last executing test programs: 1m7.234553594s ago: executing program 1 (id=662): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af0ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000020000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m7.179554875s ago: executing program 1 (id=667): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\b\b\x00'}}}]}, 0x48}}, 0x0) 1m7.135274526s ago: executing program 1 (id=670): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x804810, &(0x7f0000000b80)={[{@init_itable}, {@usrjquota}, {@nobh}, {@resuid}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x86400, 0xc4) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a40)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m6.847606055s ago: executing program 1 (id=680): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x380000c, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}, {@noblock_validity}]}, 0x1, 0x45d, &(0x7f0000002240)="$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") mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 1m6.555650385s ago: executing program 1 (id=686): r0 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='posixacl\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000640)='(\x00', 0x0) 1m5.806060859s ago: executing program 1 (id=703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000000)) 1m5.687598343s ago: executing program 32 (id=703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000000)) 51.599731652s ago: executing program 0 (id=1042): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000dc0)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2076) ioctl$TIOCMGET(r1, 0x5415, 0x0) 51.566059394s ago: executing program 0 (id=1043): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) finit_module(r2, 0x0, 0x0) 51.522046905s ago: executing program 0 (id=1046): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ffffffff00000000fdfffdff850000002800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) 51.480913996s ago: executing program 0 (id=1048): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@nomblk_io_submit}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 51.307900382s ago: executing program 0 (id=1054): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000002"], 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)=ANY=[@ANYBLOB="05000000000001000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000002"], 0x48}, 0x300}, 0x0) 50.793167728s ago: executing program 0 (id=1063): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x2, 0x6}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 50.786480148s ago: executing program 33 (id=1063): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x2, 0x6}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 48.670242396s ago: executing program 5 (id=1089): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 48.496304641s ago: executing program 5 (id=1090): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') lseek(r0, 0x3, 0x0) 48.466592172s ago: executing program 5 (id=1091): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc0011023) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 48.444731573s ago: executing program 5 (id=1092): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) 48.412821274s ago: executing program 5 (id=1093): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000080), 0x0}, 0x20) 48.297139398s ago: executing program 5 (id=1094): r0 = timerfd_create(0x9, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000007000)={{0x0, 0x989680}, {0x77359400}}, 0x0) 48.282369898s ago: executing program 34 (id=1094): r0 = timerfd_create(0x9, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000007000)={{0x0, 0x989680}, {0x77359400}}, 0x0) 44.953094344s ago: executing program 2 (id=1178): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000007d0000004300000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600), &(0x7f00000001c0), 0x71, r0}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 44.952945194s ago: executing program 2 (id=1179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000006c0)=@x86={0x5, 0x1, 0x4, 0x0, 0xf, 0x8, 0x4, 0x8, 0x4, 0x3, 0x9, 0x8, 0x0, 0x4, 0x4, 0x2, 0x6d, 0x1, 0x0, '\x00', 0x8, 0xfffffffffffffffc}) 44.839993608s ago: executing program 2 (id=1184): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$eJzs3LtvHMUfAPDvrl+/X54GAiQhAkOEsHjYsRMgBQ0IJIogQFAEqIztRFGcGMVGwlGUGIRCg4QiQQ2USPwFdDQIqJCQqKBHQRGkSUAUh/ZuNzmvffEj5zsn9/lIZ8/c7N7M7Ozszs74HEDHGsh+JBFbIuLXiNheiy7cYKD26+rlM+N/Xz4znkSl8tqfETEfceXymfFi02K/zXlkMI1IP0zyTBaamTt9fGxqavJUHh+ePfHO8Mzc6SeOnRg7Onl08uTowYMH9o88/dTok02pZ1avK7vPTu/Z9eIbF14aP3zh7R++zsq7JU+vr8ea9C5+ayCr+F+VqnLaw/H/m8puo9laF06621gQVqUrIrLm6sn6f6VSOVeXtj1e+GCZ3Tevc/GAdZTdm/qWeD+/L85XGkpumArcCpJodwmA9iju99nzb/Fq4fCj7S49W3sAyup9NX/VUrojzbfpKT3fNtNARBye/+fz7BXNmIcAAFjGx+OfHYrHlxr/pXFPLfBH9mNbvobSHxF3RMSdEXFXROyIiLsjqtveGxE7V5Jp3QJBeWlo8fgnvVjapKmrC9n475l8bWvh+K8Y/UV/Vx7bWq1/T3Lk2NTkvvyYDEZPXxYfuUEe3z7/8yeN0urHf9kry78YC+bluNhdmqCbGJsdqw5Km+DS+xG7u+PfSqVSqn9y7UAnEbErInav7qO3FYFjj361p9FGy9d/0cdd14QzofJlxCO19p+PUv0LyeL1yd6t19cnh/8XU5P7houzYrEffzr/SqP8V17/9ZG1/6aF53+e8sVcHuh/q369diYarFxuaZjH+d8+avhMs9bzvzd5vXo9KpZd3xubnT01EtGbHKrGF7w/en3fIl5sn9V/cG9EZHlU61/smVavcZG3/30RsSdfL7s/Ih7Iy/5gRDwUEXsb1j7i++cap22E9p+oa/8kyuf/zrO130X7z6060HX8u28a5b+y9j9QDQ3m71Svf8tYaQHXfuQAAADg1pFWZ26SdOhaOE2Hhmp/2LsjNqVT0zOzjx2ZfvfkRG2Gpz960mKma3vdfOhIMp9/Yi0+ms8VF+n783njT7uiGh8an56aaHPdodNtbtD/M793tbt0wLpbah1tdIkvtAG3n3L/TxdGz73cysIALeX72tC5lun/aavKAbSe+z90rqX6/7lS3FoA3J7c/6Fz6f/QufR/6Fyl/t8Vv7SrJEALreHr/AIbJvDq0Gr26otm5h7pBjkI5UDx70nqklb+/yBuGOi7+RK+eZPFSKNVB7PNFyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAm+S8AAP//i1LmAQ==") r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400"], 0x44}}, 0x0) 44.756525401s ago: executing program 2 (id=1189): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x4) 44.679160263s ago: executing program 2 (id=1192): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 44.554863397s ago: executing program 2 (id=1194): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 44.484714229s ago: executing program 35 (id=1194): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 1.84775265s ago: executing program 8 (id=2218): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) 1.818655842s ago: executing program 8 (id=2219): rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) setitimer(0x0, &(0x7f00000002c0)={{0x0, 0xea60}, {0x77359400}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) 1.633436017s ago: executing program 8 (id=2225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x7000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) 1.528316891s ago: executing program 8 (id=2228): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000008000000b702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 1.497549072s ago: executing program 8 (id=2230): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r1, 0x0, r0, 0x0, 0x20000000000002, 0x2) 1.211393431s ago: executing program 6 (id=2243): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) ftruncate(r0, 0x3) 935.5682ms ago: executing program 6 (id=2245): personality(0xfe47fef9f5ff7379) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x2000000db002) brk(0x200000ffc000) 890.074621ms ago: executing program 6 (id=2246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x80000008, 0x1000, 0x10001, 0x8, 0x7fff}]}) 689.327838ms ago: executing program 6 (id=2259): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000000), 0x0) 652.458379ms ago: executing program 6 (id=2250): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 632.461349ms ago: executing program 6 (id=2251): syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x8000001, 0x1}, 0x8) close(r0) 630.25856ms ago: executing program 3 (id=2252): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.swap.events\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x3000000000000000, 0x8}) fcntl$lock(r0, 0x25, &(0x7f00000002c0)={0x1, 0x2, 0x400000b, 0x7}) fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x0, 0x0, 0x4000011, 0x40001}) 608.76922ms ago: executing program 3 (id=2253): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, 0x0, 0x0) 579.893901ms ago: executing program 3 (id=2254): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="6d970eb1ac73ba5863017cea1998c5e9777fdeae55a7d8018aa689587f8421972a34d230174b170b", 0x28, 0x4000841, &(0x7f0000000340)={0x11, 0x5, r2, 0x1, 0x89, 0x6, @local}, 0x14) 565.903581ms ago: executing program 8 (id=2255): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0xc01) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 529.796833ms ago: executing program 7 (id=2256): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 529.206393ms ago: executing program 3 (id=2257): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f696e6c696e655f78617474722c6163746976655f6c6f67733d342c646973636172642c6661756c745f696e6a656374696f6e3d30303030303030303030303030303034313136302c6661756c745f747970653d30303030303030303030303030303030303737302c6d6f64653d6c66732c696e6c696e655f646174612c66617374626f6f742c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c00cb"], 0x21, 0x5548, &(0x7f00000058c0)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r0, 0x0, 0x0) 430.126356ms ago: executing program 7 (id=2258): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) close(0x3) socket(0x10, 0x803, 0x0) sendmmsg(r0, &(0x7f00000094c0)=[{{&(0x7f00000007c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000880)="f3", 0x1}], 0x1}}, {{&(0x7f00000011c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, 0x0, 0x0, &(0x7f0000004400)=ANY=[], 0x10}}], 0x2, 0x10) 415.555776ms ago: executing program 7 (id=2260): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d80)=ANY=[@ANYBLOB="5c0000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="d80e0600416a01003c001280110001006272696467655f736c6176650000000024000580080003000600000006000200"], 0x5c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 391.759547ms ago: executing program 7 (id=2261): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) 378.424977ms ago: executing program 7 (id=2262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000003030103000000000000000000000e2e"], 0x20}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040) 355.512148ms ago: executing program 7 (id=2263): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) read(r0, &(0x7f0000000000)=""/149, 0xaa) 234.848802ms ago: executing program 4 (id=2264): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ftruncate(0xffffffffffffffff, 0xc17a) 171.249254ms ago: executing program 3 (id=2265): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x10000}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x80000000}) 58.471578ms ago: executing program 4 (id=2266): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x0, 0x3, 0x1, 0xfbe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x0, 0x3}, 0x20) 46.684838ms ago: executing program 4 (id=2267): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x40, 0x25dfdbff, {0xa, 0x3f, 0x9, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 35.229358ms ago: executing program 4 (id=2268): ftruncate(0xffffffffffffffff, 0xc17a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f00000001c0)) 25.310049ms ago: executing program 4 (id=2269): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffff8f, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x3b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 13.479269ms ago: executing program 4 (id=2270): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x185842, 0xa9) writev(r0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x40000}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 0s ago: executing program 3 (id=2271): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shutdown(0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) userfaultfd(0x80001) 0s ago: executing program 4 (id=2272): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) kernel console output (not intermixed with test programs): 65525][ T24] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 72.467994][ T2877] FAT-fs (loop3): Directory bread(block 71) failed [ 72.482548][ T24] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 72.482938][ T2877] FAT-fs (loop3): Directory bread(block 72) failed [ 72.497842][ T2877] FAT-fs (loop3): Directory bread(block 73) failed [ 72.505817][ T24] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 72.518360][ T24] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 72.531233][ T298] usb 3-1: unit 0 not found! [ 72.571694][ T2882] exfat: Deprecated parameter 'utf8' [ 72.575715][ T24] hid-thrustmaster 0003:044F:B65D.0007: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 72.599740][ T2882] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 72.602476][ T24] hid-thrustmaster 0003:044F:B65D.0007: Wrong number of endpoints? [ 72.631292][ C1] hid-thrustmaster 0003:044F:B65D.0007: Unknown packet type 0x0, unable to proceed further with wheel init [ 72.687239][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.699189][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.712415][ T2865] device veth0_vlan entered promiscuous mode [ 72.724793][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.744061][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.744804][ T298] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 72.758005][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 72.758019][ T28] audit: type=1400 audit(2000000278.683:379): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.775039][ T298] usb 3-1: unit 0 not found! [ 72.786935][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.801660][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.816079][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.825151][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.836397][ T298] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 72.837076][ T2865] device veth1_macvtap entered promiscuous mode [ 72.845242][ T298] usb 3-1: unit 0 not found! [ 72.854070][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.868649][ T2896] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 72.885966][ T2898] EXT4-fs (loop4): 1 truncate cleaned up [ 72.897497][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.908435][ T298] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 72.915332][ T19] usb 6-1: USB disconnect, device number 2 [ 72.921412][ T2898] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 72.925186][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.960717][ T546] EXT4-fs (loop3): unmounting filesystem. [ 72.963550][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.974993][ T28] audit: type=1400 audit(2000000278.886:380): avc: denied { lock } for pid=2897 comm="syz.4.1076" path="/238/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.976476][ T298] usb 3-1: USB disconnect, device number 2 [ 73.009380][ T28] audit: type=1400 audit(2000000278.914:381): avc: denied { mount } for pid=2865 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.016138][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.047537][ T653] udevd[653]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.058584][ T292] EXT4-fs (loop4): unmounting filesystem. [ 73.099187][ T2911] tipc: Started in network mode [ 73.104076][ T2911] tipc: Node identity ac14140f, cluster identity 4711 [ 73.151277][ T2911] tipc: New replicast peer: 255.255.255.255 [ 73.168390][ T2911] tipc: Enabled bearer , priority 10 [ 73.230408][ T28] audit: type=1400 audit(2000000279.117:382): avc: denied { write } for pid=2917 comm="syz.4.1082" path="socket:[27586]" dev="sockfs" ino=27586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.297535][ T2925] device syz_tun entered promiscuous mode [ 73.304160][ T2925] device macsec1 entered promiscuous mode [ 73.310777][ T2925] device syz_tun left promiscuous mode [ 73.435567][ T291] EXT4-fs (loop2): unmounting filesystem. [ 73.575945][ T2913] set_capacity_and_notify: 15 callbacks suppressed [ 73.575958][ T2913] loop6: detected capacity change from 0 to 131072 [ 73.592931][ T2913] F2FS-fs (loop6): invalid crc value [ 73.601524][ T2913] F2FS-fs (loop6): Found nat_bits in checkpoint [ 73.624194][ T2938] loop5: detected capacity change from 0 to 512 [ 73.634621][ T2938] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.666271][ T2938] EXT4-fs (loop5): orphan cleanup on readonly fs [ 73.666896][ T2913] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 73.672954][ T2938] EXT4-fs warning (device loop5): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 73.697196][ T2938] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 73.704039][ T2938] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.1089: bad orphan inode 768 [ 73.714460][ T2938] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 73.747796][ T2938] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 73.768635][ T2938] EXT4-fs warning (device loop5): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 73.789806][ T2039] EXT4-fs (loop5): unmounting filesystem. [ 73.856289][ T2947] incfs: Can't find or create .index dir in . [ 73.862920][ T2947] incfs: mount failed -1 [ 74.127035][ T2951] loop3: detected capacity change from 0 to 512 [ 74.159824][ T2951] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.1096: inode has both inline data and extents flags [ 74.181222][ T2951] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1096: couldn't read orphan inode 15 (err -117) [ 74.194084][ T2951] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.221917][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.234358][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.241966][ T2949] device bridge_slave_0 entered promiscuous mode [ 74.249479][ T546] EXT4-fs (loop3): unmounting filesystem. [ 74.249856][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.262598][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.270299][ T2949] device bridge_slave_1 entered promiscuous mode [ 74.310379][ T2959] loop4: detected capacity change from 0 to 1024 [ 74.332104][ T2959] EXT4-fs: Ignoring removed orlov option [ 74.348295][ T2961] loop3: detected capacity change from 0 to 512 [ 74.378000][ T28] audit: type=1400 audit(2000000280.178:383): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.398402][ T6] tipc: Node number set to 2886997007 [ 74.409592][ T2961] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.442970][ T2959] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.458970][ T2959] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.476096][ T2959] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.1099: lblock 0 mapped to illegal pblock 0 (length 6) [ 74.492327][ T2961] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.515935][ T2961] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1100: invalid indirect mapped block 4294967295 (level 1) [ 74.542730][ T2959] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 74.557261][ T2959] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.557261][ T2959] [ 74.569466][ T2961] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1100: invalid indirect mapped block 4294967295 (level 1) [ 74.587231][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.589202][ T2973] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 8: comm syz.4.1099: lblock 8 mapped to illegal pblock 8 (length 8) [ 74.602231][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.613673][ T2961] EXT4-fs (loop3): 2 truncates cleaned up [ 74.616606][ T2973] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 74.621774][ T2961] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.635002][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.651279][ T2973] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.651279][ T2973] [ 74.674456][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.685637][ T2978] loop2: detected capacity change from 0 to 2048 [ 74.688707][ T2413] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.699077][ T2413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.715995][ T2980] loop6: detected capacity change from 0 to 256 [ 74.743016][ T2966] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 74.745792][ T2961] EXT4-fs: Ignoring removed orlov option [ 74.759742][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.764933][ T2978] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 74.777724][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.791065][ T2961] EXT4-fs: Ignoring removed orlov option [ 74.796773][ T2961] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 74.801969][ T2980] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.816521][ T2413] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.817187][ T2961] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 74.823939][ T2413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.824352][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.846601][ T291] EXT4-fs (loop2): unmounting filesystem. [ 74.846820][ T2980] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 74.861700][ T10] device bridge_slave_1 left promiscuous mode [ 74.869526][ T292] EXT4-fs (loop4): unmounting filesystem. [ 74.885775][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.888697][ T2980] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 74.921614][ T10] device bridge_slave_0 left promiscuous mode [ 74.932859][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.941212][ T546] EXT4-fs (loop3): unmounting filesystem. [ 74.955444][ T10] device veth1_macvtap left promiscuous mode [ 74.980163][ T10] device veth0_vlan left promiscuous mode [ 74.987758][ T28] audit: type=1400 audit(2000000280.741:384): avc: denied { create } for pid=2987 comm="syz.3.1108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 75.029891][ T28] audit: type=1400 audit(2000000280.759:385): avc: denied { connect } for pid=2987 comm="syz.3.1108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 75.087084][ T28] audit: type=1400 audit(2000000280.759:386): avc: denied { name_connect } for pid=2987 comm="syz.3.1108" dest=20001 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 75.215973][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.242840][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.264607][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.283883][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.293925][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.302061][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.315873][ T2949] device veth0_vlan entered promiscuous mode [ 75.340200][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.350818][ T2949] device veth1_macvtap entered promiscuous mode [ 75.365833][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.375466][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.398989][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.417643][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.446154][ T3022] bridge0: port 3(syz_tun) entered blocking state [ 75.455468][ T3022] bridge0: port 3(syz_tun) entered disabled state [ 75.463819][ T3022] device syz_tun entered promiscuous mode [ 75.471954][ T3022] bridge0: port 3(syz_tun) entered blocking state [ 75.478436][ T3022] bridge0: port 3(syz_tun) entered forwarding state [ 75.510214][ T3028] serio: Serial port ttyS3 [ 75.556806][ T3030] loop4: detected capacity change from 0 to 256 [ 75.563635][ T3030] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.584903][ T3030] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.711684][ T28] audit: type=1400 audit(2000000281.414:387): avc: denied { append } for pid=3035 comm="syz.4.1126" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.756235][ T3042] loop4: detected capacity change from 0 to 256 [ 75.807513][ T3044] loop4: detected capacity change from 0 to 4096 [ 75.824891][ T3044] EXT4-fs (loop4): Test dummy encryption mode enabled [ 75.838065][ T3044] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 75.847604][ T3044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.876405][ T292] EXT4-fs (loop4): unmounting filesystem. [ 75.915889][ T28] audit: type=1400 audit(2000000281.599:388): avc: denied { watch_reads } for pid=3050 comm="syz.3.1133" path="/192/file0" dev="tmpfs" ino=1025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.038959][ T3064] exfat: Deprecated parameter 'utf8' [ 76.054186][ T3064] exfat: Deprecated parameter 'utf8' [ 76.059938][ T3066] binfmt_misc: register: failed to install interpreter file ./file0 [ 76.070756][ T3064] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 76.161526][ T3071] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 76.184242][ T3071] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 76.328480][ T3090] EXT4-fs (loop2): Test dummy encryption mode enabled [ 76.384565][ T3090] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1151: inode has both inline data and extents flags [ 76.435873][ T3090] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1151: couldn't read orphan inode 15 (err -117) [ 76.464778][ T3090] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.514137][ T291] EXT4-fs (loop2): unmounting filesystem. [ 76.721374][ T3122] F2FS-fs (loop2): invalid crc value [ 76.744621][ T3122] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.788053][ T3122] F2FS-fs (loop2): Start checkpoint disabled! [ 76.803820][ T3122] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 76.811563][ T3122] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 76.843204][ T3139] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 76.862155][ T3139] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.891751][ T2949] EXT4-fs (loop7): unmounting filesystem. [ 77.093492][ T3142] F2FS-fs (loop7): invalid crc value [ 77.109714][ T3142] F2FS-fs (loop7): Found nat_bits in checkpoint [ 77.171350][ T3142] F2FS-fs (loop7): Start checkpoint disabled! [ 77.178141][ T3142] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 77.189393][ T3142] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 77.192861][ T3150] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 77.249074][ T291] EXT4-fs (loop2): unmounting filesystem. [ 77.268474][ T2413] bio_check_eod: 12 callbacks suppressed [ 77.268492][ T2413] kworker/u4:7: attempt to access beyond end of device [ 77.268492][ T2413] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 77.448380][ T3173] EXT4-fs: Ignoring removed bh option [ 77.467479][ T3173] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 77.478289][ T3173] EXT4-fs (loop2): 1 truncate cleaned up [ 77.484102][ T3173] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 77.551331][ T291] EXT4-fs (loop2): unmounting filesystem. [ 77.599817][ T3185] FAT-fs (loop3): Directory bread(block 64) failed [ 77.636181][ T3185] FAT-fs (loop3): Directory bread(block 65) failed [ 77.658152][ T3185] FAT-fs (loop3): Directory bread(block 66) failed [ 77.671674][ T3185] FAT-fs (loop3): Directory bread(block 67) failed [ 77.690674][ T3185] FAT-fs (loop3): Directory bread(block 68) failed [ 77.697260][ T3185] FAT-fs (loop3): Directory bread(block 69) failed [ 77.712335][ T3185] FAT-fs (loop3): Directory bread(block 70) failed [ 77.718460][ T3193] SELinux: ebitmap: truncated map [ 77.719156][ T3185] FAT-fs (loop3): Directory bread(block 71) failed [ 77.744068][ T3164] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 77.750867][ T3185] FAT-fs (loop3): Directory bread(block 72) failed [ 77.759052][ T3164] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 77.770558][ T3185] FAT-fs (loop3): Directory bread(block 73) failed [ 77.775380][ T3193] SELinux: failed to load policy [ 77.818951][ T3164] F2FS-fs (loop6): Found nat_bits in checkpoint [ 77.915760][ T3164] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 77.953382][ T3164] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 78.212275][ T2413] device bridge_slave_1 left promiscuous mode [ 78.218578][ T2413] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.271967][ T2413] device bridge_slave_0 left promiscuous mode [ 78.315851][ T2413] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.340426][ T2413] device veth1_macvtap left promiscuous mode [ 78.351988][ T2413] device veth0_vlan left promiscuous mode [ 78.486672][ T3223] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.496180][ T3223] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.514823][ T3223] device bridge_slave_0 entered promiscuous mode [ 78.525901][ T3223] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.546831][ T3223] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.570299][ T3223] device bridge_slave_1 entered promiscuous mode [ 78.745235][ T3223] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.752421][ T3223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.759789][ T3223] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.767066][ T3223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.796981][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.807410][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.855955][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.863605][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.884632][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.904025][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.946903][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.954129][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.979821][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.999527][ T3254] F2FS-fs (loop6): invalid crc value [ 79.006096][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.025463][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.032538][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.036906][ T3212] set_capacity_and_notify: 14 callbacks suppressed [ 79.036924][ T3212] loop7: detected capacity change from 0 to 131072 [ 79.054111][ T3254] F2FS-fs (loop6): Found nat_bits in checkpoint [ 79.079180][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.091352][ T3212] F2FS-fs (loop7): Invalid segment/section count (31, 24 x 150994945) [ 79.098770][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.115662][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.132329][ T3212] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 79.144749][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.148524][ T3254] F2FS-fs (loop6): Start checkpoint disabled! [ 79.163925][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.170071][ T3212] F2FS-fs (loop7): invalid crc value [ 79.178340][ T3254] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 79.188659][ T3254] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 79.189015][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.220345][ T3212] F2FS-fs (loop7): Found nat_bits in checkpoint [ 79.256515][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.273640][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.304482][ T3223] device veth0_vlan entered promiscuous mode [ 79.311314][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.327469][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.335249][ T3212] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 79.342083][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.353422][ T3212] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 79.359978][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.381001][ T3223] device veth1_macvtap entered promiscuous mode [ 79.427200][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.435885][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.455691][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.464314][ T3212] F2FS-fs (loop7): sanity_check_inode: corrupted inode footer i_ino=8, ino,nid: [10986248, 8] run fsck to fix. [ 79.483059][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.500562][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.595143][ T591] kworker/u4:5: attempt to access beyond end of device [ 79.595143][ T591] loop6: rw=1, sector=77824, nr_sectors = 8 limit=40427 [ 79.659724][ T591] kworker/u4:5: attempt to access beyond end of device [ 79.659724][ T591] loop6: rw=1, sector=77832, nr_sectors = 4088 limit=40427 [ 79.685797][ T3279] loop3: detected capacity change from 0 to 40427 [ 79.691926][ T591] kworker/u4:5: attempt to access beyond end of device [ 79.691926][ T591] loop6: rw=1, sector=49152, nr_sectors = 8 limit=40427 [ 79.707559][ T3279] F2FS-fs (loop3): Image doesn't support compression [ 79.725808][ T3279] F2FS-fs (loop3): invalid crc value [ 79.748800][ T3279] F2FS-fs (loop3): Found nat_bits in checkpoint [ 79.751381][ T591] kworker/u4:5: attempt to access beyond end of device [ 79.751381][ T591] loop6: rw=1, sector=49160, nr_sectors = 4088 limit=40427 [ 79.770818][ T591] kworker/u4:5: attempt to access beyond end of device [ 79.770818][ T591] loop6: rw=1, sector=57344, nr_sectors = 8 limit=40427 [ 79.798192][ T591] kworker/u4:5: attempt to access beyond end of device [ 79.798192][ T591] loop6: rw=1, sector=57352, nr_sectors = 4064 limit=40427 [ 79.815090][ T591] kworker/u4:5: attempt to access beyond end of device [ 79.815090][ T591] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 79.843753][ T3279] F2FS-fs (loop3): Start checkpoint disabled! [ 79.852381][ T3256] loop4: detected capacity change from 0 to 131072 [ 79.859455][ T3279] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 79.876198][ T3279] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 79.878670][ T3256] F2FS-fs (loop4): invalid crc value [ 79.938420][ T3256] F2FS-fs (loop4): Found nat_bits in checkpoint [ 80.006167][ T3256] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 80.056409][ T3305] loop7: detected capacity change from 0 to 512 [ 80.065599][ T3305] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.112170][ T3305] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 80.122748][ T3305] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.190248][ T2949] EXT4-fs (loop7): unmounting filesystem. [ 80.301574][ T3321] loop7: detected capacity change from 0 to 512 [ 80.319763][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 80.319777][ T28] audit: type=1400 audit(2000000285.659:394): avc: denied { getopt } for pid=3323 comm="syz.6.