last executing test programs: 5.248936592s ago: executing program 0 (id=880): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x31, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.248751092s ago: executing program 0 (id=881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b8, 0x0, 0x1c8, 0x100, 0x360, 0x100, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@set={{0x40}, {{0x3, [0x5, 0x5, 0x0, 0x1, 0x1, 0x3], 0x5, 0x5}}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x35}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e22], [0x4e21, 0x4e21], 0x0, 0x0, 0x299, 0x2}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3f}}}, {{@ip={@multicast2, @remote, 0xff000000, 0xff000000, 'pimreg0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x84, 0x2, 0x5}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x41}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x2, 0x4, 0x0, 0x3, 0x4], 0x3, 0x3}, {0x0, [0x3, 0x0, 0x5, 0x5, 0x3], 0x3}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x17}, 0xff000000, 0xff000000, 'wlan0\x00', 'geneve0\x00', {0xff}, {0xff}, 0x2, 0x3, 0x4}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) 5.204533962s ago: executing program 0 (id=883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)={0x0, 0x5, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @broadcast, @broadcast, @multicast, @multicast]}) 5.116558493s ago: executing program 0 (id=886): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$eJzs20tvG1UUAOAz46bvklDKow/AUBARj6RJC3TBBgRSN0hIsCjLkKZVqdugJki0qmhAqCxRfwGwROIXsIINAlYgtrBHSBXqhsICDRp7nBrHDnbs1Gn9fdIk986Mfc/xzLXvzLUDGFrl/E8SsTMifomI0YgoNe9Qrv27cf3S7F/XL80mkWWv/5HkD4s/r1+are+aFP93FJXxNCL9KIn9LdpduHDxzEylMne+qE8unn1ncuHCxWdOn505NXdq7tz00aNHDk89/9z0s33Jc1ce67735w/sPfbm1Vdnj1996/sv83h3Ftsb86gZ67nNcpSXX5Nmj/f87BvLroZysmmAgdCVvK/nh2uk2v9HoxQ3D95ovPLhQIMD1lWWZdmWFWuXRwBLGXAHS2LQEQCDUf+gz69/68stHH4M3LUXaxdAed43iqW2ZVOkxT4jTde3/VSOiONLf3+aL9HyPgQAQH99nY9/nm41/kvjvob97irmhsYi4u6I2B0R90TEnoi4N6K67/0R8UCX7Zeb6ivHPz9tW1NiHcrHfy8Uc1v/Hf/VR38xVipqu6r5jyQnT1fmDhWvyXiMbMnrU6u08c3LP3/Sblvj+C9f8vbrY8Eijt83Nd2gOzGzONNLzo2ufVC9B3h5Zf7J8kxAEhF7I2LfGp5/a0ScfvKLA+22/3/+q+jDPFP2ecQTteO/FE351yWrz09Obo3K3KHJ+lmx0g8/XnmtXfs95d8H+fHf3vL8X85/LGmcr13ovo0rv37c9ppmref/5uSNanlzse69mcXF81MRm5Olleunbz62Xq/vn+c/frB1/98d8c9nxeP2R0R+Ej8YEQ9FxMNF7I9ExKMRcXCV/L976bG3157/+srzP9HV8e++UDrz7Vft2u/s+B+plsaLNZ28/3UaYC+vHQAAANwu0up34JN0YrmcphMTte/w74ntaWV+YfGpk/PvnjtR+678WIyk9Ttdow33Q6eKe8P1+nRT/XD1vnGWZdm2an1idr6yXnPqQGd2tOn/ud9Kg44OWHddzaO1+0UbcFvye00YXvo/DC/9H4aX/g/Dq1X/vxxxYwChALeYz38YXvo/DC/9H4aX/g9DqZff9a9W2H1svZ75TiuUNkYYXRci3RBhrK2QbowwaoUtEdHpzpfjVgU26HcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg3AAD//zLQ7Dk=") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@test_dummy_encryption_v1}, {@stripe={'stripe', 0x3d, 0x200000f8}}, {@minixdf}, {@nombcache}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 5.040445684s ago: executing program 0 (id=889): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x3) 4.957944965s ago: executing program 0 (id=891): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) 1.82152404s ago: executing program 3 (id=972): openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 1.727502291s ago: executing program 3 (id=974): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) syz_clone(0x48020100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.630394592s ago: executing program 3 (id=979): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1.594626983s ago: executing program 3 (id=980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.520759813s ago: executing program 3 (id=984): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000540)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x8010}) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r0, 0x0) 1.488608834s ago: executing program 3 (id=986): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c801000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f00000005c0)={0x20, 0x16, 0x7, "2e082a757fedf8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.488155544s ago: executing program 2 (id=987): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x192, &(0x7f0000009480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r0, &(0x7f0000000200)=""/189, 0xbd) 1.405064905s ago: executing program 2 (id=988): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@deltclass={0x38, 0x29, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0x0, 0xa}, {0x6, 0x5}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xfd, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012"], 0x50}}, 0x4008840) 1.309315436s ago: executing program 2 (id=994): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001840)=ANY=[@ANYBLOB="4c00000010000104fcfffffd8000000000000000", @ANYRES32=0x0, @ANYBLOB="4312000000000000240012800b0001006d6163736563000014000280050009000000000005000a000000000008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.250155577s ago: executing program 2 (id=996): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000540)=0x9) syz_emit_ethernet(0x2e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e25, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x4002, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x5, 0x100, @void}}}}}}}, 0x0) 1.236395637s ago: executing program 2 (id=998): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x3000) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="b9", 0x1}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) 1.205555857s ago: executing program 1 (id=1000): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 1.109669768s ago: executing program 1 (id=1004): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000086, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xdde7, 0x2, 0xfffffffe, 0x181}) 1.006802959s ago: executing program 1 (id=1007): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 959.2229ms ago: executing program 1 (id=1010): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @private=0xa010102}}, 0x1e) 874.556571ms ago: executing program 1 (id=1012): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) 828.498882ms ago: executing program 1 (id=1016): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2301088, &(0x7f0000001c00)={[{@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x589, &(0x7f00000031c0)="$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") r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 387.112436ms ago: executing program 2 (id=1021): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 137.446699ms ago: executing program 4 (id=1025): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000180)={0x9, 0x0, [{0xc0000001, 0x4, 0x5, 0xee, 0x10000, 0x0, 0x3}, {0xa, 0xffffffff, 0x0, 0x8, 0x5, 0x3, 0x5}, {0x0, 0x2, 0x0, 0xfffffffd, 0x10, 0xe, 0x8}, {0x40000001, 0x2, 0x5, 0x8247, 0x5, 0x1, 0x8ec}, {0x7, 0x4, 0xf27b3d60a8535531, 0x3, 0x2, 0x8, 0xc}, {0x80000001, 0xfff, 0x5, 0x9, 0xfffffffe, 0x4, 0x5}, {0x0, 0x20b8, 0x7, 0x0, 0x8, 0x10000, 0x401}, {0x1, 0x1, 0x2, 0x6, 0x9, 0x7, 0x8001}, {0x40000000, 0x0, 0x0, 0xfffffffd, 0x9, 0x1, 0x9}]}) 79.680039ms ago: executing program 4 (id=1026): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='lo\x00', 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@broadcast, @local}, 0xc) 79.243519ms ago: executing program 4 (id=1027): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 54.63283ms ago: executing program 4 (id=1028): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10"], 0x48) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 357.881µs ago: executing program 4 (id=1029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000008340)={0x0, 0x0, &(0x7f0000008300)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf250e01000008000280040005800c00018008000100db"], 0x28}}, 0x45000) 0s ago: executing program 4 (id=1030): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. [ 23.656170][ T28] audit: type=1400 audit(1778540744.477:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.657201][ T278] cgroup: Unknown subsys name 'net' [ 23.678976][ T28] audit: type=1400 audit(1778540744.477:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.706955][ T28] audit: type=1400 audit(1778540744.507:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.707121][ T278] cgroup: Unknown subsys name 'devices' [ 23.849602][ T278] cgroup: Unknown subsys name 'hugetlb' [ 23.855235][ T278] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 23.957344][ T28] audit: type=1400 audit(1778540744.777:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.976610][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.980618][ T28] audit: type=1400 audit(1778540744.777:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.007218][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.014038][ T28] audit: type=1400 audit(1778540744.777:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.046076][ T28] audit: type=1400 audit(1778540744.817:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.071651][ T28] audit: type=1400 audit(1778540744.817:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.097460][ T28] audit: type=1400 audit(1778540744.817:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.123096][ T28] audit: type=1400 audit(1778540744.817:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.676729][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.714044][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.722024][ T286] device bridge_slave_0 entered promiscuous mode [ 24.729348][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.736395][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.745865][ T286] device bridge_slave_1 entered promiscuous mode [ 24.886869][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.894117][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.901633][ T291] device bridge_slave_0 entered promiscuous mode [ 24.910356][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.917410][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.925260][ T291] device bridge_slave_1 entered promiscuous mode [ 24.952309][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.959551][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.967180][ T292] device bridge_slave_0 entered promiscuous mode [ 24.998698][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.005755][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.013229][ T292] device bridge_slave_1 entered promiscuous mode [ 25.032465][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.039673][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.046981][ T293] device bridge_slave_0 entered promiscuous mode [ 