last executing test programs: 14.277435182s ago: executing program 0 (id=253): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x811) 14.256254904s ago: executing program 0 (id=256): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@resuid}, {@test_dummy_encryption}, {@errors_continue}, {@data_err_ignore}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x20, 0x0, 0x0, 0x0, 0x0}) 14.170477823s ago: executing program 0 (id=260): r0 = socket$inet6(0xa, 0x80000, 0xfffffffd) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x38, 0x3a, 0x1, @local, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @loopback, @local, [@routing={0x2c, 0x0, 0x0, 0x5}]}}}}}}}, 0x0) 14.130523187s ago: executing program 0 (id=262): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@nodioread_nolock}, {@usrjquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcd}}, {@resgid}, {@minixdf}, {@debug}, {@grpquota}, {@nombcache}, {@minixdf}, {@nomblk_io_submit}, {@nomblk_io_submit}, {@i_version}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f00000024c0)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xffffff8d) 13.947911065s ago: executing program 0 (id=267): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a416000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) eventfd(0x2) 13.797307401s ago: executing program 0 (id=269): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) 13.721220718s ago: executing program 32 (id=269): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) 2.105191799s ago: executing program 2 (id=722): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='timer_start\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 2.083971131s ago: executing program 2 (id=724): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000040)="c77f63941720"}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d07, &(0x7f0000000180)={0xfffffffe}) 2.049623765s ago: executing program 2 (id=726): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401, 0x4000, 0xfffffffd, {0x0, 0x0, 0xffff, 0x0, 0x49108}}, 0x20}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x7}]}}}}}}}}, 0x0) 1.840499126s ago: executing program 1 (id=741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) uname(&(0x7f00000001c0)=""/245) 1.813259828s ago: executing program 1 (id=743): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.770670002s ago: executing program 2 (id=744): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x8000) 865.839803ms ago: executing program 2 (id=774): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400196338834b80040d8c560a066f02b805b97300000000000058000b4824ca945f64009400ff0325010ebc000000000000000100f0effeffe809005300fff5dd00000010000100080c10000000007b72000000", 0x58}], 0x1) 852.523915ms ago: executing program 5 (id=775): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}]}}}]}, 0x78}}, 0x0) 852.071784ms ago: executing program 3 (id=776): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@resuid}, {@test_dummy_encryption}, {@errors_continue}, {@data_err_ignore}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x20, 0x0, 0x0, 0x0, 0x0}) 740.833775ms ago: executing program 2 (id=777): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd40, 0x1d4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r1, 0x2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 706.660269ms ago: executing program 3 (id=778): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 676.199912ms ago: executing program 3 (id=779): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) 639.680716ms ago: executing program 3 (id=780): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 600.58163ms ago: executing program 5 (id=783): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23003f) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) 551.398844ms ago: executing program 3 (id=784): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x0, 0x3, 0x800000) truncate(&(0x7f0000000040)='./file1\x00', 0x40006) 550.937404ms ago: executing program 1 (id=794): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, 0x0) read(r0, &(0x7f0000000380)=""/162, 0xa2) 500.464959ms ago: executing program 5 (id=785): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e8, &(0x7f00000004c0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 500.371899ms ago: executing program 1 (id=786): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)) 488.683681ms ago: executing program 4 (id=787): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd27) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) 432.998746ms ago: executing program 5 (id=788): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x2, 0x21f, &(0x7f0000000940)="$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") mkdir(&(0x7f0000000340)='./file\x00', 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x160) rmdir(&(0x7f0000000000)='./file/file0/..//file0\x00') 432.797936ms ago: executing program 4 (id=789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000400018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) geteuid() 410.398459ms ago: executing program 4 (id=790): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a416000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) eventfd(0x2) 383.397281ms ago: executing program 1 (id=791): r0 = socket$inet6(0xa, 0x80000, 0xfffffffd) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x38, 0x3a, 0x1, @local, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @loopback, @local, [@routing={0x2c, 0x0, 0x0, 0x5}]}}}}}}}, 0x0) 366.818782ms ago: executing program 1 (id=792): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 352.631694ms ago: executing program 5 (id=793): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000280)={[{@grpquota}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@quota}, {@norecovery}, {@i_version}, {@errors_remount}]}, 0x1, 0x7b5, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000480)={0x47, 0xffbf, 0x4, 0x9}) 172.044342ms ago: executing program 4 (id=795): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-b'], 0x6a) 158.865464ms ago: executing program 4 (id=796): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@nodioread_nolock}, {@usrjquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcd}}, {@resgid}, {@minixdf}, {@debug}, {@grpquota}, {@nombcache}, {@minixdf}, {@nomblk_io_submit}, {@nomblk_io_submit}, {@i_version}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f00000024c0)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xffffff8d) 154.070694ms ago: executing program 5 (id=797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000008f"]) 20.631527ms ago: executing program 4 (id=798): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4622, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x23}, 0x1c) 0s ago: executing program 3 (id=799): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8a33}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.233' (ED25519) to the list of known hosts. [ 22.196004][ T28] audit: type=1400 audit(1762953291.343:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.197436][ T274] cgroup: Unknown subsys name 'net' [ 22.218810][ T28] audit: type=1400 audit(1762953291.343:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.246160][ T28] audit: type=1400 audit(1762953291.373:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.246349][ T274] cgroup: Unknown subsys name 'devices' [ 22.385807][ T274] cgroup: Unknown subsys name 'hugetlb' [ 22.391436][ T274] cgroup: Unknown subsys name 'rlimit' [ 22.495790][ T28] audit: type=1400 audit(1762953291.643:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.519139][ T28] audit: type=1400 audit(1762953291.643:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.530011][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.544133][ T28] audit: type=1400 audit(1762953291.643:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.575561][ T28] audit: type=1400 audit(1762953291.693:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.601147][ T28] audit: type=1400 audit(1762953291.693:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.630274][ T28] audit: type=1400 audit(1762953291.773:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.630797][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.655818][ T28] audit: type=1400 audit(1762953291.773:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.384321][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.391705][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.399287][ T282] device bridge_slave_0 entered promiscuous mode [ 23.406479][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.413543][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.421132][ T282] device bridge_slave_1 entered promiscuous mode [ 23.531019][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.538192][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.545687][ T287] device bridge_slave_0 entered promiscuous mode [ 23.555756][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.562814][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.570335][ T287] device bridge_slave_1 entered promiscuous mode [ 23.597269][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.604368][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.611822][ T286] device bridge_slave_0 entered promiscuous mode [ 23.632713][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.639972][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.647471][ T286] device bridge_slave_1 entered promiscuous mode [ 23.694049][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.701214][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.709025][ T288] device bridge_slave_0 entered promiscuous mode [ 23.717647][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.724805][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.732194][ T288] device bridge_slave_1 entered promiscuous mode [ 23.810809][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.817928][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.825415][ T289] device bridge_slave_0 entered promiscuous mode [ 23.842203][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.849448][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.856947][ T289] device bridge_slave_1 entered promiscuous mode [ 