last executing test programs: 441.047359ms ago: executing program 3 (id=9580): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_reqkey_keyring(0xe, 0x2) 397.43527ms ago: executing program 3 (id=9583): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x12, 0x80, 0xfffffff9, 0x5}}) 397.29382ms ago: executing program 0 (id=9584): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001280)="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", 0x559, r0) 390.27823ms ago: executing program 3 (id=9585): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r0, 0x0, 0x28, 0x0, 0x0) 355.438841ms ago: executing program 0 (id=9589): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001180)="ebfa0e81ceb3dc4c430515dc4dade315b9d30cce9d15af003afa41b75fbebe5b76443655c1dc73113beef85ec94ed0415b042c490000b8f9e0c37b9b333b6c", 0x3f}, {&(0x7f00000000c0)="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", 0xfe8}, {&(0x7f00000010c0)="a59a1e24b8262092d9f96085e2b1a5768dbda323bde5664bf35a16ebc562ba98a73b221c145a6860f3e70e7369b812e1a13b9b832bc3b39c6143dc37b17af3d7fce99a40d8e08b8b109643abe664fc8252321c3f17507e7db3baa87ae5cfc734fd5d76de945a9f8bc0c8fda3b7af79921790481b64a81551a5a5145ed735fd9b42b331f5ed1202aa91e80162eb04bb95bf5b9f80af6d025e45565e46746de0170cd77fcc90effee6a4bb1799b85f40a845ee4abfcac9fec348fd4701ed", 0xbd}, {&(0x7f0000001380)="5087b984bf09d82f40c3af2be512254b66617a1a2066e2ea881c3e30ee640814abf671367181686dfba1381c24a915560499d4314d33a9f9fd39b28a1a963b9ed1d049df6a38b7d99d59196861220d33a3043260c5de9aca8c390c7040fa72e58e64bd6f15c688f5d88300236573c6ff685562bac76c14183e4b679e03928a5d1a849f838276c58b822a2c5d4a75acd67bd41de340302bbca107d6ddb1809964060b8000000000", 0xa7}], 0x4) 336.698791ms ago: executing program 3 (id=9591): prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x2000000db002) 336.251771ms ago: executing program 3 (id=9593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa}, @TCA_SKBEDIT_PTYPE={0x6, 0x4, 0x60}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) 314.275942ms ago: executing program 3 (id=9596): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040da0b52811130010203010902"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x0, 0x18, 0x2, "8da4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 308.686542ms ago: executing program 0 (id=9598): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000040)) 292.610662ms ago: executing program 0 (id=9601): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000003c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfa, 0x1511, &(0x7f0000002cc0)="$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") chmod(&(0x7f0000000780)='./file0\x00', 0x1c4) 195.414245ms ago: executing program 0 (id=9611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000001"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r0, 0x58, &(0x7f0000000340)}, 0x9) 176.927855ms ago: executing program 1 (id=9614): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005200)=[{{&(0x7f0000000700)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6c8bf85c}, 0x1c, 0x0, 0x0, &(0x7f00000027c0)=[@flowinfo={{0x14, 0x29, 0xb, 0xffff}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x40}}], 0x1, 0x804) 165.211536ms ago: executing program 2 (id=9615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) 164.794876ms ago: executing program 4 (id=9616): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_pauseparam={0x13, 0x7f, 0x4, 0x9}}) 159.792166ms ago: executing program 2 (id=9617): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x1, 0xfffff018}, {0x6, 0x0, 0x0, 0xdf36}]}, 0x10) 157.107426ms ago: executing program 1 (id=9618): io_setup(0xffff, &(0x7f0000005000)) io_setup(0x4, &(0x7f00000014c0)) 145.935436ms ago: executing program 2 (id=9619): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/rt6_stats\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 90.933357ms ago: executing program 4 (id=9620): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) lseek(r0, 0x0, 0x3) 90.765657ms ago: executing program 2 (id=9621): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000003c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfa, 0x1511, &(0x7f0000002cc0)="$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") chmod(&(0x7f0000000780)='./file0\x00', 0x1c4) 90.669227ms ago: executing program 0 (id=9622): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x1]}, 0x8) 90.608077ms ago: executing program 4 (id=9623): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) keyctl$set_reqkey_keyring(0xe, 0x2) 90.469237ms ago: executing program 4 (id=9624): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) listxattr(&(0x7f00000001c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x0, 0x0) 67.979118ms ago: executing program 4 (id=9625): r0 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "47247dc7230dc99a233797db22ee94b796feb05fb7a96f78d1bdab4f5d51a05ef4ceda61cf2e5dfaa6c5ae8503e0919454e2512e410c9181e12a9f50750aaf3d"}, 0x48, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) 63.718938ms ago: executing program 4 (id=9626): syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_winnt}, {@fat=@flush}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@uni_xlateno}, {@numtail}, {@utf8}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@uni_xlate}, {@utf8}]}, 0x7f, 0x2bd, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 58.221148ms ago: executing program 2 (id=9627): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 49.962108ms ago: executing program 1 (id=9628): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x8002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x403c5404, 0x0) 32.137329ms ago: executing program 1 (id=9629): r0 = eventfd2(0x0, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="569534ab1bbe0e03", 0x8}, {&(0x7f0000000080)="98", 0x1}], 0x2) 31.764629ms ago: executing program 1 (id=9630): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002a80)={0x9, {"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", 0x1000}}, 0x1006) 3.937239ms ago: executing program 2 (id=9631): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208006, &(0x7f00000003c0), 0x1, 0x5ed, &(0x7f0000000bc0)="$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") quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f00000005c0)={0x40000000000000, 0x4, 0x1, 0x6}) 0s ago: executing program 1 (id=9632): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) kernel console output (not intermixed with test programs): 68 [ 274.760248][ T434] loop0: p1 p3 < p5 p6 p7 > p4 [ 274.765147][ T434] loop0: partition table partially beyond EOD, truncated [ 274.793411][ T434] loop0: p4 start 1426063360 is beyond EOD, truncated [ 274.806111][ T434] loop0: p5 size 16777216 extends beyond EOD, truncated [ 274.830496][ T434] loop0: p7 start 75776 is beyond EOD, truncated [ 274.851578][T13627] loop0: p1 p3 < p5 p6 p7 > p4 [ 274.875112][T13627] loop0: partition table partially beyond EOD, truncated [ 274.894353][T13627] loop0: p4 start 1426063360 is beyond EOD, truncated [ 274.914750][T13627] loop0: p5 size 16777216 extends beyond EOD, truncated [ 274.936881][T13665] __nla_validate_parse: 65 callbacks suppressed [ 274.936901][T13665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6337'. [ 274.954637][T13627] loop0: p7 start 75776 is beyond EOD, truncated [ 275.091270][T13687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.130073][ T7058] udevd[7058]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 275.138784][ T7060] udevd[7060]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 275.140895][ T434] udevd[434]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 275.150663][ T7056] udevd[7056]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 275.227893][ T7056] udevd[7056]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 275.227918][ T7058] udevd[7058]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 275.243898][ T434] udevd[434]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 275.248474][ T7060] udevd[7060]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 275.345692][T13605] loop2: detected capacity change from 0 to 131072 [ 275.370228][T13605] F2FS-fs (loop2): invalid crc value [ 275.409645][T13605] F2FS-fs (loop2): Found nat_bits in checkpoint [ 275.458319][T13605] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 275.465407][T13605] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 275.526464][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6379'. [ 275.548002][T13751] IPv6: sit1: Disabled Multicast RS [ 275.785410][T13793] device lo left promiscuous mode [ 275.796416][T13793] device tunl0 left promiscuous mode [ 275.807863][T13793] device gre0 left promiscuous mode [ 275.817779][T13793] device gretap0 left promiscuous mode [ 275.830343][T13793] device erspan0 left promiscuous mode [ 275.852886][T13793] device ip_vti0 left promiscuous mode [ 275.858500][T13793] device ip6_vti0 left promiscuous mode [ 275.881006][T13793] device sit0 left promiscuous mode [ 275.891784][T13793] device ip6tnl0 left promiscuous mode [ 275.902184][T13793] device ip6gre0 left promiscuous mode [ 275.913020][T13793] device syz_tun left promiscuous mode [ 275.932822][T13793] device ip6gretap0 left promiscuous mode [ 275.944813][T13793] device bridge0 left promiscuous mode [ 275.951123][T13793] device dummy0 left promiscuous mode [ 275.956722][T13793] device veth0 left promiscuous mode [ 275.962536][T13793] device veth1 left promiscuous mode [ 275.970868][T13793] device wg0 left promiscuous mode [ 275.976367][T13793] device wg1 left promiscuous mode [ 275.982232][T13793] device wg2 left promiscuous mode [ 275.987498][T13793] device veth0_to_bridge left promiscuous mode [ 275.994114][T13793] device veth1_to_bridge left promiscuous mode [ 276.001652][T13793] device veth0_to_bond left promiscuous mode [ 276.012664][T13793] device bond_slave_0 left promiscuous mode [ 276.024165][T13793] device veth1_to_bond left promiscuous mode [ 276.030926][T13793] device bond_slave_1 left promiscuous mode [ 276.035841][T13657] loop3: detected capacity change from 0 to 131072 [ 276.037528][T13816] netlink: 'syz.4.6409': attribute type 1 has an invalid length. [ 276.043933][T13793] device veth0_to_team left promiscuous mode [ 276.057957][T13793] device team_slave_0 left promiscuous mode [ 276.064587][T13793] device veth1_to_team left promiscuous mode [ 276.070940][T13793] device team_slave_1 left promiscuous mode [ 276.077606][T13793] device veth0_to_batadv left promiscuous mode [ 276.085002][T13793] device batadv_slave_0 left promiscuous mode [ 276.089446][T13657] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 276.104305][T13793] device veth1_to_batadv left promiscuous mode [ 276.115419][T13657] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 276.123969][T13793] device batadv_slave_1 left promiscuous mode [ 276.128555][T13657] F2FS-fs (loop3): invalid crc value [ 276.136840][T13793] device xfrm0 left promiscuous mode [ 276.143309][T13793] device veth0_to_hsr left promiscuous mode [ 276.148251][T13657] F2FS-fs (loop3): Found nat_bits in checkpoint [ 276.149589][T13793] device hsr_slave_0 left promiscuous mode [ 276.162040][T13793] device veth1_to_hsr left promiscuous mode [ 276.168025][T13793] device hsr_slave_1 left promiscuous mode [ 276.174233][T13793] device veth1_virt_wifi left promiscuous mode [ 276.180464][T13793] device veth0_virt_wifi left promiscuous mode [ 276.181811][T13657] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 276.187125][T13793] device veth1_vlan left promiscuous mode [ 276.193773][T13657] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 276.199810][T13793] device vlan0 left promiscuous mode [ 276.212862][T13793] device vlan1 left promiscuous mode [ 276.218606][T13793] device veth0_macvtap left promiscuous mode [ 276.225815][T13793] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 276.284818][T13834] netlink: 'syz.2.6417': attribute type 1 has an invalid length. [ 276.399444][T13860] loop2: detected capacity change from 0 to 256 [ 276.593123][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6446'. [ 276.663424][T13902] mip6: mip6_rthdr_init_state: state's mode is not 2: 1 [ 276.666700][T13904] netlink: 'syz.0.6452': attribute type 4 has an invalid length. [ 276.705150][T13904] netlink: 'syz.0.6452': attribute type 17 has an invalid length. [ 276.716651][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6416'. [ 276.743727][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6416'. [ 276.895221][T13945] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 276.909634][T13953] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6474'. [ 277.005609][T13969] xt_l2tp: invalid flags combination: 4 [ 277.079298][T13979] bridge0: port 3(veth0_vlan) entered disabled state [ 277.143412][ C0] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 277.143431][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 277.181108][T13997] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 277.225008][T13997] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 277.257728][T14007] netlink: 'syz.4.6502': attribute type 1 has an invalid length. [ 277.282871][T14007] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6502'. [ 277.324769][T13840] loop1: detected capacity change from 0 to 131072 [ 277.349382][T13840] F2FS-fs (loop1): invalid crc value [ 277.389609][T13840] F2FS-fs (loop1): Found nat_bits in checkpoint [ 277.406312][T14033] netlink: 'syz.0.6511': attribute type 5 has an invalid length. [ 277.421473][T14033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6511'. [ 277.448437][T13840] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 277.469514][T13840] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 277.499096][T13840] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 277.559615][T14059] device lo entered promiscuous mode [ 277.577887][T14059] device tunl0 entered promiscuous mode [ 277.603619][T14059] device gre0 entered promiscuous mode [ 277.614553][T14059] device gretap0 entered promiscuous mode [ 277.621785][T14059] device erspan0 entered promiscuous mode [ 277.646598][T14059] device ip_vti0 entered promiscuous mode [ 277.657536][T14059] device ip6_vti0 entered promiscuous mode [ 277.679390][T14059] device sit0 entered promiscuous mode [ 277.690320][T14059] device ip6tnl0 entered promiscuous mode [ 277.710867][T14059] device ip6gre0 entered promiscuous mode [ 277.717669][T14059] device syz_tun entered promiscuous mode [ 277.724781][T14059] device ip6gretap0 entered promiscuous mode [ 277.741565][T14059] bridge0: port 4(dummy0) entered disabled state [ 277.748053][T14059] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.755231][T14059] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.794889][T14059] device bridge0 entered promiscuous mode [ 277.805600][T14059] device veth0 entered promiscuous mode [ 277.817382][T14059] device veth1 entered promiscuous mode [ 277.838921][T14059] device wg0 entered promiscuous mode [ 277.848442][T14059] device wg1 entered promiscuous mode [ 277.866883][T14059] device wg2 entered promiscuous mode [ 277.873920][T14059] device veth0_to_bridge entered promiscuous mode [ 277.884378][T14059] device veth1_to_bridge entered promiscuous mode [ 277.898598][T14059] device veth0_to_bond entered promiscuous mode [ 277.911781][T14059] device bond_slave_0 entered promiscuous mode [ 277.921345][T14059] device veth1_to_bond entered promiscuous mode [ 277.933757][T14059] device bond_slave_1 entered promiscuous mode [ 277.947277][T14059] device veth0_to_team