25.057352][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.064581][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.072293][ T293] device bridge_slave_1 entered promiscuous mode [ 25.111214][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.118916][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.126307][ T290] device bridge_slave_0 entered promiscuous mode [ 25.136263][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.143548][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.150998][ T290] device bridge_slave_1 entered promiscuous mode [ 25.209249][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.216325][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.224079][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.231388][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.301486][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.308669][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.316114][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.323225][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.376734][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.383914][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.391250][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.398565][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.408757][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.416499][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.424636][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.431984][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.439585][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.447327][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.455900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.463502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.492406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.500778][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.507903][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.516097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.524461][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.531610][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.556302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.563970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.573065][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.580293][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.588325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.596426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.608209][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.616471][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.623543][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.647074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.658138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.666463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.686550][ T286] device veth0_vlan entered promiscuous mode [ 25.698448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.706716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.715326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.723537][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.732152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.739762][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.747274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.755022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.762870][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.770595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.778921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.786482][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.805687][ T286] device veth1_macvtap entered promiscuous mode [ 25.818737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.827255][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.835841][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.842928][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.850552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.859377][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.867554][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.874735][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.882204][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.890633][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.898753][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.905769][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.913196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.921763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.930738][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.938501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.946738][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.955135][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.962415][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.970053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.005936][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.015039][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.023315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.031932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.040743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.049169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.057431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.065995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.074184][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.081406][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.089050][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.097161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.105759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.114248][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.121476][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.128988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.136935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.145362][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.153374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.161856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.170410][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.178597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.186588][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.194580][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.202140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.213560][ T292] device veth0_vlan entered promiscuous mode [ 26.222254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.230539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.255904][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 26.259232][ T290] device veth0_vlan entered promiscuous mode [ 26.270380][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.280509][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.289234][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.296827][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.305544][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.315997][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.324184][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.331645][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.349180][ T291] device veth0_vlan entered promiscuous mode [ 26.361484][ T293] device veth0_vlan entered promiscuous mode [ 26.369019][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.378723][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.388772][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.396663][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.405729][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.415881][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.424549][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.432113][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.443328][ T290] device veth1_macvtap entered promiscuous mode [ 26.452846][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.461361][ T292] device veth1_macvtap entered promiscuous mode [ 26.475596][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.484353][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.493381][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.502354][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.515864][ T293] device veth1_macvtap entered promiscuous mode [ 26.523264][ T291] device veth1_macvtap entered promiscuous mode [ 26.530910][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.544859][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.553322][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.562111][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.570561][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.587678][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.596381][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.606983][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.616073][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.640999][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.649401][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.657770][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.666040][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.674913][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.683421][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.692066][ T19] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.750866][ T320] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 26.755135][ T323] syz.4.5 (323): /proc/323/oom_adj is deprecated, please use /proc/323/oom_score_adj instead. [ 26.766092][ T322] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3'. [ 26.815196][ T328] mmap: syz.3.7 (328) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 26.818913][ T332] netlink: 'syz.4.8': attribute type 1 has an invalid length. [ 26.847479][ T334] loop0: detected capacity change from 0 to 256 [ 26.867440][ T334] ======================================================= [ 26.867440][ T334] WARNING: The mand mount option has been deprecated and [ 26.867440][ T334] and is ignored by this kernel. Remove the mand [ 26.867440][ T334] option from the mount to silence this warning. [ 26.867440][ T334] ======================================================= [ 26.911863][ T338] loop2: detected capacity change from 0 to 512 [ 26.929159][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.947797][ T334] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 26.962967][ T344] capability: warning: `syz.3.15' uses deprecated v2 capabilities in a way that may be insecure [ 26.974529][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.993993][ T338] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 26.997689][ T334] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 27.027834][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 27.039058][ T334] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xda9016d0, utbl_chksum : 0xe619d30d) [ 27.043509][ T338] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 27.067001][ T19] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 27.082703][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.098354][ T19] usb 2-1: config 0 descriptor?? [ 27.120517][ T360] netlink: 80 bytes leftover after parsing attributes in process `syz.0.20'. [ 27.136598][ T293] EXT4-fs (loop2): unmounting filesystem. [ 27.187213][ T360] syz.0.20 (360) used greatest stack depth: 20768 bytes left [ 27.530296][ T19] plantronics 0003:047F:FFFF.0001: unbalanced delimiter at end of report description [ 27.557861][ T19] plantronics 0003:047F:FFFF.0001: parse failed [ 27.564284][ T19] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 27.605178][ T424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 27.645337][ T428] loop2: detected capacity change from 0 to 256 [ 27.733213][ T307] usb 2-1: USB disconnect, device number 2 [ 27.858072][ T462] device vlan2 entered promiscuous mode [ 27.863670][ T462] device bridge0 entered promiscuous mode [ 28.062361][ T492] syz.3.84 uses obsolete (PF_INET,SOCK_PACKET) [ 28.178618][ T511] can0: slcan on ttyS3. [ 28.238143][ T511] can0 (unregistered): slcan off ttyS3. [ 28.466931][ T560] can0: slcan on ttyS3. [ 28.548873][ T558] can0 (unregistered): slcan off ttyS3. [ 28.727303][ T602] netlink: 56 bytes leftover after parsing attributes in process `syz.2.124'. [ 28.779274][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 28.779290][ T28] audit: type=1400 audit(1778540749.607:148): avc: denied { map_create } for pid=606 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.847844][ T28] audit: type=1400 audit(1778540749.637:149): avc: denied { map_read map_write } for pid=606 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.891496][ T28] audit: type=1400 audit(1778540749.637:150): avc: denied { perfmon } for pid=606 comm="syz.2.127" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.922635][ T28] audit: type=1400 audit(1778540749.637:151): avc: denied { prog_run } for pid=606 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.943389][ T28] audit: type=1400 audit(1778540749.707:152): avc: denied { sqpoll } for pid=617 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 28.970506][ T28] audit: type=1400 audit(1778540749.717:153): avc: denied { create } for pid=617 comm="syz.2.131" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.992087][ T28] audit: type=1400 audit(1778540749.717:154): avc: denied { map } for pid=617 comm="syz.2.131" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.024235][ T28] audit: type=1400 audit(1778540749.717:155): avc: denied { read write } for pid=617 comm="syz.2.131" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.060376][ T28] audit: type=1400 audit(1778540749.847:156): avc: denied { view } for pid=634 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 29.201934][ T663] loop1: detected capacity change from 0 to 128 [ 29.207394][ T667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.155'. [ 29.222604][ T668] process 'syz.3.152' launched '/dev/fd/3' with NULL argv: empty string added [ 29.237159][ T663] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 29.262174][ T28] audit: type=1400 audit(1778540750.087:157): avc: denied { execute } for pid=657 comm="syz.3.152" dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.482340][ T700] loop4: detected capacity change from 0 to 512 [ 29.629089][ T713] loop3: detected capacity change from 0 to 512 [ 29.640125][ T718] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.677109][ T713] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.178: invalid indirect mapped block 10 (level 1) [ 29.721101][ T713] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.178: invalid indirect mapped block 8 (level 1) [ 29.766570][ T713] EXT4-fs (loop3): 1 truncate cleaned up [ 29.772664][ T713] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.836135][ T290] EXT4-fs (loop3): unmounting filesystem. [ 31.117079][ T758] sock: sock_timestamping_bind_phc: sock not bind to device [ 31.141056][ T762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 31.205274][ T768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.202'. [ 31.215480][ T768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.202'. [ 31.250694][ T773] tmpfs: Bad value for 'size' [ 31.293322][ T726] loop0: detected capacity change from 0 to 40427 [ 31.336613][ T726] F2FS-fs (loop0): invalid crc value [ 31.381979][ T793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 31.408964][ T787] loop4: detected capacity change from 0 to 8192 [ 31.426252][ T787] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.444739][ T726] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.577100][ T824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.226'. [ 31.584687][ T726] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 31.687967][ T291] syz-executor: attempt to access beyond end of device [ 31.687967][ T291] loop0: rw=2051, sector=61440, nr_sectors = 69632 limit=40427 [ 31.712057][ T291] F2FS-fs (loop0): Issue discard(7680, 7680, 8704) failed, ret: -5 [ 31.737422][ T842] loop4: detected capacity change from 0 to 128 [ 31.785296][ T842] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 31.825365][ T842] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.854891][ T292] EXT4-fs (loop4): unmounting filesystem. [ 31.864304][ T854] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 32.121727][ T900] can0: slcan on ptm0. [ 32.208069][ T899] can0 (unregistered): slcan off ptm0. [ 32.215514][ T912] loop3: detected capacity change from 0 to 256 [ 32.244812][ T916] loop4: detected capacity change from 0 to 256 [ 32.249095][ T912] exfat: Deprecated parameter 'utf8' [ 32.300065][ T912] exfat: Deprecated parameter 'namecase' [ 32.307534][ T912] exfat: Deprecated parameter 'namecase' [ 32.315661][ T924] netlink: 72 bytes leftover after parsing attributes in process `syz.1.267'. [ 32.324955][ T916] exfat: Deprecated parameter 'utf8' [ 32.339600][ T912] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 32.361973][ T916] exfat: Deprecated parameter 'namecase' [ 32.387997][ T916] exfat: Deprecated parameter 'namecase' [ 32.391847][ T928] loop1: detected capacity change from 0 to 256 [ 32.408271][ T916] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 32.450137][ T928] FAT-fs (loop1): Directory bread(block 64) failed [ 32.476475][ T928] FAT-fs (loop1): Directory bread(block 65) failed [ 32.491052][ T928] FAT-fs (loop1): Directory bread(block 66) failed [ 32.517511][ T928] FAT-fs (loop1): Directory bread(block 67) failed [ 32.533836][ T928] FAT-fs (loop1): Directory bread(block 68) failed [ 32.550638][ T928] FAT-fs (loop1): Directory bread(block 69) failed [ 32.557260][ T928] FAT-fs (loop1): Directory bread(block 70) failed [ 32.574261][ T928] FAT-fs (loop1): Directory bread(block 71) failed [ 32.588268][ T928] FAT-fs (loop1): Directory bread(block 72) failed [ 32.607697][ T928] FAT-fs (loop1): Directory bread(block 73) failed [ 32.644929][ T903] loop0: detected capacity change from 0 to 40427 [ 32.666519][ T903] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 32.677778][ T903] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 32.715393][ T903] F2FS-fs (loop0): invalid crc value [ 32.748517][ T903] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 32.813510][ T903] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 32.828846][ T903] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 32.868984][ T291] syz-executor: attempt to access beyond end of device [ 32.868984][ T291] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 33.132601][ T976] loop2: detected capacity change from 0 to 256 [ 33.150303][ T976] exfat: Deprecated parameter 'namecase' [ 33.156219][ T976] exfat: Deprecated parameter 'namecase' [ 33.165704][ T976] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 33.201612][ T976] exFAT-fs (loop2): hint_cluster is invalid (4278190089) [ 33.217061][ T976] exFAT-fs (loop2): error, failed to bmap (inode : ffff888131c5ee30 iblock : 8, err : -5) [ 33.233035][ T976] exFAT-fs (loop2): error, invalid access to FAT (entry 0xff000008) [ 33.235933][ T983] loop0: detected capacity change from 0 to 512 [ 33.241520][ T976] exFAT-fs (loop2): error, invalid access to FAT (entry 0xff000008) [ 33.289968][ T10] kworker/u4:1: attempt to access beyond end of device [ 33.289968][ T10] loop2: rw=1, sector=34225520825, nr_sectors = 1 limit=256 [ 33.311252][ T10] Buffer I/O error on dev loop2, logical block 34225520825, lost async page write [ 33.345207][ T993] loop0: detected capacity change from 0 to 512 [ 33.348294][ T10] kworker/u4:1: attempt to access beyond end of device [ 33.348294][ T10] loop2: rw=1, sector=34225520826, nr_sectors = 1 limit=256 [ 33.372195][ T993] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 33.385773][ T10] Buffer I/O error on dev loop2, logical block 34225520826, lost async page write [ 33.395933][ T993] EXT4-fs (loop0): orphan cleanup on readonly fs [ 33.402387][ T10] kworker/u4:1: attempt to access beyond end of device [ 33.402387][ T10] loop2: rw=1, sector=34225520827, nr_sectors = 1 limit=256 [ 33.416588][ T993] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.289: Block bitmap for bg 0 marked uninitialized [ 33.430404][ T10] Buffer I/O error on dev loop2, logical block 34225520827, lost async page write [ 33.439864][ T10] kworker/u4:1: attempt to access beyond end of device [ 33.439864][ T10] loop2: rw=1, sector=34225520828, nr_sectors = 1 limit=256 [ 33.439873][ T993] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 33.462708][ T10] Buffer I/O error on dev loop2, logical block 34225520828, lost async page write [ 33.462770][ T993] EXT4-fs (loop0): 1 orphan inode deleted [ 33.472134][ T10] kworker/u4:1: attempt to access beyond end of device [ 33.472134][ T10] loop2: rw=1, sector=34225520829, nr_sectors = 1 limit=256 [ 33.491603][ T993] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.491862][ T10] Buffer I/O error on dev loop2, logical block 34225520829, lost async page write [ 33.501175][ T990] loop3: detected capacity change from 0 to 40427 [ 33.509653][ T10] kworker/u4:1: attempt to access beyond end of device [ 33.509653][ T10] loop2: rw=1, sector=34225520830, nr_sectors = 1 limit=256 [ 33.530220][ T10] Buffer I/O error on dev loop2, logical block 34225520830, lost