23.941478][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.948667][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.956002][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.963036][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.996603][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.003704][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.011069][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.018126][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.039647][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.046748][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.054067][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.061092][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.089642][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.096749][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.104094][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.111211][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.134487][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.141818][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.150038][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.157939][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.165415][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.172590][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.181033][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.188393][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.195764][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.212816][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.220524][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.239947][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.248733][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.255794][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.271701][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.279954][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.287017][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.294766][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.303008][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.310072][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.336162][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.353838][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.362310][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.369394][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.377244][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.385307][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.392787][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.400993][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.409258][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.417627][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.450410][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.458611][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.466921][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.475514][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.484404][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.491455][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.498994][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.507447][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.515698][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.522723][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.530201][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.538614][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.546923][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.553981][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.561439][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.570040][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.578294][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.585332][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.592685][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.601010][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.609169][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.617309][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.625466][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.633912][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.652567][ T286] device veth0_vlan entered promiscuous mode [ 24.664064][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.672476][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.680096][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.687778][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.696143][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.704313][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.712327][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.720365][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.728769][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.737575][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.745546][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.753979][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.767001][ T282] device veth0_vlan entered promiscuous mode [ 24.778434][ T287] device veth0_vlan entered promiscuous mode [ 24.786346][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.794719][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.802764][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.810511][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.818109][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.826010][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.834282][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.841881][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.849576][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.857350][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.873355][ T282] device veth1_macvtap entered promiscuous mode [ 24.882645][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.891370][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.899858][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.906941][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.915448][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.924687][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.932923][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.940250][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.948057][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.956353][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.964616][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.972249][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.987816][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.996196][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.004722][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.028053][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.036440][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.045130][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.053385][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.062282][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.070298][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.078578][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.086780][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.095067][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.102591][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.110972][ T288] device veth0_vlan entered promiscuous mode [ 25.122011][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.131856][ T286] device veth1_macvtap entered promiscuous mode [ 25.139277][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 25.147504][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.157617][ T287] device veth1_macvtap entered promiscuous mode [ 25.168579][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.177256][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.211799][ T288] device veth1_macvtap entered promiscuous mode [ 25.219394][ T289] device veth0_vlan entered promiscuous mode [ 25.238506][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.250825][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.260256][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.272633][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.285399][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.294043][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.302361][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.310730][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.319359][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.328138][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.354696][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.363069][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.398764][ T289] device veth1_macvtap entered promiscuous mode [ 25.407800][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.419368][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.428630][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.436811][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.452273][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.485084][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.513263][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.532301][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.556378][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.614156][ T364] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 25.687662][ T376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 26.083143][ T395] loop2: detected capacity change from 0 to 16 [ 26.101004][ T395] erofs: (device loop2): mounted with root inode @ nid 36. [ 26.218650][ T412] loop0: detected capacity change from 0 to 2048 [ 26.278642][ T412] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 26.366272][ T402] loop4: detected capacity change from 0 to 40427 [ 26.403724][ T402] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.503760][ T402] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 26.547744][ T435] loop1: detected capacity change from 0 to 8192 [ 26.580830][ T287] syz-executor: attempt to access beyond end of device [ 26.580830][ T287] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 26.607597][ T412] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.32: bg 0: block 234: padding at end of block bitmap is not set [ 26.631456][ T412] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 