last executing test programs: 18.588076764s ago: executing program 4 (id=814): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/driver/rndis-000\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) 18.417030578s ago: executing program 4 (id=816): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 18.009284177s ago: executing program 4 (id=822): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6d, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='-:m__read_msr1 msr/read_msr', 0x1b) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00'}) mount$overlay(0x0, &(0x7f0000000180)='./tracing/dynamic_events\x00', &(0x7f00000001c0), 0x12094, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './tracing'}}, {@volatile}, {@verity_off}, {@uuid_on}], [{@obj_role={'obj_role', 0x3d, '\x00'}}]}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(0x0, 0x0) 17.662896435s ago: executing program 4 (id=832): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 17.620011795s ago: executing program 4 (id=833): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1fd) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)=0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000480)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006040a0040000d0085a168d0bf46d32345653600648d04000b000a00000849935ade4a1822d0d8b26e566759547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1bb106ed538f6523250440e66358b8c341f120db775d8d5f7376e12fad1fed7d5429d51c0", 0x93, 0x4000000, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./mnt_trace\x00') r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r6, r5, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r7, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4401) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b52, &(0x7f0000000040)={0x0, 0x0}) read$FUSE(r0, &(0x7f0000004500)={0x2020}, 0x2028) 17.532180748s ago: executing program 4 (id=834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_INFO={0x8, 0x3, "ac1a91d2"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 8.356204328s ago: executing program 2 (id=948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000000)={0xa00}) 8.355947508s ago: executing program 2 (id=949): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace(0x4206, r0) sched_getscheduler(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) ptrace(0x4207, r0) 7.525673036s ago: executing program 2 (id=954): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 5.622342507s ago: executing program 2 (id=962): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200001, &(0x7f0000000300)={[{@nombcache}, {@data_writeback}, {@inlinecrypt}, {@grpjquota}, {@noload}, {@delalloc}, {@nobarrier}, {@nobarrier}, {@sysvgroups}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf}}]}, 0xff, 0x4f7, &(0x7f0000000bc0)="$eJzs3U1vG2kdAPD/OPY22QacXTgsK7FbdlulCOokTV8iDqWVeDlVQpR7GhIniuLEVeK0TVRR9xNQoQqQOHHigsQHQEL9CAipEtw4cAJVkNIDF2Q0fmkTx04T6sZt8vtJ03nmeer5P3+/jOeZmXgCOLZORcTViBiIiDMRkW/WZ5pTVBtT+v+ebd2bTackarUb/0wiada1r/Nk82GpH34/4sfJ7rhrG5tLM6VScXVn9ea5xeWZheJCcWVycuLS1OWpi1Pj+8wkye7VOhwRV77z/Oc//c33rvzhm3f+Nv2Psz9Ju3Wz2d4pj15opJ6LwVZF9U1E6Z/0fZOtZwgAwLvgdER8GBGfRcTXIx8DseduNAAAAPAOqn17+ESrCAAAABxNmfq1sUmm0LzedzgymUKhcQ3vl+P9TKm8VvnGfHl9Za5xDe1I5DLzi6XiePNa4ZHIJenyRL38cvl82/JkRHwQEY/yQ+lyvQ0AAAA4HCfbxv/P843xPwAAAHDEOBkPAAAAR5/xPwAAABx9Bxz/d7idFwAAAPAW+8H16+lUe7Z1r34fgLnbG+tL5dvn5oprS4Xl9dnCbHn1VmGhfD9KxcLAq9dXKpdvXYiV9btjlexaZWxtY3N6uby+Upmu39d7uvjhIeQEAAAA7PTBp4//kkRE9VtD9Sn1XrMt19eeAW+RJNtWcfNrfeoJ0BP7OKS/06n1N9MR4NC1f6cDx4cxPrDrb3radgwGu+0q/PHgsexzAABAf4x+xfl/OK4y/e4A0DcP+90BoG8ci4fjK3fwKwCBI+ZVv+k52K1h3+f/a7UDdQgAAOi54casGs1zgcORyRQKL04LJvOLpeJ4RHwxIv6cz51Ilyf62F8AAAAAAAAAAAAAAAAAAAAAAAAAeBfVaknUAAAAgCMtIvP3pHn/r9H86eH24wPvJf/J1+cRcedXN35xd6ZSWZ1I6//1or7yy2b9+X4cwQAAAIDjKLdna2uc3hrHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAvPdu6N9uaDjPu02sxFCOd4mdjsD4fjFxEvP/vJLLbHpdExEAP4lcfRMRHneInabdipNmL9viZiBjqc/yTPYgPx9njaxFxtdPnLxOn6vPOn79sc3pdT6/VP+Qd47e2fwNdtn9f2GeMj5/8bqxr/AcRH2c7b39a8ZMu8T/fZ/ybP9rc3LZ4Yntb7dcRox2/f5IdscYqy7fG1jY2zy0uzywUF4ork5MTl6YuT12cGh+bXywVm/92jP+zr/6++qhr/pn6fHv8Vp7p9jce1u53y//0PvP/75O7W19qFHO740ec/bzz6/9Rfd75+U/fE2ea3wNp+2irXG2Ut/vkt3/6pFvf0vhzXZ7/xuufr3XL/+z+0t+VMwDQX2sbm0szpVJx9RAKn13o3QqTQ+qzQpfC4NvRjcMufPe119PaHX6d9fy1Z3mlY4bOTX3eMAEAAD33cqe/3z0BAAAAAAAAAAAAAAAAAACA4+v/+vGwTw/2qPaY1f6kCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwp/8FAAD//ydlyLQ=") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjG\x11\x0e\xfe\x16\xb2uIi\xd1Q\x00\x00\x00\x00\xab\x98\x00', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x68) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0xc22, 0x0) 5.159244447s ago: executing program 3 (id=965): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, 0x0) 5.158124807s ago: executing program 1 (id=966): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x42, 0x0) mknodat$loop(r0, &(0x7f00000000c0)='./file1\x00', 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002780), 0x2280) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000000)=ANY=[], 0x10, 0x1239, &(0x7f0000003280)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x1, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_pgetevents(r2, 0x4, 0x0, 0x0, 0x0, 0x0) 5.02683214s ago: executing program 2 (id=968): setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000680), 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x7, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000200)=r3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.873914514s ago: executing program 0 (id=969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) creat(0x0, 0x20) open(0x0, 0x4000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xffffff2f, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x108843, 0x98) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000071113f00000000008510000002000000850000000500000095000000000000009500a7670cabbb00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4.56005242s ago: executing program 3 (id=970): setrlimit(0x1, &(0x7f0000000080)={0xffff, 0x8}) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(r0, r0, 0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) syz_clone3(&(0x7f00000035c0)={0x191080000, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x36}, &(0x7f0000000200)=""/58, 0x3a, 0x0, 0x0}, 0x58) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r4, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ptrace$ARCH_GET_FS(0x1e, r3, &(0x7f0000000100), 0x1003) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x75e) 4.55986938s ago: executing program 2 (id=971): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='mnt\x00', 0x40, &(0x7f0000000000)={[{@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1986}}]}, 0x0, 0x248, &(0x7f0000000940)="$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") add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[], 0x48, 0xfffffffffffffffa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0xffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, 0x0, 0x20000003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000001c0)={0x4, 0x1, 0x800, 0xd, 0x7b, "203c0020070000d588000000000700", 0x6, 0x1}) 4.482842802s ago: executing program 32 (id=971): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='mnt\x00', 0x40, &(0x7f0000000000)={[{@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1986}}]}, 0x0, 0x248, &(0x7f0000000940)="$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") add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[], 0x48, 0xfffffffffffffffa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0xffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, 0x0, 0x20000003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000001c0)={0x4, 0x1, 0x800, 0xd, 0x7b, "203c0020070000d588000000000700", 0x6, 0x1}) 4.383998824s ago: executing program 1 (id=973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000180)='./bus\x00', 0x10000, &(0x7f00000000c0)={[{@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@resuid}, {@test_dummy_encryption}, {@barrier}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@context={'context', 0x3d, 'user_u'}}]}, 0xfe, 0x592, &(0x7f0000000d80)="$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") writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb4894826645f8810000000806000608000604000146d588477c"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.749568988s ago: executing program 0 (id=974): socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xa401e000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) 3.226167389s ago: executing program 1 (id=975): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f00000003c0), 0x1, 0xbac, &(0x7f00000017c0)="$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") quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x80000, 0x0) 3.225738009s ago: executing program 3 (id=976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) 2.340209168s ago: executing program 0 (id=977): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 2.340018119s ago: executing program 1 (id=978): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x7ffd, 0x0, 0x0, 0x2, 0x60, 0x0, 0x4f}, {0x800000002, 0x0, 0x0, 0x800, 0x7, 0x6}, {0x0, 0x0, 0xe6}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x404d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) 2.339888059s ago: executing program 3 (id=979): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x0, 0x8}, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) 2.305531639s ago: executing program 33 (id=834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_INFO={0x8, 0x3, "ac1a91d2"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 2.240643501s ago: executing program 3 (id=981): socket(0x2, 0x3, 0xff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) close(0x5) 2.167880772s ago: executing program 0 (id=982): r0 = fsopen(&(0x7f0000000100)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.109424004s ago: executing program 0 (id=983): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 57.152958ms ago: executing program 0 (id=984): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003b0"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x8d6c30f34124690b, 0x55f}) 57.049298ms ago: executing program 1 (id=985): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff62058a000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) 170.55µs ago: executing program 3 (id=986): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000705000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7ea6d000) read(r0, &(0x7f0000000300)=""/172, 0xac) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xccbed000) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000faa000/0x1000)=nil, 0x1000}, 0x1}) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0xc, 0x0) 0s ago: executing program 1 (id=987): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x7, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x3, 0x40000, 0x2000, &(0x7f0000181000/0x2000)=nil}) kernel console output (not intermixed with test programs): number 2 using dummy_hcd [ 32.053839][ T471] loop4: detected capacity change from 0 to 512 [ 32.073142][ T471] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 32.087082][ T471] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.138681][ T475] loop4: detected capacity change from 0 to 128 [ 32.172021][ T475] EXT4-fs (loop4): Test dummy encryption mode enabled [ 32.178961][ T475] EXT4-fs (loop4): Ignoring removed orlov option [ 32.186565][ T475] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,errors=remount-ro,nodioread_nolock,orlov,. Quota mode: none. [ 32.201676][ T475] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.222190][ T475] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 32.284452][ T481] loop4: detected capacity change from 0 to 1024 [ 32.352771][ T481] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,nobarrier,barrier,block_validity,nodioread_nolock,nodelalloc,nolazytime,init_itable=0x0000000000000006,,errors=continue. Quota mode: none. [ 32.374687][ T58] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 32.382980][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.394018][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.403781][ T58] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.416846][ T58] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.426275][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.437341][ T58] usb 2-1: config 0 descriptor?? [ 32.442568][ T481] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.478794][ T481] EXT4-fs error (device loop4): ext4_map_blocks:742: inode #15: comm syz.4.55: lblock 0 mapped to illegal pblock 0 (length 1) [ 32.493364][ T481] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #15: comm syz.4.55: lblock 0 mapped to illegal pblock 0 (length 1) [ 33.122378][ T483] loop2: detected capacity change from 0 to 128 [ 33.192628][ T483] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 33.200760][ T483] System zones: 1-3, 19-19, 35-36 [ 33.212770][ T483] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 33.225186][ T483] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.270054][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 33.270079][ T30] audit: type=1400 audit(1786396653.877:189): avc: denied { remount } for pid=482 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.374049][ T451] loop1: detected capacity change from 0 to 256 [ 33.401262][ T30] audit: type=1400 audit(1786396653.997:190): avc: denied { prog_run } for pid=500 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.461697][ T451] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.501207][ T451] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 33.522400][ T30] audit: type=1400 audit(1786396654.137:191): avc: denied { write } for pid=504 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.548346][ T30] audit: type=1400 audit(1786396654.137:192): avc: denied { name_bind } for pid=504 comm="syz.0.63" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.570123][ T30] audit: type=1400 audit(1786396654.137:193): avc: denied { node_bind } for pid=504 comm="syz.0.63" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 33.622942][ T30] audit: type=1400 audit(1786396654.227:194): avc: denied { mount } for pid=500 comm="syz.4.57" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 