entered promiscuous mode [ 277.964583][T14059] device team_slave_0 entered promiscuous mode [ 277.975181][T14059] device veth1_to_team entered promiscuous mode [ 277.985925][T14059] device team_slave_1 entered promiscuous mode [ 277.997737][T14059] device veth0_to_batadv entered promiscuous mode [ 278.009408][T14059] device batadv_slave_0 entered promiscuous mode [ 278.019335][T14059] device veth1_to_batadv entered promiscuous mode [ 278.027138][T14059] device batadv_slave_1 entered promiscuous mode [ 278.034250][T14059] device xfrm0 entered promiscuous mode [ 278.040373][T14059] device veth0_to_hsr entered promiscuous mode [ 278.047245][T14059] device hsr_slave_0 entered promiscuous mode [ 278.054017][T14059] device veth1_to_hsr entered promiscuous mode [ 278.060697][T14059] device hsr_slave_1 entered promiscuous mode [ 278.067667][T14059] device veth1_virt_wifi entered promiscuous mode [ 278.074767][T14059] device veth0_virt_wifi entered promiscuous mode [ 278.081732][T14059] device veth1_vlan entered promiscuous mode [ 278.088772][T14059] device vlan0 entered promiscuous mode [ 278.094470][T14059] device vlan1 entered promiscuous mode [ 278.100861][T14059] device veth0_macvtap entered promiscuous mode [ 278.108276][T14080] netlink: 'syz.2.6536': attribute type 49 has an invalid length. [ 278.174033][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 278.174050][ T30] audit: type=1400 audit(2034081796.221:666): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 278.180638][T14080] device ip6gretap0 entered promiscuous mode [ 278.233704][ T30] audit: type=1400 audit(2034081796.258:667): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.244407][T12286] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 278.295225][ T30] audit: type=1400 audit(2034081796.258:668): avc: denied { read } for pid=140 comm="dhcpcd" name="n1766423045" dev="tmpfs" ino=17453 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.323307][ T30] audit: type=1400 audit(2034081796.258:669): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n1766423045" dev="tmpfs" ino=17453 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.352498][ T30] audit: type=1400 audit(2034081796.258:670): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n1766423045" dev="tmpfs" ino=17453 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.422976][T14118] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 278.513385][ T30] audit: type=1400 audit(2034081796.539:671): avc: denied { getattr } for pid=14139 comm="syz.3.6565" name="/" dev="dax" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 278.557331][ T30] audit: type=1326 audit(2034081796.558:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14147 comm="syz.0.6566" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dab842199 code=0x7ffc0000 [ 278.580237][T14157] netlink: 'syz.4.6575': attribute type 4 has an invalid length. [ 278.609189][ T30] audit: type=1326 audit(2034081796.558:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14147 comm="syz.0.6566" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dab842199 code=0x7ffc0000 [ 278.665307][ T30] audit: type=1326 audit(2034081796.567:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14147 comm="syz.0.6566" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dab842199 code=0x7ffc0000 [ 278.698308][T14174] device lo left promiscuous mode [ 278.708047][T14174] device tunl0 left promiscuous mode [ 278.708564][ T30] audit: type=1326 audit(2034081796.567:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14147 comm="syz.0.6566" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dab842199 code=0x7ffc0000 [ 278.713432][T14174] device gre0 left promiscuous mode [ 278.738419][T12286] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 278.760190][T14180] xt_socket: unknown flags 0x40 [ 278.765151][T12286] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 278.786161][T12286] usb 2-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 278.795724][T12286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.798092][T14174] device gretap0 left promiscuous mode [ 278.811205][T14174] device erspan0 left promiscuous mode [ 278.816763][T14174] device ip_vti0 left promiscuous mode [ 278.823273][T14174] device ip6_vti0 left promiscuous mode [ 278.828900][T14174] device sit0 left promiscuous mode [ 278.834716][T14174] device ip6tnl0 left promiscuous mode [ 278.840311][T14174] device ip6gre0 left promiscuous mode [ 278.846541][T12286] usb-storage 2-1:1.0: USB Mass Storage device detected [ 278.853876][T14174] device syz_tun left promiscuous mode [ 278.859643][T14174] device ip6gretap0 left promiscuous mode [ 278.867431][T14174] device bridge0 left promiscuous mode [ 278.873062][T12286] scsi host1: usb-storage 2-1:1.0 [ 278.875219][T14174] device veth0 left promiscuous mode [ 278.891406][T14174] device veth1 left promiscuous mode [ 278.898029][T14174] device wg0 left promiscuous mode [ 278.903255][T14174] device wg1 left promiscuous mode [ 278.908870][T14174] device wg2 left promiscuous mode [ 278.914160][T14174] device veth0_to_bridge left promiscuous mode [ 278.920686][T14174] device veth1_to_bridge left promiscuous mode [ 278.926982][T14174] device veth0_to_bond left promiscuous mode [ 278.933287][T14174] device bond_slave_0 left promiscuous mode [ 278.939787][T14174] device veth1_to_bond left promiscuous mode [ 278.944962][T14188] loop2: detected capacity change from 0 to 40427 [ 278.945851][T14174] device bond_slave_1 left promiscuous mode [ 278.958218][T14174] device veth0_to_team left promiscuous mode [ 278.964299][T14174] device team_slave_0 left promiscuous mode [ 278.970253][T14174] device veth1_to_team left promiscuous mode [ 278.976425][T14174] device team_slave_1 left promiscuous mode [ 278.982610][T14174] device veth0_to_batadv left promiscuous mode [ 278.988956][T14174] device batadv_slave_0 left promiscuous mode [ 278.995164][T14174] device veth1_to_batadv left promiscuous mode [ 279.001395][T14174] device batadv_slave_1 left promiscuous mode [ 279.002933][T14188] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 279.007591][T14174] device xfrm0 left promiscuous mode [ 279.020332][T14174] device veth0_to_hsr left promiscuous mode [ 279.026383][T14174] device hsr_slave_0 left promiscuous mode [ 279.032380][T14174] device veth1_to_hsr left promiscuous mode [ 279.032449][T14188] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 279.038491][T14174] device hsr_slave_1 left promiscuous mode [ 279.052708][T14174] device veth1_virt_wifi left promiscuous mode [ 279.059134][T14174] device veth0_virt_wifi left promiscuous mode [ 279.065464][T14174] device veth1_vlan left promiscuous mode [ 279.071470][T14174] device vlan0 left promiscuous mode [ 279.072834][T14188] F2FS-fs (loop2): invalid crc value [ 279.076932][T14174] device vlan1 left promiscuous mode [ 279.083121][T14188] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 279.088201][T14174] device veth0_macvtap left promiscuous mode [ 279.106643][T14184] netlink: 'syz.4.6587': attribute type 3 has an invalid length. [ 279.116642][T14184] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6587'. [ 279.126894][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6588'. [ 279.135996][T14188] F2FS-fs (loop2): Start checkpoint disabled! [ 279.144425][T14188] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 279.151493][T14188] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 279.189035][T14201] loop4: detected capacity change from 0 to 256 [ 279.197481][T14188] attempt to access beyond end of device [ 279.197481][T14188] loop2: rw=2049, want=45104, limit=40427 [ 279.224911][T14208] netlink: 'syz.3.6597': attribute type 13 has an invalid length. [ 279.234428][ T6510] attempt to access beyond end of device [ 279.234428][ T6510] loop2: rw=2049, want=40976, limit=40427 [ 279.276620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.284646][T14201] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.295489][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.303642][ T314] usb 2-1: USB disconnect, device number 102 [ 279.312189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.329087][T14212] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.337830][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.344887][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.352580][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.361065][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.388630][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.395713][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.410803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.419342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 279.427761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.436215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 279.438424][T14220] ip_tables: iptables: counters copy to user failed while replacing table [ 279.444934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.461551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.470471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.479095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.487435][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.495943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.504129][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.512597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.520913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.529406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.537324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.545604][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.553790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.562064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.570500][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.578778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.586813][ T8] bridge0: port 3(veth0_vlan) entered blocking state [ 279.593521][ T8] bridge0: port 3(veth0_vlan) entered forwarding state [ 279.600724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.608804][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.616413][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.623891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.631979][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.640543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.677383][T14231] netlink: 'syz.4.6606': attribute type 9 has an invalid length. [ 279.695994][T14231] netlink: 'syz.4.6606': attribute type 7 has an invalid length. [ 279.709230][T14231] netlink: 'syz.4.6606': attribute type 8 has an invalid length. [ 279.867936][T14267] netlink: 'syz.3.6625': attribute type 2 has an invalid length. [ 279.882357][T14267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.962531][T14239] loop0: detected capacity change from 0 to 40427 [ 279.995788][T14239] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 280.009277][T14239] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 280.023475][T14239] F2FS-fs (loop0): invalid crc value [ 280.050635][T14239] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 280.098735][T14239] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 280.107745][T14239] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 280.140177][T14331] xt_socket: unknown flags 0x58 [ 280.151350][T14239] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 280.181070][T14337] xt_TPROXY: Can be used only with -p tcp or -p udp [ 280.269609][T14356] loop4: detected capacity change from 0 to 1024 [ 280.312735][T14365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.377781][T14373] ipt_REJECT: TCP_RESET invalid for non-tcp [ 280.404362][T14356] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 280.426667][T14384] ipt_REJECT: TCP_RESET invalid for non-tcp [ 280.443881][T14356] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 280.479937][T14356] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 280.494890][T14361] loop3: detected capacity change from 0 to 40427 [ 280.505612][T14361] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 280.514672][T14361] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 280.532152][T14361] F2FS-fs (loop3): invalid crc value [ 280.551795][T14404] x_tables: unsorted entry at hook 3 [ 280.559795][T14403] loop1: detected capacity change from 0 to 512 [ 280.578710][T14361] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 280.629255][T14403] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 280.665162][T14403] ext4 filesystem being mounted at /1375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.697683][T14361] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 280.713706][T14361] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 280.766730][T14444] xt_SECMARK: invalid mode: 2 [ 280.806389][T14361] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 280.821851][T14456] netlink: 'syz.4.6706': attribute type 16 has an invalid length. [ 280.840752][T14456] netlink: 'syz.4.6706': attribute type 17 has an invalid length. [ 280.854923][T14456] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.862834][T14456] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.908751][T14424] loop0: detected capacity change from 0 to 40427 [ 280.933108][T14424] F2FS-fs (loop0): invalid crc value [ 280.978824][T14424] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 281.071237][T14424] F2FS-fs (loop0): Start checkpoint disabled! [ 281.095640][T14424] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 281.172767][T14506] __nla_validate_parse: 4 callbacks suppressed [ 281.172788][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6723'. [ 281.228441][T14516] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.236255][T14516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.243537][T14516] IPv6: NLM_F_CREATE should be set when creating new route [ 281.250792][T14516] IPv6: NLM_F_CREATE should be set when creating new route [ 283.557551][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 284.285058][T14538] netlink: 'syz.0.6739': attribute type 9 has an invalid length. [ 284.292840][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6739'. [ 284.317385][T14547] loop1: detected capacity change from 0 to 512 [ 284.341674][T14555] loop2: detected capacity change from 0 to 256 [ 284.348372][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 284.348389][ T30] audit: type=1326 audit(2034081801.993:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.3.6748" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff5ed6199 code=0x7ffc0000 [ 284.379175][T14560] loop4: detected capacity change from 0 to 256 [ 284.402630][T14547] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 284.407285][ T30] audit: type=1326 audit(2034081802.012:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.3.6748" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff5ed6199 code=0x7ffc0000 [ 284.435669][ T30] audit: type=1326 audit(2034081802.058:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.3.6748" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9ff5ed6199 code=0x7ffc0000 [ 284.460970][ T30] audit: type=1326 audit(2034081802.058:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.3.6748" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff5ed6199 code=0x7ffc0000 [ 284.486026][T14547] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 284.495168][T14547] EXT4-fs (loop1): orphan cleanup on readonly fs [ 284.502256][T14547] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.6742: bg 0: block 15: invalid block bitmap [ 284.517305][ T30] audit: type=1400 audit(2034081802.152:729): avc: denied { mount } for pid=14567 comm="syz.3.6754" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 284.552791][T14547] EXT4-fs (loop1): Remounting filesystem read-only [ 284.559410][T14547] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 284.567330][T14560] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d) [ 284.568357][ T30] audit: type=1400 audit(2034081802.199:730): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 284.605873][T14574] loop2: detected capacity change from 0 to 512 [ 284.612812][T14547] EXT4-fs (loop1): Remounting filesystem read-only [ 284.621990][T14547] EXT4-fs (loop1): 1 truncate cleaned up [ 284.628843][T14574] EXT4-fs (loop2): Ignoring removed oldalloc option [ 284.647394][T14547] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noload,noblock_validity,dioread_lock,nouid32,errors=remount-ro,. Quota mode: none. [ 284.690050][ T30] audit: type=1400 audit(2034081802.311:731): avc: denied { setattr } for pid=14559 comm="syz.4.6750" name="file2" dev="loop4" ino=1048672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 284.691399][T14547] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 284.720895][T14574] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,,errors=continue. Quota mode: writeback. [ 284.733997][T14589] loop3: detected capacity change from 0 to 16 [ 284.812589][T14589] erofs: (device loop3): mounted with root inode @ nid 36. [ 284.827826][T14595] netlink: 'syz.1.6764': attribute type 3 has an invalid length. [ 284.841935][ T30] audit: type=1400 audit(2034081802.461:732): avc: denied { read } for pid=14588 comm="syz.3.6762" name="file1" dev="loop3" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 284.902048][T14611] netlink: 'syz.3.6771': attribute type 12 has an invalid length. [ 284.910770][ T30] audit: type=1400 audit(2034081802.507:733): avc: denied { create } for pid=14606 comm="syz.1.6770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 284.936053][T14583] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 284.944480][ T30] audit: type=1400 audit(2034081802.517:734): avc: denied { ioctl } for pid=14608 comm="syz.2.6772" path="socket:[58366]" dev="sockfs" ino=58366 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 284.957034][T14583] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 285.011126][T14583] F2FS-fs (loop0): invalid crc value [ 285.012423][T14620] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d) [ 285.055300][T14583] F2FS-fs (loop0): Found nat_bits in checkpoint [ 285.066965][T14636] erofs: (device loop1): mounted with root inode @ nid 36. [ 285.106188][T14583] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 285.113628][T14583] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 285.121295][T14637] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 285.169374][T14637] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 285.182930][T14637] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 285.191174][T14637] System zones: 0-2, 18-18, 34-35 [ 285.191765][T14658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6792'. [ 285.197983][T14637] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 285.219155][T14658] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 285.235669][T14637] EXT4-fs error (device loop4): ext4_generic_delete_entry:2731: inode #2: block 3: comm syz.4.6783: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 285.255894][T14637] EXT4-fs error (device loop4) in ext4_delete_entry:2802: Corrupt filesystem [ 285.280940][T14668] exfat: Deprecated parameter 'debug' [ 285.286393][T14668] No source specified [ 285.293443][T14670] device vlan0 entered promiscuous mode [ 285.296705][T14672] sock: sock_timestamping_bind_phc: sock not bind to device [ 285.609302][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 285.935570][T14751] set_capacity_and_notify: 4 callbacks suppressed [ 285.935590][T14751] loop3: detected capacity change from 0 to 40427 [ 285.972686][T14751] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 285.979177][T14751] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 285.998378][T14751] F2FS-fs (loop3): invalid crc value [ 286.021431][T14780] loop4: detected capacity change from 0 to 512 [ 286.036200][T14751] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 286.095308][T14780] EXT4-fs (loop4): orphan cleanup on readonly fs [ 286.111043][T14768] loop0: detected capacity change from 0 to 40427 [ 286.118615][T14780] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 286.127324][T14780] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 286.142456][T14780] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.6849: attempt to clear invalid blocks 2 len 1 [ 286.156026][T14751] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 286.157455][T14768] F2FS-fs (loop0): fault_injection options not supported [ 286.163135][T14751] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 286.187817][T14780] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.6849: invalid indirect mapped block 1819239214 (level 0) [ 286.202173][T14768] F2FS-fs (loop0): fault_type options not supported [ 286.220935][T14768] F2FS-fs (loop0): invalid crc value [ 286.239950][T14780] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.6849: invalid indirect mapped block 1819239214 (level 1) [ 286.265659][T14768] F2FS-fs (loop0): Found nat_bits in checkpoint [ 286.286732][T14780] EXT4-fs (loop4): 1 truncate cleaned up [ 286.292419][T14780] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,auto_da_alloc,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 286.321803][T14751] F2FS-fs (loop3): Unrecognized mount option "1«Á›Ág^ 3" or missing value [ 286.350090][T14780] EXT4-fs error (device loop4): ext4_lookup:1857: inode #2: comm syz.4.6849: 'file1' linked to parent dir [ 286.361660][T14768] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 286.448988][T14737] loop2: detected capacity change from 0 to 131072 [ 286.464576][T14737] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 286.474186][T14737] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 286.509488][T14737] F2FS-fs (loop2): invalid crc value [ 286.540148][T14737] F2FS-fs (loop2): Found nat_bits in checkpoint [ 286.587610][T14737] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 286.594797][T14737] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 286.619296][T14808] loop0: detected capacity change from 0 to 4096 [ 286.641934][T14808] EXT4-fs (loop0): Ignoring removed orlov option [ 286.661300][T14808] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (64007!=0) [ 286.682931][T14808] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,,errors=continue. Quota mode: writeback. [ 286.703977][T14808] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (64007!=0) [ 286.760149][T14826] loop3: detected capacity change from 0 to 256 [ 286.779773][T14801] loop4: detected capacity change from 0 to 40427 [ 286.801599][T14830] loop0: detected capacity change from 0 to 128 [ 286.808173][T14826] exfat: Deprecated parameter 'utf8' [ 286.809775][T14801] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 286.813613][T14826] exfat: Deprecated parameter 'utf8' [ 286.821380][T14801] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 286.822167][T14801] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 286.841666][T14826] exfat: Deprecated parameter 'namecase' [ 286.847573][T14826] exfat: Deprecated parameter 'namecase' [ 286.854184][T14801] F2FS-fs (loop4): Found nat_bits in checkpoint [ 286.899165][T14826] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 286.952245][T14826] overlayfs: filesystem on './file0' not supported [ 286.959228][T14801] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 286.970433][T14838] loop0: detected capacity change from 0 to 256 [ 286.973306][T14801] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 287.032719][T14840] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6874'. [ 287.041942][T14840] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6874'. [ 287.084285][T14848] loop0: detected capacity change from 0 to 1024 [ 287.153348][T14848] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 287.185411][T14850] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 287.186503][T14865] x_tables: unsorted underflow at hook 3 [ 287.241560][T14848] EXT4-fs error (device loop0): ext4_empty_dir:3179: inode #11: block 38: comm syz.0.6875: bad entry in directory: rec_len is smaller than minimal - offset=6912, inode=0, rec_len=0, size=1024 fake=0 [ 287.275042][T14848] EXT4-fs (loop0): Remounting filesystem read-only [ 287.283102][T14850] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.6878: bad orphan inode 13 [ 287.303984][T14850] ext4_test_bit(bit=12, block=18) = 1 [ 287.309903][T14850] is_bad_inode(inode)=0 [ 287.314407][T14850] NEXT_ORPHAN(inode)=0 [ 287.320205][T14850] max_ino=32 [ 287.324692][T14850] i_nlink=1 [ 287.327928][T14850] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 287.364255][T14892] exfat: Deprecated parameter 'namecase' [ 287.369966][T14892] exfat: Deprecated parameter 'namecase' [ 287.417887][T14883] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 287.442512][T14915] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6905'. [ 287.445065][T14913] sock: sock_timestamping_bind_phc: sock not bind to device [ 287.466492][T14892] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 287.478703][T14883] ext4 filesystem being mounted at /1516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.495048][T14883] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 287.579736][T14933] mip6: mip6_destopt_init_state: spi is not 0: 3557031936 [ 287.624681][T14943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.692496][T14958] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6927'. [ 287.711067][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6928'. [ 287.758706][T14969] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.777034][T14969] ext4 filesystem being mounted at /1253/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 287.800038][T14964] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 287.813751][T14964] ext4 filesystem being mounted at /1433/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.839394][T14979] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6935'. [ 287.848608][T14979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6935'. [ 287.858018][T14979] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6935'. [ 287.867256][T14979] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6935'. [ 287.913903][T14983] netlink: 'syz.4.6938': attribute type 13 has an invalid length. [ 288.142957][T15011] FAT-fs (loop3): Directory bread(block 64) failed [ 288.164177][T15011] FAT-fs (loop3): Directory bread(block 65) failed [ 288.164525][T15025] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 288.170891][T15011] FAT-fs (loop3): Directory bread(block 66) failed [ 288.194383][T15027] SELinux: failed to load policy [ 288.220010][T15015] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff" or missing value [ 288.231550][T15011] FAT-fs (loop3): Directory bread(block 67) failed [ 288.238473][T15011] FAT-fs (loop3): Directory bread(block 68) failed [ 288.245093][T15011] FAT-fs (loop3): Directory bread(block 69) failed [ 288.260388][T15011] FAT-fs (loop3): Directory bread(block 70) failed [ 288.267196][T15011] FAT-fs (loop3): Directory bread(block 71) failed [ 288.281578][T15011] FAT-fs (loop3): Directory bread(block 72) failed [ 288.288158][T15011] FAT-fs (loop3): Directory bread(block 73) failed [ 288.393416][T15053] netlink: 'syz.4.6969': attribute type 5 has an invalid length. [ 288.428940][T15062] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6978'. [ 288.567305][T15105] device gretap0 entered promiscuous mode [ 288.603374][T15101] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 288.611359][T15101] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 288.630825][T15101] System zones: 0-1, 15-15, 18-18, 34-34 [ 288.637410][T15101] EXT4-fs (loop4): orphan cleanup on readonly fs [ 288.643902][T15101] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 288.659242][T15101] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 288.673447][T15101] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.6995: bad orphan inode 16 [ 288.683764][T15101] ext4_test_bit(bit=15, block=18) = 1 [ 288.689748][T15101] is_bad_inode(inode)=0 [ 288.693933][T15101] NEXT_ORPHAN(inode)=0 [ 288.699870][T15101] max_ino=32 [ 288.703109][T15101] i_nlink=2 [ 288.706283][T15101] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 288.756038][T15101] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 288.785269][T15135] futex_wake_op: syz.3.7012 tries to shift op by 32; fix this program [ 288.884528][T15139] FAT-fs (loop0): Directory bread(block 64) failed [ 288.899091][T15139] FAT-fs (loop0): Directory bread(block 65) failed [ 288.906833][T15139] FAT-fs (loop0): Directory bread(block 66) failed [ 288.925620][T15139] FAT-fs (loop0): Directory bread(block 67) failed [ 288.938656][T15139] FAT-fs (loop0): Directory bread(block 68) failed [ 288.963057][T15139] FAT-fs (loop0): Directory bread(block 69) failed [ 288.979730][T15159] bridge0: port 3(veth0_vlan) entered disabled state [ 288.986582][T15159] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.993881][T15159] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.008489][T15139] FAT-fs (loop0): Directory bread(block 70) failed [ 289.015056][T15139] FAT-fs (loop0): Directory bread(block 71) failed [ 289.040553][T15139] FAT-fs (loop0): Directory bread(block 72) failed [ 289.047115][T15139] FAT-fs (loop0): Directory bread(block 73) failed [ 289.383896][T15210] FAT-fs (loop4): Directory bread(block 64) failed [ 289.416696][T15210] FAT-fs (loop4): Directory bread(block 65) failed [ 289.436273][T15210] FAT-fs (loop4): Directory bread(block 66) failed [ 289.442973][T15210] FAT-fs (loop4): Directory bread(block 67) failed [ 289.450806][T15210] FAT-fs (loop4): Directory bread(block 68) failed [ 289.470378][T15210] FAT-fs (loop4): Directory bread(block 69) failed [ 289.476984][T15210] FAT-fs (loop4): Directory bread(block 70) failed [ 289.492221][T15210] FAT-fs (loop4): Directory bread(block 71) failed [ 289.505702][T15210] FAT-fs (loop4): Directory bread(block 72) failed [ 289.532246][T15210] FAT-fs (loop4): Directory bread(block 73) failed [ 289.651858][T15268] device vlan0 left promiscuous mode [ 289.678172][T15104] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 289.707511][T15104] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 289.736173][T15104] F2FS-fs (loop1): invalid crc value [ 289.740056][T15282] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 289.785731][T15104] F2FS-fs (loop1): Found nat_bits in checkpoint [ 289.796925][T15282] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 289.874722][T15104] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 289.904673][T15104] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 289.946697][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 289.946713][ T30] audit: type=1400 audit(2034081807.232:790): avc: denied { create } for pid=15328 comm="syz.3.7100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.985250][ T30] audit: type=1400 audit(2034081807.260:791): avc: denied { getopt } for pid=15333 comm="syz.2.7103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 290.034970][ T30] audit: type=1400 audit(2034081807.260:792): avc: denied { connect } for pid=15328 comm="syz.3.7100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 290.112619][ T30] audit: type=1400 audit(2034081807.391:793): avc: denied { checkpoint_restore } for pid=15357 comm="syz.3.7115" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 290.205676][T15373] x_tables: duplicate underflow at hook 2 [ 290.233681][ T30] audit: type=1400 audit(2034081807.494:794): avc: denied { write } for pid=15374 comm="syz.2.7123" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 290.286679][ T30] audit: type=1400 audit(2034081807.494:795): avc: denied { open } for pid=15374 comm="syz.2.7123" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 290.367030][T15391] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 290.548787][T15424] printk: syz.1.7148 (15424): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 290.621613][T15438] exfat: Deprecated parameter 'utf8' [ 290.652455][T15442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.682241][T15438] exfat: Deprecated parameter 'utf8' [ 290.693607][T15444] netlink: 'syz.3.7156': attribute type 3 has an invalid length. [ 290.705378][T15438] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 290.750688][T15454] device bridge1 entered promiscuous mode [ 290.773870][T15452] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 290.801734][T15452] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 290.848009][T15464] x_tables: duplicate entry at hook 3 [ 290.854796][T15468] overlayfs: unrecognized mount option "\pperdir=upper" or missing value [ 290.866180][T15452] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 290.900706][ T30] audit: type=1400 audit(2034081808.130:796): avc: denied { execmem } for pid=15476 comm="syz.0.7171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 290.925392][T15452] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.7169: bg 0: block 248: padding at end of block bitmap is not set [ 290.970128][T15452] Quota error (device loop2): write_blk: dquota write failed [ 290.978152][T15452] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 290.989741][T15452] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.7169: Failed to acquire dquot type 1 [ 291.003035][T15452] EXT4-fs (loop2): 1 truncate cleaned up [ 291.019593][T15452] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 291.042917][ T30] audit: type=1400 audit(2034081808.261:797): avc: denied { setattr } for pid=15451 comm="syz.2.7169" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 291.083220][ T8] EXT4-fs error (device loop2): ext4_release_dquot:6263: comm kworker/u4:0: Failed to release dquot type 1 [ 291.159291][T15521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.166555][T15521] IPv6: NLM_F_CREATE should be set when creating new route [ 291.173825][T15521] IPv6: NLM_F_CREATE should be set when creating new route [ 291.220294][T15535] netlink: 'syz.1.7200': attribute type 8 has an invalid length. [ 291.228461][T15535] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 291.549117][T15632] netlink: 'syz.1.7246': attribute type 2 has an invalid length. [ 291.666642][T15662] netem: change failed [ 291.666855][T15663] set_capacity_and_notify: 20 callbacks suppressed [ 291.666869][T15663] loop3: detected capacity change from 0 to 128 [ 291.690662][T15666] loop1: detected capacity change from 0 to 256 [ 291.725447][T15671] xt_limit: Overflow, try lower: 2147483649/3300 [ 291.821248][T15687] x_tables: unsorted entry at hook 4 [ 292.093317][T15778] device ip6tnl4 entered promiscuous mode [ 292.150986][T15796] loop1: detected capacity change from 0 to 512 [ 292.157535][T15798] page size migration: [15798 (syz.2.7330)] madvise_vma_pad_pages:289: Invalid attempt to madvise padding on MAP_SHARED vma [ 292.183216][T11012] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 292.249099][T15796] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 292.258059][T15796] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 292.313351][T15828] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.320626][T15828] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.497404][T15841] loop1: detected capacity change from 0 to 1024 [ 292.504898][T15824] loop0: detected capacity change from 0 to 40427 [ 292.540114][T15824] F2FS-fs (loop0): invalid crc value [ 292.555533][T15841] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 2: comm syz.1.7350: lblock 2 mapped to illegal pblock 2 (length 1) [ 292.588177][T15841] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 48: comm syz.1.7350: lblock 0 mapped to illegal pblock 48 (length 1) [ 292.600351][T15824] F2FS-fs (loop0): Found nat_bits in checkpoint [ 292.608996][T15841] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.7350: Failed to acquire dquot type 0 [ 292.633228][T15841] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 292.642869][T11012] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.654983][T15841] EXT4-fs error (device loop1): ext4_evict_inode:285: inode #11: comm syz.1.7350: mark_inode_dirty error [ 292.657794][T11012] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 292.677833][T15841] EXT4-fs warning (device loop1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 292.689775][T15824] F2FS-fs (loop0): Start checkpoint disabled! [ 292.695918][T15841] EXT4-fs (loop1): 1 orphan inode deleted [ 292.701915][T15824] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 292.701907][T15841] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 292.702184][ T954] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 292.746499][ T954] EXT4-fs error (device loop1): ext4_release_dquot:6263: comm kworker/u4:3: Failed to release dquot type 0 [ 292.761602][T15841] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.7350: Invalid inode table block 1 in block_group 0 [ 292.775159][T15841] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 292.784750][T15841] EXT4-fs error (device loop1): ext4_quota_off:6533: inode #3: comm syz.1.7350: mark_inode_dirty error [ 292.852737][T15872] device veth0_vlan left promiscuous mode [ 292.868213][T11012] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 292.869560][T15872] device veth0_vlan entered promiscuous mode [ 292.882722][T11012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.896551][T11012] usb 4-1: Product: syz [ 292.906089][T15872] device veth1_macvtap left promiscuous mode [ 292.913260][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.913261][T11012] usb 4-1: Manufacturer: syz [ 292.913281][T11012] usb 4-1: SerialNumber: syz [ 292.921109][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.939545][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.949028][ T954] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.956231][ T954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.964218][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.972714][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.981232][ T954] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.988406][ T954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.002427][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.010990][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 293.019142][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.027292][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 293.035857][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 293.044313][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.052862][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.061066][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.069107][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.077397][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.085696][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.094113][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 293.102282][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.110775][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.119183][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.127595][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.136433][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.144434][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.153273][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.161902][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.170102][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.178157][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.185560][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan4093: link becomes ready [ 293.193406][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.201154][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.209760][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.218053][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.239523][T12295] usb 4-1: USB disconnect, device number 105 [ 293.289294][T15906] loop4: detected capacity change from 0 to 256 [ 293.360969][T15906] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 293.416083][T15944] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 293.447494][T15946] loop2: detected capacity change from 0 to 512 [ 293.478700][T15956] xt_hashlimit: overflow, rate too high: 0 [ 293.501868][T15946] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 293.520969][T15966] __nla_validate_parse: 19 callbacks suppressed [ 293.520991][T15966] netlink: 172 bytes leftover after parsing attributes in process `syz.4.7410'. [ 293.541902][T15966] netlink: 182 bytes leftover after parsing attributes in process `syz.4.7410'. [ 293.559232][T15946] EXT4-fs (loop2): 1 truncate cleaned up [ 293.571808][T15946] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,init_itable,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 293.597950][T15946] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.7400: missing EA_INODE flag [ 293.613779][T15946] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.7400: error while reading EA inode 2 err=-117 [ 293.627002][T15946] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 293.640986][T15987] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 293.694287][T16004] device gre1 entered promiscuous mode [ 293.794576][T16033] loop0: detected capacity change from 0 to 256 [ 293.882406][T16057] loop1: detected capacity change from 0 to 256 [ 293.940855][T16069] loop0: detected capacity change from 0 to 256 [ 293.984978][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7468'. [ 294.079824][T16110] xt_TCPMSS: Only works on TCP SYN packets [ 294.082991][T16113] netlink: 'syz.4.7482': attribute type 29 has an invalid length. [ 294.224625][T16145] 8021q: VLANs not supported on lo [ 294.240719][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7500'. [ 294.279939][T16156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7505'. [ 294.437558][T16198] netlink: 'syz.0.7526': attribute type 3 has an invalid length. [ 294.503613][T16219] netlink: 'syz.4.7536': attribute type 6 has an invalid length. [ 294.522187][T16219] IPv6: NLM_F_CREATE should be specified when creating new route [ 294.531718][T16227] device vlan0 entered promiscuous mode [ 294.538342][T16226] netlink: 'syz.0.7540': attribute type 10 has an invalid length. [ 294.574138][T16239] xt_ecn: cannot match TCP bits for non-tcp packets [ 294.620496][T16253] netlink: 'syz.0.7553': attribute type 46 has an invalid length. [ 294.636568][T16257] IPv6: sit2: Disabled Multicast RS [ 294.751476][T16290] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 294.792038][T16290] FAT-fs (loop4): Directory bread(block 64) failed [ 294.835164][T16308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.842437][T16308] IPv6: NLM_F_CREATE should be set when creating new route [ 294.849707][T16308] IPv6: NLM_F_CREATE should be set when creating new route [ 294.862270][T16290] FAT-fs (loop4): Directory bread(block 65) failed [ 294.876891][T16290] FAT-fs (loop4): Directory bread(block 66) failed [ 294.890904][T16310] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7580'. [ 294.915826][T16290] FAT-fs (loop4): Directory bread(block 67) failed [ 294.980691][T16290] FAT-fs (loop4): Directory bread(block 68) failed [ 294.992668][T16290] FAT-fs (loop4): Directory bread(block 69) failed [ 295.037294][T16290] FAT-fs (loop4): Directory bread(block 70) failed [ 295.057094][T16343] gretap0: refused to change device tx_queue_len [ 295.078467][T16290] FAT-fs (loop4): Directory bread(block 71) failed [ 295.080350][T16343] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 295.100892][T16290] FAT-fs (loop4): Directory bread(block 72) failed [ 295.126594][T16290] FAT-fs (loop4): Directory bread(block 73) failed [ 295.299804][T16401] netlink: 'syz.2.7626': attribute type 1 has an invalid length. [ 295.347351][T16401] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7626'. [ 295.471217][T16441] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7644'. [ 295.506813][T16440] device bridge4 entered promiscuous mode [ 295.533785][T16449] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7650'. [ 295.675579][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 295.675598][ T30] audit: type=1400 audit(2034081812.583:856): avc: denied { write } for pid=16485 comm="syz.0.7668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 295.712140][T16469] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 295.743154][T16469] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 295.780930][T16469] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.7661: iget: bad i_size value: 360287970189639680 [ 295.818875][T16469] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.7661: couldn't read orphan inode 15 (err -117) [ 295.836388][T16469] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 295.850637][T16469] EXT4-fs error (device loop1): ext4_empty_dir:3147: inode #12: block 13: comm syz.1.7661: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 295.882105][T16469] EXT4-fs warning (device loop1): ext4_empty_dir:3149: inode #12: comm syz.1.7661: directory missing '.' [ 295.958969][T16523] EXT4-fs (loop2): Ignoring removed oldalloc option [ 295.995053][T16523] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nogrpid,noinit_itable,oldalloc,delalloc,max_dir_size_kb=0x00000000000007b0,nojournal_checksum,stripe=0x0000000000000001,init_itable=0x0000000000001000,grpquota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 296.025618][T16523] EXT4-fs error (device loop2): ext4_lookup:1860: comm syz.2.7686: inode #12: comm syz.2.7686: iget: illegal inode # [ 296.032531][T16560] xt_ecn: cannot match TCP bits for non-tcp packets [ 296.045535][T16561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.104713][T16575] xt_SECMARK: invalid security context 'unconfined' [ 296.118263][T16572] erofs: (device loop1): mounted with root inode @ nid 36. [ 296.152382][T16572] attempt to access beyond end of device [ 296.152382][T16572] loop1: rw=0, want=328, limit=16 [ 296.160630][T16585] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 296.172643][T16585] device bridge5 entered promiscuous mode [ 296.177100][T16569] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 296.178888][T16572] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 296.210017][T16569] ext4 filesystem being mounted at /1648/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.294952][T16609] xt_l2tp: v2 doesn't support IP mode [ 296.310581][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7730'. [ 296.319705][T16617] device gretap0 left promiscuous mode [ 296.338269][T16623] xt_hashlimit: max too