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.378646][ T3321] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 80.412961][ T3321] EXT4-fs (loop7): 1 truncate cleaned up [ 80.432630][ T3321] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 80.552105][ T3321] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 80.585970][ T3321] EXT4-fs: user quota file already specified [ 80.634097][ T2949] EXT4-fs (loop7): unmounting filesystem. [ 80.757127][ T3349] loop7: detected capacity change from 0 to 256 [ 80.787885][ T3349] exfat: Deprecated parameter 'namecase' [ 80.818630][ T3349] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 82.831562][ T6] kernel write not supported for file bpf-map (pid: 6 comm: kworker/0:0) [ 83.017689][ T3375] loop3: detected capacity change from 0 to 16 [ 83.045088][ T3375] erofs: (device loop3): mounted with root inode @ nid 36. [ 83.078871][ T3379] loop7: detected capacity change from 0 to 512 [ 83.123605][ T3379] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.145277][ T3379] ext4: Unknown parameter 'fsname' [ 83.434411][ T3335] loop6: detected capacity change from 0 to 131072 [ 83.472522][ T3335] F2FS-fs (loop6): Test dummy encryption mode enabled [ 83.510373][ T3335] F2FS-fs (loop6): invalid crc value [ 83.517537][ T3383] loop3: detected capacity change from 0 to 40427 [ 83.543662][ T3335] F2FS-fs (loop6): Found nat_bits in checkpoint [ 83.554363][ T3383] F2FS-fs (loop3): invalid crc value [ 83.565745][ T3383] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.580672][ T3335] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 83.631979][ T28] audit: type=1326 audit(2000000288.722:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.4.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 83.701573][ T28] audit: type=1326 audit(2000000288.722:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.4.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 83.717574][ T3383] F2FS-fs (loop3): Start checkpoint disabled! [ 83.752875][ T3383] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 83.759421][ T28] audit: type=1326 audit(2000000288.722:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.4.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 83.770834][ T3383] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 83.849522][ T3415] __nla_validate_parse: 2 callbacks suppressed [ 83.849540][ T3415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1284'. [ 83.867961][ T28] audit: type=1326 audit(2000000288.722:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.4.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 83.906266][ T2902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 83.940185][ T2902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 83.944523][ T28] audit: type=1326 audit(2000000288.722:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.4.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 83.962512][ T2902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 84.018732][ T28] audit: type=1326 audit(2000000288.722:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.4.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 84.032105][ T388] kworker/u4:4: attempt to access beyond end of device [ 84.032105][ T388] loop3: rw=1, sector=45096, nr_sectors = 24 limit=40427 [ 84.100930][ T388] kworker/u4:4: attempt to access beyond end of device [ 84.100930][ T388] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 84.128631][ T28] audit: type=1326 audit(2000000288.722:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.4.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 84.197984][ T28] audit: type=1326 audit(2000000288.722:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.4.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 84.269208][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 84.272826][ T28] audit: type=1326 audit(2000000288.722:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.4.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 84.301746][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 84.376469][ T3428] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 84.533797][ T3366] set_capacity_and_notify: 2 callbacks suppressed [ 84.533814][ T3366] loop8: detected capacity change from 0 to 131072 [ 86.068301][ T3366] F2FS-fs (loop8): invalid crc value [ 86.076100][ T3366] F2FS-fs (loop8): Found nat_bits in checkpoint [ 86.108962][ T3366] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 86.176962][ T2413] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 86.208731][ T2413] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 86.223427][ T2413] EXT4-fs (loop6): This should not happen!! Data will be lost [ 86.223427][ T2413] [ 86.243598][ T2413] EXT4-fs (loop6): Total free blocks count 0 [ 86.254796][ T2413] EXT4-fs (loop6): Free/Dirty block details [ 86.274153][ T2413] EXT4-fs (loop6): free_blocks=2415919504 [ 86.280648][ T2413] EXT4-fs (loop6): dirty_blocks=48 [ 86.291055][ T2413] EXT4-fs (loop6): Block reservation details [ 86.299998][ T2413] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 86.317252][ T2865] EXT4-fs (loop6): unmounting filesystem. [ 86.397474][ T3467] netlink: 'syz.7.1303': attribute type 1 has an invalid length. [ 86.415476][ T3467] netlink: 'syz.7.1303': attribute type 2 has an invalid length. [ 86.430172][ T3467] netlink: 'syz.7.1303': attribute type 1 has an invalid length. [ 86.439701][ T3467] netlink: 'syz.7.1303': attribute type 2 has an invalid length. [ 86.484728][ T3473] syz.6.1307[3473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.484836][ T3473] syz.6.1307[3473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.753453][ T3501] netlink: 'syz.3.1320': attribute type 5 has an invalid length. [ 86.871885][ T3509] loop8: detected capacity change from 0 to 1024 [ 86.876611][ T3515] input: syz0 as /devices/virtual/input/input10 [ 86.890085][ T3509] EXT4-fs: Ignoring removed orlov option [ 86.902825][ T2902] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 86.943588][ T3509] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 86.958153][ T3509] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.979168][ T3521] loop4: detected capacity change from 0 to 128 [ 87.039214][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 87.039229][ T28] audit: type=1326 audit(2000000291.859:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.4.1327" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 87.056462][ T3509] EXT4-fs error (device loop8): ext4_map_blocks:747: inode #15: comm syz.8.1322: lblock 0 mapped to illegal pblock 0 (length 6) [ 87.085758][ T3509] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 87.089424][ T28] audit: type=1326 audit(2000000291.896:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.4.1327" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 87.098749][ T3509] EXT4-fs (loop8): This should not happen!! Data will be lost [ 87.098749][ T3509] [ 87.124195][ T2902] usb 7-1: Using ep0 maxpacket: 16 [ 87.138417][ T28] audit: type=1326 audit(2000000291.896:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.4.1327" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 87.164687][ T28] audit: type=1326 audit(2000000291.896:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.4.1327" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 87.190171][ T3530] EXT4-fs error (device loop8): ext4_map_blocks:747: inode #15: block 8: comm syz.8.1322: lblock 8 mapped to illegal pblock 8 (length 8) [ 87.213421][ T2902] usb 7-1: unable to get BOS descriptor or descriptor too short [ 87.239503][ T2902] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.258656][ T2902] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.279740][ T28] audit: type=1326 audit(2000000291.896:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.4.1327" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 87.314818][ T3530] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 87.316246][ T28] audit: type=1326 audit(2000000291.896:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.4.1327" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 87.341701][ T3530] EXT4-fs (loop8): This should not happen!! Data will be lost [ 87.341701][ T3530] [ 87.363653][ T2902] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 87.374834][ T2902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.383184][ T2902] usb 7-1: Product: syz [ 87.395094][ T28] audit: type=1326 audit(2000000291.896:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.4.1327" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 87.401285][ T2902] usb 7-1: Manufacturer: syz [ 87.433870][ T28] audit: type=1326 audit(2000000291.896:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.4.1327" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 87.434781][ T3223] EXT4-fs (loop8): unmounting filesystem. [ 87.459043][ T28] audit: type=1326 audit(2000000291.896:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.4.1327" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 87.481640][ T2902] usb 7-1: SerialNumber: syz [ 87.500341][ T28] audit: type=1326 audit(2000000291.915:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.4.1327" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f82fe39ce59 code=0x7ffc0000 [ 87.700046][ T3555] loop4: detected capacity change from 0 to 512 [ 87.719380][ T2902] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 87.728491][ T2902] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 87.741257][ T3555] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 87.750432][ T3555] ext4 filesystem being mounted at /310/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.766861][ T3555] EXT4-fs (loop4): shut down requested (1) [ 87.784170][ T292] EXT4-fs (loop4): unmounting filesystem. [ 87.802445][ T3543] loop7: detected capacity change from 0 to 40427 [ 87.879343][ T3543] F2FS-fs (loop7): Found nat_bits in checkpoint [ 87.943442][ T3543] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 87.991139][ T3561] f2fs_ckpt-7:7: attempt to access beyond end of device [ 87.991139][ T3561] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 88.015604][ T3543] syz.7.1336: attempt to access beyond end of device [ 88.015604][ T3543] loop7: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 88.041335][ T3543] syz.7.1336: attempt to access beyond end of device [ 88.041335][ T3543] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 88.160075][ T2902] usb 7-1: USB disconnect, device number 2 [ 88.267900][ T3594] bridge0: port 2(bridge_slave_1) entered listening state [ 88.284868][ T3594] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.387540][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.506757][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 88.566284][ T3610] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1363'. [ 88.636813][ T3608] mmap: syz.8.1362 (3608) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.677343][ T3614] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 88.697077][ T3616] loop8: detected capacity change from 0 to 512 [ 88.707001][ T3616] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.724915][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 88.725952][ T3616] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 88.736063][ T24] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 88.736094][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.736119][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 88.761761][ T3616] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 3: comm syz.8.1366: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 88.769019][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.803372][ T24] usb 5-1: config 0 descriptor?? [ 88.809808][ T3616] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 12: comm syz.8.1366: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 88.838624][ T3616] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 13: comm syz.8.1366: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 88.865209][ T3616] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 14: comm syz.8.1366: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 88.885919][ T3616] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 15: comm syz.8.1366: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 88.906679][ T3616] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 16: comm syz.8.1366: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 88.928603][ T1671] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 88.936470][ T3616] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 17: comm syz.8.1366: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 88.957760][ T3616] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #2: block 18: comm syz.8.1366: lblock 23 mapped to illegal pblock 18 (length 1) [ 88.973038][ T3616] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 19: comm syz.8.1366: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=2, size=2048 fake=0 [ 88.993767][ T3616] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 20: comm syz.8.1366: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 89.146644][ T1671] usb 8-1: Using ep0 maxpacket: 16 [ 89.153146][ T1671] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.176229][ T1671] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.195086][ T1671] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.212659][ T1671] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.230347][ T1671] usb 8-1: Product: syz [ 89.240465][ T1671] usb 8-1: Manufacturer: syz [ 89.245990][ T24] hid (null): invalid report_count 24906 [ 89.254261][ T24] wacom 0003:056A:0116.0008: unknown main item tag 0x3 [ 89.264740][ T1671] usb 8-1: SerialNumber: syz [ 