26.657367][ T443] loop3: detected capacity change from 0 to 1024 [ 26.664128][ T412] EXT4-fs (loop0): This should not happen!! Data will be lost [ 26.664128][ T412] [ 26.674523][ T443] ======================================================= [ 26.674523][ T443] WARNING: The mand mount option has been deprecated and [ 26.674523][ T443] and is ignored by this kernel. Remove the mand [ 26.674523][ T443] option from the mount to silence this warning. [ 26.674523][ T443] ======================================================= [ 26.677171][ T412] EXT4-fs (loop0): Total free blocks count 0 [ 26.718486][ T412] EXT4-fs (loop0): Free/Dirty block details [ 26.724802][ T412] EXT4-fs (loop0): free_blocks=0 [ 26.730354][ T444] Zero length message leads to an empty skb [ 26.743383][ T412] EXT4-fs (loop0): dirty_blocks=8192 [ 26.749144][ T412] EXT4-fs (loop0): Block reservation details [ 26.757559][ T412] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 26.769753][ T443] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 26.783816][ T443] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.795845][ T338] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 26.811893][ T443] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 26.832573][ T443] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 26.860589][ T443] EXT4-fs (loop3): This should not happen!! Data will be lost [ 26.860589][ T443] [ 26.871828][ T443] EXT4-fs (loop3): Total free blocks count 0 [ 26.875321][ T43] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 26.877993][ T443] EXT4-fs (loop3): Free/Dirty block details [ 26.913698][ T443] EXT4-fs (loop3): free_blocks=4293918720 [ 26.919485][ T443] EXT4-fs (loop3): dirty_blocks=64 [ 26.930913][ T443] EXT4-fs (loop3): Block reservation details [ 26.938320][ T443] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 26.969814][ T289] EXT4-fs (loop3): unmounting filesystem. [ 26.995330][ T338] usb 3-1: unable to get BOS descriptor or descriptor too short [ 27.015089][ T338] usb 3-1: not running at top speed; connect to a high speed hub [ 27.024381][ T338] usb 3-1: too many endpoints for config 1 interface 1 altsetting 6: 198, using maximum allowed: 30 [ 27.043769][ T338] usb 3-1: config 1 interface 1 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 198 [ 27.065158][ T338] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 4 [ 27.083828][ T338] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 27.103088][ T338] usb 3-1: config 1 interface 1 has no altsetting 2 [ 27.107539][ T355] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.126896][ T338] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.143733][ T338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.153815][ T338] usb 3-1: Product: syz [ 27.158014][ T338] usb 3-1: Manufacturer: syz [ 27.172761][ T338] usb 3-1: SerialNumber: syz [ 27.233739][ T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 27.270488][ T463] loop3: detected capacity change from 0 to 40427 [ 27.277834][ T463] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 27.285826][ T463] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 27.295622][ T463] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 27.300838][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.301961][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 27.301975][ T28] audit: type=1400 audit(1762953296.443:129): avc: denied { read write } for pid=467 comm="syz.0.53" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.309865][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.316004][ T28] audit: type=1400 audit(1762953296.443:130): avc: denied { open } for pid=467 comm="syz.0.53" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.369228][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.371490][ T355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.376999][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.388445][ T463] F2FS-fs (loop3): Found nat_bits in checkpoint [ 27.396907][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.409927][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.411788][ T355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.417725][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.434968][ T338] usb 3-1: 2:1 : unsupported format bits 0x40 [ 27.437435][ T355] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 27.441231][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.444221][ T338] usb 3-1: USB disconnect, device number 2 [ 27.462525][ T355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.471431][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.474854][ T355] usb 5-1: config 0 descriptor?? [ 27.479476][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.487330][ T24] usb 2-1: config 0 has no interfaces? [ 27.493061][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.497910][ T24] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 27.513283][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.514501][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.521419][ T463] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 27.529073][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.536931][ T24] usb 2-1: config 0 descriptor?? [ 27.543441][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.548256][ T463] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 27.555780][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.570672][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.578406][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.586048][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.593475][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.598306][ T463] syz.3.50: attempt to access beyond end of device [ 27.598306][ T463] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 27.601275][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.622193][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.629696][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.637183][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.644666][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.652115][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.659567][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.667109][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.674548][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.682038][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.690657][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.698268][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.705719][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.713181][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.720923][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.728402][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.735856][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.743275][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.750720][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.758187][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.765628][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.773047][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.780537][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.780945][ T290] usb 2-1: USB disconnect, device number 2 [ 27.787987][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.788033][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.788053][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.788073][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.823746][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.831160][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.838600][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.846034][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.853433][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.860885][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.868334][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.875789][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.883197][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.890647][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.898219][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.905701][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.909500][ T355] hid-led 0003:1D34:000A.0002: ignoring exceeding usage max [ 27.913109][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.927865][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.935423][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.942841][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.950336][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.957828][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.965325][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.972759][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.980467][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.987980][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 27.995437][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 28.002861][ T297] hid-generic 0000:0009:0000.0001: unknown main item tag 0x0 [ 28.010913][ T297] hid-generic 0000:0009:0000.0001: hidraw0: HID v0.41 Device [syz1] on syz1 [ 28.036506][ T482] xt_hashlimit: size too large, truncated to 1048576 [ 28.109790][ T355] hid-led 0003:1D34:000A.0002: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 28.131588][ T355] hid-led 0003:1D34:000A.0002: Dream Cheeky Webmail Notifier initialized [ 28.151792][ T487] capability: warning: `syz.3.54' uses deprecated v2 capabilities in a way that may be insecure [ 28.224483][ T28] audit: type=1400 audit(1762953297.373:131): avc: denied { name_bind } for pid=490 comm="syz.3.62" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 28.247410][ T491] syz.3.62 (491) used greatest stack depth: 21824 bytes left [ 28.273670][ T28] audit: type=1400 audit(1762953297.373:132): avc: denied { node_bind } for pid=490 comm="syz.3.62" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 28.346104][ T495] pim6reg: tun_chr_ioctl cmd 1074025672 [ 28.361913][ T495] pim6reg: ignored: set checksum enabled [ 28.370176][ T355] usb 5-1: USB disconnect, device number 2 [ 28.406637][ T484] loop2: detected capacity change from 0 to 40427 [ 28.414096][ T484] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 28.421950][ T484] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 