large, truncated to 1048576 [ 296.376021][T16614] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 296.417221][T16614] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,. Quota mode: writeback. [ 296.490066][T16656] IPv6: NLM_F_REPLACE set, but no existing node found! [ 296.536386][T16614] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #15: comm syz.4.7723: inline data xattr refers to an external xattr inode [ 296.590357][T16614] EXT4-fs (loop4): Remounting filesystem read-only [ 296.648486][ T30] audit: type=1401 audit(2034081813.500:857): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A667361646D5F657865635F743A73300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 296.654373][T16676] EXT4-fs (loop3): Ignoring removed nobh option [ 296.750694][T16647] F2FS-fs (loop2): fault_type options not supported [ 296.751399][T16647] F2FS-fs (loop2): invalid crc value [ 296.756832][T16647] F2FS-fs (loop2): Found nat_bits in checkpoint [ 296.793768][T16676] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 296.794185][T16676] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.7758: attempt to clear invalid blocks 1 len 1 [ 296.794395][T16676] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 296.794475][T16676] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7758: invalid indirect mapped block 1819239214 (level 0) [ 296.794742][T16676] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7758: invalid indirect mapped block 1819239214 (level 1) [ 296.795210][T16676] EXT4-fs (loop3): 1 truncate cleaned up [ 296.795227][T16676] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 296.855471][T16647] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 296.856240][T16647] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 296.998078][T16716] ip_tables: iptables: counters copy to user failed while replacing table [ 297.122235][T16735] xt_bpf: check failed: parse error [ 297.197621][T16754] set_capacity_and_notify: 11 callbacks suppressed [ 297.197641][T16754] loop0: detected capacity change from 0 to 512 [ 297.262596][T16754] EXT4-fs error (device loop0): ext4_get_journal_inode:5178: comm syz.0.7794: inode #2147418112: comm syz.0.7794: iget: illegal inode # [ 297.281218][T16762] loop4: detected capacity change from 0 to 1024 [ 297.302375][T16754] EXT4-fs (loop0): no journal found [ 297.308342][T16754] EXT4-fs (loop0): can't get journal size [ 297.324947][T16754] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 297.341129][T16762] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 297.360445][T16754] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 297.369527][T16762] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 297.377320][T16762] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 297.389959][T16754] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,usrquota,,errors=continue. Quota mode: writeback. [ 297.608241][T16839] netlink: 'syz.4.7834': attribute type 6 has an invalid length. [ 297.687811][T16857] netlink: 'syz.2.7845': attribute type 7 has an invalid length. [ 297.712383][T16857] netlink: 'syz.2.7845': attribute type 8 has an invalid length. [ 297.771461][ T30] audit: type=1326 audit(2034081814.548:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.7853" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e9ebe199 code=0x7ffc0000 [ 297.807061][ T30] audit: type=1326 audit(2034081814.548:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.7853" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e9ebe199 code=0x7ffc0000 [ 297.837235][ T30] audit: type=1326 audit(2034081814.585:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.7853" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f79e9ebe199 code=0x7ffc0000 [ 297.880514][ T314] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 297.895333][T16881] loop4: detected capacity change from 0 to 2048 [ 297.912235][ T30] audit: type=1326 audit(2034081814.585:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.7853" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e9ebe199 code=0x7ffc0000 [ 297.949395][T16893] loop1: detected capacity change from 0 to 256 [ 297.965730][ T30] audit: type=1326 audit(2034081814.585:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.7853" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e9ebe199 code=0x7ffc0000 [ 297.999919][ T30] audit: type=1400 audit(2034081814.604:863): avc: denied { getopt } for pid=16875 comm="syz.2.7854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 298.184124][T16937] loop1: detected capacity change from 0 to 512 [ 298.200395][T16943] netlink: 'syz.0.7888': attribute type 5 has an invalid length. [ 298.223383][T16937] EXT4-fs (loop1): Test dummy encryption mode enabled [ 298.230594][T16937] EXT4-fs (loop1): Test dummy encryption mode enabled [ 298.240989][T16937] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 298.242273][ T30] audit: type=1326 audit(2034081814.987:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16948 comm="syz.4.7890" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f277199 code=0x7ffc0000 [ 298.252992][T16937] EXT4-fs (loop1): 1 truncate cleaned up [ 298.290053][T16937] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,nojournal_checksum,nogrpid,debug_want_extra_isize=0x0000000000000080,nogrpid,jqfmt=vfsv1,test_dummy_encryption,nodioread_nolock,,errors=continue. Quota mode: none. [ 298.324167][ T30] audit: type=1326 audit(2034081814.987:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16948 comm="syz.4.7890" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f277199 code=0x7ffc0000 [ 298.341234][T16937] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5924: inode #15: comm syz.1.7879: bad extra_isize 62 (inode size 256) [ 298.365363][ T314] usb 4-1: unable to get BOS descriptor or descriptor too short [ 298.435448][T16978] ip_tables: iptables: counters copy to user failed while replacing table [ 298.456863][T16981] loop0: detected capacity change from 0 to 256 [ 298.459969][T16983] netlink: 'syz.4.7908': attribute type 3 has an invalid length. [ 298.479154][ T314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.495671][T16981] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5ba3b049, utbl_chksum : 0xe619d30d) [ 298.510379][ T314] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 298.521336][ T314] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 298.533156][ T314] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 298.564646][ T314] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 298.587283][ T314] usb 4-1: config 1 interface 1 has no altsetting 0 [ 298.667223][T17029] loop0: detected capacity change from 0 to 16 [ 298.697463][T17029] erofs: (device loop0): mounted with root inode @ nid 36. [ 298.740453][T17049] netlink: 'syz.2.7941': attribute type 12 has an invalid length. [ 298.807245][T17065] loop4: detected capacity change from 0 to 256 [ 298.836298][T17059] kernel read not supported for file /policy (pid: 17059 comm: syz.0.7945) [ 298.852076][T17065] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 298.866141][T17065] FAT-fs (loop4): Filesystem has been set read-only [ 298.874719][ T314] usb 4-1: string descriptor 0 read error: -22 [ 298.883938][ T314] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 298.895167][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.919940][T17075] device macsec0 entered promiscuous mode [ 298.948898][T17075] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 298.983513][T17080] __nla_validate_parse: 128 callbacks suppressed [ 298.983535][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7955'. [ 299.016630][T17063] loop2: detected capacity change from 0 to 40427 [ 299.054122][T17090] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7960'. [ 299.068530][T17092] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7961'. [ 299.077881][T17092] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7961'. [ 299.096114][T17063] F2FS-fs (loop2): invalid crc value [ 299.122425][T17063] F2FS-fs (loop2): Found nat_bits in checkpoint [ 299.139997][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7968'. [ 299.160868][T17063] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 299.419862][ T314] usb 4-1: cannot get ctl value: req = 0x82, wValue = 0x201, wIndex = 0x200, type = 4 [ 299.434120][ T314] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 299.446201][ T314] usb 4-1: USB disconnect, device number 106 [ 299.481275][T17184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8005'. [ 299.501695][T17188] device vlan0 entered promiscuous mode [ 299.738206][T17254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8040'. [ 299.741939][T17252] kernel read not supported for file /policy (pid: 17252 comm: syz.4.8039) [ 299.759015][T17254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8040'. [ 299.788090][T17254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8040'. [ 299.802886][T17254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8040'. [ 299.836807][T17254] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.844045][T17254] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.258899][T17315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.366976][T17331] loop2: detected capacity change from 0 to 256 [ 300.451230][T17331] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 300.471582][T17331] FAT-fs (loop2): Filesystem has been set read-only [ 300.501720][T17345] device ipip0 entered promiscuous mode [ 300.622133][T17349] kernel read not supported for file /policy (pid: 17349 comm: syz.3.8087) [ 300.693190][T17363] xt_hashlimit: max too large, truncated to 1048576 [ 300.811054][T17375] xt_TCPMSS: Only works on TCP SYN packets [ 300.861771][T17249] F2FS-fs (loop0): Test dummy encryption mode enabled [ 300.870747][T17249] F2FS-fs (loop0): QUOTA feature is enabled, so ignore jquota_fmt [ 300.931842][T17249] F2FS-fs (loop0): Found nat_bits in checkpoint [ 300.953474][T17387] kernel read not supported for file /policy (pid: 17387 comm: syz.2.8104) [ 301.015636][T17249] F2FS-fs (loop0): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 301.024779][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 301.024798][ T30] audit: type=1400 audit(2034081817.588:916): avc: denied { read } for pid=17405 comm="syz.2.8114" name="transactions_hashed" dev="binder" ino=1048612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 301.072637][T17249] F2FS-fs (loop0): Failed to read root inode [ 301.184748][T17425] exfat: Deprecated parameter 'utf8' [ 301.190174][T17425] exfat: Deprecated parameter 'namecase' [ 301.225361][T17425] exfat: Deprecated parameter 'namecase' [ 301.269972][T17425] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 301.343868][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 301.351863][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 301.370517][T17451] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 301.430117][T17454] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 301.473072][T17454] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 301.512462][T17454] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 301.546478][T17467] xt_TCPMSS: Only works on TCP SYN packets [ 301.555582][T17454] System zones: 0-2, 18-18, 34-34 [ 301.579702][T17454] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.8137: bad orphan inode 15 [ 301.625888][T17454] ext4_test_bit(bit=14, block=18) = 1 [ 301.649604][T17454] is_bad_inode(inode)=0 [ 301.665448][T17454] NEXT_ORPHAN(inode)=2264924160 [ 301.683067][T17454] max_ino=32 [ 301.696825][T17454] i_nlink=0 [ 301.707011][T17454] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #15: comm syz.1.8137: corrupted inode contents [ 301.750256][T17454] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #15: comm syz.1.8137: mark_inode_dirty error [ 301.789316][T17454] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #15: comm syz.1.8137: corrupted inode contents [ 301.817130][T17454] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2957: inode #15: comm syz.1.8137: mark_inode_dirty error [ 301.832655][T17454] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2960: inode #15: comm syz.1.8137: mark inode dirty (error -117) [ 301.848360][T17454] EXT4-fs warning (device loop1): ext4_evict_inode:305: xattr delete (err -117) [ 301.857556][T17454] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 301.869692][T17500] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 302.048241][ T30] audit: type=1326 audit(2034081818.552:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17527 comm="syz.0.8171" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dab842199 code=0x7ffc0000 [ 302.107736][T17526] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 302.107831][T17526] ext4 filesystem being mounted at /1690/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.108170][ T30] audit: type=1326 audit(2034081818.580:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17527 comm="syz.0.8171" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dab842199 code=0x7ffc0000 [ 302.108200][ T30] audit: type=1326 audit(2034081818.589:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17527 comm="syz.0.8171" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dab842199 code=0x7ffc0000 [ 302.108224][ T30] audit: type=1326 audit(2034081818.589:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17527 comm="syz.0.8171" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dab842199 code=0x7ffc0000 [ 302.108246][ T30] audit: type=1326 audit(2034081818.589:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17527 comm="syz.0.8171" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f0dab842199 code=0x7ffc0000 [ 302.108268][ T30] audit: type=1326 audit(2034081818.589:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17527 comm="syz.0.8171" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dab842199 code=0x7ffc0000 [ 302.108292][ T30] audit: type=1326 audit(2034081818.589:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17527 comm="syz.0.8171" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dab842199 code=0x7ffc0000 [ 302.108315][ T30] audit: type=1326 audit(2034081818.589:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17527 comm="syz.0.8171" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0dab842199 code=0x7ffc0000 [ 302.108339][ T30] audit: type=1326 audit(2034081818.589:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17527 comm="syz.0.8171" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0dab842199 code=0x7ffc0000 [ 302.131563][T17526] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.8173: corrupted xattr block 128 [ 302.131813][T17526] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 302.131862][T17526] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.8173: corrupted xattr block 128 [ 302.132014][T17526] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 302.132044][T17526] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.8173: corrupted xattr block 128 [ 302.132186][T17526] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 302.132214][T17526] EXT4-fs error (device loop2): ext4_xattr_block_find:1857: inode #15: comm syz.2.8173: corrupted xattr block 128 [ 302.394868][T17555] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 302.394956][T17555] ext4 filesystem being mounted at /1692/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.397347][T17555] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.8186: No space for directory leaf checksum. Please run e2fsck -D. [ 302.397379][T17555] EXT4-fs