89.273981][ T24] wacom 0003:056A:0116.0008: unknown main item tag 0x6 [ 89.291454][ T24] wacom 0003:056A:0116.0008: unknown main item tag 0x0 [ 89.306760][ T24] wacom 0003:056A:0116.0008: unknown main item tag 0xd [ 89.321995][ T24] wacom 0003:056A:0116.0008: invalid report_count 24906 [ 89.337196][ T24] wacom 0003:056A:0116.0008: item 0 2 1 9 parsing failed [ 89.350508][ T24] wacom 0003:056A:0116.0008: parse failed [ 89.362310][ T24] wacom: probe of 0003:056A:0116.0008 failed with error -22 [ 89.505403][ T1671] usb 8-1: 0:2 : does not exist [ 89.519352][ T6] usb 5-1: USB disconnect, device number 4 [ 89.521934][ T1671] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 89.555113][ T1671] usb 8-1: USB disconnect, device number 2 [ 89.563527][ T3649] loop3: detected capacity change from 0 to 512 [ 89.584246][ T3649] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.596184][ T3649] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1379: bg 0: block 384: padding at end of block bitmap is not set [ 89.634854][ T3649] EXT4-fs (loop3): Remounting filesystem read-only [ 89.641799][ T3649] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 89.655745][ T3649] EXT4-fs (loop3): Remounting filesystem read-only [ 89.666366][ T3649] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1379: attempt to clear invalid blocks 983260 len 1 [ 89.680226][ T3649] EXT4-fs (loop3): Remounting filesystem read-only [ 89.686796][ T3649] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.1379: Invalid inode table block 0 in block_group 0 [ 89.699859][ T3649] EXT4-fs (loop3): Remounting filesystem read-only [ 89.706412][ T3649] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 89.716265][ T3649] EXT4-fs (loop3): Remounting filesystem read-only [ 89.722959][ T3649] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 89.731997][ T3649] EXT4-fs (loop3): Remounting filesystem read-only [ 89.738543][ T3649] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.1379: Invalid inode table block 0 in block_group 0 [ 89.752484][ T3223] EXT4-fs (loop8): unmounting filesystem. [ 89.763058][ T3649] EXT4-fs (loop3): Remounting filesystem read-only [ 89.771376][ T3649] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 89.782717][ T3649] EXT4-fs (loop3): Remounting filesystem read-only [ 89.789413][ T3649] EXT4-fs error (device loop3): ext4_truncate:4327: inode #11: comm syz.3.1379: mark_inode_dirty error [ 89.804131][ T3649] EXT4-fs (loop3): Remounting filesystem read-only [ 89.812933][ T391] udevd[391]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 89.835965][ T3649] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 89.847370][ T3649] EXT4-fs (loop3): Remounting filesystem read-only [ 89.856677][ T3664] loop8: detected capacity change from 0 to 256 [ 89.859533][ T3649] EXT4-fs (loop3): 1 truncate cleaned up [ 89.871037][ T3649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 89.878938][ T3664] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 89.927551][ T3666] loop8: detected capacity change from 0 to 256 [ 89.934333][ T3666] exfat: Deprecated parameter 'utf8' [ 89.941286][ T546] EXT4-fs (loop3): unmounting filesystem. [ 89.941548][ T3666] exfat: Deprecated parameter 'namecase' [ 89.960118][ T3666] exfat: Deprecated parameter 'namecase' [ 89.981415][ T3666] exfat: Deprecated parameter 'utf8' [ 89.982255][ T3670] loop6: detected capacity change from 0 to 128 [ 90.005923][ T3666] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 90.026293][ T3670] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 90.035488][ T3670] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.081022][ T2865] EXT4-fs (loop6): unmounting filesystem. [ 90.268485][ T3707] loop6: detected capacity change from 0 to 256 [ 90.515141][ T3702] loop3: detected capacity change from 0 to 40427 [ 90.537344][ T3702] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 90.563242][ T3702] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 90.583108][ T3702] F2FS-fs (loop3): invalid crc value [ 90.621023][ T3702] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 90.717156][ T3702] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 90.724375][ T3702] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.786262][ T3735] f2fs_ckpt-7:3: attempt to access beyond end of device [ 90.786262][ T3735] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.800576][ T3756] netlink: 'syz.8.1424': attribute type 9 has an invalid length. [ 90.829455][ T3759] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1425'. [ 90.942719][ T3769] loop6: detected capacity change from 0 to 512 [ 90.971320][ T3769] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 91.016023][ T3769] EXT4-fs (loop6): 1 truncate cleaned up [ 91.026778][ T3769] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 91.028967][ T3776] loop3: detected capacity change from 0 to 512 [ 91.058367][ T3776] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.077376][ T3776] EXT4-fs (loop3): 1 truncate cleaned up [ 91.083186][ T3776] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 91.107185][ T546] EXT4-fs (loop3): unmounting filesystem. [ 91.217864][ T3781] loop3: detected capacity change from 0 to 1024 [ 91.226191][ T2865] EXT4-fs (loop6): unmounting filesystem. [ 91.226989][ T6] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 91.245928][ T3781] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 91.245928][ T3781] [ 91.294138][ T3785] loop6: detected capacity change from 0 to 512 [ 91.336311][ T3785] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 91.379832][ T3785] syz.6.1437 (pid 3785) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 91.385707][ T3722] loop4: detected capacity change from 0 to 131072 [ 91.401297][ T3722] F2FS-fs (loop4): invalid crc value [ 91.422505][ T2865] EXT4-fs (loop6): unmounting filesystem. [ 91.435265][ T3722] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.437416][ T3793] loop3: detected capacity change from 0 to 256 [ 91.454651][ T6] usb 9-1: Using ep0 maxpacket: 32 [ 91.471268][ T6] usb 9-1: config index 0 descriptor too short (expected 164, got 36) [ 91.483349][ T3793] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.494565][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.518131][ T3797] loop6: detected capacity change from 0 to 512 [ 91.527515][ T3797] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.539525][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.545655][ T3722] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 91.550198][ T6] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 91.590422][ T3797] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1441: invalid indirect mapped block 256 (level 2) [ 91.595513][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.624776][ T3797] EXT4-fs (loop6): 2 truncates cleaned up [ 91.629213][ T6] usb 9-1: config 0 descriptor?? [ 91.641933][ T3797] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 91.674629][ T292] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 91.678901][ T3797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.694515][ T3797] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 91.701927][ T292] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 91.718218][ T292] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 91.727755][ T292] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 91.737039][ T292] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 91.737872][ T3797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.746019][ T292] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 91.757059][ T3797] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 91.763604][ T292] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 91.773356][ T3797] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 91.792386][ T292] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 91.808343][ T292] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 91.817401][ T292] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 91.826301][ T292] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 91.835212][ T292] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 91.844728][ T292] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 91.862884][ T2865] EXT4-fs (loop6): unmounting filesystem. [ 91.866457][ T292] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 91.882200][ T292] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 91.996562][ T3820] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.000380][ T3818] xt_hashlimit: size too large, truncated to 1048576 [ 92.008185][ T3820] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.029100][ T3822] netlink: 71 bytes leftover after parsing attributes in process `syz.6.1452'. [ 92.063300][ T3820] EXT4-fs (loop3): 1 truncate cleaned up [ 92.069000][ T3820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 92.079930][ T6] logitech 0003:046D:C29C.0009: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.8-1/input0 [ 92.150655][ T546] EXT4-fs (loop3): unmounting filesystem. [ 92.272191][ T3835] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.295686][ T6] logitech 0003:046D:C29C.0009: no inputs found [ 92.310852][ T6] usb 9-1: USB disconnect, device number 2 [ 92.334441][ T3844] bridge0: port 3(vlan3) entered blocking state [ 92.340221][ T3843] fido_id[3843]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 92.359997][ T3844] bridge0: port 3(vlan3) entered disabled state [ 92.375643][ T3835] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.1457: directory missing '..' [ 92.425487][ T3850] EXT4-fs: Ignoring removed orlov option [ 92.594010][ T3867] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 92.965935][ T3904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 92.982860][ T2902] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 93.159567][ T3900] F2FS-fs (loop8): Wrong NAT boundary, start(2560) end(3584) blocks(83968) [ 93.169145][ T3900] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 93.178236][ T3900] F2FS-fs (loop8): Fix alignment : done, start(4096) end(16896) block(12288) [ 93.188327][ T3900] F2FS-fs (loop8): invalid crc value [ 93.193941][ T2902] usb 5-1: Using ep0 maxpacket: 8 [ 93.205455][ T2902] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 93.220621][ T3900] F2FS-fs (loop8): Found nat_bits in checkpoint [ 93.230084][ T2902] usb 5-1: config 179 has no interface number 0 [ 93.242902][ T2902] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 93.271508][ T2902] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 93.278667][ T3900] F2FS-fs (loop8): Start checkpoint disabled! [ 93.283180][ T2902] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.290226][ T3900] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 93.300776][ T2902] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 93.319166][ T3900] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 93.319192][ T3900] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 93.333878][ T2902] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 93.347198][ T2902] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 93.356401][ T2902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.372944][ T3882] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 93.508251][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 93.508280][ T28] audit: type=1400 audit(2000000297.829:423): avc: denied { bind } for pid=3937 comm="syz.6.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 93.535486][ T310] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 93.546323][ T6] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 93.611898][ T3944] EXT4-fs (loop6): Test dummy encryption mode enabled [ 93.645116][ T3944] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.1502: inode has both inline data and extents flags [ 93.674546][ T3944] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1502: couldn't read orphan inode 15 (err -117) [ 93.675518][ T2902] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input11 [ 93.753448][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.765867][ T6] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.775261][ T6] usb 8-1: config 0 has no interface number 0 [ 93.781592][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.793059][ T6] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.804479][ T310] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 93.813837][ T6] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.823773][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.832106][ T6] usb 8-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 93.850605][ T310] usb 4-1: config 0 descriptor?? [ 93.868071][ T6] usb 8-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 93.889646][ T6] usb 8-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 93.895352][ T39] usb 5-1: USB disconnect, device number 5 [ 93.897865][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 93.912110][ T39] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 93.913061][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 93.937880][ T6] usb 8-1: Product: syz [ 93.947021][ T6] usb 8-1: config 0 descriptor?? [ 94.116235][ T3936] F2FS-fs (loop8): Found nat_bits in checkpoint [ 94.158377][ T3936] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 94.241477][ T3936] F2FS-fs (loop8): lookup inode (7) has corrupted xattr [ 94.246440][ T3960] tipc: Started in network mode [ 94.250227][ T3936] F2FS-fs (loop8): lookup inode (7) has corrupted xattr [ 94.253445][ T3960] tipc: Node identity ac141444, cluster identity 4711 [ 94.267500][ T3960] tipc: New replicast peer: 255.255.255.255 [ 94.274158][ T3960] tipc: Enabled bearer , priority 10 [ 94.292768][ T310] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 94.301305][ T310] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 94.309863][ T310] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 94.324600][ T310] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 94.339429][ T310] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 94.347593][ T310] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 94.356614][ T310] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 94.378504][ T310] hid-thrustmaster 0003:044F:B65D.000A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 94.395031][ T6] chicony 0003:04F2:1421.000B: collection stack underflow [ 94.413202][ T6] chicony 0003:04F2:1421.000B: item 0 1 0 12 parsing failed [ 94.420918][ T6] chicony 0003:04F2:1421.000B: Chicony hid parse failed: -22 [ 94.428989][ T310] hid-thrustmaster 0003:044F:B65D.000A: Wrong number of endpoints? [ 94.437233][ T6] chicony: probe of 0003:04F2:1421.000B failed with error -22 [ 95.833144][ T39] tipc: Node number set to 2886997060 [ 95.855077][ C0] hid-thrustmaster 0003:044F:B65D.000A: Unknown packet type 0x0, unable to proceed further with wheel init [ 96.885464][ T1671] usb 8-1: USB disconnect, device number 3 [ 96.893225][ T39] usb 4-1: USB disconnect, device number 5 [ 97.076622][ T3977] set_capacity_and_notify: 8 callbacks suppressed [ 97.076642][ T3977] loop8: detected capacity change from 0 to 512 [ 97.100647][ T3977] EXT4-fs: Ignoring removed i_version option [ 97.125590][ T3977] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.181242][ T3982] loop8: detected capacity change from 0 to 256 [ 97.200612][ T3982] FAT-fs (loop8): Unrecognized mount option "uni^xlate=0" or missing value [ 97.249614][ T28] audit: type=1400 audit(2000000301.280:424): avc: denied { bind } for pid=3983 comm="syz.6.