async page write [ 33.539694][ T10] kworker/u4:1: attempt to access beyond end of device [ 33.539694][ T10] loop2: rw=1, sector=34225520831, nr_sectors = 1 limit=256 [ 33.559668][ T990] F2FS-fs (loop3): invalid crc value [ 33.565305][ T291] EXT4-fs (loop0): unmounting filesystem. [ 33.575649][ T10] Buffer I/O error on dev loop2, logical block 34225520831, lost async page write [ 33.588311][ T990] F2FS-fs (loop3): Found nat_bits in checkpoint [ 33.595011][ T999] device syz_tun entered promiscuous mode [ 33.604650][ T999] device macsec1 entered promiscuous mode [ 33.624019][ T999] device syz_tun left promiscuous mode [ 33.656639][ T990] F2FS-fs (loop3): Start checkpoint disabled! [ 33.666028][ T990] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 33.673696][ T990] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 33.711683][ T990] F2FS-fs (loop3): Skipping Checkpoint. Checkpoints currently disabled. [ 33.763900][ T1019] loop4: detected capacity change from 0 to 16 [ 33.775895][ T1019] erofs: (device loop4): mounted with root inode @ nid 36. [ 33.787088][ T1019] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 33.817745][ T1019] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 33.827869][ T1019] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 33.844551][ T1019] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 33.930407][ T1040] netlink: 220 bytes leftover after parsing attributes in process `syz.4.310'. [ 33.949604][ T1040] netlink: 44 bytes leftover after parsing attributes in process `syz.4.310'. [ 33.962144][ T1040] netlink: 32 bytes leftover after parsing attributes in process `syz.4.310'. [ 33.973136][ T1040] tipc: MTU too low for tipc bearer [ 33.981772][ T1047] loop0: detected capacity change from 0 to 256 [ 34.024151][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 34.024179][ T28] audit: type=1400 audit(1778540754.847:222): avc: denied { create } for pid=1050 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.066760][ T28] audit: type=1400 audit(1778540754.847:223): avc: denied { setopt } for pid=1050 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.122144][ T28] audit: type=1400 audit(1778540754.847:224): avc: denied { bind } for pid=1050 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.249257][ T28] audit: type=1400 audit(1778540755.077:225): avc: denied { create } for pid=1076 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 34.300391][ T28] audit: type=1400 audit(1778540755.097:226): avc: denied { getopt } for pid=1076 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 34.328271][ T28] audit: type=1400 audit(1778540755.117:227): avc: denied { read } for pid=1083 comm="syz.4.332" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.359804][ T28] audit: type=1400 audit(1778540755.117:228): avc: denied { open } for pid=1083 comm="syz.4.332" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.385586][ T28] audit: type=1400 audit(1778540755.117:229): avc: denied { ioctl } for pid=1083 comm="syz.4.332" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x556c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.416463][ T1095] netlink: 'syz.0.336': attribute type 28 has an invalid length. [ 34.429169][ T1091] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 34.450830][ T290] EXT4-fs (loop3): unmounting filesystem. [ 34.472677][ T1104] exfat: Deprecated parameter 'utf8' [ 34.487550][ T1104] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 34.571055][ T1114] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 34.593272][ T1114] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 34.624106][ T1114] erofs: (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 34.646967][ T28] audit: type=1326 audit(1778540755.467:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1124 comm="syz.3.349" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f9cdd9 code=0x7ffc0000 [ 34.648466][ T1114] erofs: (device loop1): mounted with root inode @ nid 36. [ 34.701869][ T28] audit: type=1326 audit(1778540755.507:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1124 comm="syz.3.349" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f9cdd9 code=0x7ffc0000 [ 34.707289][ T1114] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 34.737932][ T1114] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 34.827500][ T1142] sch_fq: defrate 2147483648 ignored. [ 34.862342][ T1151] tipc: Enabling of bearer rejected, failed to enable media [ 34.912358][ T1160] device syz_tun entered promiscuous mode [ 34.921320][ T1160] device macsec1 entered promiscuous mode [ 34.928271][ T1160] device syz_tun left promiscuous mode [ 35.063407][ T1185] xt_hashlimit: size too large, truncated to 1048576 [ 35.195023][ T1201] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 35.343911][ T1216] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.356522][ T1216] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.677591][ C0] sched: RT throttling activated [ 37.697074][ T1225] device syz_tun entered promiscuous mode [ 37.712348][ T1225] device macsec1 entered promiscuous mode [ 37.719052][ T291] EXT4-fs (loop0): unmounting filesystem. [ 37.731180][ T1225] device syz_tun left promiscuous mode [ 37.790104][ T1237] set_capacity_and_notify: 4 callbacks suppressed [ 37.790122][ T1237] loop3: detected capacity change from 0 to 256 [ 37.842628][ T1245] loop0: detected capacity change from 0 to 256 [ 37.873595][ T1248] loop2: detected capacity change from 0 to 16 [ 37.884164][ T1245] FAT-fs (loop0): Directory bread(block 64) failed [ 37.895575][ T1253] loop3: detected capacity change from 0 to 512 [ 37.908789][ T1248] erofs: (device loop2): mounted with root inode @ nid 36. [ 37.913886][ T1245] FAT-fs (loop0): Directory bread(block 65) failed [ 37.918148][ T1248] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 37.929452][ T1245] FAT-fs (loop0): Directory bread(block 66) failed [ 37.949917][ T1255] binder: 1254:1255 ioctl c018620b 0 returned -14 [ 37.956691][ T1253] EXT4-fs: Ignoring removed orlov option [ 37.968861][ T1245] FAT-fs (loop0): Directory bread(block 67) failed [ 37.974669][ T1248] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 37.981420][ T1245] FAT-fs (loop0): Directory bread(block 68) failed [ 38.006226][ T1248] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 38.011967][ T1245] FAT-fs (loop0): Directory bread(block 69) failed [ 38.020215][ T1248] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 38.042933][ T1248] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 38.050689][ T1245] FAT-fs (loop0): Directory bread(block 70) failed [ 38.052063][ T1248] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 38.069078][ T1253] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.077303][ T1245] FAT-fs (loop0): Directory bread(block 71) failed [ 38.098990][ T290] EXT4-fs (loop3): unmounting filesystem. [ 38.110790][ T1245] FAT-fs (loop0): Directory bread(block 72) failed [ 38.117381][ T1245] FAT-fs (loop0): Directory bread(block 73) failed [ 38.464256][ T1314] loop4: detected capacity change from 0 to 2048 [ 38.473696][ T1316] device bridge_slave_1 left promiscuous mode [ 38.483991][ T1316] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.492114][ T1316] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 38.545914][ T1314] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.565444][ T1314] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.606211][ T292] EXT4-fs (loop4): unmounting filesystem. [ 38.627193][ T1336] bridge_slave_1: default FDB implementation only supports local addresses [ 38.732476][ T1351] loop3: detected capacity change from 0 to 512 [ 38.772624][ T1351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.794088][ T1351] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.798350][ T1355] sock: sock_set_timeout: `syz.0.456' (pid 1355) tries to set negative timeout [ 38.812514][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.840727][ T1351] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 38.845928][ T1359] loop0: detected capacity change from 0 to 128 [ 38.856773][ T1351] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.454: Allocating blocks 41-42 which overlap fs metadata [ 38.877771][ T1351] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.454: Allocating blocks 41-42 which overlap fs metadata [ 38.885396][ T1359] FAT-fs (loop0): Directory bread(block 32) failed [ 38.898595][ T1359] FAT-fs (loop0): Directory bread(block 33) failed [ 38.902974][ T1349] loop4: detected capacity change from 0 to 40427 [ 38.905218][ T1359] FAT-fs (loop0): Directory bread(block 34) failed [ 38.911684][ T1351] EXT4-fs error (device loop3): ext4_acquire_dquot:6822: comm syz.3.454: Failed to acquire dquot type 1 [ 38.923359][ T1349] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 38.937364][ T1351] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 38.947512][ T1349] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 38.952064][ T1351] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #12: comm syz.3.454: corrupted inode contents [ 38.966472][ T1359] FAT-fs (loop0): Directory bread(block 35) failed [ 38.972553][ T1351] EXT4-fs error (device loop3): ext4_dirty_inode:6135: inode #12: comm syz.3.454: mark_inode_dirty error [ 38.986432][ T1349] F2FS-fs (loop4): invalid crc value [ 38.990118][ T1351] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #12: comm syz.3.454: corrupted inode contents [ 38.998037][ T1359] FAT-fs (loop0): Directory bread(block 36) failed [ 39.007521][ T1351] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.454: mark_inode_dirty error [ 39.014145][ T1359] FAT-fs (loop0): Directory bread(block 37) failed [ 39.025230][ T1351] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #12: comm syz.3.454: corrupted inode contents [ 39.033767][ T1359] FAT-fs (loop0): Directory bread(block 38) failed [ 39.043592][ T1351] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 39.050281][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.058652][ T1351] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #12: comm syz.3.454: corrupted inode contents [ 39.073209][ T1359] FAT-fs (loop0): Directory bread(block 39) failed [ 39.083820][ T1349] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.092532][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.105084][ T1351] EXT4-fs error (device loop3): ext4_truncate:4316: inode #12: comm syz.3.454: mark_inode_dirty error [ 39.120879][ T1359] FAT-fs (loop0): Directory bread(block 40) failed [ 39.127433][ T1359] FAT-fs (loop0): Directory bread(block 41) failed [ 39.131971][ T1351] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 