error (device loop2): __ext4_find_entry:1698: inode #2: comm syz.2.8186: checksumming directory block 0 [ 302.455187][T17584] device sit0 left promiscuous mode [ 302.457176][T17584] device vlan0 left promiscuous mode [ 302.458470][T17584] device ip6tnl4 left promiscuous mode [ 302.567855][T17603] device gre1 entered promiscuous mode [ 302.692102][T17619] device lo left promiscuous mode [ 302.697263][T17619] device tunl0 left promiscuous mode [ 302.705715][T17619] device gre0 left promiscuous mode [ 302.711270][T17619] device gretap0 left promiscuous mode [ 302.717375][T17619] device erspan0 left promiscuous mode [ 302.723735][T17619] device ip_vti0 left promiscuous mode [ 302.729305][T17619] device ip6_vti0 left promiscuous mode [ 302.735344][T17619] device sit0 left promiscuous mode [ 302.740608][T17619] device ip6tnl0 left promiscuous mode [ 302.746201][T17619] device ip6gre0 left promiscuous mode [ 302.751722][T17619] device syz_tun left promiscuous mode [ 302.757522][T17619] device ip6gretap0 left promiscuous mode [ 302.763383][T17619] device bridge0 left promiscuous mode [ 302.768963][T17619] device dummy0 left promiscuous mode [ 302.774436][T17619] device veth0 left promiscuous mode [ 302.779960][T17619] device veth1 left promiscuous mode [ 302.785298][T17619] device wg0 left promiscuous mode [ 302.790635][T17619] device wg1 left promiscuous mode [ 302.795826][T17619] device wg2 left promiscuous mode [ 302.801470][T17619] device veth0_to_bridge left promiscuous mode [ 302.807843][T17619] device veth1_to_bridge left promiscuous mode [ 302.814126][T17619] device bridge_slave_1 left promiscuous mode [ 302.820429][T17619] device veth0_to_bond left promiscuous mode [ 302.826479][T17619] device bond_slave_0 left promiscuous mode [ 302.832497][T17619] device veth1_to_bond left promiscuous mode [ 302.838530][T17619] device bond_slave_1 left promiscuous mode [ 302.844547][T17619] device veth0_to_team left promiscuous mode [ 302.850612][T17619] device team_slave_0 left promiscuous mode [ 302.856592][T17619] device veth1_to_team left promiscuous mode [ 302.862790][T17619] device team_slave_1 left promiscuous mode [ 302.868746][T17619] device veth0_to_batadv left promiscuous mode [ 302.875047][T17619] device batadv_slave_0 left promiscuous mode [ 302.881209][T17619] device veth1_to_batadv left promiscuous mode [ 302.887493][T17619] device batadv_slave_1 left promiscuous mode [ 302.893620][T17619] device xfrm0 left promiscuous mode [ 302.899006][T17619] device veth0_to_hsr left promiscuous mode [ 302.905030][T17619] device hsr_slave_0 left promiscuous mode [ 302.910891][T17619] device veth1_to_hsr left promiscuous mode [ 302.916880][T17619] device hsr_slave_1 left promiscuous mode [ 302.922783][T17619] device veth1_virt_wifi left promiscuous mode [ 302.929060][T17619] device veth0_virt_wifi left promiscuous mode [ 302.935254][T17619] device veth1_vlan left promiscuous mode [ 302.941159][T17619] device vlan0 left promiscuous mode [ 302.946520][T17619] device vlan1 left promiscuous mode [ 302.952052][T17619] device veth0_macvtap left promiscuous mode [ 302.958165][T17619] device macsec0 left promiscuous mode [ 302.966009][T17619] device gre1 left promiscuous mode [ 302.971516][T17619] device bridge4 left promiscuous mode [ 302.977050][T17619] device bridge5 left promiscuous mode [ 302.990807][T17623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.063640][T17640] netlink: 'syz.0.8227': attribute type 32 has an invalid length. [ 303.066913][T17641] set_capacity_and_notify: 5 callbacks suppressed [ 303.066929][T17641] loop1: detected capacity change from 0 to 512 [ 303.125213][T17641] EXT4-fs (loop1): Test dummy encryption mode enabled [ 303.161928][T17641] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x000000000000. Quota mode: none. [ 303.197090][T17641] EXT4-fs error (device loop1): ext4_add_entry:2488: inode #2: comm syz.1.8225: Directory hole found for htree leaf block 0 [ 303.210506][T17641] EXT4-fs (loop1): Remounting filesystem read-only [ 303.237796][T17668] tc_dump_action: action bad kind [ 303.300685][T17678] loop3: detected capacity change from 0 to 512 [ 303.314784][T17678] EXT4-fs (loop3): Ignoring removed oldalloc option [ 303.322059][T17678] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 303.367201][T17678] EXT4-fs (loop3): 1 truncate cleaned up [ 303.372895][T17678] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 303.399572][T17708] SELinux: Context system_u:object_r:chfn_exec_t:s0 is not valid (left unmapped). [ 303.634372][T17776] SELinux: policydb magic number 0x4bdf1198 does not match expected magic number 0xf97cff8c [ 303.658604][T17780] netlink: 'syz.0.8295': attribute type 11 has an invalid length. [ 303.669641][T17776] SELinux: failed to load policy [ 303.719752][T17794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.740909][T17798] loop0: detected capacity change from 0 to 1024 [ 303.798043][T17798] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 303.811586][T17798] EXT4-fs (loop0): orphan cleanup on readonly fs [ 303.818397][T17798] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #3: comm syz.0.8303: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 303.837236][T17813] xt_policy: too many policy elements [ 303.845398][T17798] EXT4-fs error (device loop0): ext4_quota_enable:6438: comm syz.0.8303: Bad quota inode: 3, type: 0 [ 303.873857][T17798] EXT4-fs warning (device loop0): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 303.875083][T17760] loop2: detected capacity change from 0 to 40427 [ 303.899323][T17760] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 303.907403][T17760] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 303.920393][T17798] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 303.927127][T17798] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 303.952988][T17760] F2FS-fs (loop2): Found nat_bits in checkpoint [ 303.991431][T17838] loop1: detected capacity change from 0 to 1024 [ 304.009034][T17760] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 304.027153][T17760] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 304.038487][T17838] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 304.058703][T17838] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 304.091128][T17838] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.8322: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 304.144652][T17850] overlayfs: workdir and upperdir must be separate subtrees [ 304.152078][T17838] EXT4-fs (loop1): Remounting filesystem read-only [ 304.186117][T17838] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.8322: couldn't read orphan inode 11 (err -117) [ 304.224592][T17841] loop0: detected capacity change from 0 to 40427 [ 304.238206][T17838] EXT4-fs (loop1): Remounting filesystem read-only [ 304.245515][T17841] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 304.253634][T17841] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 304.263003][T17841] F2FS-fs (loop0): invalid crc value [ 304.268914][T17838] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,. Quota mode: writeback. [ 304.287350][T17841] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 304.319197][T17841] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 304.327229][T17838] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.8322: Invalid block bitmap block 0 in block_group 0 [ 304.340815][T17841] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 304.349499][T17865] 9pnet: Could not find request transport: f [ 304.358490][T17838] EXT4-fs (loop1): Remounting filesystem read-only [ 304.365164][T17838] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.8322: Failed to acquire dquot type 0 [ 304.390650][T17838] EXT4-fs (loop1): Remounting filesystem read-only [ 304.429117][T17880] loop2: detected capacity change from 0 to 256 [ 304.435531][T17877] netlink: 'syz.4.8338': attribute type 5 has an invalid length. [ 304.764248][T17951] loop1: detected capacity change from 0 to 4096 [ 304.801956][T17951] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 304.842178][T17974] overlayfs: failed to resolve 'upper': -2 [ 305.143377][T18036] netlink: 'syz.0.8414': attribute type 5 has an invalid length. [ 305.156970][T18040] syz.1.8417 uses obsolete (PF_INET,SOCK_PACKET) [ 305.209211][T18051] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 305.212539][T18052] __nla_validate_parse: 450 callbacks suppressed [ 305.212556][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8423'. [ 305.320287][T18003] loop3: detected capacity change from 0 to 40427 [ 305.343373][T18003] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 305.350556][T18003] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 305.392003][T18003] F2FS-fs (loop3): invalid crc value [ 305.416598][T18003] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 305.418579][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8438'. [ 305.449460][T18089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8438'. [ 305.460715][T18003] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 305.467925][T18003] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 305.537951][T18102] netlink: 'syz.1.8445': attribute type 12 has an invalid length. [ 305.573139][T18058] loop0: detected capacity change from 0 to 40427 [ 305.604931][T18058] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 305.637037][T18058] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 305.642361][T18118] 8021q: VLANs not supported on ip6tnl0 [ 305.657525][T18120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8456'. [ 305.689485][T18058] F2FS-fs (loop0): Found nat_bits in checkpoint [ 305.697058][T18120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8456'. [ 305.761889][T18143] binfmt_misc: register: failed to install interpreter file ./file0 [ 305.763633][T18058] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 305.772175][T18146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8465'. [ 305.777102][T18058] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 305.820702][T18146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8465'. [ 305.845108][T18156] netlink: 'syz.1.8469': attribute type 3 has an invalid length. [ 305.964275][T18182] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 306.001207][T18182] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 306.012677][T18182] ext2 filesystem being mounted at /1697/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.031436][T18201] erofs: Unexpected value for 'acl' [ 306.155175][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8510'. [ 306.230047][T18256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8518'. [ 306.256489][T18243] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 306.316843][T18262] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 306.338977][T18262] ext4 filesystem being mounted at /1754/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.395930][T18300] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 306.397175][T18302] xt_l2tp: missing protocol rule (udp|l2tpip) [ 306.453428][T18298] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 306.478012][T18315] netlink: 'syz.1.8545': attribute type 32 has an invalid length. [ 306.485934][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 306.485953][ T30] audit: type=1400 audit(2000000003.208:993): avc: denied { append } for pid=18311 comm="syz.0.8542" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 306.520652][T18315] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8545'. [ 306.770155][T18357] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 306.827147][T18387] xt_TCPMSS: Only works on TCP SYN packets [ 306.833210][T11017] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 306.877908][T18402] veth0: mtu less than device minimum [ 306.925389][T18414] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 306.958794][T18420] netlink: 'syz.4.8596': attribute type 1 has an invalid length. [ 306.974194][ T30] audit: type=1326 audit(2000000003.666:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18421 comm="syz.1.8597" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e9ebe199 code=0x7ff00000 [ 306.999834][ T30] audit: type=1400 audit(2000000003.685:995): avc: denied { shutdown } for pid=18427 comm="syz.4.8600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 307.030266][ T30] audit: type=1326 audit(2000000003.694:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18421 comm="syz.1.8597" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e9ebe199 code=0x7ff00000 [ 307.060564][ T30] audit: type=1326 audit(2000000003.694:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18421 comm="syz.1.8597" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e9ebe199 code=0x7ff00000 [ 307.085969][ T30] audit: type=1326 audit(2000000003.694:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18421 comm="syz.1.8597" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e9ebe199 code=0x7ff00000 [ 307.100291][T18446] netlink: 'syz.0.8609': attribute type 29 has an invalid length. [ 307.111188][ T30] audit: type=1326 audit(2000000003.694:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18421 comm="syz.1.8597" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e9ebe199 code=0x7ff00000 [ 307.119887][T18446] netlink: 'syz.0.8609': attribute type 29 has an invalid length. [ 307.143884][T11017] usb 3-1: Using ep0 maxpacket: 8 [ 307.148119][ T30] audit: type=1326 audit(2000000003.694:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18421 comm="syz.1.8597" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e9ebe199 code=0x7ff00000 [ 307.186570][ T30] audit: type=1326 audit(2000000003.694:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18421 comm="syz.1.8597" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e9ebe199 code=0x7ff00000 [ 307.215849][ T30] audit: type=1326 audit(2000000003.694:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18421 comm="syz.1.8597" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e9ebe199 code=0x7ff00000 [ 307.351808][T11017] usb 3-1: unable to get BOS descriptor or descriptor too short [ 307.390767][T18502] device ip6gretap1 entered promiscuous mode [ 307.501406][ T20] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 307.704567][T11017] usb 3-1: string descriptor 0 read error: -22 [ 307.713571][T11017] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 307.740577][T11017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.821465][T18611] x_tables: duplicate entry at hook 4 [ 307.897051][ T20] usb 1-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 307.906456][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.959475][T18628] xt_TCPMSS: Only works on TCP SYN packets [ 307.962222][ T20] usb-storage 1-1:1.0: USB Mass Storage device detected [ 308.025298][T11017] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 308.065562][T18650] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 308.086508][T18654] device batadv_slave_0 entered promiscuous mode [ 308.093848][T18654] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 308.197746][ T20] scsi host1: usb-storage 1-1:1.0 [ 308.204949][ T20] usb 1-1: USB disconnect, device number 108 [ 308.281849][T11017] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 308.301202][T18700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.335589][T11017] usb 3-1: USB disconnect, device number 106 [ 308.336167][T18705] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 308.384240][T18710] EXT4-fs (loop3): Test