28.431249][ T484] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 28.441373][ T484] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.470121][ T28] audit: type=1400 audit(1762953297.613:133): avc: denied { block_suspend } for pid=504 comm="syz.0.66" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.502064][ T484] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 28.509699][ T484] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.560631][ T511] loop0: detected capacity change from 0 to 4096 [ 28.569464][ T511] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 28.587376][ T28] audit: type=1400 audit(1762953297.733:134): avc: denied { remove_name } for pid=483 comm="syz.2.60" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.632589][ T28] audit: type=1400 audit(1762953297.733:135): avc: denied { rename } for pid=483 comm="syz.2.60" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.689510][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.701561][ T286] EXT4-fs (loop0): unmounting filesystem. [ 28.707465][ T516] device veth0_to_team entered promiscuous mode [ 28.754601][ T28] audit: type=1400 audit(1762953297.903:136): avc: denied { write } for pid=519 comm="syz.0.80" name="ip6_flowlabel" dev="proc" ino=4026532456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 28.807085][ T28] audit: type=1326 audit(1762953297.953:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=526 comm="syz.0.75" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f029a58f6c9 code=0x0 [ 28.963057][ T550] bridge0: port 3(syz_tun) entered blocking state [ 28.972221][ T550] bridge0: port 3(syz_tun) entered disabled state [ 28.979978][ T550] device syz_tun entered promiscuous mode [ 28.990970][ T550] bridge0: port 3(syz_tun) entered blocking state [ 28.997502][ T550] bridge0: port 3(syz_tun) entered forwarding state [ 29.030845][ T28] audit: type=1400 audit(1762953298.173:138): avc: denied { create } for pid=554 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 29.592551][ T594] SELinux: failed to load policy [ 29.603837][ T606] loop4: detected capacity change from 0 to 512 [ 29.611776][ T606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 29.635229][ T606] System zones: 1-12 [ 29.647209][ T606] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.108: error while reading EA inode 32 err=-116 [ 29.694055][ T613] netlink: 312 bytes leftover after parsing attributes in process `syz.3.110'. [ 29.703529][ T606] EXT4-fs (loop4): Remounting filesystem read-only [ 29.713725][ T606] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.734330][ T606] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.108: error while reading EA inode 32 err=-116 [ 29.766082][ T620] netlink: 1084 bytes leftover after parsing attributes in process `syz.2.116'. [ 29.780835][ T606] EXT4-fs (loop4): Remounting filesystem read-only [ 29.792473][ T606] EXT4-fs (loop4): 1 orphan inode deleted [ 29.803681][ T624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 29.821347][ T606] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 29.894953][ T287] EXT4-fs (loop4): unmounting filesystem. [ 29.931190][ T642] loop4: detected capacity change from 0 to 1024 [ 29.956844][ T642] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 29.974968][ T642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000e11d, mo2=0002] [ 29.983743][ T642] EXT4-fs (loop4): failed to initialize system zone (-117) [ 30.015256][ T642] EXT4-fs (loop4): mount failed [ 30.040769][ T651] capability: warning: `syz.0.130' uses 32-bit capabilities (legacy support in use) [ 30.108304][ T654] tun0: tun_chr_ioctl cmd 1074812117 [ 30.184221][ T626] loop1: detected capacity change from 0 to 40427 [ 30.189947][ T632] loop3: detected capacity change from 0 to 40427 [ 30.198159][ T626] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 30.198714][ T632] F2FS-fs (loop3): invalid crc value [ 30.210433][ T626] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 30.224114][ T632] F2FS-fs (loop3): Found nat_bits in checkpoint [ 30.230707][ T626] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 30.255235][ T626] F2FS-fs (loop1): Found nat_bits in checkpoint [ 30.299755][ T632] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 30.336278][ T626] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 30.346034][ T626] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 30.357956][ T675] netlink: 64 bytes leftover after parsing attributes in process `syz.4.137'. [ 30.367344][ T675] netlink: 64 bytes leftover after parsing attributes in process `syz.4.137'. [ 30.402684][ T289] syz-executor: attempt to access beyond end of device [ 30.402684][ T289] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 30.404809][ T681] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.610806][ T685] syz.4.142 (685) used greatest stack depth: 21248 bytes left [ 30.822493][ T716] loop6: detected capacity change from 0 to 7 [ 30.829047][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 30.838232][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 30.846756][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 30.855948][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 30.863883][ T716] loop6: unable to read partition table [ 30.865146][ T718] loop2: detected capacity change from 0 to 1024 [ 30.869601][ T716] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 30.876440][ T718] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.897031][ T718] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.907473][ T718] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz.2.155: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 30.926223][ T718] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.155: couldn't read orphan inode 11 (err -117) [ 30.938873][ T718] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 30.951365][ T718] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.155: Invalid block bitmap block 0 in block_group 0 [ 30.964843][ T719] support for cryptoloop has been removed. Use dm-crypt instead. [ 30.965391][ T718] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.155: Failed to acquire dquot type 0 [ 30.990247][ T10] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm kworker/u4:1: Invalid inode table block 8589934593 in block_group 0 [ 31.005414][ T288] EXT4-fs (loop2): unmounting filesystem. [ 31.252652][ T735] loop2: detected capacity change from 0 to 256 [ 31.366570][ T746] loop4: detected capacity change from 0 to 512 [ 31.413747][ T746] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.167: error while reading EA inode 32 err=-116 [ 31.426686][ T753] loop1: detected capacity change from 0 to 16 [ 31.443345][ T753] erofs: (device loop1): mounted with root inode @ nid 36. [ 31.462091][ T746] EXT4-fs (loop4): Remounting filesystem read-only [ 31.478303][ T746] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.167: error while reading EA inode 32 err=-116 [ 31.520009][ T746] EXT4-fs (loop4): Remounting filesystem read-only [ 31.526936][ T746] EXT4-fs (loop4): 1 orphan inode deleted [ 31.535348][ T746] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 31.555987][ T287] EXT4-fs (loop4): unmounting filesystem. [ 31.594853][ T741] loop0: detected capacity change from 0 to 40427 [ 31.601869][ T741] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 31.610132][ T741] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 31.621308][ T741] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 31.640282][ T741] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.691053][ T785] loop3: detected capacity change from 0 to 512 [ 31.707973][ T741] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 31.715438][ T741] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.723316][ T785] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 31.729011][ T792] netlink: 52 bytes leftover after parsing attributes in process `syz.4.186'. [ 31.759538][ T785] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 31.768702][ T785] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.799356][ T289] EXT4-fs (loop3): unmounting filesystem. [ 31.833216][ T802] SELinux: truncated policydb string identifier [ 31.839788][ T802] SELinux: failed to load policy [ 31.863245][ T804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.190'. [ 31.894871][ T808] netlink: 104 bytes leftover after parsing attributes in process `syz.4.191'. [ 31.914583][ T810] xt_hashlimit: size too large, truncated to 1048576 [ 32.111292][ T837] loop2: detected capacity change from 0 to 128 [ 32.125750][ T837] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 32.134700][ T837] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.158848][ T288] EXT4-fs (loop2): unmounting filesystem. [ 32.162291][ T842] binder: 841:842 ioctl c018620c 200000004980 returned -1 [ 32.216702][ T849] device veth1_macvtap left promiscuous mode [ 32.230693][ T849] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 32.307079][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 32.307115][ T28] audit: type=1400 audit(2000000002.770:195): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 32.399647][ T28] audit: type=1400 audit(2000000002.860:196): avc: denied { connect } for pid=880 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.420050][ T28] audit: type=1400 audit(2000000002.870:197): avc: denied { write } for pid=880 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.454760][ T28] audit: type=1400 audit(2000000002.870:198): avc: denied { append } for pid=882 comm="syz.4.227" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.492062][ T28] audit: type=1400 audit(2000000002.870:199): avc: denied { open } for pid=882 comm="syz.4.227" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.517243][ T28] audit: type=1400 audit(2000000002.870:200): avc: denied { ioctl } for pid=882 comm="syz.4.227" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.610787][ T910] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 32.700220][ T902] loop1: detected capacity change from 0 to 40427 [ 32.707391][ T902] F2FS-fs (loop1): heap/no_heap options were deprecated [ 32.714484][ T902] F2FS-fs (loop1): fault_injection options not supported [ 32.721596][ T902] F2FS-fs (loop1): fault_type options not supported [ 32.729010][ T902] F2FS-fs (loop1): invalid crc value [ 32.735731][ T902] F2FS-fs (loop1): Found nat_bits in checkpoint [ 