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.312718][ T3986] loop8: detected capacity change from 0 to 1024 [ 97.344699][ T3986] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.363388][ T3986] EXT4-fs error (device loop8): ext4_map_blocks:747: inode #15: comm syz.8.1516: lblock 0 mapped to illegal pblock 0 (length 1) [ 97.398987][ T3969] loop4: detected capacity change from 0 to 131072 [ 97.410455][ T3969] F2FS-fs (loop4): Test dummy encryption mode enabled [ 97.421232][ T3969] F2FS-fs (loop4): invalid crc value [ 97.460778][ T3969] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.510140][ T4002] netem: incorrect ge model size [ 97.520184][ T4002] netem: change failed [ 97.553164][ T3969] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 97.764102][ T4015] loop8: detected capacity change from 0 to 256 [ 97.804185][ T4015] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 97.838593][ T28] audit: type=1400 audit(2000000301.834:425): avc: denied { mounton } for pid=4014 comm="syz.8.1527" path="/39/file0/file0" dev="loop8" ino=1048716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.924755][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.968082][ T310] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 98.022325][ T28] audit: type=1400 audit(2000000557.989:426): avc: denied { mount } for pid=4038 comm="syz.4.1537" name="/" dev="configfs" ino=8477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 98.054996][ T28] audit: type=1400 audit(2000000558.026:427): avc: denied { search } for pid=4038 comm="syz.4.1537" name="/" dev="configfs" ino=8477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.163145][ T310] usb 8-1: Using ep0 maxpacket: 8 [ 98.168300][ T28] audit: type=1400 audit(2000000558.026:428): avc: denied { setattr } for pid=4038 comm="syz.4.1537" name="/" dev="configfs" ino=8477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.194573][ T310] usb 8-1: too many endpoints for config 0 interface 0 altsetting 7: 254, using maximum allowed: 30 [ 98.217380][ T310] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.217636][ T4043] loop3: detected capacity change from 0 to 512 [ 98.239074][ T310] usb 8-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 98.251506][ T4043] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.264514][ T310] usb 8-1: config 0 interface 0 has no altsetting 0 [ 98.280358][ T310] usb 8-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 98.283260][ T4043] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.303836][ T310] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.320963][ T310] usb 8-1: config 0 descriptor?? [ 98.331732][ T4043] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006] [ 98.340517][ T4043] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1540: Invalid inode bitmap blk 4 in block_group 0 [ 98.353823][ T4043] EXT4-fs (loop3): Remounting filesystem read-only [ 98.362291][ T4043] EXT4-fs mount: 10 callbacks suppressed [ 98.362322][ T4043] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 98.408278][ T546] EXT4-fs (loop3): unmounting filesystem. [ 98.599943][ T28] audit: type=1400 audit(2000000558.533:429): avc: denied { append } for pid=4059 comm="syz.4.1546" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.770335][ T310] wacom 0003:056A:0000.000C: unknown main item tag 0x3 [ 98.777295][ T310] wacom 0003:056A:0000.000C: ignoring exceeding usage max [ 98.814764][ T310] wacom 0003:056A:0000.000C: unknown main item tag 0x2 [ 98.855212][ T310] wacom 0003:056A:0000.000C: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 98.887489][ T310] wacom 0003:056A:0000.000C: hidraw0: USB HID v0.05 Device [HID 056a:0000] on usb-dummy_hcd.7-1/input0 [ 98.914213][ T4056] loop3: detected capacity change from 0 to 131072 [ 98.923122][ T4056] F2FS-fs (loop3): invalid crc value [ 98.929924][ T4056] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.971491][ T310] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:0000.000C/input/input12 [ 98.988312][ T4056] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 99.063610][ T310] usb 8-1: USB disconnect, device number 4 [ 99.134155][ T4075] fido_id[4075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 99.246101][ T4037] loop8: detected capacity change from 0 to 131072 [ 99.268947][ T4037] F2FS-fs (loop8): invalid crc value [ 99.294061][ T4037] F2FS-fs (loop8): Found nat_bits in checkpoint [ 99.355404][ T4037] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 99.677043][ T4104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'. [ 99.685044][ T4103] loop7: detected capacity change from 0 to 256 [ 99.709847][ T4103] exfat: Deprecated parameter 'namecase' [ 99.736705][ T4103] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 99.751950][ T4108] input: syz0 as /devices/virtual/input/input15 [ 99.761087][ T4107] loop6: detected capacity change from 0 to 256 [ 99.974839][ T4120] loop3: p1 p2 p3 [ 99.978891][ T4120] loop3: p1 start 51379968 is beyond EOD, truncated [ 100.016946][ T4120] loop3: p3 size 100663552 extends beyond EOD, truncated [ 100.072323][ T4131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.084395][ T28] audit: type=1400 audit(2000000559.899:430): avc: denied { read write } for pid=4118 comm="syz.3.1567" name="loop3p3" dev="devtmpfs" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.090647][ T4131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.134828][ T4131] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.169694][ T28] audit: type=1400 audit(2000000559.899:431): avc: denied { open } for pid=4118 comm="syz.3.1567" path="/dev/loop3p3" dev="devtmpfs" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.256354][ T4131] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 100.265582][ T4131] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.361222][ T4131] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1572: bg 0: block 112: padding at end of block bitmap is not set [ 100.376654][ T4131] EXT4-fs (loop7): Remounting filesystem read-only [ 100.393581][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 100.401927][ T2949] EXT4-fs (loop7): unmounting filesystem. [ 100.529189][ T28] audit: type=1400 audit(2000000560.314:432): avc: denied { read } for pid=4175 comm="syz.3.1592" path="socket:[33520]" dev="sockfs" ino=33520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.581218][ T4081] F2FS-fs (loop4): Test dummy encryption mode enabled [ 100.598584][ T4081] F2FS-fs (loop4): invalid crc value [ 100.630381][ T28] audit: type=1400 audit(2000000560.397:433): avc: denied { setopt } for pid=4185 comm="syz.8.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.657391][ T4081] F2FS-fs (loop4): Mismatch valid blocks 4 vs. 7 [ 100.674843][ T4081] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 100.685354][ T4196] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x3855f621, utbl_chksum : 0xe619d30d) [ 100.708304][ T28] audit: type=1400 audit(2000000560.471:434): avc: denied { create } for pid=4197 comm="syz.3.1600" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.714416][ T4194] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 100.878191][ T4203] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 101.037176][ T4215] exfat: Deprecated parameter 'utf8' [ 101.055691][ T4215] exfat: Deprecated parameter 'namecase' [ 101.081374][ T4215] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d) [ 101.260401][ T4224] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.295480][ T4224] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.344830][ T28] audit: type=1400 audit(2000000561.061:435): avc: denied { read append open } for pid=4223 comm="syz.4.1613" path="/346/file0/memory.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.370309][ T4199] F2FS-fs (loop3): invalid crc value [ 101.385156][ T4199] F2FS-fs (loop3): Found nat_bits in checkpoint [ 101.386151][ T28] audit: type=1400 audit(2000000561.080:436): avc: denied { ioctl } for pid=4223 comm="syz.4.1613" path="/346/file0/memory.stat" dev="loop4" ino=18 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.417578][ T292] EXT4-fs (loop4): unmounting filesystem. [ 101.467558][ T4199] F2FS-fs (loop3): Start checkpoint disabled! [ 101.491288][ T4234] input: syz1 as /devices/virtual/input/input16 [ 101.501354][ T4199] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 101.534047][ T4199] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 101.554496][ T4238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1619'. [ 101.981118][ T4219] F2FS-fs (loop7): invalid crc value [ 101.999384][ T4219] F2FS-fs (loop7): Found nat_bits in checkpoint [ 102.035424][ T4219] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 102.484476][ T4292] exfat: Deprecated parameter 'utf8' [ 102.495591][ T4292] exfat: Deprecated parameter 'namecase' [ 102.502335][ T4292] exfat: Deprecated parameter 'utf8' [ 102.516147][ T4294] set_capacity_and_notify: 12 callbacks suppressed [ 102.516166][ T4294] loop3: detected capacity change from 0 to 512 [ 102.526005][ T4292] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 102.544476][ T4294] EXT4-fs (loop3): Test dummy encryption mode enabled [ 102.561372][ T4294] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.594287][ T4294] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.1639: bad orphan inode 131083 [ 102.616021][ T4294] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 102.654927][ T28] audit: type=1400 audit(2000000562.270:437): avc: denied { remount } for pid=4298 comm="syz.6.1640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 102.675509][ T546] EXT4-fs (loop3): unmounting filesystem. [ 102.713064][ T4305] loop3: detected capacity change from 0 to 128 [ 102.829501][ T28] audit: type=1400 audit(2000000562.427:438): avc: denied { bind } for pid=4313 comm="syz.6.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.076324][ T4334] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 103.091599][ T4334] pim6reg1: linktype set to 768 [ 103.118890][ T4340] loop8: detected capacity change from 0 to 512 [ 103.133649][ T4340] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 103.174983][ T4281] loop7: detected capacity change from 0 to 131072 [ 103.178421][ T4340] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1661: invalid indirect mapped block 1 (level 1) [ 103.194270][ T4281] F2FS-fs (loop7): invalid crc value [ 103.200322][ T4340] EXT4-fs (loop8): Remounting filesystem read-only [ 103.207281][ T4340] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1661: invalid indirect mapped block 32512 (level 2) [ 103.237183][ T4340] EXT4-fs (loop8): Remounting filesystem read-only [ 103.243819][ T4340] EXT4-fs (loop8): 1 truncate cleaned up [ 103.250340][ T4340] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 103.264762][ T4281] F2FS-fs (loop7): Found nat_bits in checkpoint [ 103.276982][ T3223] EXT4-fs (loop8): unmounting filesystem. [ 103.332787][ T4281] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 103.360148][ T4357] netem: change failed [ 103.387086][ T310] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 103.415188][ T4362] loop8: detected capacity change from 0 to 512 [ 103.560623][ T4369] tun0: tun_chr_ioctl cmd 2147767511 [ 103.603787][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 103.611873][ T310] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 103.622630][ T310] usb 4-1: config 179 has no interface number 0 [ 103.629226][ T310] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 103.642815][ T310] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 103.654462][ T310] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 103.670951][ T310] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 103.685134][ T310] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 103.698919][ T310] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 103.708118][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.721074][ T4336] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.893146][ T309] Bluetooth: hci0: Frame reassembly failed (-84) [ 103.920076][ T4389] loop6: detected capacity change from 0 to 512 [ 103.955502][ T4389] FAT-fs (loop6): FAT read failed (blocknr 128) [ 103.999345][ T39] usb 4-1: USB disconnect, device number 6 [ 103.999374][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 104.014052][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 104.048437][ T4392] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1682'. [ 104.073304][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.103963][ T4396] loop6: detected capacity change from 0 to 128 [ 104.195709][ T4401] loop6: detected capacity change from 0 to 1024 [ 104.209740][ T4401] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.218034][ T4401] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 104.218034][ T4401] [ 104.395758][ T28] audit: type=1400 audit(2000000563.885:439): avc: denied { listen } for pid=4416 comm="syz.6.1694" path=2F3135312FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 104.615109][ T4434] loop3: detected capacity change from 0 to 256 [ 104.647571][ T4434] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 104.745991][ T4437] loop3: detected capacity change from 0 to 512 [ 104.766896][ T4437] EXT4-fs error (device loop3): ext4_iget_extra_inode:4765: inode #15: comm syz.3.1703: corrupted in-inode xattr [ 104.779401][ T4437] EXT4-fs (loop3): Remounting filesystem read-only [ 104.786117][ T4437] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1703: couldn't read orphan inode 15 (err -117) [ 104.798256][ T4437] EXT4-fs (loop3): Remounting filesystem read-only [ 104.804802][ T4437] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 104.815441][ T4437] EXT4-fs (loop3): shut down requested (2) [ 104.827804][ T546] EXT4-fs (loop3): unmounting filesystem. [ 104.865452][ T4409] F2FS-fs (loop7): invalid crc value [ 104.899461][ T4409] F2FS-fs (loop7): Found nat_bits in checkpoint [ 104.948548][ T4409] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 105.288839][ T4453] netlink: 'syz.7.1708': attribute type 12 has an invalid length. [ 105.296881][ T4453] netlink: 'syz.7.1708': attribute type 29 has an invalid length. [ 105.304803][ T4453] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1708'. [ 105.371984][ T4441] F2FS-fs (loop3): invalid crc value [ 105.404894][ T4441] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (5162113437571155428, 12997790729700) [ 105.479178][ T4441] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 105.859703][ T4510] pim6reg1: tun_chr_ioctl cmd 1076910120 [ 105.918162][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 105.918179][ T28] audit: type=1400 audit(2000000565.278:442): avc: denied { remount } for pid=4519 comm="syz.6.1737" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.947713][ T391] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.009119][ T4528] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 106.030097][ T28] audit: type=1400 audit(2000000565.380:443): avc: denied { ioctl } for pid=4527 comm="syz.3.1741" path="/333/file2/file2" dev="loop3" ino=1048732 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.063891][ T1671] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 106.074817][ T540] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 106.075872][ T1563] Bluetooth: hci0: command 0x1003 tx timeout [ 106.153846][ T391] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.155071][ T4538] overlayfs: missing 'lowerdir' [ 106.210585][ T4547] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.225924][ T4547] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 106.235870][ T39] kernel write not supported for file /load (pid: 39 comm: kworker/1:1) [ 106.242462][ T4547] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 106.283401][ T1671] usb 5-1: unable to get BOS descriptor or descriptor too short [ 106.293567][ T1671] usb 5-1: no configurations [ 106.304297][ T1671] usb 5-1: can't read configurations, error -22 [ 106.317982][ T28] audit: type=1400 audit(2000000565.647:444): avc: denied { mounton } for pid=4552 comm="syz.3.1753" path=2F3334302FE91F7189591E9233614B dev="tmpfs" ino=1806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 106.318037][ T4554] 9pnet_fd: Insufficient options for proto=fd [ 106.349069][ T310] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 106.377417][ T4558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1755'. [ 106.387539][ T4558] device ip6gre1 entered promiscuous mode [ 106.394648][ T19] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.405530][ T19] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.418219][ T4560] exfat: Deprecated parameter 'utf8' [ 106.423697][ T19] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.431298][ T4560] exfat: Deprecated parameter 'utf8' [ 106.444737][ T4560] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x8dfd24ac, utbl_chksum : 0xe619d30d) [ 106.553275][ T310] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.584976][ T310] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.617147][ T310] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 106.626230][ T310] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.670826][ T310] usb 7-1: SerialNumber: syz [ 106.705299][ T310] usb 7-1: 0:2 : does not exist [ 106.779523][ T19] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.134945][ T39] usb 7-1: USB disconnect, device number 3 [ 107.160419][ T4607] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 107.203514][ T310] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.288760][ T4576] F2FS-fs (loop3): invalid crc value [ 107.294471][ T292] EXT4-fs (loop4): unmounting filesystem. [ 107.323647][ T4576] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.373414][ T4576] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 107.409588][ T4639] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1788'. [ 107.448021][ T4639] netlink: 13 bytes leftover after parsing attributes in process `syz.8.1788'. [ 107.515499][ T4648] ext4: Bad value for 'journal_dev' [ 107.554654][ T4652] FAT-fs (loop8): Unrecognized mount option "rir" or missing value [ 107.657706][ T4656] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 107.755906][ T4664] netlink: 'syz.6.1800': attribute type 298 has an invalid length. [ 107.757685][ T4668] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 107.783698][ T4670] tipc: Enabling of bearer rejected, already enabled [ 107.811180][ T4673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1805'. [ 107.829834][ T4673] device ip6gre2 entered promiscuous mode [ 107.846823][ T1671] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 107.863000][ T1671] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 107.900356][ T1671] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 107.900467][ T4687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1810'. [ 107.957067][ T4692] set_capacity_and_notify: 13 callbacks suppressed [ 107.957086][ T4692] loop6: detected capacity change from 0 to 512 [ 107.970599][ T4695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1813'. [ 108.001319][ T4692] EXT4-fs (loop6): 1 truncate cleaned up [ 108.008190][ T4692] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 108.048238][ T2865] EXT4-fs (loop6): unmounting filesystem. [ 108.079792][ T1671] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 108.097059][ T4707] loop4: detected capacity change from 0 to 1024 [ 108.129536][ T4707] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.1819: lblock 2 mapped to illegal pblock 2 (length 1) [ 108.143794][ T4707] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 108.152662][ T4707] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.1819: lblock 0 mapped to illegal pblock 48 (length 1) [ 108.168658][ T4707] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 108.179021][ T4707] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.1819: Failed to acquire dquot type 0 [ 108.180262][ T4713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1822'. [ 108.199950][ T4707] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 108.208267][ T4715] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1821'. [ 108.220664][ T4707] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.1819: mark_inode_dirty error [ 108.228433][ T4715] device ip6gre1 entered promiscuous mode [ 108.253138][ T4707] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 108.263570][ T4707] EXT4-fs (loop4): 1 orphan inode deleted [ 108.274932][ T4707] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.283724][ T10] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 108.309384][ T1671] usb 8-1: Using ep0 maxpacket: 8 [ 108.327843][ T1671] usb 8-1: config 0 interface 0 has no altsetting 0 [ 108.336024][ T1671] usb 8-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 108.358312][ T10] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 108.362282][ T1671] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.379442][ T10] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 0 [ 108.395639][ T1671] usb 8-1: config 0 descriptor?? [ 108.433831][ T292] EXT4-fs (loop4): unmounting filesystem. [ 108.444806][ T591] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 108.480967][ T591] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 108.491383][ T591] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:5: Failed to release dquot type 0 [ 108.511610][ T292] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 108.534949][ T292] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 108.544969][ T292] EXT4-fs error (device loop4): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 108.556636][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 108.636256][ T4746] loop8: detected capacity change from 0 to 512 [ 108.655403][ T4746] EXT4-fs (loop8): 1 truncate cleaned up [ 108.665043][ T4746] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 108.707965][ T3223] EXT4-fs (loop8): unmounting filesystem. [ 108.850487][ T1671] uclogic 0003:5543:0004.000D: ignoring exceeding usage max [ 108.864237][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 108.876673][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 108.887713][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 108.900129][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 108.911178][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 108.923940][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 108.944156][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 108.951395][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 108.968951][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 108.981530][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 108.988791][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 108.997656][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.004895][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.012141][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.021428][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.031872][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.040699][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.048794][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.066157][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.073439][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.081101][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.088735][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.109448][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.116569][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.145633][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.153101][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.160504][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.168054][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.175563][ T1671] uclogic 0003:5543:0004.000D: unknown main item tag 0x0 [ 109.192720][ T1671] uclogic 0003:5543:0004.000D: No inputs registered, leaving [ 109.202987][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 109.212011][ T1671] uclogic 0003:5543:0004.000D: hidraw0: USB HID v0.81 Device [HID 5543:0004] on usb-dummy_hcd.7-1/input0 [ 109.239678][ T1671] usb 8-1: USB disconnect, device number 5 [ 109.271465][ T4771] fido_id[4771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 109.303545][ T4741] loop3: detected capacity change from 0 to 131072 [ 109.325884][ T4741] F2FS-fs (loop3): invalid crc value [ 109.346019][ T4741] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.350179][ T28] audit: type=1400 audit(2000000824.442:445): avc: denied { map } for pid=4776 comm="syz.4.1849" path="socket:[37050]" dev="sockfs" ino=37050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.388648][ T4741] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 109.449905][ T28] audit: type=1400 audit(2000000824.479:446): avc: denied { read accept } for pid=4776 comm="syz.4.1849" path="socket:[37050]" dev="sockfs" ino=37050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.569825][ T4791] loop4: detected capacity change from 0 to 256 [ 109.617415][ T4793] loop6: detected capacity change from 0 to 2048 [ 109.641400][ T4793] EXT4-fs: Ignoring removed i_version option [ 109.697319][ T28] audit: type=1400 audit(2000000824.774:447): avc: denied { map } for pid=4802 comm="syz.8.1857" path="/proc/248/net/sockstat" dev="proc" ino=4026532416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 109.706388][ T4793] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 109.785706][ T2865] EXT4-fs (loop6): unmounting filesystem. [ 109.873145][ T4817] loop6: detected capacity change from 0 to 256 [ 109.959355][ T4826] loop7: detected capacity change from 0 to 256 [ 110.007469][ T4826] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 110.270561][ T4848] loop8: detected capacity change from 0 to 2048 [ 110.292657][ T4852] loop3: detected capacity change from 0 to 512 [ 110.312985][ T4848] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 110.344367][ T4848] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 110.360405][ T4848] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 8192 with max blocks 512 with error 28 [ 110.373574][ T4848] EXT4-fs (loop8): This should not happen!! Data will be lost [ 110.373574][ T4848] [ 110.383332][ T391] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.399082][ T4848] EXT4-fs (loop8): Total free blocks count 0 [ 110.405386][ T4848] EXT4-fs (loop8): Free/Dirty block details [ 110.418088][ T4848] EXT4-fs (loop8): free_blocks=2415919504 [ 110.424199][ T4848] EXT4-fs (loop8): dirty_blocks=512 [ 110.429535][ T4848] EXT4-fs (loop8): Block reservation details [ 110.437287][ T4848] EXT4-fs (loop8): i_reserved_data_blocks=32 [ 110.484413][ T4846] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 110.492624][ T4846] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 110.501609][ T4846] F2FS-fs (loop6): invalid crc value [ 110.508831][ T4846] F2FS-fs (loop6): Found nat_bits in checkpoint [ 110.533001][ T4846] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 110.540528][ T4846] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 110.567063][ T3223] EXT4-fs (loop8): unmounting filesystem. [ 110.612883][ T10] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 110.622591][ T10] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 110.690594][ T4865] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 110.702624][ T310] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 110.900589][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.912057][ T310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.921307][ T6] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 110.930698][ T310] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 110.940018][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.949004][ T310] usb 4-1: SerialNumber: syz [ 110.956675][ T310] usb 4-1: 0:2 : does not exist [ 111.116547][ T6] usb 9-1: Using ep0 maxpacket: 16 [ 111.125665][ T6] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.146854][ T6] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.170931][ T6] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.198652][ T6] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.212695][ T6] usb 9-1: Product: syz [ 111.216921][ T6] usb 9-1: Manufacturer: syz [ 111.221531][ T6] usb 9-1: SerialNumber: syz [ 111.282686][ T4903] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.300310][ T4903] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 111.324679][ T292] EXT4-fs (loop4): unmounting filesystem. [ 111.361283][ T4910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4910 comm=syz.4.1903 [ 111.403629][ T310] usb 4-1: USB disconnect, device number 7 [ 111.416146][ T4912] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 111.428589][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 111.440197][ T292] EXT4-fs (loop4): unmounting filesystem. [ 111.449506][ T6] usb 9-1: 0:2 : does not exist [ 111.464522][ T6] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 111.496636][ T6] usb 9-1: USB disconnect, device number 3 [ 111.505239][ T391] udevd[391]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 111.646548][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.657510][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.667401][ T24] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 111.676552][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.685523][ T24] usb 7-1: config 0 descriptor?? [ 111.927726][ T4919] bridge0: port 4(veth0_vlan) entered blocking state [ 111.934495][ T4919] bridge0: port 4(veth0_vlan) entered disabled state [ 111.941970][ T4919] bridge0: port 4(veth0_vlan) entered blocking state [ 111.948756][ T4919] bridge0: port 4(veth0_vlan) entered forwarding state [ 111.984679][ T4923] FAT-fs (loop3): Directory bread(block 64) failed [ 111.991507][ T4923] FAT-fs (loop3): Directory bread(block 65) failed [ 111.998263][ T4923] FAT-fs (loop3): Directory bread(block 66) failed [ 112.010985][ T4923] FAT-fs (loop3): Directory bread(block 67) failed [ 112.018324][ T4923] FAT-fs (loop3): Directory bread(block 68) failed [ 112.026038][ T4923] FAT-fs (loop3): Directory bread(block 69) failed [ 112.040896][ T4923] FAT-fs (loop3): Directory bread(block 70) failed [ 112.048963][ T4923] FAT-fs (loop3): Directory bread(block 71) failed [ 112.058829][ T4929] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 112.070558][ T4923] FAT-fs (loop3): Directory bread(block 72) failed [ 112.077648][ T4923] FAT-fs (loop3): Directory bread(block 73) failed [ 112.128525][ T24] playstation 0003:054C:0DF2.000E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 112.142122][ T4937] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1916'. [ 112.222989][ T4947] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.258358][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 112.258402][ T28] audit: type=1400 audit(2000000827.127:449): avc: denied { execmod } for pid=4952 comm="syz.7.1923" path="/144/blkio.bfq.io_merged" dev="tmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.293207][ T4947] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.301475][ T4956] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 112.302884][ T4947] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.311259][ T4956] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.355732][ T24] playstation 0003:054C:0DF2.000E: Failed to retrieve feature with reportID 9: -71 [ 112.384285][ T4956] fs-verity: sha512 using implementation "sha512-avx2" [ 112.390632][ T546] EXT4-fs (loop3): unmounting filesystem. [ 112.391369][ T24] playstation 0003:054C:0DF2.000E: Failed to retrieve DualSense pairing info: -71 [ 112.411866][ T24] playstation 0003:054C:0DF2.000E: Failed to get MAC address from DualSense [ 112.420869][ T24] playstation 0003:054C:0DF2.000E: Failed to create dualsense. [ 112.421795][ T2949] EXT4-fs (loop7): unmounting filesystem. [ 112.429249][ T24] playstation: probe of 0003:054C:0DF2.000E failed with error -71 [ 112.444013][ T24] usb 7-1: USB disconnect, device number 4 [ 112.491180][ C1] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 112.491199][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 112.524305][ T4972] EXT4-fs: Ignoring removed orlov option [ 112.536543][ T4964] fido_id[4964]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 112.572970][ T4973] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 112.620030][ T4972] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.679388][ T4972] incfs: Unexpected inode type [ 112.684877][ T4973] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 112.711452][ T4973] EXT4-fs (loop4): orphan cleanup on readonly fs [ 112.732831][ T4973] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 112.750646][ T546] EXT4-fs (loop3): unmounting filesystem. [ 112.762603][ T4973] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 112.772695][ T4973] EXT4-fs (loop4): 1 orphan inode deleted [ 112.778554][ T4973] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 112.783221][ T4999] input: syz1 as /devices/virtual/input/input18 [ 112.822246][ T5001] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.1938: Unimplemented hash flags: 0x0001 [ 112.848986][ T5001] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1938: Corrupt directory, running e2fsck is recommended [ 112.862378][ T5001] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 112.871274][ T292] EXT4-fs (loop4): unmounting filesystem. [ 112.871506][ T5001] EXT4-fs error (device loop3): ext4_iget_extra_inode:4765: inode #15: comm syz.3.1938: corrupted in-inode xattr [ 112.893406][ T5001] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1938: couldn't read orphan inode 15 (err -117) [ 112.905994][ T5001] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.938090][ T5011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1945'. [ 113.018603][ T5019] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.061556][ T5032] EXT4-fs: Ignoring removed oldalloc option [ 113.119969][ T5032] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 113.139454][ T5019] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 113.158868][ T2949] EXT4-fs (loop7): unmounting filesystem. [ 113.163543][ T5019] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8192 with max blocks 512 with error 28 [ 113.194475][ T5019] EXT4-fs (loop4): This should not happen!! Data will be lost [ 113.194475][ T5019] [ 113.204723][ T5019] EXT4-fs (loop4): Total free blocks count 0 [ 113.211039][ T5019] EXT4-fs (loop4): Free/Dirty block details [ 113.218868][ T5019] EXT4-fs (loop4): free_blocks=2415919504 [ 113.224795][ T5019] EXT4-fs (loop4): dirty_blocks=512 [ 113.230271][ T6] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 113.239056][ T5019] EXT4-fs (loop4): Block reservation details [ 113.250394][ T5019] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 113.325277][ T5050] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 113.339601][ T292] EXT4-fs (loop4): unmounting filesystem. [ 113.348043][ T5050] EXT4-fs (loop6): 1 truncate cleaned up [ 113.353733][ T5050] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 113.423841][ T2865] EXT4-fs (loop6): unmounting filesystem. [ 113.433621][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 113.439998][ T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.465563][ T6] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 113.490184][ T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.501693][ T6] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 113.538320][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.549200][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 113.556372][ T5074] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 113.557251][ T6] usb 4-1: SerialNumber: syz [ 113.581618][ T6] cdc_acm 4-1:1.0: skipping garbage [ 113.593443][ T6] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 113.704524][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.793689][ T5088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1979'. [ 113.815972][ T6] usb 4-1: USB disconnect, device number 8 [ 113.856271][ T221] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 113.883246][ T5100] set_capacity_and_notify: 12 callbacks suppressed [ 113.883267][ T5100] loop6: detected capacity change from 0 to 256 [ 113.902025][ T5100] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.919714][ T5100] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 113.928990][ T5104] loop4: detected capacity change from 0 to 512 [ 113.938326][ T5100] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 113.955594][ T5104] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 113.969022][ T5104] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.978330][ T28] audit: type=1400 audit(2000000828.724:450): avc: denied { rename } for pid=5099 comm="syz.6.1983" name="file0" dev="loop6" ino=1048756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.038392][ T292] EXT4-fs (loop4): unmounting filesystem. [ 114.062195][ T221] usb 8-1: Using ep0 maxpacket: 8 [ 114.075762][ T221] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 114.089679][ T28] audit: type=1326 audit(2000000828.825:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.8.1992" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a7b9ce59 code=0x7ffc0000 [ 114.100034][ T5116] loop8: detected capacity change from 0 to 1024 [ 114.117616][ T28] audit: type=1326 audit(2000000828.825:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.8.1992" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a7b9ce59 code=0x7ffc0000 [ 114.146487][ T221] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.148475][ T28] audit: type=1326 audit(2000000828.834:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.8.1992" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f75a7b9ce59 code=0x7ffc0000 [ 114.181825][ T28] audit: type=1326 audit(2000000828.834:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.8.1992" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f75a7b9cbc2 code=0x7ffc0000 [ 114.183205][ T221] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 114.206790][ T28] audit: type=1326 audit(2000000828.834:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.8.1992" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f75a7b5d68e code=0x7ffc0000 [ 114.215186][ T5116] EXT4-fs: Ignoring removed bh option [ 114.243277][ T28] audit: type=1326 audit(2000000828.834:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.8.1992" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f75a7b9cc87 code=0x7ffc0000 [ 114.244931][ T221] usb 8-1: SerialNumber: syz [ 114.269798][ T28] audit: type=1326 audit(2000000828.834:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.8.1992" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75a7b5d68e code=0x7ffc0000 [ 114.291589][ T5116] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 114.299058][ T28] audit: type=1326 audit(2000000828.834:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.8.1992" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f75a7b9caeb code=0x7ffc0000 [ 114.338704][ T3223] EXT4-fs (loop8): unmounting filesystem. [ 114.446106][ T546] EXT4-fs (loop3): unmounting filesystem. [ 114.600587][ T5140] loop3: detected capacity change from 0 to 2048 [ 114.674150][ T5140] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 114.769955][ T5140] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 114.803229][ T5140] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 8192 with max blocks 512 with error 28 [ 114.838530][ T5140] EXT4-fs (loop3): This should not happen!! Data will be lost [ 114.838530][ T5140] [ 114.895949][ T5140] EXT4-fs (loop3): Total free blocks count 0 [ 114.930731][ T5140] EXT4-fs (loop3): Free/Dirty block details [ 114.937136][ T5140] EXT4-fs (loop3): free_blocks=2415919504 [ 114.940668][ T221] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 114.948090][ T5140] EXT4-fs (loop3): dirty_blocks=512 [ 114.960903][ T5140] EXT4-fs (loop3): Block reservation details [ 114.996675][ T5140] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 115.004193][ T5175] loop8: detected capacity change from 0 to 128 [ 115.098980][ T5181] loop8: detected capacity change from 0 to 256 [ 115.125800][ T5181] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3984d6b7, utbl_chksum : 0xe619d30d) [ 115.188583][ T546] EXT4-fs (loop3): unmounting filesystem. [ 115.280454][ T24] usb 8-1: USB disconnect, device number 6 [ 115.301588][ T24] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 115.474815][ T5126] loop4: detected capacity change from 0 to 131072 [ 115.514492][ T5126] F2FS-fs (loop4): invalid crc value [ 115.531979][ T5222] loop8: detected capacity change from 0 to 256 [ 115.547474][ T5222] exfat: Deprecated parameter 'namecase' [ 115.556755][ T5222] exfat: Deprecated parameter 'utf8' [ 115.570690][ T5126] F2FS-fs (loop4): Found nat_bits in checkpoint [ 115.586877][ T5222] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 115.631222][ T5126] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 115.958835][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.975670][ T5268] loop3: detected capacity change from 0 to 2048 [ 116.030917][ T5268] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 116.052842][ T546] EXT4-fs (loop3): unmounting filesystem. [ 116.093319][ T5287] 9p: Unknown access argument 18446744073709551615: -34 [ 116.105980][ T5289] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2054'. [ 116.333371][ T5317] loop6: detected capacity change from 0 to 16 [ 116.346502][ T5317] erofs: (device loop6): mounted with root inode @ nid 36. [ 116.470377][ T5326] EXT4-fs: Ignoring removed oldalloc option [ 116.478523][ T5326] EXT4-fs error (device loop6): ext4_xattr_inode_iget:397: comm syz.6.2072: Parent and EA inode have the same ino 15 [ 116.491155][ T5326] EXT4-fs (loop6): 1 orphan inode deleted [ 116.497175][ T5326] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 116.526587][ T2865] EXT4-fs (loop6): unmounting filesystem. [ 116.871041][ T5355] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 116.959555][ T5334] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 116.970711][ T2865] EXT4-fs (loop6): unmounting filesystem. [ 116.972790][ T5334] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 116.986148][ T5334] F2FS-fs (loop4): invalid crc value [ 117.001038][ T5334] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 117.045287][ T5334] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 117.052892][ T5334] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 117.094969][ T292] syz-executor: attempt to access beyond end of device [ 117.094969][ T292] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 117.414288][ T5396] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x0f68ff13, utbl_chksum : 0xe619d30d) [ 117.530252][ T6] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 117.611736][ T5403] overlayfs: upper fs does not support tmpfile. [ 117.736133][ T6] usb 7-1: Using ep0 maxpacket: 32 [ 117.747752][ T6] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.768474][ T6] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.793717][ T6] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 117.812301][ T6] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 117.820733][ T6] usb 7-1: Product: syz [ 117.825024][ T6] usb 7-1: Manufacturer: syz [ 117.845997][ T6] hub 7-1:4.0: USB hub found [ 117.951810][ T5417] input: syz1 as /devices/virtual/input/input19 [ 117.963823][ T39] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.064306][ T6] hub 7-1:4.0: config failed, hub has too many ports! (err -19) [ 118.135927][ T5425] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2112'. [ 118.163733][ T5427] EXT4-fs: Ignoring removed bh option [ 118.170893][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.182840][ T39] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.195331][ T39] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.210817][ T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 118.220624][ T5427] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 118.229954][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 118.233728][ T5432] exfat: Deprecated parameter 'namecase' [ 118.241865][ T39] usb 4-1: Product: syz [ 118.247549][ T5432] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 118.250055][ T39] usb 4-1: Manufacturer: syz [ 118.265659][ T5427] EXT4-fs (loop7): 1 truncate cleaned up [ 118.275970][ T5427] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 118.296739][ T5427] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2113: invalid indirect mapped block 234881024 (level 0) [ 118.310904][ T39] usb 4-1: SerialNumber: syz [ 118.329124][ T2949] EXT4-fs (loop7): unmounting filesystem. [ 118.419027][ T221] usb 7-1: USB disconnect, device number 5 [ 118.440101][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 118.440118][ T28] audit: type=1400 audit(2000000832.830:502): avc: denied { write } for pid=5443 comm="syz.8.2120" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 118.544845][ T39] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 118.633303][ T5463] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 118.702169][ T5474] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.712427][ T5474] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 118.733252][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.755638][ T5474] EXT4-fs (loop7): 1 truncate cleaned up [ 118.761387][ T5474] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 118.774976][ T5474] incfs: ino conflict with backing FS 2 [ 118.789970][ T2949] EXT4-fs (loop7): unmounting filesystem. [ 118.862183][ T28] audit: type=1400 audit(2000000833.217:503): avc: denied { read write } for pid=5404 comm="syz.3.2105" name="lp0" dev="devtmpfs" ino=1639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 118.887637][ T1671] usb 4-1: USB disconnect, device number 9 [ 118.900036][ T1671] usblp0: removed [ 118.930517][ T28] audit: type=1400 audit(2000000833.254:504): avc: denied { open } for pid=5404 comm="syz.3.2105" path="/dev/usb/lp0" dev="devtmpfs" ino=1639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 119.352835][ T5556] set_capacity_and_notify: 9 callbacks suppressed [ 119.352852][ T5556] loop4: detected capacity change from 0 to 256 [ 119.362614][ T5560] loop7: detected capacity change from 0 to 128 [ 119.592481][ T5590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2186'. [ 119.695152][ T28] audit: type=1400 audit(2000000833.992:505): avc: denied { create } for pid=5607 comm="syz.6.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.715681][ T28] audit: type=1400 audit(2000000833.992:506): avc: denied { write } for pid=5607 comm="syz.6.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.741982][ T28] audit: type=1400 audit(2000000833.992:507): avc: denied { nlmsg_write } for pid=5607 comm="syz.6.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.778014][ T5613] netlink: 'syz.6.2196': attribute type 1 has an invalid length. [ 119.798550][ T2413] Bluetooth: hci0: Frame reassembly failed (-84) [ 119.811590][ T5617] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 119.942674][ T5619] loop3: detected capacity change from 0 to 40427 [ 119.953852][ T5619] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 119.965287][ T5619] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 119.980401][ T5619] F2FS-fs (loop3): invalid crc value [ 120.000781][ T5619] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.040154][ T5619] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 120.047587][ T5619] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 120.069289][ T5642] loop6: detected capacity change from 0 to 256 [ 120.322465][ T5648] loop6: detected capacity change from 0 to 40427 [ 120.348351][ T5648] F2FS-fs (loop6): invalid crc value [ 120.372925][ T5648] F2FS-fs (loop6): Found nat_bits in checkpoint [ 120.417507][ T28] audit: type=1400 audit(2000000834.657:508): avc: denied { sqpoll } for pid=5661 comm="syz.8.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 120.456580][ T28] audit: type=1400 audit(2000000834.693:509): avc: denied { execmem } for pid=5666 comm="syz.3.