33.648529][ T451] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 33.729399][ T30] audit: type=1400 audit(1786396654.237:195): avc: denied { search } for pid=500 comm="syz.4.57" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 33.835428][ T30] audit: type=1400 audit(1786396654.237:196): avc: denied { write } for pid=500 comm="syz.4.57" name="enable" dev="tracefs" ino=11392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 33.858001][ T30] audit: type=1400 audit(1786396654.237:197): avc: denied { open } for pid=500 comm="syz.4.57" path="/17/trace/events/mac80211/enable" dev="tracefs" ino=11392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 33.883002][ T30] audit: type=1400 audit(1786396654.317:198): avc: denied { setopt } for pid=508 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.981615][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.056077][ T58] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 34.085132][ T58] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 34.119818][ T58] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 34.241505][ T519] loop2: detected capacity change from 0 to 1024 [ 34.261201][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 34.314549][ T519] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,init_itable=0x0000000000000009,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 34.341640][ T331] usb 2-1: USB disconnect, device number 2 [ 34.391320][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 34.419918][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.451440][ T20] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 34.470716][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.498170][ T20] usb 1-1: config 0 descriptor?? [ 34.505362][ T532] SELinux: policydb version -1236248909 does not match my version range 15-33 [ 34.514646][ T532] SELinux: failed to load policy [ 34.525568][ T527] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 34.775548][ T536] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 34.994845][ T20] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0002/input/input5 [ 35.008814][ T20] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v0.be Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 35.026119][ T555] usb 1-1: USB disconnect, device number 2 [ 35.071154][ T331] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.089684][ T557] fido_id[557]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 35.311142][ T20] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.331189][ T331] usb 4-1: Using ep0 maxpacket: 8 [ 35.491187][ T307] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 35.521712][ T331] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 35.529780][ T559] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 35.537565][ T559] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 35.546754][ T559] F2FS-fs (loop2): invalid crc value [ 35.552551][ T331] usb 4-1: config 0 has no interface number 0 [ 35.558908][ T331] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 35.570030][ T331] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 35.579645][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.588666][ T559] F2FS-fs (loop2): Found nat_bits in checkpoint [ 35.617721][ T559] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 35.624819][ T559] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 35.641407][ T331] usb 4-1: config 0 descriptor?? [ 35.751182][ T307] usb 5-1: Using ep0 maxpacket: 8 [ 35.751182][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.941460][ T307] usb 5-1: unable to get BOS descriptor or descriptor too short [ 35.986412][ T42] usb 4-1: USB disconnect, device number 3 [ 36.026616][ T307] usb 5-1: config 4 interface 0 has no altsetting 0 [ 36.231210][ T20] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 36.240386][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.240410][ T20] usb 2-1: Product: syz [ 36.240424][ T20] usb 2-1: Manufacturer: syz [ 36.240437][ T20] usb 2-1: SerialNumber: syz [ 36.322198][ T307] usb 5-1: string descriptor 0 read error: -22 [ 36.328894][ T307] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 36.338539][ T307] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 36.351854][ T20] pl2303 2-1:1.0: required endpoints missing [ 36.555552][ T20] usb 2-1: USB disconnect, device number 3 [ 36.587436][ T570] set_capacity_and_notify: 3 callbacks suppressed [ 36.587452][ T570] loop2: detected capacity change from 0 to 40427 [ 36.624580][ T570] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 36.632472][ T570] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 36.646476][ T570] F2FS-fs (loop2): invalid crc value [ 36.663963][ T570] F2FS-fs (loop2): Found nat_bits in checkpoint [ 36.720526][ T570] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 36.727712][ T570] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 36.734340][ T581] Zero length message leads to an empty skb [ 36.942283][ T586] loop0: detected capacity change from 0 to 1024 [ 37.070513][ T586] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.366518][ T586] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 37.446283][ T586] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.90: missing EA_INODE flag [ 37.492134][ T586] EXT4-fs (loop0): Remounting filesystem read-only [ 37.591475][ T598] loop3: detected capacity change from 0 to 40427 [ 37.615653][ T600] loop2: detected capacity change from 0 to 512 [ 37.623543][ T586] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.90: error while reading EA inode 11 err=-117 [ 37.639915][ T586] EXT4-fs (loop0): Remounting filesystem read-only [ 37.647871][ T586] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.684447][ T598] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 37.692322][ T598] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 37.872652][ T600] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 37.894927][ T598] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.933487][ T608] usb 5-1: USB disconnect, device number 2 [ 37.960417][ T598] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.967586][ T598] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 38.005044][ T600] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.363732][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 38.363748][ T30] audit: type=1400 audit(1786396658.977:210): avc: denied { read } for pid=621 comm="syz.0.101" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 38.421156][ T622] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 38.447428][ T30] audit: type=1400 audit(1786396659.027:211): avc: denied { open } for pid=621 comm="syz.0.101" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 38.500297][ T624] loop0: detected capacity change from 0 to 1024 [ 38.513386][ T30] audit: type=1400 audit(1786396659.027:212): avc: denied { ioctl } for pid=621 comm="syz.0.101" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 38.531260][ T608] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 38.540513][ T30] audit: type=1400 audit(1786396659.127:213): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.576637][ T624] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 38.600531][ T626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 38.667245][ T30] audit: type=1400 audit(1786396659.277:214): avc: denied { write } for pid=621 comm="syz.0.101" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 38.768929][ T30] audit: type=1400 audit(1786396659.377:215): avc: denied { mount } for pid=640 comm="syz.0.108" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 38.838790][ T643] binder: 642:643 ioctl c0306201 200000004a40 returned -14 [ 38.866096][ T30] audit: type=1400 audit(1786396659.437:216): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 38.903098][ T637] loop3: detected capacity change from 0 to 40427 [ 38.919347][ T30] audit: type=1400 audit(1786396659.527:217): avc: denied { read } for pid=646 comm="syz.2.111" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.942146][ T30] audit: type=1400 audit(1786396659.527:218): avc: denied { open } for pid=646 comm="syz.2.111" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.972210][ T637] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 38.980036][ T637] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 39.006094][ T30] audit: type=1400 audit(1786396659.527:219): avc: denied { ioctl } for pid=646 comm="syz.2.111" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.047098][ T637] F2FS-fs (loop3): Found nat_bits in checkpoint [ 39.066085][ T654] loop2: detected capacity change from 0 to 512 [ 39.086400][ T637] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 39.093719][ T637] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 39.129688][ T494] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.201657][ T608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.258914][ T654] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 39.281703][ T608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.294050][ T654] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.305550][ T608] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 39.378717][ T654] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #2: comm syz.2.113: corrupted inode contents [ 39.392050][ T608] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.401681][ T608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.410527][ T654] EXT4-fs error (device loop2): ext4_dirty_inode:6108: inode #2: comm syz.2.113: mark_inode_dirty error [ 39.446797][ T608] usb 5-1: config 0 descriptor?? [ 39.455768][ T654] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #2: comm syz.2.113: corrupted inode contents [ 39.477824][ T662] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #2: comm syz.2.113: corrupted inode contents [ 39.493559][ T662] EXT4-fs error (device loop2): ext4_dirty_inode:6108: inode #2: comm syz.2.113: mark_inode_dirty error [ 39.522454][ T662] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #2: comm syz.2.113: corrupted inode contents [ 39.795143][ T494] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.805643][ T494] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.891274][ T494] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 39.910704][ T494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 39.929062][ T494] usb 2-1: SerialNumber: syz [ 39.966050][ T667] loop2: detected capacity change from 0 to 512 [ 40.132677][ T667] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 40.168836][ T667] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.241973][ T494] usb 2-1: 0:2 : does not exist [ 40.288307][ T494] usb 2-1: USB disconnect, device number 4 [ 40.760043][ T693] loop1: detected capacity change from 0 to 2048 [ 40.801956][ T693] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.821286][ T693] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.890565][ T693] fs-verity: sha512 using implementation "sha512-avx2" [ 40.901191][ T494] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 41.161234][ T494] usb 3-1: Using ep0 maxpacket: 32 [ 41.281193][ T494] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 41.300016][ T703] loop1: detected capacity change from 0 to 256 [ 41.306758][ T494] usb 3-1: config 0 interface 0 has no altsetting 0 [ 41.313678][ T494] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 41.338209][ T703] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 41.353562][ T494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.377001][ T494] usb 3-1: config 0 descriptor?? [ 41.680137][ T718] loop1: detected capacity change from 0 to 1024 [ 41.731320][ T608] usbhid 5-1:0.0: can't add hid device: -71 [ 41.737313][ T608] usbhid: probe of 5-1:0.0 failed with error -71 [ 41.751437][ T608] usb 5-1: USB disconnect, device number 3 [ 42.004931][ T726] loop1: detected capacity change from 0 to 40427 [ 42.103255][ T726] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 42.111042][ T726] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 42.120117][ T726] F2FS-fs (loop1): invalid crc value [ 42.130416][ T726] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.160520][ T726] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 42.167672][ T726] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.175598][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 42.236225][ T494] hid-generic 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 42.243764][ T494] hid-generic 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 42.251418][ T494] hid-generic 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 42.258903][ T494] hid-generic 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 42.266608][ T494] hid-generic 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 42.274737][ T494] hid-generic 0003:1B1C:1C09.0003: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 42.501268][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 42.621776][ T26] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 42.631654][ T26] usb 4-1: config 0 has no interface number 0 [ 42.638321][ T26] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 42.651431][ T26] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 42.663420][ T26] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 42.675454][ T26] usb 4-1: config 0 interface 196 has no altsetting 0 [ 42.939456][ T26] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 42.948744][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.957349][ T26] usb 4-1: Product: syz [ 42.961778][ T26] usb 4-1: Manufacturer: syz [ 42.966396][ T26] usb 4-1: SerialNumber: syz [ 42.972266][ T26] usb 4-1: config 0 descriptor?? [ 42.991278][ T722] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 43.157102][ T746] loop4: detected capacity change from 0 to 40427 [ 43.191734][ T746] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 43.199561][ T746] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 43.211152][ T746] F2FS-fs (loop4): invalid crc value [ 43.262463][ T748] loop1: detected capacity change from 0 to 1024 [ 43.295297][ T746] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.335769][ T746] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 43.343365][ T746] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.471210][ T26] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 43.480444][ T26] ipheth: probe of 4-1:0.196 failed with error -22 [ 43.811715][ T26] usb 3-1: USB disconnect, device number 2 [ 44.178863][ T494] usb 4-1: USB disconnect, device number 4 [ 44.260004][ T761] loop0: detected capacity change from 0 to 128 [ 44.268423][ T764] binder: 763:764 ioctl c0306201 200000000080 returned -14 [ 44.303766][ T764] binder: 763:764 ioctl c0306201 2000000003c0 returned -14 [ 44.372482][ T766] loop2: detected capacity change from 0 to 512 [ 44.525051][ T770] loop1: detected capacity change from 0 to 40427 [ 44.547074][ T761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 44.555394][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 44.555409][ T30] audit: type=1326 audit(1786396665.167:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=776 comm="syz.4.154" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bbf87a0d9 code=0x0 [ 44.586431][ T761] System zones: 1-3, 19-19, 35-36 [ 44.596163][ T770] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 44.604006][ T770] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 44.612716][ T766] EXT4-fs (loop2): Ignoring removed oldalloc option [ 44.622419][ T770] F2FS-fs (loop1): invalid crc value [ 44.623235][ T761] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 44.642764][ T766] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 44.666988][ T761] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.744825][ T770] F2FS-fs (loop1): Found nat_bits in checkpoint [ 44.803319][ T770] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 44.810434][ T770] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 44.923473][ T788] loop3: detected capacity change from 0 to 4096 [ 45.764922][ T788] EXT4-fs (loop3): Test dummy encryption mode enabled [ 46.096711][ T788] EXT4-fs (loop3): Test dummy encryption mode enabled [ 46.238319][ T804] loop0: detected capacity change from 0 to 1024 [ 46.249586][ T788] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 46.376442][ T805] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #18: block 176: comm syz.3.157: lblock 0 mapped to illegal pblock 176 (length 1) [ 46.466626][ T804] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.491239][ T804] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.510796][ T306] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm kworker/u4:3: Invalid inode table block 4 in block_group 0 [ 46.541440][ T804] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.160: bg 0: block 112: padding at end of block bitmap is not set [ 46.568306][ T30] audit: type=1400 audit(1786396667.177:235): avc: denied { validate_trans } for pid=812 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 46.601728][ T804] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 24 with max blocks 1 with error 28 [ 46.833644][ T804] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.833644][ T804] [ 46.843425][ T804] EXT4-fs (loop0): Total free blocks count 0 [ 46.849451][ T804] EXT4-fs (loop0): Free/Dirty block details [ 46.855457][ T804] EXT4-fs (loop0): free_blocks=0 [ 46.860426][ T804] EXT4-fs (loop0): dirty_blocks=16 [ 46.865623][ T804] EXT4-fs (loop0): Block reservation details [ 46.871704][ T804] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 46.877773][ T814] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #15: comm syz.0.160: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.075748][ T829] loop4: detected capacity change from 0 to 40427 [ 47.361840][ T829] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 47.369621][ T829] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 47.380369][ T829] F2FS-fs (loop4): invalid crc value [ 47.672416][ T834] loop1: detected capacity change from 0 to 40427 [ 47.798539][ T829] F2FS-fs (loop4): Found nat_bits in checkpoint [ 47.846460][ T834] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 47.854549][ T834] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 47.866868][ T834] F2FS-fs (loop1): invalid crc value [ 47.894939][ T841] loop2: detected capacity change from 0 to 1024 [ 47.901931][ T829] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 47.909091][ T829] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 47.925239][ T834] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.972444][ T841] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 47.986189][ T30] audit: type=1400 audit(1786396668.597:236): avc: denied { ioctl } for pid=850 comm="syz.0.172" path="/dev/usbmon2" dev="devtmpfs" ino=161 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 48.026896][ T834] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 48.034211][ T834] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 48.072596][ T841] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 49.051575][ T30] audit: type=1400 audit(1786396669.667:237): avc: denied { name_bind } for pid=868 comm="syz.2.179" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 49.167661][ T877] device bridge2 entered promiscuous mode [ 49.192132][ T877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=877 comm=syz.4.177 [ 49.238889][ T870] mmap: syz.0.182 (870) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 50.142017][ T892] loop2: detected capacity change from 0 to 40427 [ 50.205037][ T892] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 50.212875][ T892] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 50.222369][ T892] F2FS-fs (loop2): invalid crc value [ 50.354089][ T892] F2FS-fs (loop2): Found nat_bits in checkpoint [ 50.404359][ T892] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 50.411554][ T892] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 50.459917][ T30] audit: type=1400 audit(1786396671.067:238): avc: denied { mounton } for pid=901 comm="syz.0.193" path="/40/file0" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 50.919691][ T30] audit: type=1400 audit(1786396671.527:239): avc: denied { write } for pid=908 comm="syz.3.195" name="wireless" dev="proc" ino=4026532307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 50.971163][ T30] audit: type=1400 audit(1786396671.527:240): avc: denied { create } for pid=908 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.011324][ T30] audit: type=1400 audit(1786396671.617:241): avc: denied { connect } for pid=908 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.045160][ T912] loop1: detected capacity change from 0 to 256 [ 51.081312][ T912] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.097304][ T912] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 51.144065][ T912] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc4d1c548, utbl_chksum : 0xe619d30d) [ 51.169394][ T920] loop3: detected capacity change from 0 to 256 [ 51.328962][ T920] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.355740][ T930] syz.0.201 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.730216][ T940] loop0: detected capacity change from 0 to 2048 [ 51.774669][ T944] netlink: 104 bytes leftover after parsing attributes in process `syz.3.208'. [ 51.806685][ T30] audit: type=1400 audit(1786396672.387:242): avc: denied { write } for pid=943 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.828618][ T30] audit: type=1400 audit(1786396672.387:243): avc: denied { nlmsg_write } for pid=943 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.327404][ T940] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 52.398187][ T940] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.451234][ T957] futex_wake_op: syz.3.211 tries to shift op by -1; fix this program [ 52.706612][ T967] capability: warning: `syz.1.215' uses deprecated v2 capabilities in a way that may be insecure [ 53.034775][ T977] loop2: detected capacity change from 0 to 512 [ 53.075779][ T977] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 53.276332][ T977] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 53.442865][ T977] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.529245][ T30] audit: type=1400 audit(1786396674.137:244): avc: denied { append } for pid=976 comm="syz.2.218" path="/41/bus/cpuset.effective_mems" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.665737][ T992] loop0: detected capacity change from 0 to 128 [ 54.173735][ T30] audit: type=1400 audit(1786396674.787:245): avc: denied { shutdown } for pid=958 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.197621][ T992] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 54.241567][ T30] audit: type=1400 audit(1786396674.787:246): avc: denied { read } for pid=958 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.281223][ T992] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.529037][ T30] audit: type=1400 audit(1786396675.117:247): avc: denied { create } for pid=1019 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.775521][ T1034] loop4: detected capacity change from 0 to 40427 [ 54.795870][ T1016] binder_alloc: binder_alloc_mmap_handler: 1015 200000ffe000-200001000000 already mapped failed -16 [ 54.815471][ T1034] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 54.823314][ T1034] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 54.832824][ T1034] F2FS-fs (loop4): invalid crc value [ 54.882211][ T1034] F2FS-fs (loop4): Found nat_bits in checkpoint [ 54.944401][ T1034] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 54.952062][ T1034] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 55.849494][ T1057] loop0: detected capacity change from 0 to 512 [ 55.902705][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 55.902720][ T30] audit: type=1400 audit(1786396676.517:251): avc: denied { connect } for pid=1058 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.950706][ T30] audit: type=1400 audit(1786396676.557:252): avc: denied { read write } for pid=1059 comm="syz.1.246" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.958046][ T1060] input: syz0 as /devices/virtual/input/input6 [ 55.974575][ T30] audit: type=1400 audit(1786396676.557:253): avc: denied { open } for pid=1059 comm="syz.1.246" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.004478][ T30] audit: type=1400 audit(1786396676.557:254): avc: denied { ioctl } for pid=1059 comm="syz.1.246" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.040166][ T30] audit: type=1400 audit(1786396676.637:255): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=766 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.040265][ T30] audit: type=1400 audit(1786396676.637:256): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=766 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.040580][ T30] audit: type=1400 audit(1786396676.637:257): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=766 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.070336][ T1067] loop2: detected capacity change from 0 to 1024 [ 56.087171][ T1057] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.115961][ T1067] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 56.186392][ T30] audit: type=1400 audit(1786396676.797:258): avc: denied { search } for pid=1069 comm="syz.4.244" name="/" dev="configfs" ino=13681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.398327][ T1073] loop4: detected capacity change from 0 to 40427 [ 56.420599][ T1067] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 56.479664][ T1067] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 56.498233][ T1067] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 18: block 496:freeing already freed block (bit 31); block bitmap corrupt. [ 56.522411][ T1073] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 56.530285][ T1073] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 56.541716][ T1073] F2FS-fs (loop4): invalid crc value [ 56.577738][ T1073] F2FS-fs (loop4): Found nat_bits in checkpoint [ 56.628947][ T1073] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 56.636198][ T1073] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 57.364707][ T494] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 57.851535][ T494] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.101306][ T494] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 58.111546][ T1110] binder: 1109:1110 ioctl c0306201 0 returned -14 [ 58.130720][ T494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.161014][ T494] usb 2-1: Product: syz [ 58.181185][ T494] usb 2-1: Manufacturer: syz [ 58.201171][ T494] usb 2-1: SerialNumber: syz [ 58.261711][ T494] pl2303 2-1:1.0: required endpoints missing [ 58.464274][ T42] usb 2-1: USB disconnect, device number 5 [ 58.542684][ T1126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 58.709675][ T1131] netlink: 'syz.2.268': attribute type 4 has an invalid length. [ 59.071785][ T1137] netlink: 'syz.2.270': attribute type 1 has an invalid length. [ 59.099572][ T1137] netlink: 'syz.2.270': attribute type 2 has an invalid length. [ 59.125139][ T1137] netlink: 'syz.2.270': attribute type 7 has an invalid length. [ 59.133240][ T1137] netlink: 220 bytes leftover after parsing attributes in process `syz.2.270'. [ 59.272978][ T30] audit: type=1400 audit(1786396679.887:259): avc: denied { ioctl } for pid=1146 comm="syz.2.277" path="socket:[19168]" dev="sockfs" ino=19168 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.421169][ T58] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 59.540226][ T30] audit: type=1400 audit(1786396680.147:260): avc: denied { bind } for pid=1158 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.641152][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 60.131588][ T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.211284][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 60.352863][ T58] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 60.362185][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.370670][ T58] usb 2-1: Product: syz [ 60.375454][ T58] usb 2-1: Manufacturer: syz [ 60.380087][ T58] usb 2-1: SerialNumber: syz [ 60.451199][ T6] usb 3-1: unable to get BOS descriptor or descriptor too short [ 60.459533][ T58] pl2303 2-1:1.0: required endpoints missing [ 60.567776][ T1180] device syzkaller0 entered promiscuous mode [ 60.574039][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.585341][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.604988][ T1184] kernel profiling enabled (shift: 9) [ 60.634336][ T1188] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 60.660877][ T494] usb 2-1: USB disconnect, device number 6 [ 60.673144][ T1192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 60.751239][ T6] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 60.760364][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.768755][ T6] usb 3-1: Product: syz [ 60.773125][ T6] usb 3-1: Manufacturer: syz [ 60.777757][ T6] usb 3-1: SerialNumber: syz [ 60.981202][ T307] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 61.131250][ T6] usb 3-1: unit 6 not found! [ 61.135907][ T6] usb 3-1: unit 9 not found! [ 61.173272][ T6] usb 3-1: USB disconnect, device number 3 [ 61.221157][ T307] usb 5-1: Using ep0 maxpacket: 32 [ 61.339670][ T1210] loop1: detected capacity change from 0 to 40427 [ 61.341369][ T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.357148][ T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.366947][ T307] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 61.376089][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.383506][ T1210] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 61.391872][ T1210] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 61.396859][ T307] usb 5-1: config 0 descriptor?? [ 61.402930][ T1210] F2FS-fs (loop1): invalid crc value [ 61.412427][ T1210] F2FS-fs (loop1): Found nat_bits in checkpoint [ 61.444221][ T556] udevd[556]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.452627][ T1210] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 61.464079][ T307] hub 5-1:0.0: USB hub found [ 61.467075][ T1210] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 61.545747][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 61.545764][ T30] audit: type=1400 audit(1786396682.157:273): avc: denied { create } for pid=1216 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 61.730698][ T1200] loop4: detected capacity change from 0 to 128 [ 61.890213][ T1200] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.901482][ T1200] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.971328][ T307] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 62.071194][ T307] usbhid 5-1:0.0: can't add hid device: -71 [ 62.077279][ T307] usbhid: probe of 5-1:0.0 failed with error -71 [ 62.142346][ T307] usb 5-1: USB disconnect, device number 4 [ 62.171182][ T997] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 62.267338][ T1241] device syzkaller0 entered promiscuous mode [ 62.275676][ T1241] tipc: Started in network mode [ 62.280668][ T1241] tipc: Node identity 3af9ca2d0b14, cluster identity 4711 [ 62.287976][ T1241] tipc: Enabled bearer , priority 0 [ 62.297755][ T1241] tipc: Resetting bearer [ 62.305090][ T1240] tipc: Resetting bearer [ 62.311734][ T1240] tipc: Disabling bearer [ 62.551198][ T997] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.615247][ T30] audit: type=1400 audit(1786396683.227:274): avc: denied { create } for pid=1265 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 62.624937][ T1277] xt_hashlimit: size too large, truncated to 1048576 [ 62.682812][ T30] audit: type=1400 audit(1786396683.297:275): avc: denied { create } for pid=1284 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 62.719731][ T30] audit: type=1400 audit(1786396683.327:276): avc: denied { bind } for pid=1275 comm="syz.0.333" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.742585][ T30] audit: type=1400 audit(1786396683.327:277): avc: denied { name_bind } for pid=1275 comm="syz.0.333" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 62.763760][ T30] audit: type=1400 audit(1786396683.327:278): avc: denied { node_bind } for pid=1275 comm="syz.0.333" saddr=fe80::bb src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 62.771473][ T997] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 62.812817][ T997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.821178][ T997] usb 3-1: Product: syz [ 62.825596][ T997] usb 3-1: Manufacturer: syz [ 62.830267][ T997] usb 3-1: SerialNumber: syz [ 62.891780][ T997] pl2303 3-1:1.0: required endpoints missing [ 63.101288][ T494] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 63.181799][ T42] usb 3-1: USB disconnect, device number 4 [ 63.327387][ T1314] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 63.468065][ T1316] loop4: detected capacity change from 0 to 40427 [ 63.505094][ T1316] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 63.512961][ T1316] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 63.522775][ T1316] F2FS-fs (loop4): invalid crc value [ 63.552126][ T1316] F2FS-fs (loop4): Found nat_bits in checkpoint [ 63.594130][ T1316] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 63.601315][ T1316] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 63.682162][ T494] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.851442][ T494] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 63.887311][ T494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.030233][ T494] usb 2-1: Product: syz [ 64.073536][ T494] usb 2-1: Manufacturer: syz [ 64.088706][ T494] usb 2-1: SerialNumber: syz [ 64.106517][ T30] audit: type=1400 audit(1786396684.717:279): avc: denied { read } for pid=1336 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.387161][ T1345] loop0: detected capacity change from 0 to 40427 [ 64.527151][ T1348] loop3: detected capacity change from 0 to 40427 [ 64.546491][ T1345] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 64.554523][ T1345] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 64.564528][ T1345] F2FS-fs (loop0): invalid crc value [ 64.582406][ T1345] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.625646][ T1348] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 64.633520][ T1348] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 64.643094][ T1348] F2FS-fs (loop3): invalid crc value [ 64.648044][ T494] pl2303 2-1:1.0: required endpoints missing [ 64.655841][ T494] usb 2-1: USB disconnect, device number 7 [ 64.673994][ T1345] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 64.681321][ T1345] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 64.697752][ T1348] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.791402][ T1348] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 64.798656][ T1348] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.824711][ T1361] device syzkaller0 entered promiscuous mode [ 64.832194][ T30] audit: type=1400 audit(1786396685.447:280): avc: denied { write } for pid=1360 comm="syz.4.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.554564][ T26] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 65.757379][ T30] audit: type=1400 audit(1786396686.367:281): avc: denied { ioctl } for pid=1365 comm="syz.4.366" path="socket:[19683]" dev="sockfs" ino=19683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.976446][ T1374] loop4: detected capacity change from 0 to 40427 [ 66.033687][ T1374] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 66.041582][ T1374] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 66.050935][ T1374] F2FS-fs (loop4): invalid crc value [ 66.152033][ T1374] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.201542][ T1374] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 66.208756][ T1374] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 66.241238][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.601413][ T26] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 66.804475][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.817443][ T26] usb 3-1: Product: syz [ 66.822259][ T26] usb 3-1: Manufacturer: syz [ 66.826962][ T26] usb 3-1: SerialNumber: syz [ 66.950221][ T1421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=1421 comm=syz.0.390 [ 66.973080][ T30] audit: type=1400 audit(1786396687.587:282): avc: denied { accept } for pid=1423 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.039403][ T1421] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 67.182228][ T30] audit: type=1400 audit(1786396687.797:283): avc: denied { bind } for pid=1433 comm="syz.1.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.360622][ T26] pl2303 3-1:1.0: required endpoints missing [ 67.367772][ T26] usb 3-1: USB disconnect, device number 5 [ 67.448006][ T30] audit: type=1400 audit(1786396688.007:284): avc: denied { ioctl } for pid=1449 comm="syz.0.401" path="socket:[19806]" dev="sockfs" ino=19806 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.622327][ T1459] device syzkaller0 entered promiscuous mode [ 67.635606][ T1459] tipc: Enabled bearer , priority 0 [ 67.678555][ T1459] tipc: Resetting bearer [ 67.697595][ T1458] tipc: Resetting bearer [ 67.711438][ T1458] tipc: Disabling bearer [ 67.773227][ T1465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.408'. [ 67.792920][ T1465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.408'. [ 67.992059][ T1468] loop2: detected capacity change from 0 to 40427 [ 68.103836][ T1468] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 68.111677][ T1468] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 68.127286][ T1468] F2FS-fs (loop2): invalid crc value [ 68.151214][ T30] audit: type=1400 audit(1786396688.757:285): avc: denied { create } for pid=1477 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.237116][ T1468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.293597][ T1468] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 68.300808][ T1468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.329165][ T30] audit: type=1400 audit(1786396688.757:286): avc: denied { ioctl } for pid=1477 comm="syz.3.413" path="socket:[18405]" dev="sockfs" ino=18405 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.826436][ T1504] Illegal XDP return value 4294967294, expect packet loss! [ 68.874136][ T997] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 68.881254][ T42] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 69.141188][ T997] usb 4-1: Using ep0 maxpacket: 32 [ 69.246147][ T1531] loop2: detected capacity change from 0 to 40427 [ 69.291203][ T997] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.305533][ T1531] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 69.313531][ T1531] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 69.313550][ T997] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.332350][ T1531] F2FS-fs (loop2): invalid crc value [ 69.354183][ T997] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 69.371386][ T1531] F2FS-fs (loop2): Found nat_bits in checkpoint [ 69.392887][ T997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.411547][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.425350][ T997] usb 4-1: config 0 descriptor?? [ 69.440781][ T1531] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 69.447941][ T1531] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 69.481685][ T997] hub 4-1:0.0: USB hub found [ 69.621238][ T42] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 69.643424][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.662122][ T42] usb 5-1: Product: syz [ 69.666428][ T42] usb 5-1: Manufacturer: syz [ 69.671189][ T42] usb 5-1: SerialNumber: syz [ 69.714510][ T42] pl2303 5-1:1.0: required endpoints missing [ 69.756995][ T1489] loop3: detected capacity change from 0 to 128 [ 69.920701][ T42] usb 5-1: USB disconnect, device number 5 [ 69.927058][ T1489] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.941346][ T1489] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.011172][ T997] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 70.115365][ T1551] device syzkaller0 entered promiscuous mode [ 70.121609][ T997] usbhid 4-1:0.0: can't add hid device: -71 [ 70.127578][ T997] usbhid: probe of 4-1:0.0 failed with error -71 [ 70.141238][ T1551] tipc: Started in network mode [ 70.156587][ T1551] tipc: Node identity c26ff3b24b92, cluster identity 4711 [ 70.164633][ T1551] tipc: Enabled bearer , priority 0 [ 70.174283][ T1551] tipc: Resetting bearer [ 70.181905][ T1550] tipc: Resetting bearer [ 70.191026][ T1550] tipc: Disabling bearer [ 70.197826][ T997] usb 4-1: USB disconnect, device number 5 [ 70.364560][ T1563] loop2: detected capacity change from 0 to 40427 [ 70.385162][ T1565] loop1: detected capacity change from 0 to 40427 [ 70.411914][ T1565] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 70.419731][ T1565] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 70.428800][ T1565] F2FS-fs (loop1): invalid crc value [ 70.434599][ T1563] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 70.442422][ T1563] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 70.451464][ T1563] F2FS-fs (loop2): invalid crc value [ 70.459028][ T1565] F2FS-fs (loop1): Found nat_bits in checkpoint [ 70.461040][ T1563] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.512005][ T1563] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 70.512811][ T1565] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 70.519207][ T1563] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 70.526997][ T1565] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 70.597737][ T30] audit: type=1400 audit(1786396691.187:287): avc: denied { setopt } for pid=1574 comm="syz.4.