32.766432][ T902] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 32.787204][ T282] syz-executor: attempt to access beyond end of device [ 32.787204][ T282] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 32.891425][ T28] audit: type=1400 audit(2000000000.430:201): avc: denied { create } for pid=918 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.911592][ T28] audit: type=1400 audit(2000000000.430:202): avc: denied { bind } for pid=918 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.931484][ T28] audit: type=1400 audit(2000000000.430:203): avc: denied { listen } for pid=918 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.954723][ T28] audit: type=1400 audit(2000000000.430:204): avc: denied { setopt } for pid=918 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.999485][ T929] loop0: detected capacity change from 0 to 2048 [ 33.019306][ T929] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.036573][ T286] EXT4-fs (loop0): unmounting filesystem. [ 33.104957][ T940] loop1: detected capacity change from 0 to 512 [ 33.113053][ T940] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 33.129422][ T282] EXT4-fs (loop1): unmounting filesystem. [ 33.146292][ T945] futex_wake_op: syz.1.251 tries to shift op by 36; fix this program [ 33.212014][ T953] loop0: detected capacity change from 0 to 4096 [ 33.219964][ T953] EXT4-fs (loop0): Test dummy encryption mode enabled [ 33.228023][ T953] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 33.228812][ T958] loop1: detected capacity change from 0 to 128 [ 33.237135][ T953] System zones: 0-5 [ 33.247881][ T953] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 33.271563][ T286] EXT4-fs (loop0): unmounting filesystem. [ 33.282450][ T963] loop1: detected capacity change from 0 to 512 [ 33.289396][ T963] EXT4-fs (loop1): Test dummy encryption mode enabled [ 33.297957][ T963] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.261: inode #1: comm syz.1.261: iget: illegal inode # [ 33.309505][ T968] loop0: detected capacity change from 0 to 512 [ 33.311984][ T963] EXT4-fs (loop1): Remounting filesystem read-only [ 33.318052][ T968] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.324205][ T963] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.261: error while reading EA inode 1 err=-117 [ 33.331304][ T968] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.343286][ T963] EXT4-fs (loop1): Remounting filesystem read-only [ 33.349768][ T968] EXT4-fs: Ignoring removed i_version option [ 33.356775][ T963] EXT4-fs (loop1): 1 orphan inode deleted [ 33.363543][ T968] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c099, mo2=0002] [ 33.368312][ T963] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 33.375904][ T968] System zones: 1-12 [ 33.389008][ T968] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.262: inode #1: comm syz.0.262: iget: illegal inode # [ 33.402282][ T968] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.262: error while reading EA inode 1 err=-117 [ 33.410355][ T963] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 33.414770][ T968] EXT4-fs (loop0): 1 orphan inode deleted [ 33.432766][ T968] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 33.443071][ T282] EXT4-fs (loop1): unmounting filesystem. [ 33.473231][ T286] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 33.495216][ T286] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 33.507470][ T286] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 33.585463][ T983] loop1: detected capacity change from 0 to 2048 [ 33.592205][ T983] EXT4-fs: Ignoring removed i_version option [ 33.619866][ T983] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 33.632169][ T286] EXT4-fs (loop0): unmounting filesystem. [ 33.652767][ T983] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.268: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 33.687691][ T983] EXT4-fs (loop1): Remounting filesystem read-only [ 33.703763][ T983] EXT4-fs error (device loop1): ext4_ext_precache:627: inode #2: comm syz.1.268: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 33.723995][ T983] EXT4-fs (loop1): Remounting filesystem read-only [ 33.740686][ T282] EXT4-fs (loop1): unmounting filesystem. [ 33.762403][ T990] device erspan0 entered promiscuous mode [ 33.808276][ T996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.275'. [ 33.864516][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.871595][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.879238][ T997] device bridge_slave_0 entered promiscuous mode [ 33.888160][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.895346][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.903235][ T997] device bridge_slave_1 entered promiscuous mode [ 33.913276][ T1007] Bluetooth: hci1: Frame reassembly failed (-84) [ 33.920070][ T43] Bluetooth: hci1: Frame reassembly failed (-84) [ 33.971912][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.979024][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.986376][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.993425][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.000819][ T19] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.028642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.037127][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.044663][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.056459][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.064835][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.071877][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.080973][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.089225][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.096283][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.104340][ T356] device bridge_slave_1 left promiscuous mode [ 34.110531][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.118275][ T356] device bridge_slave_0 left promiscuous mode [ 34.124616][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.132601][ T356] device veth1_macvtap left promiscuous mode [ 34.138890][ T356] device veth0_vlan left promiscuous mode [ 34.184740][ T19] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 34.194630][ T19] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 34.205850][ T19] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 34.214975][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.223051][ T19] usb 3-1: Product: syz [ 34.231577][ T19] usb 3-1: Manufacturer: syz [ 34.236305][ T19] usb 3-1: SerialNumber: syz [ 34.241470][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.242451][ T19] usb 3-1: config 0 descriptor?? [ 34.254698][ T988] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 34.262168][ T988] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 34.262706][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.280729][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.287384][ T359] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.300896][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.309071][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.316694][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.325645][ T997] device veth0_vlan entered promiscuous mode [ 34.337626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.347271][ T997] device veth1_macvtap entered promiscuous mode [ 34.357989][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.368955][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.471251][ T988] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 34.473764][ T359] usb 4-1: Using ep0 maxpacket: 16 [ 34.478705][ T988] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 34.485339][ T359] usb 4-1: config index 0 descriptor too short (expected 65532, got 18) [ 34.499458][ T359] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 34.507832][ T359] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 34.519533][ T359] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 34.528881][ T359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.537261][ T359] usb 4-1: Product: syz [ 34.541734][ T359] usb 4-1: Manufacturer: syz [ 34.546859][ T359] usb 4-1: SerialNumber: syz [ 34.552438][ T359] r8152-cfgselector 4-1: config 0 descriptor?? [ 34.624138][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.776228][ T1066] netlink: 'syz.4.301': attribute type 11 has an invalid length. [ 34.784200][ T1066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.301'. [ 34.801338][ T1070] netlink: 24 bytes leftover after parsing attributes in process `syz.5.303'. [ 34.814950][ T1072] loop4: detected capacity change from 0 to 512 [ 34.821981][ T1072] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 34.832552][ T1072] EXT4-fs (loop4): invalid journal inode [ 34.891492][ T1078] loop5: detected capacity change from 0 to 1024 [ 34.900999][ T19] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 34.906680][ T1078] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 34.924115][ T1078] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.307: inode #1668180270: comm syz.5.307: iget: illegal inode # [ 34.938111][ T1078] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.307: error while reading EA inode 1668180270 err=-117 [ 34.960949][ T997] EXT4-fs (loop5): unmounting filesystem. [ 34.967468][ T359] r8152-cfgselector 4-1: Unknown version 0x0000 [ 34.973977][ T359] r8152-cfgselector 4-1: bad CDC descriptors [ 34.980574][ T359] r8152-cfgselector 4-1: Unknown version 0x0000 [ 34.987833][ T359] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 34.993870][ T1083] loop5: detected capacity change from 0 to 512 [ 35.001584][ T1083] EXT4-fs: Ignoring removed oldalloc option [ 35.009437][ T1083] EXT4-fs (loop5): 1 truncate cleaned up [ 35.015469][ T1083] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 35.036340][ T997] EXT4-fs (loop5): unmounting filesystem. [ 35.101423][ T19] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 35.111242][ T19] usb 3-1: USB disconnect, device number 3 [ 35.206198][ T1093] netlink: 28 bytes leftover after parsing attributes in process `syz.5.312'. [ 35.417655][ T1107] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82 [ 35.449402][ T1111] loop5: detected capacity change from 0 to 512 [ 35.465370][ T1111] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 35.474463][ T1111] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.497478][ T997] EXT4-fs (loop5): unmounting filesystem. [ 35.541663][ T1119] mmap: syz.5.323 (1119) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.742198][ T1144] loop4: detected capacity change from 0 to 4096 [ 35.756631][ T1144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.783313][ T1153] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 35.800250][ T1144] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 35.802331][ T1153] syzkaller0: linktype set to 768 [ 35.851183][ T287] EXT4-fs (loop4): unmounting filesystem. [ 35.974299][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 35.980486][ T912] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 35.983223][ T1180] loop5: detected capacity change from 0 to 1024 [ 36.057851][ T1180] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 36.093600][ T1180] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 623: comm syz.5.350: Attempting to read directory block (623) that is past i_size (638464) [ 36.119228][ T997] EXT4-fs (loop5): unmounting filesystem. [ 36.189389][ T1206] syz.4.361 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.296931][ T1225] can0: slcan on ptm0. [ 36.324197][ T1224] can0 (unregistered): slcan off ptm0. [ 36.351206][ T1230] loop3: detected capacity change from 0 to 512 [ 36.360442][ T1230] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 36.562194][ T1252] loop3: detected capacity change from 0 to 4096 [ 36.571026][ T1252] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.592164][ T289] EXT4-fs (loop3): unmounting filesystem. [ 36.597676][ T1239] loop4: detected capacity change from 0 to 40427 [ 36.605214][ T1239] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(32256) [ 36.614026][ T1239] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 36.622381][ T1239] F2FS-fs (loop4): fault_injection options not supported [ 36.629931][ T1239] F2FS-fs (loop4): fault_type options not supported [ 36.637906][ T1239] F2FS-fs (loop4): invalid crc value [ 36.645202][ T1239] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.693018][ T1239] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 36.700260][ T1239] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.896018][ T1280] loop1: detected capacity change from 0 to 512 [ 36.919996][ T1284] loop2: detected capacity change from 0 to 1024 [ 36.928707][ T1280] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.945358][ T1280] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.970453][ T1284] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.995437][ T282] EXT4-fs (loop1): unmounting filesystem. [ 37.032450][ T288] EXT4-fs (loop2): unmounting filesystem. [ 37.068112][ T1296] loop5: detected capacity change from 0 to 512 [ 37.154567][ T1310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.405'. [ 37.224178][ T1322] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 37.325589][ T1339] loop2: detected capacity change from 0 to 128 [ 37.451433][ T1258] loop3: detected capacity change from 0 to 131072 [ 37.468709][ T1258] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 37.478743][ T1351] loop2: detected capacity change from 0 to 2048 [ 37.479026][ T1258] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 37.515191][ T1258] F2FS-fs (loop3): invalid crc value [ 37.534753][ T1351] loop2: p2 p3 < > p4 < p5 > [ 37.535415][ T1258] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.592071][ T1258] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.599415][ T1258] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 37.641815][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 37.641831][ T28] audit: type=1400 audit(2000000005.180:339): avc: denied { validate_trans } for pid=1369 comm="syz.5.430" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 37.669620][ T1258] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 37.763780][ T1373] loop5: detected capacity change from 0 to 4096 [ 37.784558][ T1373] EXT4-fs (loop5): Test dummy encryption mode enabled [ 37.832759][ T1373] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 37.853449][ T28] audit: type=1400 audit(2000000005.390:340): avc: denied { link } for pid=1372 comm="syz.5.431" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.044062][ T1387] incfs: Options parsing error. -22 [ 38.056945][ T1387] incfs: mount failed -22 [ 38.186010][ T1399] loop2: detected capacity change from 0 to 256 [ 38.216239][ T1399] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 38.245393][ T28] audit: type=1400 audit(2000000005.790:341): avc: denied { write } for pid=1397 comm="syz.2.443" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.270476][ T1399] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 38.279002][ T28] audit: type=1400 audit(2000000005.790:342): avc: denied { add_name } for pid=1397 comm="syz.2.443" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.290006][ T1399] exFAT-fs (loop2): Filesystem has been set read-only [ 38.307431][ T28] audit: type=1400 audit(2000000005.790:343): avc: denied { associate } for pid=1397 comm="syz.2.443" name="cpuset.effective_mems" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 38.333944][ T28] audit: type=1400 audit(2000000005.810:344): avc: denied { read append open } for pid=1397 comm="syz.2.443" path="/84/file1/cpuset.effective_mems" dev="loop2" ino=1048614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.360545][ T28] audit: type=1400 audit(2000000005.810:345): avc: denied { write } for pid=1397 comm="syz.2.443" name="cpuset.effective_mems" dev="loop2" ino=1048614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.426971][ T997] EXT4-fs (loop5): unmounting filesystem. [ 38.457075][ T1422] loop3: detected capacity change from 0 to 512 [ 38.479485][ T1422] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.504010][ T1422] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.513388][ T1422] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 38.537564][ T1428] loop4: detected capacity change from 0 to 1024 [ 38.541424][ T1422] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 38.554096][ T1422] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 38.564341][ T1422] System zones: 0-2, 18-18, 34-35 [ 38.569977][ T1432] loop5: detected capacity change from 0 to 1024 [ 38.570325][ T1422] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.585515][ T1432] EXT4-fs: Ignoring removed orlov option [ 38.599897][ T1428] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.608913][ T289] EXT4-fs (loop3): unmounting filesystem. [ 38.609752][ T1432] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 38.623810][ T1428] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.634443][ T1432] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #2: block 16: comm syz.5.456: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=2316, rec_len=0, size=1024 fake=0 [ 38.644713][ T1428] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 4: comm syz.4.455: lblock 4 mapped to illegal pblock 4 (length 1) [ 38.663349][ T1441] loop1: detected capacity change from 0 to 512 [ 38.670149][ T1438] device bridge0 entered promiscuous mode [ 38.674793][ T1432] EXT4-fs (loop5): Remounting filesystem read-only [ 38.693251][ T1428] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 38.706209][ T1428] EXT4-fs (loop4): This should not happen!! Data will be lost [ 38.706209][ T1428] [ 38.706490][ T1444] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 4: comm syz.4.455: lblock 4 mapped to illegal pblock 4 (length 1) [ 38.706933][ T1444] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 4: comm syz.4.455: lblock 4 mapped to illegal pblock 4 (length 1) [ 38.719150][ T997] EXT4-fs (loop5): unmounting filesystem. [ 38.756789][ T1448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 38.762093][ T287] EXT4-fs (loop4): unmounting filesystem. [ 38.815636][ T1457] netlink: 'syz.3.466': attribute type 28 has an invalid length. [ 38.816690][ T1458] loop4: detected capacity change from 0 to 128 [ 38.848766][ T28] audit: type=1400 audit(2000000000.240:346): avc: denied { mounton } for pid=1456 comm="syz.4.463" path="/106/file0/file1" dev="loop4" ino=1048616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 38.892812][ T28] audit: type=1400 audit(2000000000.270:347): avc: denied { append } for pid=1456 comm="syz.4.463" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.946649][ T1471] SELinux: Context @ is not valid (left unmapped). [ 38.953707][ T28] audit: type=1400 audit(2000000000.340:348): avc: denied { relabelto } for pid=1470 comm="syz.2.473" name="cgroup.controllers" dev="tmpfs" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 39.087011][ T1488] loop2: detected capacity change from 0 to 512 [ 39.094938][ T1488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.102046][ T1488] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.113844][ T1488] EXT4-fs (loop2): 1 truncate cleaned up [ 39.119511][ T1488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 39.137729][ T288] EXT4-fs (loop2): unmounting filesystem. [ 39.202379][ T359] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 39.378735][ T1494] loop2: detected capacity change from 0 to 40427 [ 39.388048][ T1494] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.394874][ T359] usb 2-1: Using ep0 maxpacket: 32 [ 39.979580][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.000680][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.038046][ T359] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 40.054477][ T1512] Driver unsupported XDP return value 0 on prog (id 101) dev N/A, expect packet loss! [ 40.057600][ T359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.073479][ T359] usb 2-1: config 0 descriptor?? [ 40.081415][ T359] hub 2-1:0.0: USB hub found [ 40.086718][ T1494] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 40.133961][ T288] syz-executor: attempt to access beyond end of device [ 40.133961][ T288] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 40.281354][ T359] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 40.482552][ T359] usbhid 2-1:0.0: can't add hid device: -71 [ 40.489991][ T359] usbhid: probe of 2-1:0.0 failed with error -71 [ 40.534131][ T359] usb 2-1: USB disconnect, device number 3 [ 40.606812][ T1556] xt_hashlimit: size too large, truncated to 1048576 [ 40.663769][ T1559] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 40.964077][ T1572] loop3: detected capacity change from 0 to 128 [ 40.977408][ T1572] EXT4-fs: Ignoring removed nobh option [ 41.003920][ T1574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 41.013863][ T1572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.029649][ T1572] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.103511][ T289] EXT4-fs (loop3): unmounting filesystem. [ 41.124614][ T1587] loop5: detected capacity change from 0 to 16 [ 41.145877][ T1587] erofs: (device loop5): mounted with root inode @ nid 36. [ 41.159414][ T1559] syz.4.506 (1559) used greatest stack depth: 20096 bytes left [ 41.167287][ T1591] process 'syz.3.522' launched './file1' with NULL argv: empty string added [ 41.292790][ T1611] loop5: detected capacity change from 0 to 128 [ 41.448733][ T1600] loop1: detected capacity change from 0 to 40427 [ 41.456101][ T1600] F2FS-fs (loop1): fault_injection options not supported [ 41.464357][ T1600] F2FS-fs (loop1): invalid crc value [ 41.481008][ T1600] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.484546][ T1620] loop5: detected capacity change from 0 to 1024 [ 41.500542][ T1620] EXT4-fs: Ignoring removed i_version option [ 41.514572][ T1620] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.526191][ T1600] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 41.554410][ T1620] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 41.579802][ T282] syz-executor: attempt to access beyond end of device [ 41.579802][ T282] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 41.596535][ T1620] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3836: comm syz.5.535: Allocating blocks 497-513 which overlap fs metadata [ 41.613789][ T1620] EXT4-fs (loop5): pa ffff8881168c3540: logic 256, phys. 385, len 8 [ 41.621845][ T1620] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 41.632651][ T1629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'. [ 41.677306][ T1631] xt_hashlimit: size too large, truncated to 1048576 [ 41.690991][ T997] EXT4-fs (loop5): unmounting filesystem. [ 41.758114][ T1638] loop1: detected capacity change from 0 to 512 [ 41.769075][ T1638] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.783062][ T1638] EXT4-fs (loop1): 1 truncate cleaned up [ 41.789128][ T1638] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 41.810649][ T1638] EXT4-fs warning (device loop1): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 41.839652][ T282] EXT4-fs (loop1): unmounting filesystem. [ 41.882465][ T1651] xt_hashlimit: size too large, truncated to 1048576 [ 41.941152][ T1655] SELinux: failed to load policy [ 42.122615][ T1674] loop1: detected capacity change from 0 to 1024 [ 42.143300][ T1674] journal_path: Non-blockdev passed as '' [ 42.155618][ T1674] EXT4-fs: error: could not find journal device path [ 42.381526][ T1718] loop4: detected capacity change from 0 to 256 [ 42.407678][ T1718] exfat: Deprecated parameter 'namecase' [ 42.440326][ T1718] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 42.455347][ T1727] loop2: detected capacity change from 0 to 16 [ 42.462304][ T1727] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.471361][ T1727] SELinux: (dev loop2, type erofs) getxattr errno 117 [ 42.575547][ T1754] tun0: tun_chr_ioctl cmd 1074812117 [ 42.646185][ T1760] netlink: 64 bytes leftover after parsing attributes in process `syz.5.598'. [ 42.655201][ T1760] netlink: 64 bytes leftover after parsing attributes in process `syz.5.598'. [ 42.983675][ T338] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 43.173665][ T338] usb 5-1: Using ep0 maxpacket: 8 [ 43.181694][ T338] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 43.191131][ T338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.199581][ T338] usb 5-1: Product: syz [ 43.201983][ T1771] netlink: 'syz.3.603': attribute type 4 has an invalid length. [ 43.204471][ T338] usb 5-1: Manufacturer: syz [ 43.211875][ T1771] netlink: 17 bytes leftover after parsing attributes in process `syz.3.603'. [ 43.216517][ T338] usb 5-1: SerialNumber: syz [ 43.230789][ T338] usb 5-1: config 0 descriptor?? [ 43.242976][ T1773] netlink: 36 bytes leftover after parsing attributes in process `syz.3.604'. [ 43.292488][ T1781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 43.332611][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 43.341903][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 43.351050][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 43.360479][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 43.369729][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 43.380597][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 43.439720][ T338] usb 5-1: USB disconnect, device number 3 [ 43.515952][ T1818] device erspan0 entered promiscuous mode [ 43.610567][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 43.610583][ T28] audit: type=1400 audit(2000000260.995:366): avc: denied { create } for pid=1837 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.636714][ T28] audit: type=1400 audit(2000000261.025:367): avc: denied { map } for pid=1837 comm="syz.2.635" path="socket:[21098]" dev="sockfs" ino=21098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.666582][ T28] audit: type=1400 audit(2000000261.025:368): avc: denied { read accept } for pid=1837 comm="syz.2.635" path="socket:[21098]" dev="sockfs" ino=21098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.722708][ T1852] loop2: detected capacity change from 0 to 512 [ 43.733878][ T1852] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.744931][ T28] audit: type=1400 audit(2000000261.135:369): avc: denied { remount } for pid=1850 comm="syz.2.642" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.775094][ T1852] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 43.785535][ T1852] EXT4-fs warning (device loop2): ext4_enable_quotas:7055: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.803789][ T290] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 43.812300][ T288] EXT4-fs (loop2): unmounting filesystem. [ 43.850499][ T28] audit: type=1326 audit(2000000261.235:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1872 comm="syz.1.651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe86338f6c9 code=0x0 [ 43.914998][ T1879] loop2: detected capacity change from 0 to 512 [ 43.928525][ T1879] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.653: error while reading EA inode 32 err=-116 [ 43.941278][ T1879] EXT4-fs (loop2): Remounting filesystem read-only [ 43.948339][ T1879] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.653: error while reading EA inode 32 err=-116 [ 43.960281][ T28] audit: type=1400 audit(2000000261.345:371): avc: denied { unlink } for pid=1884 comm="syz.5.655" name="#3" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 43.963709][ T1879] EXT4-fs (loop2): Remounting filesystem read-only [ 43.989313][ T290] usb 4-1: Using ep0 maxpacket: 16 [ 43.996013][ T1879] EXT4-fs (loop2): 1 orphan inode deleted [ 44.004748][ T1879] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 44.014278][ T290] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 44.033661][ T290] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 44.043460][ T290] usb 4-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.057001][ T290] usb 4-1: config 1 interface 0 has no altsetting 0 [ 44.065606][ T288] EXT4-fs (loop2): unmounting filesystem. [ 44.073081][ T290] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.082989][ T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 44.095569][ T290] usb 4-1: SerialNumber: syz [ 44.103834][ T1820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 44.111064][ T1820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 44.118322][ T28] audit: type=1400 audit(2000000261.495:372): avc: denied { bind } for pid=1897 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.250954][ T1913] loop2: detected capacity change from 0 to 512 [ 44.259313][ T1913] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.277293][ T1913] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 44.286536][ T1913] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.310291][ T288] EXT4-fs (loop2): unmounting filesystem. [ 44.345992][ T1820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 44.353304][ T1820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 44.428353][ T1915] loop5: detected capacity change from 0 to 40427 [ 44.436362][ T1915] F2FS-fs (loop5): invalid crc value [ 44.443107][ T1915] F2FS-fs (loop5): Found nat_bits in checkpoint [ 44.478463][ T1915] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 44.511660][ T997] syz-executor: attempt to access beyond end of device [ 44.511660][ T997] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 44.729230][ T1940] SELinux: truncated policydb string identifier [ 44.735811][ T1940] SELinux: failed to load policy [ 44.761848][ T290] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 44.848668][ T1963] binder: 1962:1963 ioctl c018620c 200000004980 returned -1 [ 44.872502][ T1965] loop5: detected capacity change from 0 to 128 [ 44.881086][ T1967] loop4: detected capacity change from 0 to 16 [ 44.888265][ T1967] erofs: (device loop4): mounted with root inode @ nid 36. [ 44.905022][ T1965] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 44.922801][ T1965] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.942684][ T997] EXT4-fs (loop5): unmounting filesystem. [ 44.965508][ T290] usb 4-1: USB disconnect, device number 3 [ 45.000045][ T1978] loop4: detected capacity change from 0 to 256 [ 45.095007][ T28] audit: type=1400 audit(2000000262.485:373): avc: denied { name_bind } for pid=1993 comm="syz.5.703" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 45.140364][ T28] audit: type=1400 audit(2000000262.525:374): avc: denied { connect } for pid=2000 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.235592][ T2014] device veth1_macvtap left promiscuous mode [ 45.243090][ T2014] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 45.395298][ T2041] xt_hashlimit: size too large, truncated to 1048576 [ 45.884104][ T2100] netlink: 'syz.3.750': attribute type 5 has an invalid length. [ 45.895047][ T2102] loop4: detected capacity change from 0 to 2048 [ 45.905565][ T2102] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 45.914156][ T338] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 45.921802][ T2102] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.948001][ T2111] loop5: detected capacity change from 0 to 256 [ 45.955810][ T287] EXT4-fs (loop4): unmounting filesystem. [ 45.961152][ T2111] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.974608][ T2111] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 45.978001][ T2114] loop3: detected capacity change from 0 to 512 [ 45.985981][ T2111] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010561, chksum : 0x50c549e0, utbl_chksum : 0xe619d30d) [ 46.019270][ T2114] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.033846][ T2114] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.070154][ T289] EXT4-fs (loop3): unmounting filesystem. [ 46.103655][ T338] usb 2-1: Using ep0 maxpacket: 16 [ 46.109998][ T338] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 46.129395][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.154196][ T338] usb 2-1: config 0 descriptor?? [ 46.160854][ T338] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 46.289766][ T2122] loop5: detected capacity change from 0 to 40427 [ 46.297335][ T2122] F2FS-fs (loop5): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 46.306573][ T2122] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 46.315381][ T2122] F2FS-fs (loop5): fault_type options not supported [ 46.323693][ T2122] F2FS-fs (loop5): fault_injection options not supported [ 46.340949][ T2122] F2FS-fs (loop5): Image doesn't support compression [ 46.348602][ T2122] F2FS-fs (loop5): invalid crc value [ 46.360679][ T338] usb 2-1: Detected FT232A [ 46.365860][ T2122] F2FS-fs (loop5): Found nat_bits in checkpoint [ 46.374277][ T338] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 46.394465][ T338] usb 2-1: USB disconnect, device number 4 [ 46.404406][ T338] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 46.423856][ T338] ftdi_sio 2-1:0.0: device disconnected [ 46.440051][ T2122] F2FS-fs (loop5): Start checkpoint disabled! [ 46.447151][ T2122] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 46.454531][ T2122] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 46.469919][ T2145] futex_wake_op: syz.4.769 tries to shift op by 36; fix this program [ 46.481277][ T2122] syz.5.761: attempt to access beyond end of device [ 46.481277][ T2122] loop5: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 46.614556][ T2157] loop3: detected capacity change from 0 to 4096 [ 46.621268][ T43] kworker/u4:2: attempt to access beyond end of device [ 46.621268][ T43] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 46.635788][ T2157] EXT4-fs (loop3): Test dummy encryption mode enabled [ 46.654238][ T2157] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 46.673789][ T2157] System zones: 0-5 [ 46.684084][ T2157] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.734731][ T289] EXT4-fs (loop3): unmounting filesystem. [ 46.824570][ T2167] loop3: detected capacity change from 0 to 2048 [ 46.841149][ T2173] loop4: detected capacity change from 0 to 512 [ 46.848688][ T2173] EXT4-fs (loop4): Test dummy encryption mode enabled [ 46.857750][ T2167] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.859253][ T2173] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.782: inode #1: comm syz.4.782: iget: illegal inode # [ 46.879360][ T2173] EXT4-fs (loop4): Remounting filesystem read-only [ 46.886148][ T2173] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.782: error while reading EA inode 1 err=-117 [ 46.899162][ T289] EXT4-fs (loop3): unmounting filesystem. [ 46.905080][ T2173] EXT4-fs (loop4): Remounting filesystem read-only [ 46.911909][ T2173] EXT4-fs (loop4): 1 orphan inode deleted [ 46.918319][ T2173] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.952594][ T287] EXT4-fs (loop4): unmounting filesystem. [ 46.953492][ T2186] loop5: detected capacity change from 0 to 512 [ 46.974642][ T2186] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 47.009273][ T997] EXT4-fs (loop5): unmounting filesystem. [ 47.050768][ T2196] loop5: detected capacity change from 0 to 128 [ 47.128351][ T2202] loop5: detected capacity change from 0 to 2048 [ 47.143962][ T2202] EXT4-fs: Ignoring removed i_version option [ 47.164162][ T2202] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 47.182958][ T2202] EXT4-fs error (device loop5): ext4_find_extent:936: inode #2: comm syz.5.793: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 47.209120][ T2182] loop3: detected capacity change from 0 to 40427 [ 47.216539][ T2202] EXT4-fs (loop5): Remounting filesystem read-only [ 47.220330][ T2182] F2FS-fs (loop3): heap/no_heap options were deprecated [ 47.229484][ T2202] EXT4-fs error (device loop5): ext4_ext_precache:627: inode #2: comm syz.5.793: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 47.230227][ T2182] F2FS-fs (loop3): fault_injection options not supported [ 47.254679][ T2182] F2FS-fs (loop3): fault_type options not supported [ 47.261953][ T2202] EXT4-fs (loop5): Remounting filesystem read-only [ 47.268901][ T2182] F2FS-fs (loop3): invalid crc value [ 47.288135][ T997] EXT4-fs (loop5): unmounting filesystem. [ 47.291649][ T2212] loop4: detected capacity change from 0 to 512 [ 47.294987][ T2182] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.300788][ T2212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.314121][ T2212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.320806][ T2212] EXT4-fs: Ignoring removed i_version option [ 47.328540][ T2212] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c099, mo2=0002] [ 47.338384][ T2212] System zones: 1-12 [ 47.343089][ T2212] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.796: inode #1: comm syz.4.796: iget: illegal inode # [ 47.356455][ T2212] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.796: error while reading EA inode 1 err=-117 [ 47.362792][ T2182] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 47.369320][ T2212] EXT4-fs (loop4): 1 orphan inode deleted [ 47.382002][ T2212] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.419875][ T287] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 47.440675][ T289] syz-executor: attempt to access beyond end of device [ 47.440675][ T289] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 47.454912][ T287] ------------[ cut here ]------------ [ 47.460427][ T287] kernel BUG at fs/namei.c:2954! [ 47.474366][ T287] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 47.480487][ T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0 [ 47.487958][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 47.498027][ T287] RIP: 0010:may_delete+0x701/0x710 [ 47.503156][ T287] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 d0 14 f4 ff e9 77 fe ff ff e8 96 a1 af ff 0f 0b e8 8f a1 af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 47.522767][ T287] RSP: 0018:ffffc9000d2a7c20 EFLAGS: 00010293 [ 47.528837][ T287] RAX: ffffffff81c07e71 RBX: ffff88811139baa0 RCX: ffff88810ddc1440 [ 47.536826][ T287] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 47.544799][ T287] RBP: ffffc9000d2a7c88 R08: 0000000000000004 R09: 0000000000000003 [ 47.552776][ T287] R10: fffff52001a54f64 R11: 1ffff92001a54f64 R12: dffffc0000000000 [ 47.560756][ T287] R13: 0000000000000001 R14: ffff88811139bf10 R15: 1ffff11022273754 [ 47.568982][ T287] FS: 0000555557daf500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 47.577919][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.584502][ T287] CR2: 0000555557dda528 CR3: 000000012ebe8000 CR4: 00000000003526b0 [ 47.592489][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.600458][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.608429][ T287] Call Trace: [ 47.611711][ T287] [ 47.614645][ T287] vfs_rmdir+0x32/0x500 [ 47.618834][ T287] incfs_kill_sb+0x105/0x220 [ 47.623430][ T287] deactivate_locked_super+0xb5/0x120 [ 47.628809][ T287] deactivate_super+0xaf/0xe0 [ 47.633491][ T287] cleanup_mnt+0x45f/0x4e0 [ 47.637934][ T287] __cleanup_mnt+0x19/0x20 [ 47.642349][ T287] task_work_run+0x1db/0x240 [ 47.646946][ T287] ? __cfi_task_work_run+0x10/0x10 [ 47.652067][ T287] ? __x64_sys_umount+0x125/0x160 [ 47.657096][ T287] ? __cfi___x64_sys_umount+0x10/0x10 [ 47.662476][ T287] exit_to_user_mode_loop+0x9b/0xb0 [ 47.667707][ T287] exit_to_user_mode_prepare+0x87/0xd0 [ 47.673191][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 47.678675][ T287] do_syscall_64+0x58/0xa0 [ 47.683102][ T287] ? clear_bhb_loop+0x30/0x80 [ 47.687789][ T287] ? clear_bhb_loop+0x30/0x80 [ 47.692476][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 47.698408][ T287] RIP: 0033:0x7fa15e7909f7 [ 47.702840][ T287] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 47.722447][ T287] RSP: 002b:00007ffc1cf1b968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 47.730866][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa15e7909f7 [ 47.738838][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1cf1ba20 [ 47.746824][ T287] RBP: 00007ffc1cf1ba20 R08: 0000000000000000 R09: 0000000000000000 [ 47.754793][ T287] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1cf1cb10 [ 47.762767][ T287] R13: 00007fa15e811d7d R14: 000000000000b921 R15: 00007ffc1cf1dbe0 [ 47.770759][ T287] [ 47.773789][ T287] Modules linked in: [ 47.777966][ T287] ---[ end trace 0000000000000000 ]--- [ 47.783525][ T287] RIP: 0010:may_delete+0x701/0x710 [ 47.788786][ T287] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 d0 14 f4 ff e9 77 fe ff ff e8 96 a1 af ff 0f 0b e8 8f a1 af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 47.808559][ T287] RSP: 0018:ffffc9000d2a7c20 EFLAGS: 00010293 [ 47.815335][ T287] RAX: ffffffff81c07e71 RBX: ffff88811139baa0 RCX: ffff88810ddc1440 [ 47.823408][ T287] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 47.831537][ T287] RBP: ffffc9000d2a7c88 R08: 0000000000000004 R09: 0000000000000003 [ 47.839640][ T287] R10: fffff52001a54f64 R11: 1ffff92001a54f64 R12: dffffc0000000000 [ 47.847823][ T287] R13: 0000000000000001 R14: ffff88811139bf10 R15: 1ffff11022273754 [ 47.855923][ T287] FS: 0000555557daf500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 47.865016][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.871676][ T287] CR2: 0000555557dd24e8 CR3: 000000012ebe8000 CR4: 00000000003506a0 [ 47.879772][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.887888][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.895994][ T287] Kernel panic - not syncing: Fatal exception [ 47.902366][ T287] Kernel Offset: disabled [ 47.906695][ T287] Rebooting in 86400 seconds..