last executing test programs: 39.086259881s ago: executing program 3 (id=170): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1800000042000106"], 0x18}], 0x1, 0x0, 0x0, 0x40001}, 0x800) 39.058591456s ago: executing program 3 (id=171): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 38.666816484s ago: executing program 3 (id=179): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x10bb41) ioctl$USBDEVFS_RESET(r0, 0x4004550c) 35.596265338s ago: executing program 3 (id=249): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1511, &(0x7f00000031c0)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x11) 35.430759097s ago: executing program 3 (id=252): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0xff, 0xb}, 0x20) 35.292236722s ago: executing program 3 (id=256): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 35.235527851s ago: executing program 32 (id=256): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 34.132102648s ago: executing program 2 (id=285): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0xffffffd1, 0x1002, 0x3, 0x831a, 0x3, "040000000000000000c83cfdffff000800", 0x8, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 33.965196627s ago: executing program 2 (id=288): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 33.902438456s ago: executing program 2 (id=291): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f0000000300)={[{@utf8no}, {@utf8}, {@shortname_mixed}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@utf8no}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@utf8no}, {@numtail}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@uni_xlate}, {@shortname_winnt}, {@numtail}]}, 0x26, 0x358, &(0x7f00000008c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x28, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xfffd}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x683}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) 33.576264986s ago: executing program 2 (id=298): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 33.347912564s ago: executing program 2 (id=303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000001c0)={0xe000000000000000, 0x0, 0xc}) 28.784229023s ago: executing program 2 (id=459): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80802, 0xcd) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) sendfile(r0, r0, 0x0, 0x9) 28.757780818s ago: executing program 33 (id=459): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80802, 0xcd) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) sendfile(r0, r0, 0x0, 0x9) 24.26798858s ago: executing program 4 (id=603): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x6, 0x800) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x300, 0x7, 0x0, r0, 0x0, 0x0, 0x40, 0x0, 0x3, r2}]) 24.113470582s ago: executing program 4 (id=611): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 24.078480436s ago: executing program 4 (id=612): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0xffffffffffff8001, 0x3, 0x3e, 0xffffffeb, 0x7c, 0x40, 0x1, 0xe61d, 0x200c, 0x38, 0x1, 0xfffe, 0x2, 0x4}, [{0x3, 0xf97, 0xb, 0x10, 0x0, 0x3, 0xffffffffffffffff, 0xc3}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 24.050187621s ago: executing program 4 (id=613): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 24.020803875s ago: executing program 4 (id=615): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 23.915909706s ago: executing program 4 (id=618): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = pidfd_getfd(r0, r0, 0x0) setns(r1, 0x20000000) 23.860554765s ago: executing program 34 (id=618): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = pidfd_getfd(r0, r0, 0x0) setns(r1, 0x20000000) 3.195085698s ago: executing program 6 (id=1116): memfd_create(&(0x7f0000000500)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.350119212s ago: executing program 6 (id=1141): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42c00) read$FUSE(r0, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18, 0x24, r2, {0x40}}, 0x18) 2.224105419s ago: executing program 6 (id=1142): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000180)={0x40, 0xc, 0x2, "8504"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, &(0x7f0000000040)={0x0, 0xd, 0x55, {0x55, 0x8, "f8cab2661fb799a7a0e47c02b01608ee70f6082180f3e749d83549f26cbe13db41840fcfa3366caaf570f367b301957ed22aabc92c2cfaf80c8f8041731fab72018079a3ff94f53d558dd7e811a1610d7c9f5c"}}, 0x0}, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x82, 0x2, "bd18"}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x85, 0x3, '\n^O'}}) 2.059823719s ago: executing program 7 (id=1147): mount(0x0, 0x0, 0x0, 0x10, 0x0) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x2000000, &(0x7f0000000100)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee01}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@umask={'umask', 0x3d, 0x2}}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x1, 0x152b, &(0x7f0000001240)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') 1.971035583s ago: executing program 7 (id=1148): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x48a, &(0x7f0000000280)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4096, 0x1000) 1.918823913s ago: executing program 0 (id=1150): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 1.857386691s ago: executing program 0 (id=1152): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') syz_fuse_handle_req(r0, &(0x7f0000004240)="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", 0x2000, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/238, 0xee}], 0x1, 0xffffbdea, 0x6) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) 1.803002492s ago: executing program 0 (id=1154): r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x4, r0}) 1.761135814s ago: executing program 0 (id=1155): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x1}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 1.63124423s ago: executing program 7 (id=1157): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, 0x0, 0x53) 1.63069062s ago: executing program 0 (id=1158): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x105d6, &(0x7f0000010640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x4, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) 1.63042333s ago: executing program 7 (id=1159): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x18}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x88, 0x0, 0x0) 991.648492ms ago: executing program 1 (id=1177): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0x85) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) rename(&(0x7f0000000680)='./file0/file1\x00', &(0x7f0000000a00)='./bus/file0\x00') 925.302539ms ago: executing program 1 (id=1179): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES32], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 828.327062ms ago: executing program 5 (id=1180): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x15, &(0x7f0000000340)={0x1e, 0x2, 0x7}, 0x0) 827.528792ms ago: executing program 1 (id=1190): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003300)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000ac0)=""/105, 0x69}], 0x1}}, {{&(0x7f0000000ec0), 0x6e, &(0x7f0000002700)=[{&(0x7f00000001c0)=""/57, 0x39}], 0x1}}], 0x2, 0x400000a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 746.768047ms ago: executing program 5 (id=1181): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1, 0x1}, 0xc) 712.926431ms ago: executing program 5 (id=1182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 697.989488ms ago: executing program 7 (id=1183): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010103, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000ac0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$eJzs281rXFUbAPDn3nz2M3n79v1orRotQlBMmrRqF24UBZGKgi7qMk6mJXTaSBPBfmCjiCtBCroWl6J/gbgRQdSV4Epw5UoKRbNp6ypyZ+5NMpNM2iSTTO38fjCZc+aemXueOffce+45kwA61lD2J4nYHRG/RsRALVtfYKj2dHP+cunW/OVSEgsLr/6RVMvdmL9cKooW79uVZ4bTiPT9JN9JvZkLF89MVCrl83l+dPZsX56cOF0+XT43fvz4saNjTz05/kRL4sziunHwnelDB154/epLpZNX3/jhy6y+u/Pty+NYp19Gm2wYygL/c6GqcdsjG9zZ3WrPsnTS3caKsC5dEZE1V0+1/w9EVyw13kA8/15bKwdsqeza1Nd889wCcA9Lot01ANqjuNDvnO8qZffAK++DB7Zy+NF215+p3QBlcd/MH7Ut3ZHmZXoa7m9baSgiTs799Wn2iM3NQwAA3JEPS5+c6I2IS7e+eDEbeyyN9tLu/1aff6v+3ZuPBAcj4l8RsS8i/h0R+yPiPxGRlf1fRPx/k/VZOf5Jr23yI9eUjf+ezte26sd/xegvBrvy3J5q/D3JqalK+Uj+nQxHT1+WH1tjH9889/NHzbYtH/9lj2z/xVgwr8e17oYJusmJ2YnqoLQFrr8bcbA7SVbGnyyuBCQRcSAiDq7vo/cWialHPz/UrNDt419DC9aZFj7LwpvL2n8uGuIvJLX1yTdHZy5cfHzqbOP65Gh/VMpHRoujYqUff/rglWb7r8Xfn+dWj3/H5sNs6nq59rys/ZdtXewDS+u1M63d/waP/7Q3ea26ztybv/b2xOzs+bGI3uRENV/3+vjSe4t8UT47/ocPr97/9+Xvydr/vojIDuL7I+KBiHgwr/tDEfFwRBxeI8bvn719/JFu4PhvgSz+yVXPf4vH/2BS1/7rT3Sd+e6rZvu/s/Y/Vk0N569Uz38Nkob8atXpjuhrrOBmvz8AAAD4J0irv4FP0pHFdJqOjNR+w78/dqaV6ZnZx05Nv3VusvZb+cHoSYuZroF8PrQyVSmPJXP5J9bmR8fzueJivvRoPm/8cdeOan6kNF2ZbHPs0Ol2Nen/md+72l07YIvVLy8VC8DjvW2pDLDNGtfR0/rslZfDyQDuVf5fGzrXbfp/ul31ALaf6z90rtX6/5WGvLUAuDe5/kPn0v+hQ6Xfrvry19teEaAdXP+hI23m//q3MNF/d1SjPYntbpRYV+EoEmnbv6hWJfrjrqjGxhOX8t7cyk9u84kJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgRf4OAAD//+Nr2uw=") clock_adjtime(0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 655.58037ms ago: executing program 1 (id=1184): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) 655.00443ms ago: executing program 5 (id=1185): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 567.839514ms ago: executing program 0 (id=1186): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x3}, 0x1c) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x3f80) 567.683214ms ago: executing program 1 (id=1187): r0 = syz_io_uring_setup(0x4e0b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x1000001}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op={0x0, 0x14}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, 0x0, 0x0) 567.578644ms ago: executing program 5 (id=1188): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) rename(&(0x7f0000000040)='./file2\x00', &(0x7f0000000100)='./file0\x00') 564.966543ms ago: executing program 1 (id=1189): sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1298}}], 0x1, 0x844) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f00000001c0)) 554.941262ms ago: executing program 5 (id=1191): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x54, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0xe, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffec4) 316.318567ms ago: executing program 6 (id=1192): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES32], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 206.360937ms ago: executing program 6 (id=1193): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1, 0x1}, 0xc) 128.739253ms ago: executing program 6 (id=1194): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f00000001c0)) 0s ago: executing program 7 (id=1195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) kernel console output (not intermixed with test programs): _t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.533788][ T28] audit: type=1400 audit(1773249219.813:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.559285][ T28] audit: type=1400 audit(1773249219.813:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.587262][ T28] audit: type=1400 audit(1773249219.893:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.587719][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.612877][ T28] audit: type=1400 audit(1773249219.893:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.241643][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.264019][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.271507][ T283] device bridge_slave_0 entered promiscuous mode [ 20.278493][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.285570][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.293258][ T283] device bridge_slave_1 entered promiscuous mode [ 20.436382][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.443418][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.451081][ T287] device bridge_slave_0 entered promiscuous mode [ 20.467671][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.474753][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.482166][ T289] device bridge_slave_0 entered promiscuous mode [ 20.489207][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.496253][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.503721][ T287] device bridge_slave_1 entered promiscuous mode [ 20.515468][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.522507][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.529887][ T289] device bridge_slave_1 entered promiscuous mode [ 20.574656][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.581705][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.589127][ T290] device bridge_slave_0 entered promiscuous mode [ 20.599267][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.606531][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.613843][ T290] device bridge_slave_1 entered promiscuous mode [ 20.625550][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.632668][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.640099][ T288] device bridge_slave_0 entered promiscuous mode [ 20.649775][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.656993][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.664438][ T288] device bridge_slave_1 entered promiscuous mode [ 20.740914][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.748320][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.755747][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.762859][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.828598][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.835673][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.843245][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.850274][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.868517][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.875587][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.882839][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.889879][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.928324][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.935398][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.942737][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.949769][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.964262][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.971534][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.979109][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.986665][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.993778][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.001479][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.008739][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.015976][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.023191][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.037230][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.069141][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.076815][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.084919][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.093002][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.100122][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.107666][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.115980][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.123163][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.130781][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.138921][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.145954][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.153419][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.161676][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.168704][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.196144][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.204322][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.211326][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.218758][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.227261][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.234332][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.241758][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.249880][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.257860][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.265927][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.292606][ T283] device veth0_vlan entered promiscuous mode [ 21.299242][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.307695][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.316218][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.323603][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.331316][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.339362][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.347531][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.355985][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.364366][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.371816][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.379321][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.387846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.396123][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.403215][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.410664][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.419067][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.428336][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.436389][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.444649][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.452685][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.460786][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.468757][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.476724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.484377][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.492114][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.499701][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.507933][ T287] device veth0_vlan entered promiscuous mode [ 21.520457][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.528674][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.541549][ T287] device veth1_macvtap entered promiscuous mode [ 21.551208][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.559663][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.569089][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.577488][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.585910][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.606886][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.614588][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.621965][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.630776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.639211][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.646260][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.653740][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.662191][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.670467][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.677535][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.684882][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.693313][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.701715][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.713695][ T290] device veth0_vlan entered promiscuous mode [ 21.723487][ T283] device veth1_macvtap entered promiscuous mode [ 21.730248][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.738483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.746672][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.755327][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.763559][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.771737][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.779930][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.787828][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.795537][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.808790][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.817327][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.825769][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.833774][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.841903][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.850192][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.863865][ T290] device veth1_macvtap entered promiscuous mode [ 21.875383][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.883659][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.892039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.900574][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.909744][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.934973][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 21.935656][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.951635][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.960770][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.969339][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.977868][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.986197][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.004544][ T289] device veth0_vlan entered promiscuous mode [ 22.011694][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.020410][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.028636][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.047349][ T288] device veth0_vlan entered promiscuous mode [ 22.061666][ T289] device veth1_macvtap entered promiscuous mode [ 22.078836][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.097569][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.114468][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.124000][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.142522][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.153152][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.161485][ T349] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 22.171096][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.185201][ T351] loop2: detected capacity change from 0 to 512 [ 22.197682][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.234638][ T351] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 22.248541][ T288] device veth1_macvtap entered promiscuous mode [ 23.361443][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.420402][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.480287][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.558624][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.572709][ T283] EXT4-fs (loop2): unmounting filesystem. [ 23.578984][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.626822][ T368] binder: 367:368 ioctl 400c620e 200000000280 returned -22 [ 23.641788][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.651451][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.660234][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.672048][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.716146][ T374] loop3: detected capacity change from 0 to 512 [ 23.774312][ T374] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 23.791335][ T374] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 23.850531][ T374] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz.3.18: Directory hole found for htree leaf block 0 [ 23.875874][ T401] loop2: detected capacity change from 0 to 2048 [ 23.890779][ T374] EXT4-fs (loop3): Remounting filesystem read-only [ 23.892256][ T401] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 23.906052][ T401] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 23.929732][ T287] EXT4-fs (loop3): unmounting filesystem. [ 23.937208][ T283] EXT4-fs (loop2): unmounting filesystem. [ 23.944698][ T334] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 23.988797][ T406] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.041856][ T397] mmap: syz.0.26 (397) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 24.121984][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 24.134138][ T334] usb 5-1: Using ep0 maxpacket: 8 [ 24.140279][ T334] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 24.154139][ T334] usb 5-1: config 179 has no interface number 0 [ 24.155499][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 24.167739][ T334] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 24.167766][ T334] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 24.167802][ T334] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 24.222402][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 24.230663][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 24.239210][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 24.247795][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 24.256017][ T334] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 24.268425][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 24.277205][ T334] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 24.283919][ T408] loop3: detected capacity change from 0 to 40427 [ 24.291011][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 24.305092][ T334] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 24.314671][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 24.322588][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.331195][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 24.345648][ T370] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 24.353584][ T408] F2FS-fs (loop3): invalid crc value [ 24.398405][ T408] F2FS-fs (loop3): Found nat_bits in checkpoint [ 24.439168][ T415] loop0: detected capacity change from 0 to 40427 [ 24.441609][ T408] F2FS-fs (loop3): Start checkpoint disabled! [ 24.452962][ T408] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 24.460477][ T408] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 24.470102][ T415] F2FS-fs (loop0): fault_injection options not supported [ 24.492124][ T415] F2FS-fs (loop0): fault_type options not supported [ 24.499775][ T415] F2FS-fs (loop0): invalid crc value [ 24.510559][ T415] F2FS-fs (loop0): Found nat_bits in checkpoint [ 24.520621][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.553379][ T413] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.561156][ T413] device bridge_slave_0 entered promiscuous mode [ 24.568338][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.575969][ T413] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.583440][ T413] device bridge_slave_1 entered promiscuous mode [ 24.625373][ T415] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 24.707214][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 24.707228][ T28] audit: type=1400 audit(1773249225.013:136): avc: denied { create } for pid=413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.736654][ T288] syz-executor: attempt to access beyond end of device [ 24.736654][ T288] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 24.744404][ T28] audit: type=1400 audit(1773249225.013:137): avc: denied { setattr } for pid=414 comm="syz.0.33" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 24.808473][ T28] audit: type=1400 audit(1773249225.043:138): avc: denied { write } for pid=413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.823326][ T418] loop2: detected capacity change from 0 to 40427 [ 24.832339][ T28] audit: type=1400 audit(1773249225.043:139): avc: denied { read } for pid=413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.870110][ T378] usb 5-1: USB disconnect, device number 2 [ 24.870154][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 24.884923][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 24.886286][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.899668][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.906966][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.914077][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.922011][ T418] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 24.926824][ T28] audit: type=1400 audit(1773249225.113:140): avc: denied { create } for pid=431 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 24.928876][ T418] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 24.953165][ T28] audit: type=1400 audit(1773249225.113:141): avc: denied { connect } for pid=431 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.024793][ T28] audit: type=1400 audit(1773249225.133:142): avc: denied { write } for pid=431 comm="syz.3.35" path="socket:[16425]" dev="sockfs" ino=16425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.043496][ T418] F2FS-fs (loop2): invalid crc value [ 25.052565][ T28] audit: type=1400 audit(1773249225.263:143): avc: denied { read } for pid=431 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.079087][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.086543][ T28] audit: type=1400 audit(1773249225.383:144): avc: denied { ioctl } for pid=438 comm="syz.0.37" path="socket:[16478]" dev="sockfs" ino=16478 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.087259][ T418] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 25.118825][ T28] audit: type=1400 audit(1773249225.413:145): avc: denied { execute } for pid=443 comm="syz.3.38" path="/9/blkio.bfq.group_wait_time" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 25.140133][ T418] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 25.153501][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.154080][ T418] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 25.181828][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.198121][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.233525][ T283] syz-executor: attempt to access beyond end of device [ 25.233525][ T283] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 25.253737][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.264043][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.271128][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.279460][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.319255][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.326347][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.354826][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.374812][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.405149][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.494265][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.502932][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.529575][ T413] device veth0_vlan entered promiscuous mode [ 25.542583][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.557491][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.579281][ T472] loop3: detected capacity change from 0 to 128 [ 25.588913][ T413] device veth1_macvtap entered promiscuous mode [ 25.597083][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.597196][ T474] input: syz0 as /devices/virtual/input/input4 [ 25.606785][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.620913][ T472] ======================================================= [ 25.620913][ T472] WARNING: The mand mount option has been deprecated and [ 25.620913][ T472] and is ignored by this kernel. Remove the mand [ 25.620913][ T472] option from the mount to silence this warning. [ 25.620913][ T472] ======================================================= [ 25.635613][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.663598][ T472] EXT4-fs (loop3): Test dummy encryption mode enabled [ 25.677089][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.699866][ T477] loop0: detected capacity change from 0 to 256 [ 25.701655][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.717371][ T477] exfat: Deprecated parameter 'namecase' [ 25.719326][ T479] loop4: detected capacity change from 0 to 1024 [ 25.741418][ T477] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbc15e, utbl_chksum : 0xe619d30d) [ 25.742842][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.765066][ T472] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 25.768000][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.789984][ T355] device bridge_slave_1 left promiscuous mode [ 25.797536][ T479] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 25.799907][ T472] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 25.807271][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.834296][ T479] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 25.840643][ T355] device bridge_slave_0 left promiscuous mode [ 25.849972][ T479] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 25.868400][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.877608][ T479] EXT4-fs (loop4): This should not happen!! Data will be lost [ 25.877608][ T479] [ 25.887328][ T479] EXT4-fs (loop4): Total free blocks count 0 [ 25.888543][ T355] device veth1_macvtap left promiscuous mode [ 25.893308][ T479] EXT4-fs (loop4): Free/Dirty block details [ 25.893321][ T479] EXT4-fs (loop4): free_blocks=68451041280 [ 25.893333][ T479] EXT4-fs (loop4): dirty_blocks=16 [ 25.913227][ T355] device veth0_vlan left promiscuous mode [ 25.916630][ T479] EXT4-fs (loop4): Block reservation details [ 25.928455][ T479] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 25.934822][ T472] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 