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.707629][ T30] audit: type=1400 audit(1786396691.317:288): avc: denied { getopt } for pid=1579 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.407137][ T1580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 71.496776][ T1580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 71.687965][ T1590] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 71.856912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 71.872111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.915526][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 71.924611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.934889][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.945941][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.954694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.968215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.996844][ T1606] device syzkaller0 entered promiscuous mode [ 72.013610][ T1611] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.027309][ T1606] tipc: Enabled bearer , priority 0 [ 72.039509][ T1611] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 72.051681][ T1605] tipc: Resetting bearer [ 72.069514][ T1605] tipc: Disabling bearer [ 72.091174][ T494] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 72.122720][ T1616] loop3: detected capacity change from 0 to 8192 [ 72.221720][ T30] audit: type=1400 audit(1786396692.757:289): avc: denied { execute } for pid=1621 comm="syz.2.468" path="/93/cgroup.controllers" dev="tmpfs" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.253331][ T1616] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.283103][ T1620] loop1: detected capacity change from 0 to 40427 [ 72.287083][ T1622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 72.355930][ T1620] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 72.363799][ T1620] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 72.373510][ T1620] F2FS-fs (loop1): invalid crc value [ 72.393622][ T1632] device syzkaller0 entered promiscuous mode [ 72.403644][ T1620] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.445396][ T1620] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 72.451613][ T494] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.454289][ T1620] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 72.491839][ T1641] loop3: detected capacity change from 0 to 512 [ 72.597635][ T1641] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 72.613241][ T1641] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.821527][ T494] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 72.884834][ T1641] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #2: comm syz.3.476: corrupted inode contents [ 72.924215][ T494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.031338][ T1641] EXT4-fs error (device loop3): ext4_dirty_inode:6108: inode #2: comm syz.3.476: mark_inode_dirty error [ 73.051548][ T1641] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #2: comm syz.3.476: corrupted inode contents [ 73.079170][ T1656] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #2: comm syz.3.476: corrupted inode contents [ 73.090566][ T494] usb 5-1: Product: syz [ 73.095134][ T494] usb 5-1: Manufacturer: syz [ 73.099869][ T494] usb 5-1: SerialNumber: syz [ 73.107495][ T1656] EXT4-fs error (device loop3): ext4_dirty_inode:6108: inode #2: comm syz.3.476: mark_inode_dirty error [ 73.141777][ T494] pl2303 5-1:1.0: required endpoints missing [ 73.156329][ T1656] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #2: comm syz.3.476: corrupted inode contents [ 73.170951][ T1660] loop0: detected capacity change from 0 to 8192 [ 73.190059][ T1666] loop2: detected capacity change from 0 to 512 [ 73.228304][ T1666] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.235042][ T1660] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.306284][ T1666] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.487: invalid indirect mapped block 4294967295 (level 1) [ 73.320469][ T1673] device syzkaller0 entered promiscuous mode [ 73.329442][ T1666] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.487: invalid indirect mapped block 4294967295 (level 1) [ 73.345753][ T494] usb 5-1: USB disconnect, device number 6 [ 73.359535][ T1666] EXT4-fs (loop2): 2 truncates cleaned up [ 73.365883][ T1666] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 73.472811][ T1666] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz.2.487: Invalid inode table block 3296220840 in block_group 0 [ 73.488364][ T1666] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz.2.487: Invalid inode table block 3296220840 in block_group 0 [ 73.502672][ T1666] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 73.515457][ T1666] EXT4-fs error (device loop2): ext4_dirty_inode:6108: inode #12: comm syz.2.487: mark_inode_dirty error [ 73.583814][ T837] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm kworker/u4:5: Invalid inode table block 3296220840 in block_group 0 [ 73.755291][ T1687] loop1: detected capacity change from 0 to 40427 [ 73.768037][ T30] audit: type=1400 audit(1786396694.377:290): avc: denied { write } for pid=1692 comm="syz.0.499" name="h" dev="configfs" ino=15303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.790513][ T30] audit: type=1400 audit(1786396694.377:291): avc: denied { add_name } for pid=1692 comm="syz.0.499" name="yuyv" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.827700][ T1687] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 73.835562][ T1687] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 73.844784][ T58] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 73.844932][ T1687] F2FS-fs (loop1): invalid crc value [ 73.871760][ T1687] F2FS-fs (loop1): Found nat_bits in checkpoint [ 73.909717][ T1704] device syzkaller0 entered promiscuous mode [ 73.931259][ T1687] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 73.938377][ T1687] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 73.938916][ T30] audit: type=1400 audit(1786396694.547:292): avc: denied { create } for pid=1708 comm="syz.4.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.980820][ T1711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 73.989822][ T30] audit: type=1400 audit(1786396694.587:293): avc: denied { setopt } for pid=1708 comm="syz.4.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.995184][ T1711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 74.018655][ T1704] tipc: Enabled bearer , priority 0 [ 74.032647][ T1703] tipc: Resetting bearer [ 74.039947][ T1703] tipc: Disabling bearer [ 75.463770][ T1736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 75.601176][ T30] audit: type=1400 audit(1786396696.207:294): avc: denied { create } for pid=1740 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.661169][ T26] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 75.736186][ T1747] device syzkaller0 entered promiscuous mode [ 75.791205][ T58] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 75.801988][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.814254][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.824097][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.837922][ T58] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.847195][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.920736][ T58] usb 4-1: config 0 descriptor?? [ 75.952495][ T1749] loop2: detected capacity change from 0 to 40427 [ 76.035294][ T1749] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 76.043179][ T1749] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 76.052795][ T1749] F2FS-fs (loop2): invalid crc value [ 76.072404][ T1749] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.110988][ T1749] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 76.118139][ T1749] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 76.184837][ T1681] loop3: detected capacity change from 0 to 256 [ 76.251206][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.264445][ T1681] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.301353][ T1681] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 76.387391][ T1681] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 76.421650][ T26] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 76.700136][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.709180][ T26] usb 5-1: Product: syz [ 76.713821][ T26] usb 5-1: Manufacturer: syz [ 76.718563][ T26] usb 5-1: SerialNumber: syz [ 76.761854][ T26] pl2303 5-1:1.0: required endpoints missing [ 76.906173][ T58] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 76.922776][ T58] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 76.944006][ T58] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 76.963389][ T26] usb 5-1: USB disconnect, device number 7 [ 77.188546][ T58] usb 4-1: USB disconnect, device number 6 [ 77.212224][ T30] audit: type=1400 audit(1786396697.827:295): avc: denied { bind } for pid=1808 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.250503][ T30] audit: type=1400 audit(1786396697.847:296): avc: denied { accept } for pid=1808 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.310866][ T30] audit: type=1400 audit(1786396697.847:297): avc: denied { write } for pid=1808 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.370765][ T30] audit: type=1400 audit(1786396697.847:298): avc: denied { read } for pid=1808 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.431298][ T1811] loop1: detected capacity change from 0 to 40427 [ 77.471670][ T1811] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 77.479463][ T1811] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 77.489083][ T1811] F2FS-fs (loop1): invalid crc value [ 77.540626][ T1811] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.544072][ T30] audit: type=1400 audit(1786396698.157:299): avc: denied { create } for pid=1817 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.598831][ T1811] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 77.604160][ T1814] device syzkaller0 entered promiscuous mode [ 77.606071][ T1811] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 77.955440][ T1837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 78.415269][ T1842] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1842 comm=syz.0.554 [ 78.437616][ T1842] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=66 sclass=netlink_tcpdiag_socket pid=1842 comm=syz.0.554 [ 78.452884][ T1842] tun0: tun_chr_ioctl cmd 1074812118 [ 78.469501][ T1842] tun0: tun_chr_ioctl cmd 1074025681 [ 78.732842][ T1860] loop2: detected capacity change from 0 to 40427 [ 78.802224][ T1860] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 78.810101][ T1860] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 78.819118][ T1860] F2FS-fs (loop2): invalid crc value [ 78.838270][ T1860] F2FS-fs (loop2): Found nat_bits in checkpoint [ 78.851157][ T42] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 78.884790][ T1860] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 78.891944][ T1860] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 79.221401][ T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.401258][ T42] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 79.411890][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.497242][ T42] usb 2-1: Product: syz [ 79.503852][ T42] usb 2-1: Manufacturer: syz [ 79.508511][ T42] usb 2-1: SerialNumber: syz [ 79.527574][ T1891] device syzkaller0 entered promiscuous mode [ 79.542495][ T1891] tipc: Started in network mode [ 79.551713][ T42] pl2303 2-1:1.0: required endpoints missing [ 79.564637][ T1891] tipc: Node identity 4ae72074f401, cluster identity 4711 [ 79.589304][ T1891] tipc: Enabled bearer , priority 0 [ 79.609510][ T1891] tipc: Resetting bearer [ 79.637661][ T1888] tipc: Resetting bearer [ 79.644582][ T1888] tipc: Disabling bearer [ 79.753744][ T42] usb 2-1: USB disconnect, device number 8 [ 79.762517][ T1909] device syz_tun entered promiscuous mode [ 79.776109][ T1909] device vlan2 entered promiscuous mode [ 79.872571][ T1921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.588'. [ 80.005770][ T30] audit: type=1400 audit(1786396700.617:300): avc: denied { connect } for pid=1940 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.102250][ T1950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 80.140941][ T30] audit: type=1400 audit(1786396700.747:301): avc: denied { nlmsg_read } for pid=1953 comm="syz.4.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.162250][ T1954] netlink: 104 bytes leftover after parsing attributes in process `syz.4.604'. [ 80.180831][ T1956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 80.198286][ T1958] netlink: 32 bytes leftover after parsing attributes in process `syz.4.605'. [ 80.233265][ T1958] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1958 comm=syz.4.605 [ 80.246997][ T1958] netlink: 48 bytes leftover after parsing attributes in process `syz.4.605'. [ 80.400773][ T30] audit: type=1400 audit(1786396701.007:302): avc: denied { write } for pid=1979 comm="syz.1.615" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.502264][ T1987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 81.101176][ T58] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 81.312491][ T30] audit: type=1400 audit(1786396701.927:303): avc: denied { create } for pid=2030 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.340757][ T2027] loop0: detected capacity change from 0 to 40427 [ 81.347870][ T30] audit: type=1400 audit(1786396701.947:304): avc: denied { setopt } for pid=2030 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.386207][ T2027] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 81.394159][ T2027] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 81.412039][ T2027] F2FS-fs (loop0): invalid crc value [ 81.446988][ T2027] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.491176][ T2027] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 81.498322][ T2027] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 81.521236][ T58] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 81.530308][ T58] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 81.541221][ T58] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 81.641256][ T58] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 81.649163][ T58] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 81.785055][ T2054] loop1: detected capacity change from 0 to 40427 [ 81.811599][ T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 81.811690][ T2054] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 81.827182][ T2054] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 81.837153][ T2054] F2FS-fs (loop1): invalid crc value [ 81.947013][ T2054] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.982266][ T58] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 82.129077][ T2054] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 82.136333][ T2054] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 82.201225][ T58] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 82.210609][ T58] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 82.221765][ T58] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 83.531899][ T2074] netlink: 168 bytes leftover after parsing attributes in process `syz.0.652'. [ 83.673102][ T2076] loop4: detected capacity change from 0 to 40427 [ 83.691209][ T58] usb 4-1: string descriptor 0 read error: -71 [ 83.697485][ T58] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 83.706780][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.731243][ T58] usb 4-1: can't set config #168, error -71 [ 83.740994][ T58] usb 4-1: USB disconnect, device number 7 [ 83.762901][ T2076] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 83.770736][ T2076] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 83.779189][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.790811][ T2076] F2FS-fs (loop4): invalid crc value [ 83.852976][ T2076] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.861242][ T2086] loop0: detected capacity change from 0 to 40427 [ 83.870104][ T2092] input: syz1 as /devices/virtual/input/input8 [ 83.888944][ T2086] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 83.896828][ T2086] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 83.912934][ T2086] F2FS-fs (loop0): invalid crc value [ 83.934617][ T2086] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.946255][ T2100] netlink: 32 bytes leftover after parsing attributes in process `syz.3.660'. [ 83.968877][ T2076] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 83.976045][ T2076] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.991177][ T6] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 84.001004][ T2086] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 84.008794][ T2086] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 84.045814][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.066534][ T6] usb 3-1: Product: syz [ 84.081192][ T6] usb 3-1: Manufacturer: syz [ 84.085961][ T6] usb 3-1: SerialNumber: syz [ 84.221984][ T2105] loop3: detected capacity change from 0 to 40427 [ 85.184156][ T2105] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 85.192868][ T2105] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 85.204496][ T2105] F2FS-fs (loop3): invalid crc value [ 85.236308][ T2105] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.272074][ T6] usb 3-1: can't set config #1, error -71 [ 85.284923][ T6] usb 3-1: USB disconnect, device number 6 [ 85.292548][ T2105] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 85.300074][ T2105] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.008692][ T2129] tmpfs: Unknown parameter 'usrquota' [ 86.146360][ T30] audit: type=1400 audit(1786396706.757:305): avc: denied { search } for pid=2140 comm="syz.4.674" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 86.178558][ T2144] binder: 2142:2144 ioctl c0306201 200000000080 returned -14 [ 86.198637][ T2144] binder: 2142:2144 ioctl c0306201 2000000003c0 returned -14 [ 86.387762][ T2152] loop2: detected capacity change from 0 to 40427 [ 86.436351][ T2152] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 86.444203][ T2152] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 86.453356][ T2152] F2FS-fs (loop2): invalid crc value [ 86.492802][ T2152] F2FS-fs (loop2): Found nat_bits in checkpoint [ 86.515650][ T2154] capability: warning: `syz.1.675' uses 32-bit capabilities (legacy support in use) [ 86.659677][ T2167] loop3: detected capacity change from 0 to 40427 [ 86.672703][ T2152] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 86.679838][ T2152] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 86.778272][ T2167] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 86.786731][ T2167] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 86.834846][ T2167] F2FS-fs (loop3): invalid crc value [ 86.890191][ T2167] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.952921][ T2167] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 86.960016][ T2167] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 87.093234][ T30] audit: type=1400 audit(1786396707.707:306): avc: denied { unlink } for pid=2183 comm="syz.2.683" name="#1" dev="tmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 87.181215][ T6] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 87.239112][ T30] audit: type=1400 audit(1786396707.847:307): avc: denied { bind } for pid=2185 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.299184][ T2191] UDC core: couldn't find an available UDC or it's busy: -19 [ 87.373746][ T2199] device veth0 entered promiscuous mode [ 87.389865][ T2199] device veth0 left promiscuous mode [ 87.480355][ T2202] tipc: Started in network mode [ 87.491359][ T2202] tipc: Node identity 7f000001, cluster identity 4711 [ 87.519344][ T2200] loop0: detected capacity change from 0 to 40427 [ 87.532270][ T2202] tipc: Enabled bearer , priority 10 [ 87.564024][ T2202] netlink: 104 bytes leftover after parsing attributes in process `syz.3.687'. [ 87.604138][ T2200] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 87.612039][ T2200] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 87.621694][ T2200] F2FS-fs (loop0): invalid crc value [ 87.632600][ T2202] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 87.653114][ T2202] tipc: Enabled bearer , priority 10 [ 87.665794][ T2200] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.721433][ T6] usb 5-1: config 6 has an invalid interface number: 123 but max is 1 [ 87.730622][ T2200] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 87.737742][ T2200] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 87.747394][ T6] usb 5-1: config 6 has no interface number 1 [ 87.756869][ T6] usb 5-1: config 6 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 87.774254][ T6] usb 5-1: config 6 interface 0 altsetting 1 has an invalid endpoint with address 0x80, skipping [ 87.799855][ T2221] device syzkaller0 entered promiscuous mode [ 87.816162][ T6] usb 5-1: config 6 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 87.839126][ T2221] tipc: Enabled bearer , priority 0 [ 87.846100][ T6] usb 5-1: config 6 interface 0 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 87.887077][ T6] usb 5-1: config 6 interface 0 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 87.957667][ T2220] tipc: Resetting bearer [ 87.968363][ T2220] tipc: Disabling bearer [ 87.974334][ T6] usb 5-1: config 6 interface 0 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 32 [ 87.986809][ T6] usb 5-1: config 6 interface 0 altsetting 1 has an invalid endpoint with address 0x80, skipping [ 88.021134][ T6] usb 5-1: config 6 interface 0 altsetting 1 endpoint 0xB has invalid maxpacket 1088, setting to 64 [ 88.041243][ T6] usb 5-1: config 6 interface 123 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 88.062149][ T6] usb 5-1: config 6 interface 123 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 88.087122][ T6] usb 5-1: config 6 interface 123 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 88.223241][ T2233] loop0: detected capacity change from 0 to 40427 [ 88.229954][ T6] usb 5-1: config 6 interface 0 has no altsetting 0 [ 88.303947][ T2233] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 88.311867][ T2233] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 88.321541][ T2233] F2FS-fs (loop0): invalid crc value [ 88.352369][ T2233] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.421228][ T6] usb 5-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=65.d2 [ 88.440083][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.448432][ T6] usb 5-1: Product: syz [ 88.452766][ T6] usb 5-1: Manufacturer: syz [ 88.457374][ T6] usb 5-1: SerialNumber: syz [ 88.481507][ T2174] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 88.495465][ T2233] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 88.503227][ T2233] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.561465][ T2256] loop2: detected capacity change from 0 to 40427 [ 88.605485][ T2256] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 88.613337][ T2256] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 88.622961][ T2256] F2FS-fs (loop2): invalid crc value [ 88.742203][ T2256] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.791633][ T2256] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 88.799236][ T2256] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.854352][ T6] usb 5-1: USB disconnect, device number 8 [ 88.940314][ T331] tipc: Node number set to 2130706433 [ 88.978589][ T2265] device syzkaller0 entered promiscuous mode [ 88.992702][ T2265] tipc: Enabled bearer , priority 0 [ 89.017346][ T2264] tipc: Resetting bearer [ 89.040682][ T30] audit: type=1400 audit(1786396709.647:308): avc: denied { append } for pid=2273 comm="syz.0.719" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.069681][ T2264] tipc: Disabling bearer [ 89.089622][ T2277] device syzkaller0 entered promiscuous mode [ 89.107471][ T2277] tipc: Enabled bearer , priority 0 [ 89.151912][ T2277] tipc: Resetting bearer [ 89.182468][ T2276] tipc: Resetting bearer [ 89.193345][ T2276] tipc: Disabling bearer [ 89.358020][ T2309] device syzkaller0 entered promiscuous mode [ 89.371532][ T2309] tipc: Started in network mode [ 89.376637][ T2309] tipc: Node identity 060b6afc76ce, cluster identity 4711 [ 89.383934][ T30] audit: type=1400 audit(1786396709.987:309): avc: denied { write } for pid=2310 comm="syz.3.735" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 89.408533][ T2309] tipc: Enabled bearer , priority 0 [ 89.432035][ T2307] tipc: Resetting bearer [ 89.460497][ T2307] tipc: Disabling bearer [ 89.490236][ T2321] input: syz1 as /devices/virtual/input/input9 [ 89.499119][ T2319] device syzkaller0 entered promiscuous mode [ 89.510540][ T2319] tipc: Enabled bearer , priority 0 [ 89.519836][ T2319] tipc: Resetting bearer [ 89.526527][ T2318] tipc: Resetting bearer [ 89.533465][ T2318] tipc: Disabling bearer [ 89.599522][ T30] audit: type=1400 audit(1786396710.207:310): avc: denied { ioctl } for pid=2328 comm="syz.0.743" path="socket:[23883]" dev="sockfs" ino=23883 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.599721][ T2329] device syzkaller0 entered promiscuous mode [ 89.641339][ T2331] binder: 2330:2331 ioctl c0046209 0 returned -22 [ 89.846313][ T30] audit: type=1400 audit(1786396710.457:311): avc: denied { setopt } for pid=2351 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.887396][ T2355] binder: 2354:2355 ioctl c0046209 0 returned -22 [ 89.902068][ T30] audit: type=1400 audit(1786396710.507:312): avc: denied { mounton } for pid=2340 comm="syz.0.749" path="/148/tracing/dynamic_events" dev="tracefs" ino=13130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 89.907069][ T2357] device syzkaller0 entered promiscuous mode [ 89.936352][ T2357] tipc: Enabled bearer , priority 0 [ 89.955261][ T2357] tipc: Resetting bearer [ 89.964727][ T2356] tipc: Resetting bearer [ 89.971831][ T2356] tipc: Disabling bearer [ 90.002102][ T30] audit: type=1400 audit(1786396710.617:313): avc: denied { listen } for pid=2362 comm="syz.0.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.049690][ T2365] loop3: detected capacity change from 0 to 7 [ 90.200798][ T2367] syz.0.760 (2367) used greatest stack depth: 20256 bytes left [ 90.209856][ T2369] loop2: detected capacity change from 0 to 40427 [ 90.217034][ T6] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 90.257226][ T2369] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 90.265360][ T2369] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 90.274858][ T2369] F2FS-fs (loop2): invalid crc value [ 90.297882][ T30] audit: type=1400 audit(1786396710.907:314): avc: denied { write } for pid=2370 comm="syz.0.763" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 90.305044][ T2369] F2FS-fs (loop2): Found nat_bits in checkpoint [ 90.361512][ T2369] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 90.368735][ T2369] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 90.390988][ T2382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.765'. [ 90.661232][ T6] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 90.675795][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.707168][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.727795][ T2375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.763'. [ 90.730239][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 90.750808][ T2400] binder: 2399:2400 ioctl c0046209 0 returned -22 [ 90.841236][ T6] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 90.855119][ T6] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 90.868286][ T2406] device veth0 entered promiscuous mode [ 90.878482][ T6] usb 5-1: Manufacturer: syz [ 90.889558][ T6] usb 5-1: config 0 descriptor?? [ 91.183485][ T2406] device veth0 left promiscuous mode [ 91.233018][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 91.233035][ T30] audit: type=1400 audit(1786396711.847:319): avc: denied { name_bind } for pid=2421 comm="syz.2.780" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 91.372160][ T6] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 91.379457][ T6] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 91.389799][ T6] appleir 0003:05AC:8243.0005: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 91.723380][ T42] usb 5-1: USB disconnect, device number 9 [ 91.787425][ T2461] device syzkaller0 entered promiscuous mode [ 91.803452][ T2461] tipc: Enabled bearer , priority 0 [ 91.822126][ T2461] tipc: Resetting bearer [ 91.841959][ T2460] tipc: Resetting bearer [ 91.862029][ T2460] tipc: Disabling bearer [ 91.961950][ T2471] device syzkaller0 entered promiscuous mode [ 91.977755][ T2471] tipc: Enabled bearer , priority 0 [ 91.988508][ T2473] device syzkaller0 entered promiscuous mode [ 91.996849][ T2471] tipc: Resetting bearer [ 92.004351][ T2473] tipc: Enabled bearer , priority 0 [ 92.011292][ T2470] tipc: Resetting bearer [ 92.018333][ T2470] tipc: Disabling bearer [ 92.026943][ T2473] tipc: Resetting bearer [ 92.033456][ T2472] tipc: Resetting bearer [ 92.040204][ T2472] tipc: Disabling bearer [ 92.156967][ T2488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 92.176410][ T2490] device syzkaller0 entered promiscuous mode [ 92.205842][ T2490] tipc: Enabled bearer , priority 0 [ 92.220966][ T8] blk_update_request: I/O error, dev sda, sector 1163574 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 92.232837][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 145447) [ 92.244868][ T8] Buffer I/O error on device sda1, logical block 145408 [ 92.251979][ T8] blk_update_request: I/O error, dev sda, sector 1171734 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 92.263412][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 146467) [ 92.275278][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 146470) [ 92.275454][ T2070] Buffer I/O error on device sda1, logical block 146428 [ 92.287180][ T8] Buffer I/O error on device sda1, logical block 146429 [ 92.300903][ T8] Buffer I/O error on device sda1, logical block 146430 [ 92.308002][ T8] Buffer I/O error on device sda1, logical block 146431 [ 92.315163][ T8] blk_update_request: I/O error, dev sda, sector 1175734 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 92.326590][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 146982) [ 92.338408][ T8] Buffer I/O error on device sda1, logical block 146928 [ 92.345445][ T8] Buffer I/O error on device sda1, logical block 146929 [ 92.352590][ T8] Buffer I/O error on device sda1, logical block 146930 [ 92.359569][ T8] Buffer I/O error on device sda1, logical block 146931 [ 92.366608][ T8] Buffer I/O error on device sda1, logical block 146932 [ 92.373671][ T8] blk_update_request: I/O error, dev sda, sector 1179958 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 92.385028][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 147495) [ 92.396680][ T8] blk_update_request: I/O error, dev sda, sector 1188118 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 92.408033][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 148518) [ 92.419693][ T8] blk_update_request: I/O error, dev sda, sector 1192134 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 92.431085][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 149030) [ 92.442773][ T8] blk_update_request: I/O error, dev sda, sector 1196342 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 92.454127][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 149543) [ 92.465773][ T8] blk_update_request: I/O error, dev sda, sector 1204502 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 92.477127][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 150564) [ 92.488757][ T8] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 150566) [ 92.500421][ T8] blk_update_request: I/O error, dev sda, sector 1208454 op 0x1:(WRITE) flags 0x0 phys_seg 12 prio class 0 [ 92.511976][ T8] blk_update_request: I/O error, dev sda, sector 1212726 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 92.530275][ T2487] tipc: Resetting bearer [ 92.558151][ T2487] tipc: Disabling bearer [ 92.558185][ T2511] input: syz1 as /devices/virtual/input/input10 [ 92.573057][ T2491] Buffer I/O error on dev sda1, logical block 130, lost async page write [ 92.573149][ T64] Aborting journal on device sda1-8. [ 92.581887][ T2491] Buffer I/O error on dev sda1, logical block 172, lost async page write [ 92.588523][ T43] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 92.596205][ T2491] Buffer I/O error on dev sda1, logical block 173, lost async page write [ 92.604263][ T64] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 92.614358][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 92.632719][ T54] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 92.640948][ T277] EXT4-fs (sda1): I/O error while writing superblock [ 92.647708][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 92.654250][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 92.665520][ T54] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 92.673855][ T277] EXT4-fs (sda1): I/O error while writing superblock [ 92.680619][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 92.692571][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 92.720406][ T54] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 92.731029][ T277] EXT4-fs (sda1): I/O error while writing superblock [ 92.739777][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 92.746359][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 92.757671][ T54] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 92.765960][ T277] EXT4-fs (sda1): I/O error while writing superblock [ 92.772773][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 92.779343][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 92.790804][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 92.793717][ T2491] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 92.797580][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 92.814695][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 92.821233][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 92.832466][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 92.843683][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 92.855068][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 93.221230][ T2539] device syzkaller0 entered promiscuous mode [ 93.234121][ T2539] tipc: Enabled bearer , priority 0 [ 93.242556][ T2538] tipc: Resetting bearer [ 93.253343][ T2538] tipc: Disabling bearer [ 93.270123][ T30] audit: type=1400 audit(1786396713.877:320): avc: denied { ioctl } for pid=2542 comm="syz.4.833" path="/154/mnt_trace/trace_pipe" dev="tracefs" ino=13069 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 93.317057][ T30] audit: type=1400 audit(1786396713.917:321): avc: denied { read } for pid=288 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 93.360831][ T30] audit: type=1400 audit(1786396713.917:322): avc: denied { open } for pid=288 comm="syz-executor" path="/154/mnt_trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 93.411139][ T30] audit: type=1400 audit(1786396713.917:323): avc: denied { getattr } for pid=288 comm="syz-executor" path="/154/mnt_trace/uprobe_profile" dev="tracefs" ino=13132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 93.496592][ T30] audit: type=1400 audit(1786396713.927:324): avc: denied { write } for pid=288 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 93.525883][ T30] audit: type=1400 audit(1786396713.927:325): avc: denied { setattr } for pid=288 comm="syz-executor" path="/154/mnt_trace/uprobe_profile" dev="tracefs" ino=13132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 94.121188][ T307] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 94.491662][ T307] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.503563][ T30] audit: type=1400 audit(1786396715.117:326): avc: denied { write } for pid=2592 comm="syz.0.855" name="tcp6" dev="proc" ino=4026532576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 94.721778][ T307] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 94.753921][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.855901][ T307] usb 3-1: Product: syz [ 94.860138][ T307] usb 3-1: Manufacturer: syz [ 94.887306][ T307] usb 3-1: SerialNumber: syz [ 94.991749][ T307] pl2303 3-1:1.0: required endpoints missing [ 95.021932][ T30] audit: type=1400 audit(1786396715.637:327): avc: denied { map } for pid=2607 comm="syz.0.861" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.220039][ T307] usb 3-1: USB disconnect, device number 7 [ 95.309842][ T2627] process 'syz.1.869' launched './file0' with NULL argv: empty string added [ 95.345574][ T30] audit: type=1400 audit(1786396715.957:328): avc: denied { execute_no_trans } for pid=2626 comm="syz.1.869" path="/212/file0" dev="tmpfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.676371][ T2673] device syzkaller0 entered promiscuous mode [ 96.713225][ T2673] tipc: Enabled bearer , priority 0 [ 96.759405][ T2673] tipc: Resetting bearer [ 96.785778][ T2672] tipc: Resetting bearer [ 96.819910][ T2672] tipc: Disabling bearer [ 96.845653][ T2675] device syzkaller0 entered promiscuous mode [ 96.971178][ T58] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 96.978756][ T6] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 97.221160][ T307] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 97.231320][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 97.351265][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.360970][ T6] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 97.370920][ T58] usb 4-1: config 0 has no interfaces? [ 97.377811][ T58] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 97.387245][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.395509][ T6] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 97.405240][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.413576][ T58] usb 4-1: config 0 descriptor?? [ 97.480544][ T101] udevd[101]: worker [312] terminated by signal 7 (Bus error) [ 97.488918][ T101] udevd[101]: worker [312] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 97.581248][ T307] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.654673][ T6] usb 4-1: USB disconnect, device number 8 [ 97.669310][ T101] udevd[101]: worker [556] terminated by signal 7 (Bus error) [ 97.677805][ T2654] EXT4-fs error: 169 callbacks suppressed [ 97.677823][ T2654] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.879: Detected aborted journal [ 97.695198][ T101] udevd[101]: worker [556] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0' [ 97.707002][ T2654] EXT4-fs: 164 callbacks suppressed [ 97.707016][ T2654] EXT4-fs (sda1): Remounting filesystem read-only [ 97.721930][ T2654] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.879: Detected aborted journal [ 97.733058][ T2654] EXT4-fs (sda1): Remounting filesystem read-only [ 97.739638][ T2654] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.879: Detected aborted journal [ 97.750860][ T101] udevd[101]: worker [311] terminated by signal 7 (Bus error) [ 97.751606][ T307] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 97.759658][ T101] udevd[101]: worker [311] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 97.777538][ T2654] EXT4-fs (sda1): Remounting filesystem read-only [ 97.778665][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.784310][ T2654] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.879: Detected aborted journal [ 97.811436][ T307] usb 2-1: Product: syz [ 97.815731][ T307] usb 2-1: Manufacturer: syz [ 97.819256][ T2654] EXT4-fs (sda1): Remounting filesystem read-only [ 97.826822][ T307] usb 2-1: SerialNumber: syz [ 97.828365][ T2654] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.879: Detected aborted journal [ 97.833712][ T2686] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.893: Detected aborted journal [ 97.842758][ T2654] EXT4-fs (sda1): Remounting filesystem read-only [ 97.860440][ T2654] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.879: Detected aborted journal [ 97.872164][ T2654] EXT4-fs (sda1): Remounting filesystem read-only [ 97.881762][ T2654] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.879: Detected aborted journal [ 97.891239][ T2686] EXT4-fs (sda1): Remounting filesystem read-only [ 97.893052][ T2654] EXT4-fs (sda1): Remounting filesystem read-only [ 97.904245][ T307] pl2303 2-1:1.0: required endpoints missing [ 97.910293][ T2654] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.879: Detected aborted journal [ 97.927285][ T363] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 97.933669][ T2686] EXT4-fs (sda1): Remounting filesystem read-only [ 97.938993][ T2654] EXT4-fs (sda1): Remounting filesystem read-only [ 97.955887][ T2687] binder: BINDER_SET_CONTEXT_MGR already set [ 97.962253][ T2687] binder: 2686:2687 ioctl 4018620d 200000004a80 returned -16 [ 97.972555][ T307] usb 3-1: USB disconnect, device number 8 [ 98.105039][ T6] usb 2-1: USB disconnect, device number 9 [ 98.791976][ T2731] loop1: detected capacity change from 0 to 40427 [ 98.831783][ T2731] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 98.839562][ T2731] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 98.849069][ T2731] F2FS-fs (loop1): invalid crc value [ 98.870212][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 98.870228][ T30] audit: type=1400 audit(1786396719.477:330): avc: denied { write } for pid=2733 comm="syz.3.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.905587][ T2731] F2FS-fs (loop1): Found nat_bits in checkpoint [ 98.949438][ T2731] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 98.956584][ T2731] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 98.971131][ T30] audit: type=1400 audit(1786396719.507:331): avc: denied { write } for pid=2733 comm="syz.3.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.197051][ T2751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2751 comm=syz.0.919 [ 99.501177][ T494] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 99.577953][ T2765] loop1: detected capacity change from 0 to 40427 [ 99.642510][ T2765] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 99.650297][ T2765] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 99.659877][ T2765] F2FS-fs (loop1): invalid crc value [ 99.684795][ T2765] F2FS-fs (loop1): Found nat_bits in checkpoint [ 99.732553][ T2765] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 99.739828][ T2765] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.871197][ T494] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.889093][ T494] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 99.911152][ T494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.969261][ T101] udevd[101]: worker [363] terminated by signal 7 (Bus error) [ 99.976949][ T101] udevd[101]: worker [363] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 100.017566][ T101] udevd[101]: worker [362] terminated by signal 7 (Bus error) [ 100.029806][ T101] udevd[101]: worker [362] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0' [ 100.044907][ T2784] input: syz0 as /devices/virtual/input/input11 [ 100.071158][ T307] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 100.166916][ T58] usb 3-1: USB disconnect, device number 9 [ 100.461506][ T307] usb 4-1: not running at top speed; connect to a high speed hub [ 100.572084][ T2793] loop1: detected capacity change from 0 to 1024 [ 100.606148][ T2793] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 100.637221][ T2793] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #3: block 5: comm syz.1.934: lblock 5 mapped to illegal pblock 5 (length 1) [ 100.651686][ T2793] Quota error (device loop1): write_blk: dquota write failed [ 100.659138][ T2793] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 100.669163][ T2793] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 100.679752][ T2793] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.934: Failed to acquire dquot type 0 [ 100.692088][ T2793] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 5: comm syz.1.934: lblock 5 mapped to illegal pblock 5 (length 1) [ 100.707664][ T2793] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 100.717781][ T2793] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.934: Failed to acquire dquot type 0 [ 100.729495][ T2793] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.934: Freeing blocks not in datazone - block = 0, count = 4096 [ 100.743538][ T2793] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 5: comm syz.1.934: lblock 5 mapped to illegal pblock 5 (length 1) [ 100.758310][ T2793] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 100.768387][ T2793] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.934: Failed to acquire dquot type 0 [ 100.780154][ T2793] EXT4-fs (loop1): 1 orphan inode deleted [ 100.786003][ T2793] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,min_batch_time=0x0000000000000008,data_err=ignore,user_xattr,nodiscard,usrjquota=./file0,data_err=ignore,,errors=continue. Quota mode: writeback. [ 100.821251][ T307] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 100.849306][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.883610][ T307] usb 4-1: Product: syz [ 100.887857][ T307] usb 4-1: Manufacturer: syz [ 100.910101][ T307] usb 4-1: SerialNumber: syz [ 100.948645][ T2801] binder: 2800:2801 ioctl 4018620d 0 returned -22 [ 100.963123][ T2801] binder: 2800:2801 ioctl c0306201 0 returned -14 [ 101.042024][ T2806] device syzkaller0 entered promiscuous mode [ 101.062956][ T2806] tipc: Enabled bearer , priority 0 [ 101.082880][ T2806] tipc: Resetting bearer [ 101.092624][ T2805] tipc: Resetting bearer [ 101.109936][ T2805] tipc: Disabling bearer [ 101.226484][ T2809] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 5: comm syz.1.934: lblock 5 mapped to illegal pblock 5 (length 1) [ 101.251595][ T2809] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 101.261733][ T2809] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.934: Failed to acquire dquot type 0 [ 101.301646][ T2807] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.934: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 101.324302][ T30] audit: type=1400 audit(1786396721.937:332): avc: denied { setattr } for pid=2792 comm="syz.1.934" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 101.689208][ T30] audit: type=1400 audit(1786396722.297:333): avc: denied { setopt } for pid=2813 comm="syz.2.