dummy encryption mode enabled [ 308.391369][T18710] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 308.401540][T18710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e01c, mo2=0002] [ 308.409787][T18710] EXT4-fs (loop3): orphan cleanup on readonly fs [ 308.416368][T18710] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.8740: bad orphan inode 3 [ 308.427824][T18710] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,noblock_validity,discard,nolazytime,data=writeback,errors=continue. Quota mode: none. [ 308.446798][T18710] EXT4-fs (loop3): Test dummy encryption mode enabled [ 308.453781][T18710] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option [ 308.464311][T18710] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 308.969560][T18779] validate_nla: 1 callbacks suppressed [ 308.969582][T18779] netlink: 'syz.1.8770': attribute type 30 has an invalid length. [ 309.157411][T18838] x_tables: unsorted entry at hook 2 [ 309.165319][T18841] netlink: 'syz.3.8803': attribute type 32 has an invalid length. [ 309.404976][T18886] xt_TCPMSS: Only works on TCP SYN packets [ 309.544594][T18923] set_capacity_and_notify: 7 callbacks suppressed [ 309.544615][T18923] loop2: detected capacity change from 0 to 512 [ 309.597497][T18923] EXT4-fs (loop2): Ignoring removed nobh option [ 309.627496][T18923] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 309.660028][T18923] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.8844: attempt to clear invalid blocks 1 len 1 [ 309.706636][T18923] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 309.753655][T18923] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.8844: invalid indirect mapped block 1819239214 (level 0) [ 309.804669][T18923] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.8844: invalid indirect mapped block 1819239214 (level 1) [ 309.856246][T18923] EXT4-fs (loop2): 1 truncate cleaned up [ 309.874782][T18923] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 309.897466][T18829] loop4: detected capacity change from 0 to 131072 [ 309.974463][T18829] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 310.007471][T18829] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 310.035661][T18829] F2FS-fs (loop4): invalid crc value [ 310.070113][T18829] F2FS-fs (loop4): Found nat_bits in checkpoint [ 310.390624][T18829] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 311.974116][T18829] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 312.008825][T19030] __nla_validate_parse: 10 callbacks suppressed [ 312.008844][T19030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8893'. [ 312.044930][T19030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8893'. [ 312.086763][T19038] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.8898'. [ 312.151963][ T30] kauditd_printk_skb: 1229 callbacks suppressed [ 312.151981][ T30] audit: type=1400 audit(2000000000.121:2232): avc: denied { setopt } for pid=19045 comm="syz.1.8904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.169795][T18991] loop2: detected capacity change from 0 to 40427 [ 312.251888][T19060] loop0: detected capacity change from 0 to 512 [ 312.297627][T18991] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 312.318989][T18991] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 312.334330][T19060] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 312.347675][T18991] F2FS-fs (loop2): invalid crc value [ 312.358846][T19060] ext4 filesystem being mounted at /1672/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.362566][T19075] loop1: detected capacity change from 0 to 256 [ 312.375386][T18991] F2FS-fs (loop2): Found nat_bits in checkpoint [ 312.415683][T18991] F2FS-fs (loop2): Start checkpoint disabled! [ 312.422836][T18991] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 312.431220][T18991] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 312.484686][ T30] audit: type=1400 audit(2000000000.430:2233): avc: denied { read } for pid=19087 comm="syz.0.8921" name="hwrng" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:chfn_exec_t:s0" [ 312.513092][ T8] attempt to access beyond end of device [ 312.513092][ T8] loop2: rw=2049, want=41008, limit=40427 [ 312.519778][T19092] loop4: detected capacity change from 0 to 4096 [ 312.536703][T11017] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 312.544622][ T30] audit: type=1400 audit(2000000000.430:2234): avc: denied { open } for pid=19087 comm="syz.0.8921" path="/dev/hwrng" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:chfn_exec_t:s0" [ 312.572966][T19092] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 312.589593][T19092] EXT4-fs (loop4): Ignoring removed bh option [ 312.600532][T19092] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,bsddf,bh,nombcache,nodelalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 312.634898][T19092] Quota error (device loop4): find_tree_dqentry: Getting block too big (4278190084 >= 6) [ 312.650458][T19092] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 312.660039][T19092] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.8923: Failed to acquire dquot type 1 [ 312.690354][T19105] loop1: detected capacity change from 0 to 2048 [ 312.750336][T19113] loop4: detected capacity change from 0 to 256 [ 312.770116][T19105] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 312.798079][ T30] audit: type=1400 audit(2000000000.720:2235): avc: denied { setattr } for pid=19104 comm="syz.1.8929" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 312.830036][T11017] usb 4-1: Using ep0 maxpacket: 32 [ 312.835138][T19113] FAT-fs (loop4): Directory bread(block 64) failed [ 312.846296][T19113] FAT-fs (loop4): Directory bread(block 65) failed [ 312.846347][T19113] FAT-fs (loop4): Directory bread(block 66) failed [ 312.846369][T19113] FAT-fs (loop4): Directory bread(block 67) failed [ 312.846401][T19113] FAT-fs (loop4): Directory bread(block 68) failed [ 312.872755][T19113] FAT-fs (loop4): Directory bread(block 69) failed [ 312.892319][T19113] FAT-fs (loop4): Directory bread(block 70) failed [ 312.899464][T19113] FAT-fs (loop4): Directory bread(block 71) failed [ 312.908323][T19113] FAT-fs (loop4): Directory bread(block 72) failed [ 312.915486][T19113] FAT-fs (loop4): Directory bread(block 73) failed [ 312.953707][T11017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.974965][T11017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.991668][T11017] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 313.004131][T19141] loop1: detected capacity change from 0 to 256 [ 313.010834][T11017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.035870][T11017] usb 4-1: config 0 descriptor?? [ 313.093249][T11017] hub 4-1:0.0: USB hub found [ 313.178120][T11012] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 313.264346][T19172] usb usb8: usbfs: process 19172 (syz.1.8960) did not claim interface 0 before use [ 313.286975][T19174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8961'. [ 313.296096][T19174] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 313.317162][T11017] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 313.352537][T19178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8963'. [ 313.398787][T19186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8967'. [ 313.445466][T11012] usb 3-1: Using ep0 maxpacket: 8 [ 313.485795][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8975'. [ 313.554035][ T30] audit: type=1326 audit(2000000001.431:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19221 comm="syz.0.8985" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dab842199 code=0x7ffc0000 [ 313.579487][T11012] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 313.594933][T11012] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 313.617855][T11012] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 313.628282][ T30] audit: type=1326 audit(2000000001.431:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19221 comm="syz.0.8985" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f0dab842199 code=0x7ffc0000 [ 313.659414][T11017] usbhid 4-1:0.0: can't add hid device: -71 [ 313.661501][T11012] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 313.666260][T11017] usbhid: probe of 4-1:0.0 failed with error -71 [ 313.686721][T19246] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 313.701290][T11012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.717687][ T30] audit: type=1326 audit(2000000001.431:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19221 comm="syz.0.8985" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dab842199 code=0x7ffc0000 [ 313.743416][T11017] usb 4-1: USB disconnect, device number 107 [ 313.749654][ T30] audit: type=1326 audit(2000000001.552:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19245 comm="syz.4.8996" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f277199 code=0x7ffc0000 [ 313.813175][T19266] loop1: detected capacity change from 0 to 512 [ 313.824156][T19266] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 313.831990][T19270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9009'. [ 313.856950][T19266] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 313.873688][T19266] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.9007: Failed to acquire dquot type 0 [ 313.892116][T19266] EXT4-fs (loop1): 1 truncate cleaned up [ 313.899266][T19266] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,abort,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 313.934694][T19266] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.9007: Failed to acquire dquot type 0 [ 314.033392][T11012] usb 3-1: string descriptor 0 read error: -71 [ 314.045410][T11012] usb 3-1: USB disconnect, device number 107 [ 314.267624][T19350] netlink: 'syz.3.9047': attribute type 8 has an invalid length. [ 314.273065][ T434] udevd[434]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 314.334516][T19356] netlink: 'syz.3.9051': attribute type 3 has an invalid length. [ 314.376688][T19358] exfat: Deprecated parameter 'utf8' [ 314.382771][T19358] exfat: Deprecated parameter 'namecase' [ 314.463715][T19358] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 314.620254][T19384] x_tables: duplicate underflow at hook 1 [ 314.640614][T19386] netlink: 9052 bytes leftover after parsing attributes in process `syz.3.9065'. [ 314.697155][T19390] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 314.705799][T19390] EXT4-fs (loop3): Test dummy encryption mode enabled [ 314.718338][T19390] EXT4-fs (loop3): Ignoring removed orlov option [ 314.727538][T19390] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,nouid32,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,nobarrier,,errors=continue. Quota mode: writeback. [ 314.857240][T19412] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 314.903047][T19366] F2FS-fs (loop1): Found nat_bits in checkpoint [ 314.938564][ T10] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 314.985818][T19438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9087'. [ 315.007345][T19442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 315.017089][T19366] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 315.077745][T19458] ip6t_REJECT: ECHOREPLY is not supported [ 315.098721][T19366] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 315.121405][T19366] F2FS-fs (loop1): recover xattr in inode (7) [ 315.138931][T19366] F2FS-fs (loop1): set inode (7) has corrupted xattr [ 315.204812][T19490] xt_CT: You must specify a L4 protocol and not use inversions on it [ 315.390517][T19533] xt_l2tp: v2 tid > 0xffff: 134217728 [ 315.693300][T19532] set_capacity_and_notify: 6 callbacks suppressed [ 315.693320][T19532] loop3: detected capacity change from 0 to 40427 [ 315.817752][ T314] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 315.831535][T19532] F2FS-fs (loop3): fault_injection options not supported [ 315.839076][ T314] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 315.849496][T19532] F2FS-fs (loop3): fault_type options not supported [ 315.854707][ T314] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 315.864865][T19532] F2FS-fs (loop3): invalid crc value [ 315.897135][T19532] F2FS-fs (loop3): Found nat_bits in checkpoint [ 315.964680][T19532] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 316.026600][T19655] device ip6gre1 entered promiscuous mode [ 316.250008][T19680] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 316.305626][T19682] device vti1 entered promiscuous mode [ 316.497655][T19692] loop0: detected capacity change from 0 to 8192 [ 316.560100][T19692] loop0: p4 < > [ 316.563756][T19692] loop0: partition table partially beyond EOD, truncated [ 316.571097][T11017] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 316.589020][T19692] loop0: p4 start 16711680 is beyond EOD, truncated [ 316.611149][ T101] loop0: p4 < > [ 316.614848][ T101] loop0: partition table partially beyond EOD, truncated [ 316.632478][ T101] loop0: p4 start 16711680 is beyond EOD, truncated [ 316.641574][T19710] netlink: 'syz.3.9221': attribute type 3 has an invalid length. [ 316.645928][T19605] loop1: detected capacity change from 0 to 131072 [ 316.716770][T19605] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 316.740141][T19605] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 316.779268][T19605] F2FS-fs (loop1): invalid crc value [ 316.813460][T19605] F2FS-fs (loop1): Found nat_bits in checkpoint [ 316.823676][T11017] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 316.910359][T19605] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 316.919826][T19605] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 317.182213][T19753] loop4: detected capacity change from 0 to 40427 [ 317.186816][T19780] netlink: 'syz.0.9254': attribute type 3 has an invalid length. [ 317.208565][T19780] netlink: 'syz.0.9254': attribute type 3 has an invalid length. [ 317.225532][T19753] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 317.240628][T19753] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 317.257937][T19753] F2FS-fs (loop4): invalid crc value [ 317.284208][T19753] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 317.348601][T19753] F2FS-fs (loop4): Start checkpoint disabled! [ 317.365796][T19753] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 317.373276][T19753] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 317.489131][T19822] __nla_validate_parse: 3 callbacks suppressed [ 317.489153][T19822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9271'. [ 317.511871][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9271'. [ 317.526681][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9271'. [ 317.658118][T19845] netlink: 588 bytes leftover after parsing attributes in process `syz.4.9272'. [ 317.701234][T19845] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.708712][T19845] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 317.730502][T19848] netlink: 'syz.3.9286': attribute type 4 has an invalid length. [ 317.740285][T19848] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.9286'. [ 317.747945][T19726] loop2: detected capacity change from 0 to 131072 [ 317.813472][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 317.813490][ T30] audit: type=1326 audit(2000000005.415:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.4.9294" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f277199 code=0x7ffc0000 [ 317.851189][T19726] F2FS-fs (loop2): Found nat_bits in checkpoint [ 317.960066][ T30] audit: type=1326 