25.959176][ T287] EXT4-fs (loop3): unmounting filesystem. [ 26.040130][ T475] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28 [ 26.179225][ T517] loop3: detected capacity change from 0 to 256 [ 26.208435][ T517] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 26.583452][ T522] F2FS-fs (loop3): invalid crc value [ 26.631012][ T522] F2FS-fs (loop3): Found nat_bits in checkpoint [ 26.710017][ T542] fuse: Bad value for 'fd' [ 26.724247][ T522] F2FS-fs (loop3): Start checkpoint disabled! [ 26.738229][ T522] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 26.760771][ T522] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 26.898984][ T475] kworker/u4:6: attempt to access beyond end of device [ 26.898984][ T475] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 26.952064][ T519] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 26.969299][ T519] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 27.024859][ T519] F2FS-fs (loop1): Found nat_bits in checkpoint [ 27.147033][ T597] 9pnet_fd: Insufficient options for proto=fd [ 27.163908][ T519] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 27.187934][ T519] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 27.236729][ T613] set_capacity_and_notify: 2 callbacks suppressed [ 27.236747][ T613] loop3: detected capacity change from 0 to 512 [ 27.249891][ T616] syz.4.109 uses obsolete (PF_INET,SOCK_PACKET) [ 27.291034][ T613] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 27.301244][ T613] System zones: 0-2, 18-18, 34-35 [ 27.308023][ T613] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 27.337803][ T613] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.452856][ T287] EXT4-fs (loop3): unmounting filesystem. [ 28.036902][ T634] loop2: detected capacity change from 0 to 40427 [ 28.047768][ T656] loop0: detected capacity change from 0 to 512 [ 28.058623][ T634] F2FS-fs (loop2): fault_injection options not supported [ 28.067340][ T634] F2FS-fs (loop2): fault_type options not supported [ 28.080726][ T656] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 28.091284][ T656] FAT-fs (loop0): Filesystem has been set read-only [ 28.105296][ T656] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 28.115546][ T634] F2FS-fs (loop2): invalid crc value [ 28.121252][ T656] FAT-fs (loop0): error, invalid access to FAT (entry 0x000000c8) [ 28.130014][ T634] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.131890][ T660] loop3: detected capacity change from 0 to 16 [ 28.169330][ T660] erofs: (device loop3): mounted with root inode @ nid 36. [ 28.204170][ T634] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.286804][ T677] loop3: detected capacity change from 0 to 128 [ 28.308267][ T283] syz-executor: attempt to access beyond end of device [ 28.308267][ T283] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 28.353389][ T677] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 28.364376][ T677] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.415781][ T677] EXT4-fs (loop3): shut down requested (0) [ 28.471262][ T677] EXT4-fs (loop3): unmounting filesystem. [ 28.856247][ T671] loop1: detected capacity change from 0 to 131072 [ 28.877365][ T671] F2FS-fs (loop1): invalid crc value [ 28.922631][ T671] F2FS-fs (loop1): Found nat_bits in checkpoint [ 28.934857][ T720] loop0: detected capacity change from 0 to 8192 [ 29.052919][ T671] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 29.457834][ T761] loop1: detected capacity change from 0 to 512 [ 29.479911][ T712] loop2: detected capacity change from 0 to 131072 [ 29.513030][ T712] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 29.557848][ T767] loop0: detected capacity change from 0 to 16 [ 29.565564][ T712] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 29.579284][ T767] erofs: (device loop0): mounted with root inode @ nid 36. [ 29.586768][ T712] F2FS-fs (loop2): invalid crc value [ 29.600506][ T767] syz.0.174: attempt to access beyond end of device [ 29.600506][ T767] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 29.611399][ T769] syz.1.175 (769) used greatest stack depth: 21088 bytes left [ 29.615350][ T767] syz.0.174: attempt to access beyond end of device [ 29.615350][ T767] loop0: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 29.634802][ T767] syz.0.174: attempt to access beyond end of device [ 29.634802][ T767] loop0: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 29.651006][ T712] F2FS-fs (loop2): Found nat_bits in checkpoint [ 29.760985][ T712] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 29.770761][ T712] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 29.875351][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 29.875365][ T28] audit: type=1400 audit(1773249230.183:221): avc: denied { name_bind } for pid=804 comm="syz.0.190" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 29.923588][ T712] F2FS-fs (loop2): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:1407713280 [ 29.974135][ T28] audit: type=1400 audit(1773249230.183:222): avc: denied { append } for pid=801 comm="syz.1.191" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.013866][ T819] capability: warning: `syz.4.196' uses deprecated v2 capabilities in a way that may be insecure [ 30.033667][ T28] audit: type=1400 audit(1773249230.183:223): avc: denied { node_bind } for pid=804 comm="syz.0.190" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 30.061991][ T819] overlayfs: failed to clone upperpath [ 30.097792][ T28] audit: type=1400 audit(1773249230.213:224): avc: denied { remount } for pid=711 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.175729][ T28] audit: type=1400 audit(1773249230.243:225): avc: denied { read } for pid=809 comm="syz.0.193" dev="nsfs" ino=4026532448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.226818][ T28] audit: type=1400 audit(1773249230.243:226): avc: denied { open } for pid=809 comm="syz.0.193" path="net:[4026532448]" dev="nsfs" ino=4026532448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.278821][ T28] audit: type=1400 audit(1773249230.243:227): avc: denied { shutdown } for pid=809 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.336695][ T28] audit: type=1400 audit(1773249230.243:228): avc: denied { read } for pid=809 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.395348][ T28] audit: type=1400 audit(1773249230.453:229): avc: denied { ioctl } for pid=824 comm="syz.1.200" path="socket:[17214]" dev="sockfs" ino=17214 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.473706][ T28] audit: type=1400 audit(1773249230.543:230): avc: denied { read write } for pid=829 comm="syz.1.202" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 30.522185][ T844] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.543888][ T844] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.629898][ T283] EXT4-fs (loop2): unmounting filesystem. [ 30.730004][ T857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 30.737398][ T857] IPv6: NLM_F_CREATE should be set when creating new route [ 30.744646][ T857] IPv6: NLM_F_CREATE should be set when creating new route [ 30.831417][ T861] pimreg: tun_chr_ioctl cmd 1074025677 [ 30.847265][ T861] pimreg: linktype set to 0 [ 31.036541][ T872] process 'syz.4.221' launched '/dev/fd/4' with NULL argv: empty string added [ 31.143549][ T859] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 31.182331][ T859] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 31.255272][ T859] F2FS-fs (loop2): Found nat_bits in checkpoint [ 31.328981][ T868] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 31.343803][ T868] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 31.363109][ T868] F2FS-fs (loop1): invalid crc value [ 31.369258][ T859] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 31.384134][ T859] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 31.427856][ T868] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 31.488180][ T868] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 31.495950][ T868] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 31.546183][ T413] syz-executor: attempt to access beyond end of device [ 31.546183][ T413] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 31.817158][ T908] device batadv_slave_1 entered promiscuous mode [ 31.857437][ T907] device batadv_slave_1 left promiscuous mode [ 32.308664][ T915] set_capacity_and_notify: 3 callbacks suppressed [ 32.308681][ T915] loop1: detected capacity change from 0 to 40427 [ 32.356712][ T915] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 32.384231][ T915] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 32.412870][ T915] F2FS-fs (loop1): Unrecognized mount option "ÿÿÿ01777777777777777777777J" or missing value [ 32.687242][ T939] loop1: detected capacity change from 0 to 256 [ 32.711169][ T941] loop3: detected capacity change from 0 to 256 [ 32.728107][ T939] exfat: Deprecated parameter 'utf8' [ 32.738082][ T939] exfat: Deprecated parameter 'utf8' [ 32.755031][ T941] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.766841][ T939] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 32.786473][ T941] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 32.823115][ T941] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 32.878447][ T941] incfs: iterate_incfs_dir / -22 [ 32.954556][ T949] overlayfs: failed to clone upperpath [ 33.308388][ T937] loop2: detected capacity change from 0 to 131072 [ 33.333162][ T937] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 33.341238][ T937] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 33.353361][ T937] F2FS-fs (loop2): invalid crc value [ 33.377360][ T980] capability: warning: `syz.4.268' uses 32-bit capabilities (legacy support in use) [ 33.439315][ T937] F2FS-fs (loop2): Found nat_bits in checkpoint [ 33.454538][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.454558][ T969] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.455019][ T969] device bridge_slave_0 entered promiscuous mode [ 33.457204][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.457222][ T969] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.457636][ T969] device bridge_slave_1 entered promiscuous mode [ 33.538626][ T937] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 33.538649][ T937] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 33.547602][ T355] device bridge_slave_1 left promiscuous mode [ 33.547656][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.548088][ T355] device bridge_slave_0 left promiscuous mode [ 33.548138][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.549078][ T355] device veth1_macvtap left promiscuous mode [ 33.549122][ T355] device veth0_vlan left promiscuous mode [ 33.611383][ T906] loop0: detected capacity change from 0 to 262144 [ 33.682729][ T906] F2FS-fs (loop0): invalid crc value [ 33.705835][ T906] F2FS-fs (loop0): Found nat_bits in checkpoint [ 33.809079][ T906] F2FS-fs (loop0): Start checkpoint disabled! [ 33.814522][ T906] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 33.830563][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.830704][ T906] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 