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 120.499868][ T5648] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 120.564906][ T2865] syz-executor: attempt to access beyond end of device [ 120.564906][ T2865] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.602061][ T5676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2222'. [ 120.707384][ T5687] loop6: detected capacity change from 0 to 256 [ 120.722095][ T5687] FAT-fs (loop6): Directory bread(block 64) failed [ 120.729280][ T5687] FAT-fs (loop6): Directory bread(block 65) failed [ 120.735891][ T5687] FAT-fs (loop6): Directory bread(block 66) failed [ 120.750607][ T5687] FAT-fs (loop6): Directory bread(block 67) failed [ 120.757480][ T5687] FAT-fs (loop6): Directory bread(block 68) failed [ 120.770079][ T5687] FAT-fs (loop6): Directory bread(block 69) failed [ 120.781299][ T5687] FAT-fs (loop6): Directory bread(block 70) failed [ 120.788747][ T5687] FAT-fs (loop6): Directory bread(block 71) failed [ 120.795631][ T5687] FAT-fs (loop6): Directory bread(block 72) failed [ 120.802590][ T5687] FAT-fs (loop6): Directory bread(block 73) failed [ 120.847934][ T5698] loop6: detected capacity change from 0 to 256 [ 120.854563][ T5698] exfat: Deprecated parameter 'utf8' [ 120.860087][ T5698] exfat: Deprecated parameter 'namecase' [ 120.866183][ T5698] exfat: Deprecated parameter 'utf8' [ 120.874754][ T5698] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 120.917647][ T5703] hub 9-0:1.0: USB hub found [ 120.922619][ T5703] hub 9-0:1.0: 1 port detected [ 121.089284][ T5725] loop6: detected capacity change from 0 to 1024 [ 121.104363][ T5725] EXT4-fs: Ignoring removed bh option [ 121.139321][ T5717] loop7: detected capacity change from 0 to 40427 [ 121.146543][ T5717] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 121.150424][ T5725] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 121.154421][ T5717] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 121.163493][ T5725] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.171474][ T5717] F2FS-fs (loop7): invalid crc value [ 121.208314][ T5717] F2FS-fs (loop7): Found nat_bits in checkpoint [ 121.227125][ T5725] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 3: comm syz.6.2243: lblock 3 mapped to illegal pblock 3 (length 3) [ 121.246377][ T5725] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 121.260008][ T5725] EXT4-fs (loop6): This should not happen!! Data will be lost [ 121.260008][ T5725] [ 121.269523][ T5717] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 121.273861][ T5725] EXT4-fs error (device loop6): ext4_ext_remove_space:2930: inode #15: comm syz.6.2243: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 121.277144][ T5717] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 121.295285][ T5725] EXT4-fs error (device loop6) in ext4_setattr:5697: Corrupt filesystem [ 121.350494][ T388] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 121.351041][ T2865] EXT4-fs (loop6): unmounting filesystem. [ 121.365451][ T388] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 121.559248][ T5740] loop7: detected capacity change from 0 to 40427 [ 121.566264][ T5740] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 121.574261][ T5740] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 121.585443][ T5740] F2FS-fs (loop7): Found nat_bits in checkpoint [ 121.604292][ T28] audit: type=1400 audit(2000000835.755:510): avc: denied { getopt } for pid=5744 comm="syz.6.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 121.645947][ T5740] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 121.659421][ T5740] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 121.732262][ T28] audit: type=1400 audit(2000000835.875:511): avc: denied { append } for pid=5759 comm="syz.8.2255" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 121.877819][ T5768] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2260'. [ 121.914268][ T5772] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2262'. [ 121.956034][ T5762] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 121.963458][ T5762] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 121.972015][ T5762] F2FS-fs (loop3): fault_injection options not supported [ 121.979331][ T5762] F2FS-fs (loop3): fault_type options not supported [ 121.986613][ T5762] F2FS-fs (loop3): invalid crc value [ 121.993359][ T5762] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.017390][ T5762] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 122.024502][ T5762] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.032141][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 122.032389][ T540] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.088474][ T5762] Invalid ELF header magic: != ELF [ 122.102788][ T546] syz-executor: attempt to access beyond end of device [ 122.102788][ T546] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.201359][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.209037][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 122.295976][ T5792] EXT4-fs: Ignoring removed bh option [ 122.302496][ T5792] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 122.313428][ T5792] EXT4-fs (loop4): 1 truncate cleaned up [ 122.319352][ T5792] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 122.336939][ T292] EXT4-fs (loop4): unmounting filesystem. [ 122.352098][ T5797] ================================================================== [ 122.360477][ T5797] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x9c/0xb0 [ 122.368203][ T5797] Write of size 8 at addr ffff8881176a8990 by task syz.4.2272/5797 [ 122.376175][ T5797] [ 122.378522][ T5797] CPU: 0 PID: 5797 Comm: syz.4.2272 Not tainted syzkaller #0 [ 122.385979][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 122.396135][ T5797] Call Trace: [ 122.399448][ T5797] [ 122.402489][ T5797] __dump_stack+0x21/0x24 [ 122.406917][ T5797] dump_stack_lvl+0x110/0x170 [ 122.411617][ T5797] ? __cfi_dump_stack_lvl+0x8/0x8 [ 122.416692][ T5797] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 122.422010][ T5797] print_address_description+0x71/0x200 [ 122.427563][ T5797] print_report+0x4a/0x60 [ 122.431919][ T5797] kasan_report+0x122/0x150 [ 122.436464][ T5797] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 122.441766][ T5797] __asan_report_store8_noabort+0x17/0x20 [ 122.447498][ T5797] rcu_segcblist_enqueue+0x9c/0xb0 [ 122.452697][ T5797] call_rcu+0x918/0xf90 [ 122.456853][ T5797] ? __cfi_call_rcu+0x10/0x10 [ 122.461531][ T5797] ? __cfi_wake_up_bit+0x10/0x10 [ 122.466466][ T5797] ? __kasan_check_write+0x14/0x20 [ 122.471588][ T5797] ? selinux_inode_free_security+0x1f7/0x200 [ 122.478176][ T5797] security_inode_free+0xc5/0xe0 [ 122.483310][ T5797] __destroy_inode+0x17a/0x530 [ 122.488115][ T5797] ? clear_inode+0x107/0x150 [ 122.492805][ T5797] evict+0x79b/0x8f0 [ 122.496737][ T5797] ? proc_nr_inodes+0x2f0/0x2f0 [ 122.501929][ T5797] ? __kasan_check_write+0x14/0x20 [ 122.507056][ T5797] iput+0x620/0x670 [ 122.510960][ T5797] dentry_unlink_inode+0x33d/0x3f0 [ 122.516067][ T5797] __dentry_kill+0x460/0x670 [ 122.520671][ T5797] dentry_kill+0xc0/0x2a0 [ 122.525066][ T5797] dput+0x42/0x80 [ 122.528718][ T5797] __fput+0x5be/0x8f0 [ 122.532797][ T5797] ____fput+0x15/0x20 [ 122.537036][ T5797] task_work_run+0x1e1/0x250 [ 122.541631][ T5797] ? __cfi_task_work_run+0x10/0x10 [ 122.546790][ T5797] ? __cfi___close_range+0x10/0x10 [ 122.551905][ T5797] exit_to_user_mode_loop+0x9b/0xb0 [ 122.557111][ T5797] exit_to_user_mode_prepare+0x87/0xd0 [ 122.562585][ T5797] syscall_exit_to_user_mode+0x1a/0x30 [ 122.568041][ T5797] do_syscall_64+0x58/0xa0 [ 122.572607][ T5797] ? clear_bhb_loop+0x30/0x80 [ 122.577295][ T5797] ? clear_bhb_loop+0x30/0x80 [ 122.582086][ T5797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.588086][ T5797] RIP: 0033:0x7f82fe39ce59 [ 122.592754][ T5797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.612451][ T5797] RSP: 002b:00007fff17480738 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 122.620879][ T5797] RAX: 0000000000000000 RBX: 00007fff17480820 RCX: 00007f82fe39ce59 [ 122.628953][ T5797] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 122.636935][ T5797] RBP: 000000000001ca09 R08: 0000000000000001 R09: 0000000000000000 [ 122.644941][ T5797] R10: 0000001b2de20000 R11: 0000000000000246 R12: 00007fff17480860 [ 122.653031][ T5797] R13: 00007f82fe615fac R14: 000000000001ca3c R15: 00007f82fe615fa0 [ 122.661208][ T5797] [ 122.664231][ T5797] [ 122.666557][ T5797] Allocated by task 5798: [ 122.670969][ T5797] kasan_set_track+0x4b/0x70 [ 122.675555][ T5797] kasan_save_alloc_info+0x25/0x30 [ 122.680669][ T5797] __kasan_kmalloc+0x95/0xb0 [ 122.685276][ T5797] __kmalloc+0xb1/0x1e0 [ 122.689446][ T5797] l2tp_session_create+0x38/0xbe0 [ 122.694593][ T5797] pppol2tp_connect+0xbef/0x1620 [ 122.699534][ T5797] __sys_connect+0x3da/0x460 [ 122.704129][ T5797] __x64_sys_connect+0x7a/0x90 [ 122.708934][ T5797] x64_sys_call+0x88d/0x9a0 [ 122.713520][ T5797] do_syscall_64+0x4c/0xa0 [ 122.717951][ T5797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.723845][ T5797] [ 122.726166][ T5797] Freed by task 591: [ 122.730077][ T5797] kasan_set_track+0x4b/0x70 [ 122.734668][ T5797] kasan_save_free_info+0x31/0x50 [ 122.739684][ T5797] ____kasan_slab_free+0x132/0x180 [ 122.744805][ T5797] __kasan_slab_free+0x11/0x20 [ 122.749695][ T5797] slab_free_freelist_hook+0xc2/0x190 [ 122.755241][ T5797] __kmem_cache_free+0xb7/0x1b0 [ 122.760105][ T5797] kfree+0x6f/0xf0 [ 122.763840][ T5797] l2tp_session_put+0xaf/0x1a0 [ 122.768600][ T5797] l2tp_session_delete+0x3f0/0x4e0 [ 122.773723][ T5797] l2tp_tunnel_del_work+0x1a1/0x410 [ 122.778910][ T5797] process_one_work+0x71f/0xc40 [ 122.783768][ T5797] worker_thread+0xa29/0x11e0 [ 122.788451][ T5797] kthread+0x281/0x320 [ 122.792524][ T5797] ret_from_fork+0x1f/0x30 [ 122.796937][ T5797] [ 122.799449][ T5797] Last potentially related work creation: [ 122.805344][ T5797] kasan_save_stack+0x3a/0x60 [ 122.810044][ T5797] __kasan_record_aux_stack+0xb6/0xc0 [ 122.815672][ T5797] kasan_record_aux_stack_noalloc+0xb/0x10 [ 122.821580][ T5797] call_rcu+0xcf/0xf90 [ 122.825734][ T5797] pppol2tp_release+0x208/0x2d0 [ 122.830617][ T5797] sock_close+0xf1/0x290 [ 122.834864][ T5797] __fput+0x1fc/0x8f0 [ 122.838853][ T5797] ____fput+0x15/0x20 [ 122.842848][ T5797] task_work_run+0x1e1/0x250 [ 122.847479][ T5797] exit_to_user_mode_loop+0x9b/0xb0 [ 122.852797][ T5797] exit_to_user_mode_prepare+0x87/0xd0 [ 122.858289][ T5797] syscall_exit_to_user_mode+0x1a/0x30 [ 122.863778][ T5797] do_syscall_64+0x58/0xa0 [ 122.868231][ T5797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.874150][ T5797] [ 122.876570][ T5797] Second to last potentially related work creation: [ 122.883240][ T5797] kasan_save_stack+0x3a/0x60 [ 122.887932][ T5797] __kasan_record_aux_stack+0xb6/0xc0 [ 122.893338][ T5797] kasan_record_aux_stack_noalloc+0xb/0x10 [ 122.899140][ T5797] kvfree_call_rcu+0x8b/0x7c0 [ 122.903836][ T5797] neigh_destroy+0x476/0x5b0 [ 122.908454][ T5797] neigh_cleanup_and_release+0x76/0x1a0 [ 122.914438][ T5797] neigh_flush_dev+0x7aa/0x960 [ 122.919208][ T5797] __neigh_ifdown+0x3f/0x400 [ 122.923804][ T5797] neigh_ifdown+0x1f/0x30 [ 122.928229][ T5797] rt6_disable_ip+0x89c/0x900 [ 122.932918][ T5797] addrconf_ifdown+0x169/0x1950 [ 122.937762][ T5797] addrconf_notify+0x39f/0xe40 [ 122.942521][ T5797] raw_notifier_call_chain+0xa1/0x110 [ 122.947890][ T5797] dev_close_many+0x32e/0x4d0 [ 122.952563][ T5797] unregister_netdevice_many+0x44f/0x18e0 [ 122.958287][ T5797] unregister_netdevice_queue+0x324/0x370 [ 122.964012][ T5797] __tun_detach+0xca6/0x1460 [ 122.968606][ T5797] tun_chr_close+0x92/0x140 [ 122.973132][ T5797] __fput+0x1fc/0x8f0 [ 122.977121][ T5797] ____fput+0x15/0x20 [ 122.981123][ T5797] task_work_run+0x1e1/0x250 [ 122.985880][ T5797] do_exit+0xa35/0x2660 [ 122.990056][ T5797] do_group_exit+0x225/0x2e0 [ 122.994650][ T5797] __x64_sys_exit_group+0x3f/0x40 [ 122.999674][ T5797] x64_sys_call+0x7b4/0x9a0 [ 123.004274][ T5797] do_syscall_64+0x4c/0xa0 [ 123.008778][ T5797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.014673][ T5797] [ 123.017007][ T5797] The buggy address belongs to the object at ffff8881176a8800 [ 123.017007][ T5797] which belongs to the cache kmalloc-512 of size 512 [ 123.031401][ T5797] The buggy address is located 400 bytes inside of [ 123.031401][ T5797] 512-byte region [ffff8881176a8800, ffff8881176a8a00) [ 123.044849][ T5797] [ 123.047173][ T5797] The buggy address belongs to the physical page: [ 123.053597][ T5797] page:ffffea00045daa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1176a8 [ 123.063846][ T5797] head:ffffea00045daa00 order:2 compound_mapcount:0 compound_pincount:0 [ 123.072185][ T5797] flags: 0x4000000000010200(slab|head|zone=1) [ 123.078264][ T5797] raw: 4000000000010200 ffffea00048c8e00 dead000000000003 ffff888100042f00 [ 123.086932][ T5797] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 123.095508][ T5797] page dumped because: kasan: bad access detected [ 123.101916][ T5797] page_owner tracks the page as allocated [ 123.107883][ T5797] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 114, tgid 114 (udevd), ts 5432906306, free_ts 0 [ 123.127508][ T5797] post_alloc_hook+0x1f5/0x210 [ 123.132388][ T5797] prep_new_page+0x1c/0x110 [ 123.136903][ T5797] get_page_from_freelist+0x2d12/0x2d80 [ 123.142469][ T5797] __alloc_pages+0x1fa/0x610 [ 123.147065][ T5797] alloc_slab_page+0x6e/0xf0 [ 123.151674][ T5797] new_slab+0x98/0x3d0 [ 123.155746][ T5797] ___slab_alloc+0x6bd/0xb20 [ 123.160363][ T5797] __slab_alloc+0x5e/0xa0 [ 123.164787][ T5797] __kmem_cache_alloc_node+0x203/0x2c0 [ 123.170248][ T5797] __kmalloc_node_track_caller+0xa0/0x1e0 [ 123.176052][ T5797] __alloc_skb+0x236/0x4b0 [ 123.180474][ T5797] alloc_skb_with_frags+0xa8/0x620 [ 123.185586][ T5797] sock_alloc_send_pskb+0x87f/0x9a0 [ 123.190804][ T5797] unix_dgram_sendmsg+0x539/0x16f0 [ 123.195921][ T5797] sock_write_iter+0x2ee/0x3f0 [ 123.200688][ T5797] vfs_write+0x603/0xce0 [ 123.205041][ T5797] page_owner free stack trace missing [ 123.210518][ T5797] [ 123.212923][ T5797] Memory state around the buggy address: [ 123.218545][ T5797] ffff8881176a8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.226599][ T5797] ffff8881176a8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.234830][ T5797] >ffff8881176a8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.242972][ T5797] ^ [ 123.247578][ T5797] ffff8881176a8a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 123.255638][ T5797] ffff8881176a8a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 123.263697][ T5797] ================================================================== [ 123.271749][ T5797] Disabling lock debugging due to kernel taint [ 123.281489][ T5802] EXT4-fs (loop3): Test dummy encryption mode enabled [ 123.308708][ T5802] ext4 filesystem being mounted at /434/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.320546][ T5805] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.338775][ T5805] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 123.350703][ T5805] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:477: comm syz.8.2274: Invalid block bitmap block 0 in block_group 0 [ 123.364630][ T5805] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 123.373759][ T5805] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #11: comm syz.8.2274: attempt to clear invalid blocks 983261 len 1 [ 123.388083][ T5805] EXT4-fs error (device loop8): __ext4_get_inode_loc:4522: comm syz.8.2274: Invalid inode table block 0 in block_group 0 [ 123.401455][ T5805] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 123.412272][ T5805] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 123.421394][ T5805] EXT4-fs error (device loop8): __ext4_get_inode_loc:4522: comm syz.8.2274: Invalid inode table block 0 in block_group 0 [ 123.434579][ T5805] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 123.444493][ T5805] EXT4-fs error (device loop8): ext4_truncate:4327: inode #11: comm syz.8.2274: mark_inode_dirty error [ 123.456288][ T5805] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 123.465398][ T5805] EXT4-fs error (device loop8): __ext4_get_inode_loc:4522: comm syz.8.2274: Invalid inode table block 0 in block_group 0 [ 123.478731][ T5805] EXT4-fs (loop8): 1 truncate cleaned up