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.691179][ T494] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 102.790763][ T58] usb 4-1: USB disconnect, device number 9 [ 102.815843][ T2846] EXT4-fs error: 162 callbacks suppressed [ 102.815856][ T2846] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 102.833975][ T2846] EXT4-fs: 144 callbacks suppressed [ 102.833991][ T2846] EXT4-fs (sda1): Remounting filesystem read-only [ 102.846891][ T2847] loop3: detected capacity change from 0 to 16 [ 102.905826][ T2847] erofs: (device loop3): mounted with root inode @ nid 36. [ 102.928838][ T2846] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 102.940614][ T2846] EXT4-fs (sda1): Remounting filesystem read-only [ 102.947977][ T2846] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 102.959083][ T2846] EXT4-fs (sda1): Remounting filesystem read-only [ 102.965735][ T2846] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 102.976895][ T2846] EXT4-fs (sda1): Remounting filesystem read-only [ 102.983514][ T2846] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 102.994574][ T2846] EXT4-fs (sda1): Remounting filesystem read-only [ 103.001656][ T2846] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 103.013255][ T2846] EXT4-fs (sda1): Remounting filesystem read-only [ 103.021715][ T2846] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 103.033070][ T2846] EXT4-fs (sda1): Remounting filesystem read-only [ 103.039620][ T2846] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 103.050897][ T2846] EXT4-fs (sda1): Remounting filesystem read-only [ 103.051527][ T494] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.059025][ T2846] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 103.078844][ T2846] EXT4-fs (sda1): Remounting filesystem read-only [ 103.085722][ T2846] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 103.097247][ T2846] EXT4-fs (sda1): Remounting filesystem read-only [ 103.241204][ T494] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 103.250445][ T494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.258889][ T494] usb 2-1: Product: syz [ 103.269832][ T494] usb 2-1: Manufacturer: syz [ 103.275295][ T494] usb 2-1: SerialNumber: syz [ 103.321726][ T494] pl2303 2-1:1.0: required endpoints missing [ 103.526100][ T6] usb 2-1: USB disconnect, device number 10 [ 103.551145][ T58] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 103.631158][ T997] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 103.931295][ T58] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.021196][ T997] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 104.048176][ T997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.059995][ T997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.070721][ T997] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 104.093295][ T2854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 104.104051][ T2854] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.113715][ T2854] device bridge_slave_1 left promiscuous mode [ 104.119817][ T2854] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.131253][ T58] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 104.140562][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.150961][ T58] usb 4-1: Product: syz [ 104.162494][ T58] usb 4-1: Manufacturer: syz [ 104.167150][ T58] usb 4-1: SerialNumber: syz [ 104.172050][ T997] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 104.188744][ T997] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 104.201708][ T997] usb 3-1: Manufacturer: syz [ 104.213098][ T997] usb 3-1: config 0 descriptor?? [ 104.241751][ T58] pl2303 4-1:1.0: required endpoints missing [ 104.382341][ T2861] device syzkaller0 entered promiscuous mode [ 104.444497][ T494] usb 4-1: USB disconnect, device number 10 [ 104.454268][ T2863] xt_TPROXY: Can be used only with -p tcp or -p udp [ 105.195657][ T2869] loop3: detected capacity change from 0 to 512 [ 105.267213][ T2869] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 105.296207][ T2874] loop2: detected capacity change from 0 to 512 [ 105.336546][ T2869] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 105.367787][ T2874] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.386655][ T2876] loop1: detected capacity change from 0 to 2048 [ 105.401215][ T2869] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 105.412723][ T2874] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.443716][ T2874] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.962: bg 0: block 64: padding at end of block bitmap is not set [ 105.458643][ T2869] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 105.468294][ T2869] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 105.486350][ T2869] EXT4-fs (loop3): failed to initialize system zone (-117) [ 105.494679][ T2874] __quota_error: 1 callbacks suppressed [ 105.494700][ T2874] Quota error (device loop2): write_blk: dquota write failed [ 105.514261][ T2869] EXT4-fs (loop3): mount failed [ 105.517928][ T2874] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 105.529598][ T2874] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.962: Failed to acquire dquot type 0 [ 105.541672][ T2874] EXT4-fs (loop2): 1 truncate cleaned up [ 105.549006][ T2874] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,data=writeback,inlinecrypt,grpjquota=,noload,delalloc,nobarrier,nobarrier,sysvgroups,max_dir_size_kb=0x000000000000000f,,errors=continue. Quota mode: writeback. [ 105.591210][ T997] usbhid 3-1:0.0: can't add hid device: -71 [ 105.597299][ T997] usbhid: probe of 3-1:0.0 failed with error -71 [ 105.608187][ T2876] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.623569][ T997] usb 3-1: USB disconnect, device number 10 [ 105.629656][ T2876] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.669898][ T2874] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 105.679720][ T30] audit: type=1400 audit(1786396726.277:335): avc: denied { execute } for pid=2873 comm="syz.2.962" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.733675][ T2874] Quota error (device loop2): write_blk: dquota write failed [ 105.741885][ T2874] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 105.753119][ T2874] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.962: Failed to acquire dquot type 0 [ 105.779056][ T2874] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-28, ino=3). Please run e2fsck to fix. [ 105.835394][ T2887] loop1: detected capacity change from 0 to 8192 [ 105.865791][ T289] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 13: comm syz-executor: path /180/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=0 [ 105.892611][ T2887] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.960484][ T289] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 106.012770][ T289] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 106.263607][ T2070] tipc: Left network mode [ 106.645052][ T2906] loop1: detected capacity change from 0 to 1024 [ 106.691406][ T2906] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 106.779423][ T2906] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 106.789972][ T2070] device bridge_slave_1 left promiscuous mode [ 106.806178][ T2070] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.865280][ T2070] device bridge_slave_0 left promiscuous mode [ 106.889053][ T2070] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.903923][ T2070] device veth1_macvtap left promiscuous mode [ 106.910381][ T2070] device veth0_vlan left promiscuous mode [ 108.165664][ T2915] loop1: detected capacity change from 0 to 4096 [ 108.262099][ T2915] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.282569][ T101] EXT4-fs error: 119 callbacks suppressed [ 108.282588][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 108.301429][ T2914] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.975: Detected aborted journal [ 108.321295][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 108.333436][ T2914] EXT4-fs: 98 callbacks suppressed [ 108.333449][ T2914] EXT4-fs (sda1): Remounting filesystem read-only [ 108.361337][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 108.392287][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 108.409841][ T2922] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0 [ 108.422179][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 108.441173][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 108.447676][ T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 108.461350][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 108.491159][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 108.501721][ T2923] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.977: Detected aborted journal [ 108.534673][ T2924] EXT4-fs (sda1): Remounting filesystem read-only [ 108.548713][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 108.555732][ T2923] EXT4-fs (sda1): Remounting filesystem read-only [ 108.563572][ T2924] EXT4-fs (sda1): Remounting filesystem read-only [ 108.578876][ T2923] EXT4-fs (sda1): Remounting filesystem read-only [ 108.629565][ T277] EXT4-fs (sda1): Remounting filesystem read-only [ 108.645563][ T2930] EXT4-fs (sda1): Remounting filesystem read-only [ 108.692453][ T30] audit: type=1400 audit(1786396729.307:336): avc: denied { mount } for pid=2932 comm="syz.0.982" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 108.983474][ T2070] tipc: Left network mode [ 109.528014][ T30] audit: type=1400 audit(1786396730.137:337): avc: denied { setopt } for pid=2947 comm="syz.1.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 109.652651][ T2070] device bridge_slave_1 left promiscuous mode [ 109.658875][ T2070] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.681587][ T2070] device bridge_slave_0 left promiscuous mode [ 109.687793][ T2070] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.709193][ T2070] device veth1_macvtap left promiscuous mode [ 109.717149][ T2070] device veth0_vlan left promiscuous mode SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: repeatedly failed to execute the program proc=5 req=972 state=1 status=67 (errno 9: Bad file descriptor) [ 110.918592][ T30] audit: type=1400 audit(1786396731.527:338): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[14167]" dev="pipefs" ino=14167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 110.999935][ T30] audit: type=1400 audit(1786396731.567:339): avc: denied { read } for pid=2967 comm="syz.3.986" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.112443][ T2070] tipc: Left network mode [ 111.966806][ T2070] device bridge_slave_1 left promiscuous mode [ 111.973026][ T2070] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.980450][ T2070] device bridge_slave_0 left promiscuous mode [ 111.986735][ T2070] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.994610][ T2070] device veth1_macvtap left promiscuous mode [ 112.000627][ T2070] device veth0_vlan left promiscuous mode [ 112.543257][ T2070] tipc: Left network mode [ 112.547850][ T2070] tipc: Disabling bearer [ 112.553236][ T2070] tipc: Disabling bearer [ 112.558578][ T2070] tipc: Left network mode [ 113.112025][ T2070] device bridge_slave_0 left promiscuous mode [ 113.118253][ T2070] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.126674][ T2070] device bridge_slave_1 left promiscuous mode [ 113.132887][ T2070] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.141597][ T2070] device bridge_slave_0 left promiscuous mode [ 113.147741][ T2070] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.156085][ T2070] device veth1_macvtap left promiscuous mode [ 113.162201][ T2070] device veth0_vlan left promiscuous mode [ 113.168208][ T2070] device veth1_macvtap left promiscuous mode [ 113.174286][ T2070] device veth0_vlan left promiscuous mode [ 114.158532][ T101] EXT4-fs error: 128 callbacks suppressed [ 114.158552][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 114.179522][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 114.191151][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 114.202669][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 114.214289][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 114.226070][ T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 120.147028][ T185] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #121: comm crond: reading directory lblock 0 [ 120.158661][ T185] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm crond: reading directory lblock 0