33.837804][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.837883][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.859679][ T969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.884522][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.884885][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.885176][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.896060][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.896227][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.896240][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.908372][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.919076][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.949831][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.950059][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.954877][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.955106][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.955415][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.955631][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.960310][ T969] device veth0_vlan entered promiscuous mode [ 33.980804][ T969] device veth1_macvtap entered promiscuous mode [ 34.209288][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.209550][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.209754][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.221988][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.222231][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.223266][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.223476][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.416714][ T1039] loop5: detected capacity change from 0 to 128 [ 34.428348][ T1041] loop2: detected capacity change from 0 to 256 [ 34.445522][ T1039] FAT-fs (loop5): Directory bread(block 524322) failed [ 34.452417][ T1039] FAT-fs (loop5): Directory bread(block 524323) failed [ 34.476119][ T1041] FAT-fs (loop2): Directory bread(block 64) failed [ 34.482675][ T1041] FAT-fs (loop2): Directory bread(block 65) failed [ 34.493216][ T1039] FAT-fs (loop5): Directory bread(block 524324) failed [ 34.514321][ T1039] FAT-fs (loop5): Directory bread(block 524325) failed [ 34.523680][ T1041] FAT-fs (loop2): Directory bread(block 66) failed [ 34.530366][ T1039] FAT-fs (loop5): Directory bread(block 524326) failed [ 34.544179][ T1041] FAT-fs (loop2): Directory bread(block 67) failed [ 34.550834][ T1041] FAT-fs (loop2): Directory bread(block 68) failed [ 34.557621][ T1039] FAT-fs (loop5): Directory bread(block 524327) failed [ 34.564632][ T1039] FAT-fs (loop5): Directory bread(block 524328) failed [ 34.571589][ T1039] FAT-fs (loop5): Directory bread(block 524329) failed [ 34.581345][ T1041] FAT-fs (loop2): Directory bread(block 69) failed [ 34.591924][ T1041] FAT-fs (loop2): Directory bread(block 70) failed [ 34.600965][ T1048] netlink: 'syz.1.293': attribute type 16 has an invalid length. [ 34.604355][ T1039] FAT-fs (loop5): FAT read failed (blocknr 128) [ 34.614989][ T1041] FAT-fs (loop2): Directory bread(block 71) failed [ 34.621623][ T1041] FAT-fs (loop2): Directory bread(block 72) failed [ 34.630520][ T1048] netlink: 'syz.1.293': attribute type 17 has an invalid length. [ 34.640695][ T1041] FAT-fs (loop2): Directory bread(block 73) failed [ 34.725577][ T1048] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.732816][ T1048] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.801869][ T1062] loop2: detected capacity change from 0 to 512 [ 34.851629][ T1062] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.874297][ T1062] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.916882][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 34.916895][ T28] audit: type=1400 audit(1773249491.222:259): avc: denied { ioctl } for pid=1066 comm="syz.1.301" path="socket:[18430]" dev="sockfs" ino=18430 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.977608][ T283] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /50/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 34.994547][ T1072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 35.034342][ T283] EXT4-fs (loop2): Remounting filesystem read-only [ 35.044334][ T28] audit: type=1400 audit(1773249491.262:260): avc: denied { mounton } for pid=1061 comm="syz.2.298" path="/50/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.077154][ T283] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 35.107725][ T28] audit: type=1400 audit(1773249491.262:261): avc: denied { write } for pid=1061 comm="syz.2.298" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.135495][ T283] EXT4-fs (loop2): Remounting filesystem read-only [ 35.153326][ T1083] loop1: detected capacity change from 0 to 512 [ 35.154724][ T283] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 35.180176][ T28] audit: type=1400 audit(1773249491.262:262): avc: denied { add_name } for pid=1061 comm="syz.2.298" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.201990][ T1083] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.308: inode has both inline data and extents flags [ 35.205432][ T283] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /50/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 35.246599][ T283] EXT4-fs (loop2): Remounting filesystem read-only [ 35.251124][ T28] audit: type=1400 audit(1773249491.262:263): avc: denied { remove_name } for pid=1061 comm="syz.2.298" name="#1" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.277586][ T28] audit: type=1400 audit(1773249491.262:264): avc: denied { unlink } for pid=1061 comm="syz.2.298" name="#1" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.284484][ T1083] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.308: couldn't read orphan inode 15 (err -117) [ 35.299493][ T28] audit: type=1400 audit(1773249491.262:265): avc: denied { unlink } for pid=1061 comm="syz.2.298" name="#2" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.330939][ T283] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 35.333532][ T28] audit: type=1400 audit(1773249491.482:266): avc: denied { listen } for pid=1075 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.400341][ T1083] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 35.419884][ T283] EXT4-fs (loop2): Remounting filesystem read-only [ 35.451912][ T283] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 35.474372][ T283] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /50/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 35.507262][ T283] EXT4-fs (loop2): Remounting filesystem read-only [ 35.555166][ T413] EXT4-fs (loop1): unmounting filesystem. [ 35.577390][ T283] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 35.600277][ T1094] loop0: detected capacity change from 0 to 16 [ 35.615476][ T1096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.310'. [ 35.617089][ T283] EXT4-fs (loop2): Remounting filesystem read-only [ 35.631270][ T283] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 35.644554][ T1094] erofs: (device loop0): mounted with root inode @ nid 36. [ 35.649098][ T283] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /50/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 35.662768][ T1094] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 35.678174][ T283] EXT4-fs (loop2): Remounting filesystem read-only [ 35.713781][ T283] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 35.746669][ T283] EXT4-fs (loop2): Remounting filesystem read-only [ 35.747098][ T28] audit: type=1400 audit(1773249492.052:267): avc: denied { sqpoll } for pid=1101 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 35.753238][ T283] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 35.804402][ T283] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /50/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 35.859927][ T283] EXT4-fs (loop2): Remounting filesystem read-only [ 35.866061][ T28] audit: type=1400 audit(1773249492.172:268): avc: denied { setopt } for pid=1111 comm="syz.5.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.913882][ T283] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 35.935199][ T283] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 35.975750][ T1118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.322'. [ 35.985790][ T1116] FAT-fs (loop5): Directory bread(block 64) failed [ 35.993214][ T283] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 36.002146][ T1116] FAT-fs (loop5): Directory bread(block 65) failed [ 36.011466][ T1116] FAT-fs (loop5): Directory bread(block 66) failed [ 36.018194][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.023346][ T1116] FAT-fs (loop5): Directory bread(block 67) failed [ 36.025582][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.032396][ T1116] FAT-fs (loop5): Directory bread(block 68) failed [ 36.046266][ T1116] FAT-fs (loop5): Directory bread(block 69) failed [ 36.052826][ T1116] FAT-fs (loop5): Directory bread(block 70) failed [ 36.060620][ T1116] FAT-fs (loop5): Directory bread(block 71) failed [ 36.067336][ T1116] FAT-fs (loop5): Directory bread(block 72) failed [ 36.074020][ T1116] FAT-fs (loop5): Directory bread(block 73) failed [ 36.076781][ T283] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 36.087804][ T1120] netlink: 'syz.1.323': attribute type 1 has an invalid length. [ 36.155523][ T283] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 36.226248][ T283] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 36.273988][ T283] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 36.436444][ T1158] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 36.512744][ T1167] netlink: 'syz.0.343': attribute type 11 has an invalid length. [ 36.524156][ T1167] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 36.532210][ T1167] netlink: 3593 bytes leftover after parsing attributes in process `syz.0.343'. [ 36.844799][ T1199] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 36.874828][ T969] EXT4-fs (loop5): unmounting filesystem. [ 36.946703][ T1208] EXT4-fs: Ignoring removed bh option [ 36.960953][ T1208] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 36.985241][ T1208] EXT4-fs (loop5): 1 truncate cleaned up [ 36.997483][ T1208] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 37.056948][ T969] EXT4-fs (loop5): unmounting filesystem. [ 37.181428][ T1220] Zero length message leads to an empty skb [ 37.199770][ T1222] netlink: 104 bytes leftover after parsing attributes in process `syz.5.366'. [ 37.386184][ T1231] set_capacity_and_notify: 3 callbacks suppressed [ 37.386201][ T1231] loop1: detected capacity change from 0 to 4096 [ 37.445880][ T1231] EXT4-fs (loop1): invalid inodes per group: 458784 [ 37.445880][ T1231] [ 37.845904][ T1256] loop1: detected capacity change from 0 to 40427 [ 37.861772][ T1256] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 37.879244][ T1256] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 37.894043][ T1256] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.944218][ T1269] loop0: detected capacity change from 0 to 16 [ 37.951656][ T1256] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 37.968143][ T1256] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 