39.144354][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 39.147176][ T1351] EXT4-fs (loop3): 1 truncate cleaned up [ 39.162688][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 39.162944][ T1349] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 39.181190][ T1351] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 39.190285][ T1349] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 39.192201][ T24] usb 2-1: SerialNumber: syz [ 39.306816][ T290] EXT4-fs (loop3): unmounting filesystem. [ 39.312798][ T1359] syz.0.457: attempt to access beyond end of device [ 39.312798][ T1359] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 39.327701][ T1359] FAT-fs (loop0): Filesystem has been set read-only [ 39.339165][ T1359] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 39.348390][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 39.348405][ T28] audit: type=1400 audit(1778540760.177:281): avc: denied { write } for pid=1375 comm="syz.3.464" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.410046][ T1378] device vlan2 entered promiscuous mode [ 39.428892][ T1378] device bridge0 entered promiscuous mode [ 39.444642][ T24] usb 2-1: 0:2 : does not exist [ 39.463008][ T24] usb 2-1: USB disconnect, device number 3 [ 39.466592][ T1380] loop2: detected capacity change from 0 to 4096 [ 39.486097][ T1386] netlink: 'syz.0.470': attribute type 10 has an invalid length. [ 39.503682][ T1390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.468'. [ 39.514142][ T1380] EXT4-fs (loop2): Test dummy encryption mode enabled [ 39.540118][ T1380] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c01d, mo2=0003] [ 39.563050][ T1397] tipc: Enabling of bearer rejected, failed to enable media [ 39.573132][ T1380] System zones: 0-5 [ 39.582494][ T1380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 39.630790][ T293] EXT4-fs (loop2): unmounting filesystem. [ 39.682517][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.688525][ T28] audit: type=1400 audit(1778540760.507:282): avc: denied { shutdown } for pid=1412 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.744124][ T28] audit: type=1400 audit(1778540760.567:283): avc: denied { connect } for pid=1417 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.800058][ T28] audit: type=1400 audit(1778540760.627:284): avc: denied { create } for pid=1424 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.835882][ T28] audit: type=1400 audit(1778540760.637:285): avc: denied { setopt } for pid=1424 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.879818][ T1436] loop3: detected capacity change from 0 to 512 [ 39.888446][ T28] audit: type=1400 audit(1778540760.637:286): avc: denied { write } for pid=1424 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.937102][ T1436] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 39.946231][ T1436] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.987302][ T290] EXT4-fs (loop3): unmounting filesystem. [ 40.003239][ T28] audit: type=1326 audit(1778540760.827:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1449 comm="syz.1.498" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662679cdd9 code=0x7ffc0000 [ 40.040673][ T1452] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 40.099919][ T28] audit: type=1326 audit(1778540760.857:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1449 comm="syz.1.498" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662679cdd9 code=0x7ffc0000 [ 40.175932][ T28] audit: type=1326 audit(1778540760.857:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1449 comm="syz.1.498" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662679cdd9 code=0x7ffc0000 [ 40.214824][ T28] audit: type=1326 audit(1778540760.857:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1449 comm="syz.1.498" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f662679cdd9 code=0x7ffc0000 [ 40.331866][ T1470] netlink: 96 bytes leftover after parsing attributes in process `syz.2.507'. [ 40.349852][ T1478] FAT-fs (loop1): Directory bread(block 64) failed [ 40.369236][ T1478] FAT-fs (loop1): Directory bread(block 65) failed [ 40.382609][ T1478] FAT-fs (loop1): Directory bread(block 66) failed [ 40.394138][ T1478] FAT-fs (loop1): Directory bread(block 67) failed [ 40.404090][ T1485] netlink: 'syz.2.514': attribute type 2 has an invalid length. [ 40.417671][ T1478] FAT-fs (loop1): Directory bread(block 68) failed [ 40.438113][ T1478] FAT-fs (loop1): Directory bread(block 69) failed [ 40.444708][ T1478] FAT-fs (loop1): Directory bread(block 70) failed [ 40.474651][ T1478] FAT-fs (loop1): Directory bread(block 71) failed [ 40.490392][ T1478] FAT-fs (loop1): Directory bread(block 72) failed [ 40.506754][ T1478] FAT-fs (loop1): Directory bread(block 73) failed [ 40.827681][ T315] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 40.837159][ T1531] netlink: 52 bytes leftover after parsing attributes in process `syz.4.537'. [ 41.028392][ T315] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 41.036786][ T315] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 41.071020][ T315] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 41.092538][ T315] usb 3-1: config 220 has no interface number 2 [ 41.107795][ T315] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 41.132223][ T315] usb 3-1: config 220 interface 0 has no altsetting 0 [ 41.167648][ T315] usb 3-1: config 220 interface 76 has no altsetting 0 [ 41.184675][ T315] usb 3-1: config 220 interface 1 has no altsetting 0 [ 41.193246][ T1546] xt_hashlimit: size too large, truncated to 1048576 [ 41.196134][ T315] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 41.223150][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.241307][ T315] usb 3-1: Product: syz [ 41.246340][ T315] usb 3-1: Manufacturer: syz [ 41.251451][ T315] usb 3-1: SerialNumber: syz [ 41.477258][ T315] usb 3-1: selecting invalid altsetting 0 [ 41.484677][ T315] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 41.504046][ T315] usb 3-1: No valid video chain found. [ 41.530886][ T315] usb 3-1: USB disconnect, device number 2 [ 41.630371][ T1513] F2FS-fs (loop0): invalid crc value [ 41.682372][ T1513] F2FS-fs (loop0): Found nat_bits in checkpoint [ 41.778470][ T1513] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 44.692070][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 44.692087][ T28] audit: type=1400 audit(1778540765.517:322): avc: denied { setopt } for pid=1564 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.762610][ T28] audit: type=1400 audit(1778540765.577:323): avc: denied { ioctl } for pid=1571 comm="syz.3.556" path="socket:[20026]" dev="sockfs" ino=20026 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.918338][ T28] audit: type=1400 audit(1778540765.747:324): avc: denied { create } for pid=1593 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.944438][ T28] audit: type=1400 audit(1778540765.767:325): avc: denied { write } for pid=1593 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 45.000511][ T1600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 45.004854][ T1598] set_capacity_and_notify: 4 callbacks suppressed [ 45.004871][ T1598] loop4: detected capacity change from 0 to 4096 [ 45.049362][ T1600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 45.082521][ T1600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 45.092656][ T1609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'. [ 45.118047][ T1609] bridge_slave_0: default FDB implementation only supports local addresses [ 45.159257][ T1598] EXT4-fs (loop4): Test dummy encryption mode enabled [ 45.188492][ T1598] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c01c, mo2=0003] [ 45.190283][ T28] audit: type=1400 audit(1778540766.017:326): avc: denied { bind } for pid=1620 comm="syz.0.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.243217][ T1627] capability: warning: `syz.0.578' uses 32-bit capabilities (legacy support in use) [ 45.255495][ T1598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.264086][ T28] audit: type=1400 audit(1778540766.077:327): avc: denied { read } for pid=1629 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.313544][ T1598] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 45.357165][ T292] EXT4-fs (loop4): unmounting filesystem. [ 45.461847][ T28] audit: type=1400 audit(1778540766.287:328): avc: denied { ioctl } for pid=1663 comm="syz.4.595" path="socket:[20163]" dev="sockfs" ino=20163 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.483546][ T1668] tipc: Started in network mode [ 45.493505][ T1668] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 45.502834][ T1668] tipc: Enabling of bearer rejected, failed to enable media [ 45.528498][ T1673] loop3: detected capacity change from 0 to 1024 [ 45.540122][ T1673] EXT4-fs: Ignoring removed orlov option [ 45.581866][ T1683] loop1: detected capacity change from 0 to 128 [ 45.593426][ T1673] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 45.594700][ T1683] syz.1.603: attempt to access beyond end of device [ 45.594700][ T1683] loop1: rw=2051, sector=120, nr_sectors = 105 limit=128 [ 45.635164][ T28] audit: type=1400 audit(1778540766.457:329): avc: denied { write } for pid=1684 comm="syz.4.604" name="001" dev="devtmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.678332][ T28] audit: type=1400 audit(1778540766.497:330): avc: denied { setattr } for pid=1672 comm="syz.3.599" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.705072][ T28] audit: type=1400 audit(1778540766.507:331): avc: denied { lock } for pid=1687 comm="syz.1.605" path="socket:[20224]" dev="sockfs" ino=20224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 45.705592][ T290] EXT4-fs (loop3): unmounting filesystem. [ 45.735652][ T1691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.607'. [ 45.751851][ T1691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 45.767914][ T1691] device vlan2 entered promiscuous mode [ 45.781490][ T1691] device gretap0 entered promiscuous mode [ 45.839069][ T1705] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.857419][ T1705] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.866268][ T1705] device bridge_slave_1 entered promiscuous mode [ 45.874405][ T1705] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.881594][ T1705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.936121][ T1723] loop3: detected capacity change from 0 to 128 [ 46.004542][ T1731] loop1: detected capacity change from 0 to 4096 [ 46.015605][ T1731] EXT4-fs (loop1): Test dummy encryption mode enabled [ 46.032967][ T1731] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c01c, mo2=0003] [ 46.047989][ T1731] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.085070][ T286] EXT4-fs (loop1): unmounting filesystem. [ 46.227671][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 46.308040][ T1761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 46.326915][ T1765] netlink: 48 bytes leftover after parsing attributes in process `syz.1.643'. [ 46.423176][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.448485][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.497225][ T1789] xt_hashlimit: size too large, truncated to 1048576 [ 46.498457][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 46.508812][ T1795] loop1: detected capacity change from 0 to 512 [ 46.520336][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 46.531718][ T1795] EXT4-fs: Ignoring removed oldalloc option [ 46.548096][ T24] usb 4-1: SerialNumber: syz [ 46.574644][ T1795] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.585525][ T24] usb 4-1: 0:2 : does not exist [ 46.594023][ T1795] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.668963][ T1795] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.658: corrupted xattr block 32 [ 46.677290][ T1811] loop0: detected capacity change from 0 to 4096 [ 46.691141][ T1811] EXT4-fs (loop0): Test dummy encryption mode enabled [ 46.707892][ T1795] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 46.708247][ T1811] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c01c, mo2=0003] [ 46.716954][ T1795] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.658: corrupted xattr block 32 [ 46.726093][ T1811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 46.757981][ T1795] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 46.777999][ T1795] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.658: corrupted xattr block 32 [ 46.816356][ T1795] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 46.839166][ T1795] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:337: inode #15: comm syz.1.658: verity file corrupted; can't find descriptor [ 46.854988][ T1795] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 46.864419][ T291] EXT4-fs (loop0): unmounting filesystem. [ 46.917410][ T286] EXT4-fs (loop1): unmounting filesystem. [ 46.939624][ T1820] loop1: detected capacity change from 0 to 1024 [ 46.950123][ T1820] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 46.967150][ T286] EXT4-fs (loop1): unmounting filesystem. [ 47.005108][ T6] usb 4-1: USB disconnect, device number 2 [ 47.059071][ T1833] loop4: detected capacity change from 0 to 512 [ 47.066934][ T1833] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.079082][ T1833] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.088287][ T1833] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.108770][ T292] EXT4-fs (loop4): unmounting filesystem. [ 47.135529][ T1839] loop4: detected capacity change from 0 to 256 [ 47.150010][ T1839] FAT-fs (loop4): Directory bread(block 64) failed [ 47.156682][ T1839] FAT-fs (loop4): Directory bread(block 65) failed [ 47.163759][ T1839] FAT-fs (loop4): Directory bread(block 66) failed [ 47.170338][ T1839] FAT-fs (loop4): Directory bread(block 67) failed [ 47.176870][ T1839] FAT-fs (loop4): Directory bread(block 68) failed [ 47.183497][ T1839] FAT-fs (loop4): Directory bread(block 69) failed [ 47.190072][ T1839] FAT-fs (loop4): Directory bread(block 70) failed [ 47.196603][ T1839] FAT-fs (loop4): Directory bread(block 71) failed [ 47.203189][ T1839] FAT-fs (loop4): Directory bread(block 72) failed [ 47.209929][ T1839] FAT-fs (loop4): Directory bread(block 73) failed [ 47.267650][ T319] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 47.341379][ T1843] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 47.349349][ T1843] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 47.358426][ T1843] F2FS-fs (loop4): invalid crc value [ 47.365886][ T1843] F2FS-fs (loop4): Found nat_bits in checkpoint [ 47.396114][ T1843] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 47.403353][ T1843] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 47.441946][ T43] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 47.451254][ T43] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 47.467702][ T319] usb 2-1: Using ep0 maxpacket: 8 [ 47.475063][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.486262][ T319] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.499387][ T319] usb 2-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 47.520612][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.539370][ T319] usb 2-1: config 0 descriptor?? [ 47.847460][ T1872] EXT4-fs: Ignoring removed bh option [ 47.853027][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 47.879668][ T1872] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 47.909203][ T291] EXT4-fs (loop0): unmounting filesystem. [ 47.952312][ T319] wacom 0003:056A:00B0.0002: unknown main item tag 0x0 [ 47.963048][ T1876] EXT4-fs: Ignoring removed orlov option [ 47.970945][ T319] wacom 0003:056A:00B0.0002: unknown main item tag 0x0 [ 47.978564][ T319] wacom 0003:056A:00B0.0002: unknown main item tag 0x0 [ 47.985971][ T319] wacom 0003:056A:00B0.0002: unknown main item tag 0x0 [ 47.993309][ T319] wacom 0003:056A:00B0.0002: unknown main item tag 0x0 [ 48.000906][ T319] wacom 0003:056A:00B0.0002: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 48.012006][ T319] wacom 0003:056A:00B0.0002: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.1-1/input0 [ 48.018541][ T1876] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 48.024435][ T319] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B0.0002/input/input6 [ 48.038794][ T6] usb 3-1: config 1 interface 0 has no altsetting 0 [ 48.058368][ T1876] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 48.066121][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40 [ 48.077114][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.085199][ T6] usb 3-1: Product: syz [ 48.090255][ T6] usb 3-1: Manufacturer: syz [ 48.094970][ T6] usb 3-1: SerialNumber: syz [ 48.111032][ T1876] EXT4-fs error (device loop0): ext4_free_inode:355: comm syz.0.690: bit already cleared for inode 15 [ 48.152221][ T291] EXT4-fs (loop0): unmounting filesystem. [ 48.172857][ T319] usb 2-1: USB disconnect, device number 4 [ 48.495026][ T1925] FAT-fs (loop3): Directory bread(block 64) failed [ 48.503014][ T1925] FAT-fs (loop3): Directory bread(block 65) failed [ 48.510674][ T1925] FAT-fs (loop3): Directory bread(block 66) failed [ 48.517264][ T1925] FAT-fs (loop3): Directory bread(block 67) failed [ 48.524084][ T1925] FAT-fs (loop3): Directory bread(block 68) failed [ 48.537690][ T1925] FAT-fs (loop3): Directory bread(block 69) failed [ 48.549819][ T1925] FAT-fs (loop3): Directory bread(block 70) failed [ 48.556542][ T1925] FAT-fs (loop3): Directory bread(block 71) failed [ 48.563549][ T1925] FAT-fs (loop3): Directory bread(block 72) failed [ 48.581456][ T1925] FAT-fs (loop3): Directory bread(block 73) failed [ 48.715992][ T6] usbhid 3-1:1.0: can't add hid device: -71 [ 48.718995][ T1940] SELinux: policydb magic number 0xdd59fea2 does not match expected magic number 0xf97cff8c [ 48.732383][ T6] usbhid: probe of 3-1:1.0 failed with error -71 [ 48.737557][ T1940] SELinux: failed to load policy [ 48.749721][ T6] usb 3-1: USB disconnect, device number 3 [ 49.241722][ T1915] F2FS-fs (loop0): Found nat_bits in checkpoint [ 49.277640][ T6] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 49.321148][ T1915] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 49.393636][ T1915] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 49.407568][ T1915] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 49.415706][ T1915] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=fff70000, run fsck to fix. [ 49.468754][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.481159][ T6] usb 2-1: config 0 has no interfaces? [ 49.500975][ T6] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 49.512237][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.535935][ T6] usb 2-1: Product: syz [ 49.546032][ T6] usb 2-1: Manufacturer: syz [ 49.551018][ T6] usb 2-1: SerialNumber: syz [ 49.561841][ T6] usb 2-1: config 0 descriptor?? [ 49.778132][ T19] usb 2-1: USB disconnect, device number 5 [ 50.138368][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 50.321028][ T2082] netlink: 'syz.1.785': attribute type 10 has an invalid length. [ 50.339536][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.361721][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.371999][ T24] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 50.394509][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 50.394525][ T28] audit: type=1400 audit(1778540771.220:379): avc: denied { mount } for pid=2089 comm="syz.2.789" name="/" dev="pstore" ino=14068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 50.407661][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.484857][ T28] audit: type=1400 audit(1778540771.250:380): avc: denied { append } for pid=2091 comm="syz.3.790" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.485604][ T24] usb 1-1: config 0 descriptor?? [ 50.577762][ T28] audit: type=1326 audit(1778540771.300:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2097 comm="syz.3.794" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f9cdd9 code=0x7ffc0000 [ 50.623969][ T2116] set_capacity_and_notify: 6 callbacks suppressed [ 50.623988][ T2116] loop3: detected capacity change from 0 to 1024 [ 50.624288][ T2118] loop2: detected capacity change from 0 to 256 [ 50.658533][ T28] audit: type=1326 audit(1778540771.300:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2097 comm="syz.3.794" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f9cdd9 code=0x7ffc0000 [ 50.684074][ T2116] EXT4-fs: Ignoring removed nobh option [ 50.702808][ T2118] FAT-fs (loop2): Directory bread(block 64) failed [ 50.714808][ T2118] FAT-fs (loop2): Directory bread(block 65) failed [ 50.730228][ T28] audit: type=1326 audit(1778540771.300:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2097 comm="syz.3.794" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f9cdd9 code=0x7ffc0000 [ 50.760454][ T2118] FAT-fs (loop2): Directory bread(block 66) failed [ 50.766398][ T2126] loop1: detected capacity change from 0 to 128 [ 50.767018][ T2118] FAT-fs (loop2): Directory bread(block 67) failed [ 50.787382][ T2116] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.797642][ T2118] FAT-fs (loop2): Directory bread(block 68) failed [ 50.800912][ T2116] EXT4-fs: test_dummy_encryption requires encrypt feature [ 50.805579][ T28] audit: type=1326 audit(1778540771.300:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2097 comm="syz.3.794" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f9cdd9 