audit(2000000005.415:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.4.9294" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f277199 code=0x7ffc0000 [ 317.979261][T19726] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 317.985752][ T30] audit: type=1326 audit(2000000005.415:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.4.9294" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f345f277199 code=0x7ffc0000 [ 318.022047][T19892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9305'. [ 318.041058][ T30] audit: type=1326 audit(2000000005.415:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.4.9294" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f277199 code=0x7ffc0000 [ 318.077823][T19905] device syz_tun entered promiscuous mode [ 318.101502][T19726] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 318.105368][T19908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9313'. [ 318.117783][T19726] F2FS-fs (loop2): recover xattr in inode (7) [ 318.124053][T19726] F2FS-fs (loop2): set inode (7) has corrupted xattr [ 318.131278][ T30] audit: type=1326 audit(2000000005.415:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.4.9294" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f277199 code=0x7ffc0000 [ 318.192906][T19924] xt_hashlimit: overflow, try lower: 18446744073709551613/9 [ 318.257067][T19938] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9328'. [ 318.406515][T19968] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 318.455653][T19976] x_tables: unsorted underflow at hook 3 [ 318.521220][T19994] x_tables: unsorted underflow at hook 1 [ 318.528685][ T30] audit: type=1326 audit(2000000006.080:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.1.9358" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e9ebe199 code=0x7ffc0000 [ 318.557725][ T30] audit: type=1326 audit(2000000006.080:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.1.9358" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e9ebe199 code=0x7ffc0000 [ 318.592768][ T30] audit: type=1326 audit(2000000006.080:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.1.9358" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f79e9ebe199 code=0x7ffc0000 [ 318.627609][ T30] audit: type=1326 audit(2000000006.080:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.1.9358" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e9ebe199 code=0x7ffc0000 [ 318.657955][ T30] audit: type=1326 audit(2000000006.080:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.1.9358" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e9ebe199 code=0x7ffc0000 [ 318.677012][T20015] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9366'. [ 318.703647][T20015] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9366'. [ 318.713511][T20018] netlink: 'syz.1.9367': attribute type 12 has an invalid length. [ 319.114475][T20145] loop2: detected capacity change from 0 to 128 [ 319.190859][T20169] loop3: detected capacity change from 0 to 256 [ 319.652495][T20295] loop0: detected capacity change from 0 to 512 [ 319.825273][T20295] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 319.862562][T20295] ext4 filesystem being mounted at /1823/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.900754][T20295] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.9504: corrupted xattr block 6 [ 319.917485][T20346] loop2: detected capacity change from 0 to 4096 [ 321.583014][T20295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 321.592074][T20295] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.9504: corrupted xattr block 6 [ 321.604025][T20295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 321.615394][T20295] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.9504: corrupted xattr block 6 [ 321.706686][T20346] EXT4-fs (loop2): Test dummy encryption mode enabled [ 321.764668][T20346] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,errors=remount-ro,noinit_itable,auto_da_alloc,minixdf,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000008,nodioread_nolock,mb_optimize_scan=0x0000000000000000,. Quota mode: writeback. [ 321.890404][T20426] loop4: detected capacity change from 0 to 512 [ 321.909575][T20432] xt_TCPMSS: Only works on TCP SYN packets [ 322.043652][T20459] usb usb8: usbfs: process 20459 (syz.4.9586) did not claim interface 0 before use [ 322.137520][T20491] loop0: detected capacity change from 0 to 256 [ 322.143492][T20493] loop2: detected capacity change from 0 to 256 [ 322.168794][T20501] netlink: 'syz.1.9605': attribute type 1 has an invalid length. [ 322.196777][T20491] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d) [ 322.313596][T20533] loop2: detected capacity change from 0 to 256 [ 322.339795][T20533] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d) [ 322.365719][T20544] loop4: detected capacity change from 0 to 256 [ 322.404183][ T314] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 322.415560][T20554] loop2: detected capacity change from 0 to 1024 [ 322.449070][T20554] ================================================================== [ 322.457274][T20554] BUG: KASAN: use-after-free in __ext4_iget+0x2bb/0x3e80 [ 322.464309][T20554] Read of size 8 at addr ffff888111dc3588 by task syz.2.9631/20554 [ 322.472221][T20554] [ 322.474572][T20554] CPU: 1 PID: 20554 Comm: syz.2.9631 Tainted: G W syzkaller #0 [ 322.483446][T20554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 322.493532][T20554] Call Trace: [ 322.496840][T20554] [ 322.499785][T20554] __dump_stack+0x21/0x30 [ 322.504123][T20554] dump_stack_lvl+0x110/0x170 [ 322.508807][T20554] ? show_regs_print_info+0x20/0x20 [ 322.514016][T20554] ? load_image+0x3f0/0x3f0 [ 322.518518][T20554] ? _raw_spin_lock+0x94/0xf0 [ 322.523209][T20554] print_address_description+0x7f/0x2c0 [ 322.528767][T20554] ? __ext4_iget+0x2bb/0x3e80 [ 322.533436][T20554] kasan_report+0x10f/0x150 [ 322.537943][T20554] ? __kasan_check_read+0x11/0x20 [ 322.542960][T20554] ? __ext4_iget+0x2bb/0x3e80 [ 322.547647][T20554] __asan_report_load8_noabort+0x14/0x20 [ 322.553281][T20554] __ext4_iget+0x2bb/0x3e80 [ 322.557803][T20554] ? __kasan_check_write+0x14/0x20 [ 322.563021][T20554] ? _raw_write_trylock+0x150/0x150 [ 322.568215][T20554] ? __proc_create+0x581/0x8f0 [ 322.572980][T20554] ? _raw_write_trylock+0x150/0x150 [ 322.578169][T20554] ? ext4_get_projid+0x140/0x140 [ 322.583097][T20554] ? _raw_write_unlock+0x2b/0x60 [ 322.588026][T20554] ? ext4_orphan_file_block_trigger+0x460/0x460 [ 322.594260][T20554] ext4_enable_quotas+0x338/0x6d0 [ 322.599292][T20554] ? ext4_register_sysfs+0x299/0x2e0 [ 322.604569][T20554] ext4_fill_super+0x831d/0x8bf0 [ 322.609505][T20554] ? ext4_mount+0x40/0x40 [ 322.613826][T20554] ? set_blocksize+0x1e9/0x360 [ 322.618579][T20554] ? sb_set_blocksize+0xaa/0xf0 [ 322.623433][T20554] ? ext4_mount+0x40/0x40 [ 322.627751][T20554] mount_bdev+0x28d/0x3c0 [ 322.632079][T20554] ? ext4_mount+0x40/0x40 [ 322.636400][T20554] ext4_mount+0x34/0x40 [ 322.640544][T20554] legacy_get_tree+0xed/0x190 [ 322.645303][T20554] ? ext4_errno_to_code+0x160/0x160 [ 322.650489][T20554] vfs_get_tree+0x89/0x260 [ 322.654990][T20554] do_new_mount+0x251/0xb40 [ 322.659508][T20554] ? security_capable+0x87/0xb0 [ 322.664358][T20554] path_mount+0x640/0xff0 [ 322.668681][T20554] __se_sys_mount+0x320/0x390 [ 322.673350][T20554] ? __x64_sys_mount+0xd0/0xd0 [ 322.678129][T20554] __x64_sys_mount+0xbf/0xd0 [ 322.682723][T20554] x64_sys_call+0x6bf/0x9a0 [ 322.687226][T20554] do_syscall_64+0x4c/0xa0 [ 322.691641][T20554] ? clear_bhb_loop+0x50/0xa0 [ 322.696318][T20554] ? clear_bhb_loop+0x50/0xa0 [ 322.700997][T20554] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.706891][T20554] RIP: 0033:0x7faedf1ea40a [ 322.711312][T20554] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.730941][T20554] RSP: 002b:00007faeddc41e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 322.739357][T20554] RAX: ffffffffffffffda RBX: 00007faeddc41ee0 RCX: 00007faedf1ea40a [ 322.747331][T20554] RDX: 0000200000000580 RSI: 0000200000000040 RDI: 00007faeddc41ea0 [ 322.755303][T20554] RBP: 0000200000000580 R08: 00007faeddc41ee0 R09: 0000000001208006 [ 322.763274][T20554] R10: 0000000001208006 R11: 0000000000000246 R12: 0000200000000040 [ 322.771246][T20554] R13: 00007faeddc41ea0 R14: 00000000000005ed R15: 00002000000003c0 [ 322.779222][T20554] [ 322.782243][T20554] [ 322.784562][T20554] Allocated by task 14361: [ 322.788968][T20554] __kasan_slab_alloc+0xb7/0xe0 [ 322.793821][T20554] slab_post_alloc_hook+0x4f/0x2b0 [ 322.798933][T20554] kmem_cache_alloc+0xf7/0x260 [ 322.803692][T20554] f2fs_alloc_inode+0x26/0x330 [ 322.808456][T20554] iget_locked+0x175/0x850 [ 322.812870][T20554] f2fs_iget+0x55/0x5000 [ 322.817110][T20554] f2fs_fill_super+0x4af9/0x6dd0 [ 322.822045][T20554] mount_bdev+0x28d/0x3c0 [ 322.826373][T20554] f2fs_mount+0x34/0x40 [ 322.830537][T20554] legacy_get_tree+0xed/0x190 [ 322.835211][T20554] vfs_get_tree+0x89/0x260 [ 322.839635][T20554] do_new_mount+0x251/0xb40 [ 322.844138][T20554] path_mount+0x640/0xff0 [ 322.848477][T20554] __se_sys_mount+0x320/0x390 [ 322.853171][T20554] __x64_sys_mount+0xbf/0xd0 [ 322.857757][T20554] x64_sys_call+0x6bf/0x9a0 [ 322.862255][T20554] do_syscall_64+0x4c/0xa0 [ 322.866668][T20554] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.872562][T20554] [ 322.874883][T20554] Last potentially related work creation: [ 322.880593][T20554] kasan_save_stack+0x3a/0x60 [ 322.885275][T20554] __kasan_record_aux_stack+0xd2/0x100 [ 322.890733][T20554] kasan_record_aux_stack_noalloc+0xb/0x10 [ 322.896538][T20554] call_rcu+0x10b/0xf60 [ 322.900691][T20554] evict+0x810/0x8b0 [ 322.904583][T20554] evict_inodes+0x62a/0x6a0 [ 322.909175][T20554] generic_shutdown_super+0x96/0x330 [ 322.914475][T20554] kill_block_super+0x7f/0xf0 [ 322.919154][T20554] kill_f2fs_super+0x30a/0x3d0 [ 322.923925][T20554] deactivate_locked_super+0xa0/0x100 [ 322.929316][T20554] deactivate_super+0xaf/0xe0 [ 322.934008][T20554] cleanup_mnt+0x44f/0x500 [ 322.938427][T20554] __cleanup_mnt+0x19/0x20 [ 322.942844][T20554] task_work_run+0x127/0x190 [ 322.947434][T20554] exit_to_user_mode_loop+0xd0/0xe0 [ 322.952633][T20554] exit_to_user_mode_prepare+0x87/0xd0 [ 322.958092][T20554] syscall_exit_to_user_mode+0x1a/0x30 [ 322.963553][T20554] do_syscall_64+0x58/0xa0 [ 322.968065][T20554] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.973959][T20554] [ 322.976280][T20554] Second to last potentially related work creation: [ 322.982873][T20554] kasan_save_stack+0x3a/0x60 [ 322.987547][T20554] __kasan_record_aux_stack+0xd2/0x100 [ 322.993005][T20554] kasan_record_aux_stack_noalloc+0xb/0x10 [ 322.998809][T20554] call_rcu+0x10b/0xf60 [ 323.002964][T20554] evict+0x810/0x8b0 [ 323.006858][T20554] iput+0x651/0x7e0 [ 323.010663][T20554] f2fs_put_super+0x63f/0xbd0 [ 323.015382][T20554] generic_shutdown_super+0x151/0x330 [ 323.020764][T20554] kill_block_super+0x7f/0xf0 [ 323.025438][T20554] kill_f2fs_super+0x30a/0x3d0 [ 323.030207][T20554] deactivate_locked_super+0xa0/0x100 [ 323.035578][T20554] deactivate_super+0xaf/0xe0 [ 323.040257][T20554] cleanup_mnt+0x44f/0x500 [ 323.044669][T20554] __cleanup_mnt+0x19/0x20 [ 323.049080][T20554] task_work_run+0x127/0x190 [ 323.053668][T20554] exit_to_user_mode_loop+0xd0/0xe0 [ 323.058861][T20554] exit_to_user_mode_prepare+0x87/0xd0 [ 323.064314][T20554] syscall_exit_to_user_mode+0x1a/0x30 [ 323.069772][T20554] do_syscall_64+0x58/0xa0 [ 323.074232][T20554] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.080125][T20554] [ 323.082444][T20554] The buggy address belongs to the object at ffff888111dc3080 [ 323.082444][T20554] which belongs to the cache f2fs_inode_cache of size 1424 [ 323.097014][T20554] The buggy address is located 1288 bytes inside of [ 323.097014][T20554] 1424-byte region [ffff888111dc3080, ffff888111dc3610) [ 323.110462][T20554] The buggy address belongs to the page: [ 323.116087][T20554] page:ffffea0004477000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888111dc48c0 pfn:0x111dc0 [ 323.127634][T20554] head:ffffea0004477000 order:3 compound_mapcount:0 compound_pincount:0 [ 323.135973][T20554] flags: 0x4000000000010200(slab|head|zone=1) [ 323.142047][T20554] raw: 4000000000010200 0000000000000000 0000000100000001 ffff8881081fcf00 [ 323.150637][T20554] raw: ffff888111dc48c0 0000000080150001 00000001ffffffff 0000000000000000 [ 323.159210][T20554] page dumped because: kasan: bad access detected [ 323.165617][T20554] page_owner tracks the page as allocated [ 323.171326][T20554] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 848, ts 31498477750, free_ts 0 [ 323.191813][T20554] post_alloc_hook+0x192/0x1b0 [ 323.196579][T20554] prep_new_page+0x1c/0x110 [ 323.201104][T20554] get_page_from_freelist+0x2c3a/0x2cd0 [ 323.206657][T20554] __alloc_pages+0x1a2/0x460 [ 323.211247][T20554] new_slab+0xa0/0x4d0 [ 323.215315][T20554] ___slab_alloc+0x3ac/0x840 [ 323.219907][T20554] __slab_alloc+0x49/0x90 [ 323.224236][T20554] kmem_cache_alloc+0x138/0x260 [ 323.229086][T20554] f2fs_alloc_inode+0x26/0x330 [ 323.233853][T20554] iget_locked+0x175/0x850 [ 323.238270][T20554] f2fs_iget+0x55/0x5000 [ 323.242519][T20554] f2fs_fill_super+0x3ccd/0x6dd0 [ 323.247477][T20554] mount_bdev+0x28d/0x3c0 [ 323.251852][T20554] f2fs_mount+0x34/0x40 [ 323.256015][T20554] legacy_get_tree+0xed/0x190 [ 323.260702][T20554] vfs_get_tree+0x89/0x260 [ 323.265120][T20554] page_owner free stack trace missing [ 323.270502][T20554] [ 323.272829][T20554] Memory state around the buggy address: [ 323.278492][T20554] ffff888111dc3480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.286554][T20554] ffff888111dc3500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.294613][T20554] >ffff888111dc3580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.302664][T20554] ^ [ 323.306988][T20554] ffff888111dc3600: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.315047][T20554] ffff888111dc3680: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.323103][T20554] ================================================================== [ 323.331156][T20554] Disabling lock debugging due to kernel taint [ 323.347096][T20554] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 323.355603][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 323.355621][ T30] audit: type=1400 audit(309.169:2312): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 323.362455][T20554] EXT4-fs (loop2): mount failed [ 323.367808][ T30] audit: type=1400 audit(309.169:2313): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.414911][ T30] audit: type=1400 audit(309.169:2314): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.435906][ T30] audit: type=1400 audit(309.169:2315): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.456079][ T30] audit: type=1400 audit(309.169:2316): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 323.476235][ T30] audit: type=1400 audit(309.169:2317): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 323.498603][ T30] audit: type=1400 audit(309.169:2318): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 323.729789][ T314] usb 4-1: config 0 has no interfaces? [ 323.954626][ T314] usb 4-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 323.963697][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.971746][ T314] usb 4-1: Product: syz [ 323.975930][ T314] usb 4-1: Manufacturer: syz [ 323.980533][ T314] usb 4-1: SerialNumber: syz [ 323.985752][ T314] r8152-cfgselector 4-1: config 0 descriptor?? [ 324.285688][ T314] r8152-cfgselector 4-1: Unknown version 0x0000 [ 324.500636][ T314] r8152-cfgselector 4-1: USB disconnect, device number 108 [ 330.764273][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!