37.976274][ T1269] erofs: (device loop0): mounted with root inode @ nid 36. [ 37.986591][ T1268] syz.0.384: attempt to access beyond end of device [ 37.986591][ T1268] loop0: rw=524288, sector=1348712160, nr_sectors = 256 limit=16 [ 38.008455][ T1268] syz.0.384: attempt to access beyond end of device [ 38.008455][ T1268] loop0: rw=0, sector=1348712280, nr_sectors = 32 limit=16 [ 38.022682][ T1268] syz.0.384: attempt to access beyond end of device [ 38.022682][ T1268] loop0: rw=0, sector=1348712280, nr_sectors = 32 limit=16 [ 38.060833][ T1269] syz.0.384: attempt to access beyond end of device [ 38.060833][ T1269] loop0: rw=0, sector=1348712280, nr_sectors = 32 limit=16 [ 38.100835][ T1269] syz.0.384: attempt to access beyond end of device [ 38.100835][ T1269] loop0: rw=0, sector=1348712280, nr_sectors = 32 limit=16 [ 38.133202][ T1269] syz.0.384: attempt to access beyond end of device [ 38.133202][ T1269] loop0: rw=0, sector=1348712280, nr_sectors = 32 limit=16 [ 38.189148][ T1281] netlink: 212 bytes leftover after parsing attributes in process `syz.4.389'. [ 38.639556][ T1352] loop0: detected capacity change from 0 to 512 [ 38.678753][ T1352] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.423: inode has both inline data and extents flags [ 38.714297][ T1352] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.423: couldn't read orphan inode 15 (err -117) [ 38.736475][ T1352] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.795705][ T288] EXT4-fs (loop0): unmounting filesystem. [ 38.910637][ T1389] tipc: Started in network mode [ 38.915618][ T1389] tipc: Node identity ac14140f, cluster identity 4711 [ 38.925860][ T1389] tipc: New replicast peer: 255.255.255.255 [ 38.931985][ T1389] tipc: Enabled bearer , priority 10 [ 38.971087][ T1394] netlink: 104 bytes leftover after parsing attributes in process `syz.4.441'. [ 38.999931][ T1396] netlink: 'syz.0.442': attribute type 16 has an invalid length. [ 39.049640][ T1396] netlink: 'syz.0.442': attribute type 17 has an invalid length. [ 39.169511][ T1406] loop7: detected capacity change from 0 to 7 [ 39.181047][ T475] loop: Write error at byte offset 2, length 3584. [ 39.192091][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 39.201548][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 39.504172][ T334] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 39.695769][ T334] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.712313][ T334] usb 2-1: not running at top speed; connect to a high speed hub [ 39.724722][ T334] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.760131][ T334] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.761864][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.776398][ T1439] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.785406][ T1439] device bridge_slave_0 entered promiscuous mode [ 39.794531][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.801574][ T1439] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.804994][ T334] usb 2-1: string descriptor 0 read error: -22 [ 39.809297][ T1439] device bridge_slave_1 entered promiscuous mode [ 39.851692][ T334] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.881253][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.927058][ T334] usb 2-1: 0:2 : does not exist [ 39.934292][ T376] tipc: Node number set to 2886997007 [ 40.010149][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.017266][ T1439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.024668][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.031693][ T1439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.082053][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.095096][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.104571][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.127725][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.138763][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.154448][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.161510][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.172208][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.181023][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.198153][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.205249][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.233639][ T475] device bridge_slave_1 left promiscuous mode [ 40.240302][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.266287][ T475] device bridge_slave_0 left promiscuous mode [ 40.272560][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.283635][ T475] device veth1_macvtap left promiscuous mode [ 40.290095][ T475] device veth0_vlan left promiscuous mode [ 40.417643][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.437307][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.450994][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.460197][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.493897][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.504534][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.540555][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.554477][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.572840][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.582772][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.606264][ T1439] device veth0_vlan entered promiscuous mode [ 40.629114][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.644629][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.661915][ T1439] device veth1_macvtap entered promiscuous mode [ 40.683708][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.699350][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.725988][ T334] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 40.734448][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.773160][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.783828][ T334] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 40.804553][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 40.804565][ T28] audit: type=1400 audit(1773249497.105:292): avc: denied { write } for pid=1516 comm="syz.6.460" path="socket:[20656]" dev="sockfs" ino=20656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 40.840250][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.849018][ T334] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 40.867386][ T334] usb 2-1: USB disconnect, device number 2 [ 41.150559][ T1546] loop6: detected capacity change from 0 to 2048 [ 41.160841][ T1546] FAT-fs (loop6): Unrecognized mount option "?¥ÿ" or missing value [ 41.252073][ T1546] xt_hashlimit: size too large, truncated to 1048576 [ 41.346770][ T28] audit: type=1400 audit(1773249497.645:293): avc: denied { unlink } for pid=1553 comm="syz.0.509" name="#3" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 41.443372][ T1558] loop0: detected capacity change from 0 to 1024 [ 41.474491][ T1558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.504238][ T1558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.540063][ T1558] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.511: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 41.564609][ T1558] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.511: couldn't read orphan inode 11 (err -117) [ 41.591753][ T1558] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.671478][ T28] audit: type=1400 audit(1773249497.965:294): avc: denied { getopt } for pid=1557 comm="syz.0.511" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.684211][ T1562] loop5: detected capacity change from 0 to 256 [ 41.692264][ T1560] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 41.715434][ T1562] exfat: Deprecated parameter 'utf8' [ 41.730343][ T288] EXT4-fs (loop0): unmounting filesystem. [ 41.759386][ T1562] exfat: Deprecated parameter 'utf8' [ 41.767433][ T1568] loop0: detected capacity change from 0 to 256 [ 41.773894][ T1562] exfat: Deprecated parameter 'utf8' [ 41.781473][ T1568] exfat: Deprecated parameter 'utf8' [ 41.795731][ T1562] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 41.804190][ T1568] exfat: Deprecated parameter 'utf8' [ 41.835432][ T1568] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 41.839582][ T1570] netlink: 32 bytes leftover after parsing attributes in process `syz.5.516'. [ 41.896944][ T28] audit: type=1400 audit(1773249498.195:295): avc: denied { ioctl } for pid=1575 comm="syz.6.517" path="socket:[21682]" dev="sockfs" ino=21682 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.987332][ T28] audit: type=1400 audit(1773249498.285:296): avc: denied { read write } for pid=1583 comm="syz.0.522" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 41.990059][ T1586] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 42.035960][ T28] audit: type=1400 audit(1773249498.285:297): avc: denied { open } for pid=1583 comm="syz.0.522" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.235414][ T1611] loop1: detected capacity change from 0 to 128 [ 42.263352][ T1613] tipc: Started in network mode [ 42.280509][ T1613] tipc: Node identity ac14140f, cluster identity 4711 [ 42.293857][ T1611] EXT4-fs (loop1): Test dummy encryption mode enabled [ 42.296689][ T1613] tipc: New replicast peer: 255.255.255.255 [ 42.319309][ T1613] tipc: Enabled bearer , priority 10 [ 42.344970][ T1611] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.360503][ T1611] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.454139][ T413] EXT4-fs (loop1): unmounting filesystem. [ 42.736520][ T28] audit: type=1400 audit(1773249499.035:298): avc: denied { write } for pid=1652 comm="syz.6.