code=0x7ffc0000 [ 50.827777][ T2118] FAT-fs (loop2): Directory bread(block 69) failed [ 50.844798][ T2118] FAT-fs (loop2): Directory bread(block 70) failed [ 50.848137][ T2126] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 50.852546][ T2118] FAT-fs (loop2): Directory bread(block 71) failed [ 50.866483][ T2118] FAT-fs (loop2): Directory bread(block 72) failed [ 50.874212][ T2118] FAT-fs (loop2): Directory bread(block 73) failed [ 50.877348][ T2126] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.901984][ T28] audit: type=1326 audit(1778540771.300:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2097 comm="syz.3.794" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fedc1f9cdd9 code=0x7ffc0000 [ 50.950678][ T286] EXT4-fs (loop1): unmounting filesystem. [ 50.978925][ T24] hid-led 0003:1D34:000A.0003: item fetching failed at offset 0/3 [ 50.987046][ T24] hid-led: probe of 0003:1D34:000A.0003 failed with error -22 [ 51.007184][ T28] audit: type=1326 audit(1778540771.300:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2097 comm="syz.3.794" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f9cdd9 code=0x7ffc0000 [ 51.046480][ T28] audit: type=1326 audit(1778540771.300:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2097 comm="syz.3.794" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f9cdd9 code=0x7ffc0000 [ 51.072893][ T28] audit: type=1326 audit(1778540771.300:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2097 comm="syz.3.794" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f9cdd9 code=0x7ffc0000 [ 51.082609][ T2142] loop3: detected capacity change from 0 to 1024 [ 51.216523][ T2142] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.249695][ T290] EXT4-fs (loop3): unmounting filesystem. [ 51.314069][ T2166] loop2: detected capacity change from 0 to 128 [ 51.331191][ T19] usb 1-1: USB disconnect, device number 2 [ 51.332334][ T2172] loop4: detected capacity change from 0 to 128 [ 51.341116][ T2166] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 51.375795][ T2172] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 51.385652][ T2172] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.427550][ T292] EXT4-fs (loop4): unmounting filesystem. [ 51.449540][ T2185] loop2: detected capacity change from 0 to 128 [ 51.509174][ T2192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.837'. [ 51.597674][ T6] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 51.619189][ T2207] loop3: detected capacity change from 0 to 256 [ 51.654774][ T2212] loop4: detected capacity change from 0 to 512 [ 51.662713][ T2212] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.702692][ T2212] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.722221][ T2212] ext4 filesystem being mounted at /167/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.784232][ T292] EXT4-fs (loop4): unmounting filesystem. [ 51.790180][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 51.791111][ T2220] loop2: detected capacity change from 0 to 512 [ 51.796519][ T6] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.803689][ T2220] EXT4-fs: Ignoring removed oldalloc option [ 51.812595][ T6] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.836705][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 51.868724][ T6] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 51.870688][ T2220] EXT4-fs error (device loop2): ext4_xattr_inode_iget:397: comm syz.2.850: Parent and EA inode have the same ino 15 [ 51.887352][ T6] usb 2-1: Product: syz [ 51.893919][ T6] usb 2-1: Manufacturer: syz [ 51.905856][ T6] hub 2-1:4.0: USB hub found [ 51.926347][ T2220] EXT4-fs (loop2): 1 orphan inode deleted [ 51.932345][ T2220] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.980549][ T2233] netlink: 'syz.0.855': attribute type 1 has an invalid length. [ 52.013487][ T293] EXT4-fs (loop2): unmounting filesystem. [ 52.106351][ T6] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 52.115830][ T2250] exfat: Deprecated parameter 'utf8' [ 52.143701][ T2250] exfat: Deprecated parameter 'namecase' [ 52.164592][ T2250] exfat: Deprecated parameter 'namecase' [ 52.171216][ T2245] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000] [ 52.189498][ T2250] exfat: Deprecated parameter 'namecase' [ 52.202574][ T2245] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.862: lblock 2 mapped to illegal pblock 2 (length 1) [ 52.221995][ T2250] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 52.246175][ T2245] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.862: lblock 0 mapped to illegal pblock 48 (length 1) [ 52.271850][ T2261] FAT-fs (loop2): Directory bread(block 64) failed [ 52.273512][ T2245] EXT4-fs error (device loop4): ext4_acquire_dquot:6822: comm syz.4.862: Failed to acquire dquot type 0 [ 52.278522][ T2261] FAT-fs (loop2): Directory bread(block 65) failed [ 52.291258][ T2265] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 52.296601][ T2261] FAT-fs (loop2): Directory bread(block 66) failed [ 52.318686][ T2261] FAT-fs (loop2): Directory bread(block 67) failed [ 52.325400][ T2261] FAT-fs (loop2): Directory bread(block 68) failed [ 52.342041][ T2261] FAT-fs (loop2): Directory bread(block 69) failed [ 52.349173][ T2261] FAT-fs (loop2): Directory bread(block 70) failed [ 52.349198][ T2261] FAT-fs (loop2): Directory bread(block 71) failed [ 52.349230][ T2261] FAT-fs (loop2): Directory bread(block 72) failed [ 52.349246][ T2261] FAT-fs (loop2): Directory bread(block 73) failed [ 52.352687][ T2245] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5931: Corrupt filesystem [ 52.361123][ T2245] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.862: mark_inode_dirty error [ 52.407010][ T2245] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 52.438074][ T6] usb 2-1: USB disconnect, device number 6 [ 52.445150][ T2245] EXT4-fs (loop4): 1 orphan inode deleted [ 52.455452][ T2245] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.464046][ T10] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.464195][ T10] EXT4-fs error (device loop4): ext4_release_dquot:6858: comm kworker/u4:1: Failed to release dquot type 0 [ 52.519779][ T2285] netlink: 48 bytes leftover after parsing attributes in process `syz.0.880'. [ 52.543562][ T2287] x_tables: duplicate underflow at hook 1 [ 52.553187][ T292] EXT4-fs (loop4): unmounting filesystem. [ 52.564350][ T292] EXT4-fs error (device loop4): __ext4_get_inode_loc:4511: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 52.578359][ T292] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5931: Corrupt filesystem [ 52.587991][ T292] EXT4-fs error (device loop4): ext4_quota_off:7128: inode #3: comm syz-executor: mark_inode_dirty error [ 52.659614][ T2300] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.686600][ T2300] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 52.695124][ T2300] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.886: invalid indirect mapped block 2683928664 (level 1) [ 52.710158][ T2300] EXT4-fs (loop0): Remounting filesystem read-only [ 52.716788][ T2300] EXT4-fs (loop0): 1 truncate cleaned up [ 52.722557][ T2300] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.749253][ T2300] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 52.761680][ T291] EXT4-fs (loop0): unmounting filesystem. [ 52.799617][ T2308] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.808648][ T2308] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.930824][ T2317] exfat: Deprecated parameter 'debug' [ 52.947687][ T2317] exfat: Unexpected value for 'debug' [ 53.248860][ T2329] erofs: (device loop1): mounted with root inode @ nid 36. [ 53.422675][ T2343] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.431034][ T2343] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.460351][ T2343] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 53.469525][ T2343] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a000e018, mo2=0002] [ 53.478112][ T2343] System zones: 0-1, 15-15, 18-18, 34-34 [ 53.489474][ T2343] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.495914][ T2343] EXT4-fs error (device loop1): ext4_ext_check_inode:530: inode #4: comm syz.1.906: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 53.518231][ T2343] EXT4-fs error (device loop1): ext4_quota_enable:7033: comm syz.1.906: Bad quota inode: 4, type: 1 [ 53.563417][ T2343] EXT4-fs warning (device loop1): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.613114][ T2343] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 53.650344][ T2343] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 53.677707][ T6] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 53.693943][ T2343] EXT4-fs error (device loop1): ext4_get_link:104: inode #16: comm syz.1.906: bad symlink. [ 53.718486][ T2365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.916'. [ 53.743040][ T2365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.916'. [ 53.759705][ T286] EXT4-fs (loop1): unmounting filesystem. [ 53.826750][ T2373] netlink: 612 bytes leftover after parsing attributes in process `syz.2.920'. [ 53.857692][ T2373] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 53.868871][ T6] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 53.887817][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 53.897817][ T6] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 53.917133][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.936271][ T6] usb 4-1: config 0 descriptor?? [ 54.281684][ T2400] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 54.353907][ T286] EXT4-fs (loop1): unmounting filesystem. [ 54.362632][ T6] hid-generic 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 54.377773][ T6] hid-generic 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 54.385517][ T6] hid-generic 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 54.422132][ T6] hid-generic 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 54.440941][ T6] hid-generic 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 54.478102][ T6] hid-generic 0003:1B1C:0C10.0004: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 54.498056][ T2414] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 54.529700][ T2414] EXT4-fs (loop2): 1 truncate cleaned up [ 54.545743][ T2414] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 54.569711][ T2414] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.939: bg 0: block 465: padding at end of block bitmap is not set [ 54.593560][ T6] usb 4-1: USB disconnect, device number 3 [ 54.631816][ T2420] fido_id[2420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 54.664107][ T2414] EXT4-fs (loop2): Remounting filesystem read-only [ 54.688834][ T293] EXT4-fs (loop2): unmounting filesystem. [ 54.705935][ T2367] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945) [ 54.737686][ T2367] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 54.746174][ T2367] F2FS-fs (loop4): invalid crc value [ 54.769569][ T2367] F2FS-fs (loop4): Found nat_bits in checkpoint [ 54.837949][ T2367] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 54.845133][ T2367] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 54.913224][ T2436] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.920530][ T2436] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.937642][ T319] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 55.024476][ T2438] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 55.037750][ T2438] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.091900][ T293] EXT4-fs (loop2): unmounting filesystem. [ 55.127761][ T319] usb 2-1: Using ep0 maxpacket: 16 [ 55.139220][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.144456][ T2444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.951'. [ 55.174937][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.195537][ T319] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 55.215714][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.251840][ T2451] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 55.260796][ T319] usb 2-1: config 0 descriptor?? [ 55.301362][ T2451] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.320397][ T2455] EXT4-fs (loop3): Test dummy encryption mode enabled [ 55.340165][ T2455] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 55.366152][ T293] EXT4-fs (loop2): unmounting filesystem. [ 55.415870][ T2455] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 55.428965][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 55.428983][ T28] audit: type=1400 audit(1778540776.260:425): avc: denied { write } for pid=2454 comm="syz.3.956" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.461973][ T290] EXT4-fs (loop3): unmounting filesystem. [ 55.487440][ T28] audit: type=1400 audit(1778540776.260:426): avc: denied { remove_name } for pid=2454 comm="syz.3.956" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.525306][ T28] audit: type=1400 audit(1778540776.260:427): avc: denied { rename } for pid=2454 comm="syz.3.956" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.575947][ T28] audit: type=1400 audit(1778540776.260:428): avc: denied { add_name } for pid=2454 comm="syz.3.956" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.578690][ T2469] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 55.663836][ T28] audit: type=1400 audit(1778540776.490:429): avc: denied { name_bind } for pid=2480 comm="syz.4.965" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 55.668706][ T319] hid (null): unknown global tag 0xd [ 55.705642][ T2482] xt_hashlimit: max too large, truncated to 1048576 [ 55.737481][ T28] audit: type=1400 audit(1778540776.560:430): avc: denied { create } for pid=2467 comm="syz.3.959" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.769075][ T319] wacom 0003:056A:0084.0005: unknown global tag 0xd [ 55.775717][ T319] wacom 0003:056A:0084.0005: item 0 4 1 13 parsing failed [ 55.791731][ T2486] set_capacity_and_notify: 16 callbacks suppressed [ 55.791749][ T2486] loop4: detected capacity change from 0 to 512 [ 55.792137][ T290] EXT4-fs (loop3): unmounting filesystem. [ 55.817845][ T319] wacom 0003:056A:0084.0005: parse failed [ 55.827788][ T319] wacom: probe of 0003:056A:0084.0005 failed with error -22 [ 55.886087][ T2486] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 55.903162][ T319] usb 2-1: USB disconnect, device number 7 [ 55.947799][ T2486] ext4 filesystem being mounted at /186/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.074739][ T292] EXT4-fs (loop4): unmounting filesystem. [ 56.133860][ T2508] loop4: detected capacity change from 0 to 256 [ 56.176324][ T2508] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 56.211760][ T2514] tipc: Started in network mode [ 56.220740][ T2514] tipc: Node identity e0000002, cluster identity 4711 [ 56.238048][ T2514] tipc: New replicast peer: 255.255.255.255 [ 56.244067][ T2514] tipc: Enabled bearer , priority 10 [ 56.260234][ T28] audit: type=1400 audit(1778540777.090:431): avc: denied { connect } for pid=2517 comm="syz.2.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.323255][ T2527] loop2: detected capacity change from 0 to 16 [ 56.325357][ T28] audit: type=1400 audit(1778540777.120:432): avc: denied { getopt } for pid=2521 comm="syz.2.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.348243][ T2527] erofs: (device loop2): mounted with root inode @ nid 36. [ 56.364918][ T2527] syz.2.987: attempt to access beyond end of device [ 56.364918][ T2527] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 56.435351][ T2530] sch_fq: defrate 4294964870 ignored. [ 56.450371][ T2534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 56.507750][ T2540] device veth0_to_bridge entered promiscuous mode [ 56.587659][ T296] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 56.631866][ T2556] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1000'. [ 56.642980][ T2556] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 56.705140][ T2563] loop1: detected capacity change from 0 to 1024 [ 56.713102][ T2565] netlink: 87 bytes leftover after parsing attributes in process `syz.4.1005'. [ 56.758826][ T2563] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 56.777632][ T296] usb 4-1: Using ep0 maxpacket: 16 [ 56.783917][ T296] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 56.809102][ T296] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 56.833041][ T296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.852489][ T296] usb 4-1: Product: syz [ 56.856710][ T296] usb 4-1: Manufacturer: syz [ 56.862131][ T296] usb 4-1: SerialNumber: syz [ 56.862174][ T28] audit: type=1400 audit(1778540777.690:433): avc: denied { write } for pid=2574 comm="syz.4.1009" path="socket:[22456]" dev="sockfs" ino=22456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.871899][ T296] r8152-cfgselector 4-1: config 0 descriptor?? [ 56.900495][ T28] audit: type=1400 audit(1778540777.720:434): avc: denied { bind } for pid=2576 comm="syz.1.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.997816][ T2589] loop1: detected capacity change from 0 to 1024 [ 57.119275][ T296] r8152-cfgselector 4-1: Unknown version 0x0000 [ 57.127142][ T2597] overlayfs: unrecognized mount option "\']*=°¢aÛgt©˜vŽ$Kkk°\1\" or missing value [ 57.237620][ T296] tipc: Node number set to 3758096386 [ 57.336220][ T296] usb 4-1: USB disconnect, device number 4 [ 57.454738][ T2603] loop4: detected capacity change from 0 to 16 [ 57.469496][ T2603] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 57.469604][ T2603] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 57.477860][ T2603] erofs: (device loop4): mounted with root inode @ nid 36. [ 57.483456][ T2603] syz.4.1023: attempt to access beyond end of device [ 57.483456][ T2603] loop4: rw=0, sector=46, nr_sectors = 1 limit=16 [ 57.587655][ T2603] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 57.740109][ T2613] 8021q: VLANs not supported on lo [ 57.810351][ T2309] ------------[ cut here ]------------ [ 57.815878][ T2309] kernel BUG at fs/buffer.c:2714! [ 57.833153][ T2309] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 57.839273][ T2309] CPU: 1 PID: 2309 Comm: kmmpd-loop0 Not tainted syzkaller #0 [ 57.846752][ T2309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 57.856811][ T2309] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 57.862194][ T2309] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 68 d5 e7 ff e9 b0 fe ff ff e8 7e 3a a2 ff 0f 0b e8 77 3a a2 ff <0f> 0b e8 70 3a a2 ff 0f 0b e8 69 3a a2 ff 0f 0b e8 62 3a a2 ff 0f [ 57.881973][ T2309] RSP: 0018:ffffc9000e467ca0 EFLAGS: 00010293 [ 57.888044][ T2309] RAX: ffffffff81cf3bd9 RBX: 0000000000000000 RCX: ffff88811e4d3cc0 [ 57.896103][ T2309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.904070][ T2309] RBP: ffffc9000e467cf0 R08: ffff888131e60007 R09: 1ffff110263cc000 [ 57.912039][ T2309] R10: dffffc0000000000 R11: ffffed10263cc001 R12: 0000000000000000 [ 57.920009][ T2309] R13: 1ffff110263cc000 R14: ffff888131e60000 R15: 0000000000003801 [ 57.928246][ T2309] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 57.937270][ T2309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.943943][ T2309] CR2: 00007fa3a0017dac CR3: 000000011d063000 CR4: 00000000003506a0 [ 57.951930][ T2309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.959930][ T2309] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.967924][ T2309] Call Trace: [ 57.971209][ T2309] [ 57.974142][ T2309] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 57.979982][ T2309] submit_bh+0x1f/0x30 [ 57.984068][ T2309] write_mmp_block_thawed+0x397/0x510 [ 57.989539][ T2309] ? __cfi_schedule_timeout+0x10/0x10 [ 57.994907][ T2309] ? read_mmp_block+0x720/0x720 [ 57.999847][ T2309] ? __cfi_process_timeout+0x10/0x10 [ 58.005146][ T2309] write_mmp_block+0x138/0x2b0 [ 58.009940][ T2309] kmmpd+0x3ce/0x950 [ 58.013856][ T2309] kthread+0x281/0x320 [ 58.017942][ T2309] ? __cfi_kmmpd+0x10/0x10 [ 58.022381][ T2309] ? __cfi_kthread+0x10/0x10 [ 58.026979][ T2309] ret_from_fork+0x1f/0x30 [ 58.031409][ T2309] [ 58.034429][ T2309] Modules linked in: [ 58.272192][ T2309] ---[ end trace 0000000000000000 ]--- [ 58.284273][ T2309] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 58.297154][ T2309] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 68 d5 e7 ff e9 b0 fe ff ff e8 7e 3a a2 ff 0f 0b e8 77 3a a2 ff <0f> 0b e8 70 3a a2 ff 0f 0b e8 69 3a a2 ff 0f 0b e8 62 3a a2 ff 0f [ 58.329964][ T2309] RSP: 0018:ffffc9000e467ca0 EFLAGS: 00010293 [ 58.339368][ T2309] RAX: ffffffff81cf3bd9 RBX: 0000000000000000 RCX: ffff88811e4d3cc0 [ 58.352859][ T2309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.365230][ T2309] RBP: ffffc9000e467cf0 R08: ffff888131e60007 R09: 1ffff110263cc000 [ 58.377658][ T2309] R10: dffffc0000000000 R11: ffffed10263cc001 R12: 0000000000000000 [ 58.390043][ T2309] R13: 1ffff110263cc000 R14: ffff888131e60000 R15: 0000000000003801 [ 58.402503][ T2309] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 58.417002][ T2309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.426935][ T2309] CR2: 0000200000d5e000 CR3: 0000000120fec000 CR4: 00000000003506b0 [ 58.442558][ T2309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.454192][ T2309] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.462312][ T2309] Kernel panic - not syncing: Fatal exception [ 58.468787][ T2309] Kernel Offset: disabled [ 58.473104][ T2309] Rebooting in 86400 seconds..