 descriptor?? [ 193.699007][ T436] usb 7-1: USB disconnect, device number 4 [ 194.862628][ T4200] loop6: detected capacity change from 0 to 128 [ 194.901357][ T4200] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 194.920157][ T4200] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.961380][ T4200] BUG: unable to handle page fault for address: ffffffffffffffec [ 194.969219][ T4200] #PF: supervisor read access in kernel mode [ 194.975224][ T4200] #PF: error_code(0x0000) - not-present page [ 194.981221][ T4200] PGD 7012067 P4D 7012067 PUD 7014067 PMD 0 [ 194.987238][ T4200] Oops: 0000 [#1] PREEMPT SMP KASAN [ 194.992467][ T4200] CPU: 1 PID: 4200 Comm: syz.6.1287 Not tainted syzkaller #0 [ 194.999862][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.009938][ T4200] RIP: 0010:ext4_free_ext_path+0x44/0x120 [ 195.015721][ T4200] Code: 85 db 0f 84 ba 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 b4 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 45 c0 48 89 5d d0 48 8d 43 [ 195.035439][ T4200] RSP: 0018:ffffc900113ef5b0 EFLAGS: 00010246 [ 195.041541][ T4200] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 195.049538][ T4200] RDX: ffffc900072b1000 RSI: 0000000000000e28 RDI: ffffffffffffffec [ 195.057612][ T4200] RBP: ffffc900113ef5f0 R08: ffff88815ecd34a7 R09: 1ffff1102bd9a694 [ 195.065621][ T4200] R10: dffffc0000000000 R11: ffffed102bd9a695 R12: ffff88815ecd34e0 [ 195.073645][ T4200] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 195.081655][ T4200] FS: 00007fa7960ca6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 195.090621][ T4200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.097243][ T4200] CR2: ffffffffffffffec CR3: 000000011bbf7000 CR4: 00000000003506a0 [ 195.105257][ T4200] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 195.113272][ T4200] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 195.121281][ T4200] Call Trace: [ 195.124580][ T4200] [ 195.127558][ T4200] finish_range+0x22d/0x340 [ 195.132103][ T4200] ? update_tind_extent_range+0x3f0/0x3f0 [ 195.137861][ T4200] ? __ext4_sb_bread_gfp+0x15c/0x210 [ 195.143178][ T4200] update_ind_extent_range+0x30d/0x530 [ 195.148680][ T4200] update_dind_extent_range+0x146/0x210 [ 195.154265][ T4200] ext4_ext_migrate+0xa57/0xe60 [ 195.159159][ T4200] ? __cfi_ext4_ext_migrate+0x10/0x10 [ 195.164569][ T4200] ext4_ioctl+0x1e4f/0x3ee0 [ 195.169104][ T4200] ? memcpy+0x56/0x70 [ 195.173112][ T4200] ? __cfi_ext4_ioctl+0x10/0x10 [ 195.177994][ T4200] ? preempt_schedule_common+0xbe/0xf0 [ 195.183483][ T4200] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 195.189415][ T4200] ? probe_sched_wakeup+0x71/0x90 [ 195.194481][ T4200] ? ttwu_do_wakeup+0x468/0x490 [ 195.199373][ T4200] ? __asan_set_shadow_00+0xe/0x10 [ 195.204532][ T4200] ? do_vfs_ioctl+0x1b6c/0x1cd0 [ 195.209414][ T4200] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 195.215080][ T4200] ? wake_up_q+0x105/0x1b0 [ 195.219553][ T4200] ? futex_wake+0x5fa/0x8e0 [ 195.224172][ T4200] ? ioctl_has_perm+0x1b8/0x4f0 [ 195.229075][ T4200] ? ioctl_has_perm+0x3a6/0x4f0 [ 195.233965][ T4200] ? has_cap_mac_admin+0x370/0x370 [ 195.239122][ T4200] ? do_futex+0x2bf/0x430 [ 195.243476][ T4200] ? selinux_file_ioctl+0x3a0/0x4d0 [ 195.248709][ T4200] ? __cfi_do_futex+0x10/0x10 [ 195.253416][ T4200] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 195.259001][ T4200] ? __fget_files+0x2d5/0x330 [ 195.263711][ T4200] ? security_file_ioctl+0x95/0xc0 [ 195.268858][ T4200] ? __cfi_ext4_ioctl+0x10/0x10 [ 195.273732][ T4200] __se_sys_ioctl+0x12f/0x1b0 [ 195.278430][ T4200] __x64_sys_ioctl+0x7b/0x90 [ 195.283128][ T4200] x64_sys_call+0x58b/0x9a0 [ 195.287656][ T4200] do_syscall_64+0x4c/0xa0 [ 195.292096][ T4200] ? clear_bhb_loop+0x30/0x80 [ 195.296796][ T4200] ? clear_bhb_loop+0x30/0x80 [ 195.301521][ T4200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.307445][ T4200] RIP: 0033:0x7fa79519ce59 [ 195.311899][ T4200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.331536][ T4200] RSP: 002b:00007fa7960ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.339981][ T4200] RAX: ffffffffffffffda RBX: 00007fa795415fa0 RCX: 00007fa79519ce59 [ 195.347972][ T4200] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 195.355969][ T4200] RBP: 00007fa795232d6f R08: 0000000000000000 R09: 0000000000000000 [ 195.364134][ T4200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.372152][ T4200] R13: 00007fa795416038 R14: 00007fa795415fa0 R15: 00007fff68f65008 [ 195.380160][ T4200] [ 195.383203][ T4200] Modules linked in: [ 195.387130][ T4200] CR2: ffffffffffffffec [ 195.391297][ T4200] ---[ end trace 0000000000000000 ]--- [ 195.396766][ T4200] RIP: 0010:ext4_free_ext_path+0x44/0x120 [ 195.402530][ T4200] Code: 85 db 0f 84 ba 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 b4 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 45 c0 48 89 5d d0 48 8d 43 [ 195.422156][ T4200] RSP: 0018:ffffc900113ef5b0 EFLAGS: 00010246 [ 195.428353][ T4200] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 195.436357][ T4200] RDX: ffffc900072b1000 RSI: 0000000000000e28 RDI: ffffffffffffffec [ 195.444357][ T4200] RBP: ffffc900113ef5f0 R08: ffff88815ecd34a7 R09: 1ffff1102bd9a694 [ 195.452352][ T4200] R10: dffffc0000000000 R11: ffffed102bd9a695 R12: ffff88815ecd34e0 [ 195.460348][ T4200] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 195.468361][ T4200] FS: 00007fa7960ca6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 195.477313][ T4200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.483915][ T4200] CR2: ffffffffffffffec CR3: 000000011bbf7000 CR4: 00000000003506a0 [ 195.491910][ T4200] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 195.499911][ T4200] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 195.508000][ T4200] Kernel panic - not syncing: Fatal exception [ 195.514634][ T4200] Kernel Offset: disabled [ 195.518963][ T4200] Rebooting in 86400 seconds..