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.769839][ T28] audit: type=1400 audit(1773249499.055:299): avc: denied { read } for pid=1648 comm="syz.1.550" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 42.816658][ T1660] overlayfs: failed to clone lowerpath [ 42.819628][ T28] audit: type=1400 audit(1773249499.115:300): avc: denied { mount } for pid=1658 comm="syz.4.554" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 43.005523][ T1678] loop6: detected capacity change from 0 to 512 [ 43.052757][ T1678] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.563: invalid indirect mapped block 2185560079 (level 0) [ 43.097924][ T1678] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.563: invalid indirect mapped block 2683928664 (level 1) [ 43.142622][ T1678] EXT4-fs (loop6): 1 truncate cleaned up [ 43.159179][ T1678] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 43.221530][ T1439] EXT4-fs (loop6): unmounting filesystem. [ 43.237390][ T28] audit: type=1326 audit(1773249499.535:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1621 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e839c799 code=0x7fc00000 [ 43.434164][ T376] tipc: Node number set to 2886997007 [ 43.471441][ T1718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.580'. [ 43.680993][ T1625] loop0: detected capacity change from 0 to 262144 [ 43.718669][ T1625] F2FS-fs (loop0): Unrecognized mount option "chec" or missing value [ 44.674921][ T475] tipc: Disabling bearer [ 44.674966][ T475] tipc: Left network mode [ 44.748233][ T1816] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.765764][ T1816] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.783096][ T1833] loop6: detected capacity change from 0 to 128 [ 44.811516][ T1816] device bridge_slave_0 entered promiscuous mode [ 44.831488][ T1833] EXT4-fs (loop6): Test dummy encryption mode enabled [ 44.840724][ T1816] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.847966][ T1816] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.855626][ T1816] device bridge_slave_1 entered promiscuous mode [ 44.875288][ T1833] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 44.885873][ T1833] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.950964][ T1439] EXT4-fs (loop6): unmounting filesystem. [ 44.981195][ T1849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.640'. [ 45.022711][ T1859] loop0: detected capacity change from 0 to 128 [ 45.044527][ T1859] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.064850][ T1859] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.064991][ T1816] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.080963][ T1816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.088261][ T1816] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.095321][ T1816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.155981][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.175046][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.182868][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.193276][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.202032][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.209091][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.217791][ T1883] binder: 1882:1883 ioctl 4018620d 0 returned -22 [ 45.251995][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.269417][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.276671][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.285665][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.299938][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.347998][ T1816] device veth0_vlan entered promiscuous mode [ 45.355616][ T1896] ext2: Unexpected value for 'acl' [ 45.369245][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.390215][ T1898] loop6: detected capacity change from 0 to 512 [ 45.403642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.416426][ T1898] EXT4-fs: Ignoring removed orlov option [ 45.420053][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.430356][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.439035][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.447946][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.458161][ T1884] loop0: detected capacity change from 0 to 40427 [ 45.464583][ T1898] EXT4-fs (loop6): Test dummy encryption mode enabled [ 45.464603][ T1898] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.464612][ T1898] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 45.477490][ T1884] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 45.503995][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.512130][ T1884] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 45.512374][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.531358][ T1898] EXT4-fs (loop6): 1 truncate cleaned up [ 45.531539][ T1816] device veth1_macvtap entered promiscuous mode [ 45.537340][ T1898] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 45.547065][ T1884] F2FS-fs (loop0): invalid crc value [ 45.569688][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.584334][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.594821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.603746][ T1884] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 45.615957][ T475] device bridge_slave_1 left promiscuous mode [ 45.622678][ T1439] EXT4-fs (loop6): unmounting filesystem. [ 45.633617][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.642847][ T475] device bridge_slave_0 left promiscuous mode [ 45.654703][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.655087][ T1884] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 45.670408][ T475] device veth1_macvtap left promiscuous mode [ 45.677011][ T475] device veth0_vlan left promiscuous mode [ 45.679395][ T1884] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 45.683543][ T378] kernel write not supported for file /227/attr/exec (pid: 378 comm: kworker/1:3) [ 45.712000][ T288] syz-executor: attempt to access beyond end of device [ 45.712000][ T288] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 45.829730][ T1927] loop0: detected capacity change from 0 to 16 [ 45.837508][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.846114][ T1927] erofs: (device loop0): mounted with root inode @ nid 36. [ 45.846162][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.943384][ T1942] loop0: detected capacity change from 0 to 256 [ 45.953422][ T1942] exfat: Deprecated parameter 'namecase' [ 45.969276][ T1942] exfat: Deprecated parameter 'namecase' [ 45.985066][ T1942] exFAT-fs (loop0): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 46.004217][ T378] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 46.144717][ T1963] loop6: detected capacity change from 0 to 512 [ 46.209564][ T1921] loop1: detected capacity change from 0 to 128 [ 46.234490][ T1968] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 46.271080][ T378] usb 2-1: unable to get BOS descriptor or descriptor too short [ 46.292279][ T378] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 46.312290][ T378] usb 2-1: can't read configurations, error -71 [ 46.514814][ T2002] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.703: inode has both inline data and extents flags [ 46.538652][ T2002] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.703: couldn't read orphan inode 15 (err -117) [ 46.551183][ T2002] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 46.569568][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 46.569582][ T28] audit: type=1400 audit(1773249502.865:320): avc: denied { write } for pid=2001 comm="syz.7.703" name="001" dev="devtmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.599084][ T1816] EXT4-fs (loop7): unmounting filesystem. [ 46.619373][ T2008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.705'. [ 46.694410][ T2018] EXT4-fs (loop5): Test dummy encryption mode enabled [ 46.711415][ T2018] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 46.721509][ T376] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 46.730428][ T2018] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.709: bad orphan inode 131083 [ 46.744904][ T2018] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 46.775997][ T969] EXT4-fs (loop5): unmounting filesystem. [ 46.922723][ T376] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.950856][ T376] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 46.959085][ T2029] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 46.961028][ T376] usb 7-1: config 1 has no interface number 0 [ 46.982992][ T2029] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 46.986427][ T376] usb 7-1: too many endpoints for config 1 interface 1 altsetting 0: 222, using maximum allowed: 30 [ 47.002478][ T2029] F2FS-fs (loop7): invalid crc value [ 47.013012][ T2029] F2FS-fs (loop7): Found nat_bits in checkpoint [ 47.016111][ T376] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.044238][ T376] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 222 [ 47.070462][ T376] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 47.079935][ T2029] F2FS-fs (loop7): Start checkpoint disabled! [ 47.087828][ T2029] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 47.099220][ T376] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.40 [ 47.109169][ T2029] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 47.117029][ T2029] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 47.118864][ T2044] exfat: Deprecated parameter 'utf8' [ 47.131011][ T376] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.146605][ T376] usb 7-1: Product: syz [ 47.151946][ T2044] exfat: Deprecated parameter 'utf8' [ 47.160881][ T2044] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 47.165356][ T376] usb 7-1: Manufacturer: syz [ 47.190000][ T376] usb 7-1: SerialNumber: syz [ 47.212871][ T2029] F2FS-fs (loop7): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 47.261597][ T359] kworker/u4:5: attempt to access beyond end of device [ 47.261597][ T359] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 48.074266][ T2061] set_capacity_and_notify: 5 callbacks suppressed [ 48.074284][ T2061] loop0: detected capacity change from 0 to 128 [ 48.177758][ T28] audit: type=1400 audit(1773249504.475:321): avc: denied { ioctl } for pid=2071 comm="syz.5.733" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.259393][ T2055] loop7: detected capacity change from 0 to 40427 [ 48.275863][ T2055] F2FS-fs (loop7): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 48.300273][ T2055] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 48.316434][ T2055] F2FS-fs (loop7): invalid crc value [ 48.354333][ T2055] F2FS-fs (loop7): Found nat_bits in checkpoint [ 48.402949][ T376] cdc_ncm 7-1:1.1: bind() failure [ 48.415887][ T2055] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 48.423087][ T376] usb 7-1: USB disconnect, device number 2 [ 48.432470][ T2088] loop1: detected capacity change from 0 to 1024 [ 48.433041][ T2055] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 48.466780][ T2092] 9p: Unknown access argument G: -22 [ 48.479078][ T28] audit: type=1400 audit(1773249504.775:322): avc: denied { append } for pid=2054 comm="syz.7.723" path="/14/bus/pids.current" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.487812][ T2088] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.738: bad orphan inode 134217728 [ 48.520415][ T2088] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.524384][ T1816] syz-executor: attempt to access beyond end of device [ 48.524384][ T1816] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 48.614584][ T413] EXT4-fs (loop1): unmounting filesystem. [ 48.657188][ T2102] loop7: detected capacity change from 0 to 256 [ 48.689757][ T28] audit: type=1400 audit(1773249504.985:323): avc: denied { shutdown } for pid=2103 comm="syz.1.745" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.919275][ T2118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 48.934794][ T2118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'. [ 48.952462][ T2118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'. [ 49.160669][ T2098] loop5: detected capacity change from 0 to 131072 [ 49.204680][ T2098] F2FS-fs (loop5): Found nat_bits in checkpoint [ 49.268033][ T2098] F2FS-fs (loop5): Mounted with checkpoint version = 753bd00b [ 49.292438][ T2158] loop1: detected capacity change from 0 to 512 [ 49.314292][ T28] audit: type=1400 audit(1773249505.605:324): avc: denied { write } for pid=2097 comm="syz.5.743" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 49.328375][ T2158] FAT-fs (loop1): bogus number of FAT sectors [ 49.357850][ T2158] FAT-fs (loop1): Can't find a valid FAT filesystem [ 49.365176][ T2131] syz.6.758 (2131) used greatest stack depth: 20560 bytes left [ 49.456466][ T2158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.768'. [ 49.502587][ T2168] input: syz1 as /devices/virtual/input/input5 [ 50.015292][ T2180] loop5: detected capacity change from 0 to 131072 [ 50.027587][ T2178] loop0: detected capacity change from 0 to 131072 [ 50.032508][ T2180] F2FS-fs (loop5): invalid crc value [ 50.040068][ T2178] F2FS-fs (loop0): Test dummy encryption mode enabled [ 50.048766][ T2180] F2FS-fs (loop5): Found nat_bits in checkpoint [ 50.051625][ T2178] F2FS-fs (loop0): invalid crc value [ 50.083062][ T2178] F2FS-fs (loop0): Found nat_bits in checkpoint [ 50.089879][ T2180] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 50.124573][ T2178] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 50.152578][ T2178] fscrypt: AES-256-XTS using blk-crypto-fallback [ 50.302516][ T2199] loop5: detected capacity change from 0 to 256 [ 50.328720][ T2199] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.344419][ T2199] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 50.359264][ T2199] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 50.369370][ T2203] loop0: detected capacity change from 0 to 128 [ 50.384017][ T28] audit: type=1400 audit(1773249506.685:325): avc: denied { remount } for pid=2198 comm="syz.5.781" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.391699][ T2203] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 50.414471][ T2203] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.447058][ T28] audit: type=1400 audit(1773249506.745:326): avc: denied { bind } for pid=2207 comm="syz.5.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.467502][ T28] audit: type=1400 audit(1773249506.745:327): avc: denied { setopt } for pid=2207 comm="syz.5.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.469381][ T288] EXT4-fs (loop0): unmounting filesystem. [ 50.550129][ T2216] FAT-fs (loop5): bogus number of FAT sectors [ 50.553389][ T2219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'. [ 50.565131][ T2216] FAT-fs (loop5): Can't find a valid FAT filesystem [ 50.578266][ T28] audit: type=1400 audit(1773249506.875:328): avc: denied { write } for pid=2215 comm="syz.5.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.613279][ T2224] xt_hashlimit: size too large, truncated to 1048576 [ 50.619603][ T2225] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 50.785775][ T2243] xt_hashlimit: size too large, truncated to 1048576 [ 50.844668][ T2244] xt_hashlimit: size too large, truncated to 1048576 [ 50.895075][ T2246] loop7: p2 p3 < > p4 < p5 > [ 50.902016][ T2246] loop7: partition table partially beyond EOD, truncated [ 50.917339][ T2246] loop7: p3 start 4284289 is beyond EOD, truncated [ 50.939283][ T28] audit: type=1400 audit(1773249507.235:329): avc: denied { mounton } for pid=2245 comm="syz.7.803" path="/dev/loop7p2" dev="devtmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 50.976980][ T416] udevd[416]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 50.988163][ T533] udevd[533]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 51.005078][ T336] udevd[336]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 51.564495][ T378] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 51.617106][ T2281] F2FS-fs (loop5): Found nat_bits in checkpoint [ 51.649663][ T2281] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 51.665142][ T28] audit: type=1400 audit(1773249508.965:330): avc: denied { link } for pid=2280 comm="syz.5.819" name="file2" dev="loop5" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.719298][ T2299] syz.0.825[2299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.719390][ T2299] syz.0.825[2299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.754165][ T378] usb 2-1: Using ep0 maxpacket: 16 [ 51.777632][ T378] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 149, changing to 11 [ 51.788890][ T378] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1917, setting to 1024 [ 51.801078][ T378] usb 2-1: config 0 interface 0 has no altsetting 0 [ 51.807837][ T378] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 51.817131][ T378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.837013][ T378] usb 2-1: config 0 descriptor?? [ 51.842365][ T2277] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 51.911396][ T2308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.828'. [ 51.920235][ T2308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.828'. [ 52.034372][ T2314] netlink: 4 bytes leftover after parsing attributes in process `syz.5.831'. [ 52.055291][ T2277] erofs: (device loop1): mounted with root inode @ nid 36. [ 52.067386][ T2316] syz.5.832 (2316) used greatest stack depth: 20448 bytes left [ 52.083234][ T2318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.833'. [ 52.159794][ T2324] EXT4-fs (loop6): Test dummy encryption mode enabled [ 52.167565][ T2324] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 52.176505][ T2324] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.176727][ T28] audit: type=1400 audit(1773249509.485:331): avc: denied { write } for pid=2321 comm="syz.5.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.207711][ T1439] EXT4-fs (loop6): unmounting filesystem. [ 52.382240][ T2343] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 52.391343][ T2343] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.410957][ T1439] EXT4-fs (loop6): unmounting filesystem. [ 52.455582][ T28] audit: type=1400 audit(1773249509.755:332): avc: denied { read } for pid=2351 comm="syz.6.848" name="/" dev="configfs" ino=13020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.478619][ T28] audit: type=1400 audit(1773249509.755:333): avc: denied { open } for pid=2351 comm="syz.6.848" path="/74/file0" dev="configfs" ino=13020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.486800][ T19] usb 2-1: USB disconnect, device number 5 [ 52.501797][ T28] audit: type=1400 audit(1773249509.755:334): avc: denied { setattr } for pid=2351 comm="syz.6.848" name="/" dev="configfs" ino=13020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.529689][ T28] audit: type=1400 audit(1773249509.775:335): avc: denied { unmount } for pid=1439 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 52.684409][ T2367] exfat: Deprecated parameter 'utf8' [ 52.702697][ T2367] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 52.769736][ T2369] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.787830][ T288] EXT4-fs (loop0): unmounting filesystem. [ 52.802618][ T28] audit: type=1326 audit(1773249510.095:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2374 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2759c799 code=0x7ffc0000 [ 52.830523][ T28] audit: type=1326 audit(1773249510.095:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2374 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2759c799 code=0x7ffc0000 [ 52.854443][ T28] audit: type=1326 audit(1773249510.095:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2374 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1e2759c799 code=0x7ffc0000 [ 52.865535][ T2375] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.878023][ T28] audit: type=1326 audit(1773249510.095:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2374 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1e2759c502 code=0x7ffc0000 [ 52.887588][ T2375] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.928115][ T2375] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.858: corrupted xattr block 6 [ 52.940191][ T2375] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 52.949261][ T2375] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.858: corrupted xattr block 6 [ 52.961299][ T2375] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 52.979283][ T288] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 52.991633][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.002592][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.002677][ T288] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 53.034162][ T378] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 53.043246][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.080345][ T2395] EXT4-fs: Ignoring removed bh option [ 53.090323][ T288] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 53.102808][ T2395] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.112433][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.128844][ T288] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 53.146549][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.156535][ T288] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 53.158793][ T2395] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 53.180631][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.190363][ T288] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 53.202813][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.212318][ T288] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 53.232024][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.234150][ T378] usb 7-1: Using ep0 maxpacket: 32 [ 53.241589][ T288] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 53.264434][ T378] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 53.264476][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.272962][ T378] usb 7-1: config 0 has no interface number 0 [ 53.285844][ T378] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 53.339878][ T378] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.352047][ T378] usb 7-1: Product: syz [ 53.352179][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.362507][ T969] EXT4-fs (loop5): unmounting filesystem. [ 53.371398][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.372150][ T378] usb 7-1: Manufacturer: syz [ 53.381618][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.394693][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.403978][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.417305][ T2417] IPv6: sit1: Disabled Multicast RS [ 53.426762][ T378] usb 7-1: SerialNumber: syz [ 53.441617][ T378] usb 7-1: config 0 descriptor?? [ 53.443157][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.463563][ T378] smsc95xx v2.0.0 [ 53.465896][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.494898][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.506552][ T2428] set_capacity_and_notify: 13 callbacks suppressed [ 53.506569][ T2428] loop5: detected capacity change from 0 to 256 [ 53.520952][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 53.533711][ T2428] exfat: Unknown parameter '0177777777777777777777700000000000000000000' [ 53.542903][ T288] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 53.564277][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 53.566561][ T2428] binder: 2427:2428 ioctl c018620c 200000000240 returned -22 [ 53.575879][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 53.601425][ T288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 53.612142][ T288] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 53.623208][ T288] EXT4-fs (loop0): unmounting filesystem. [ 53.661843][ T2448] binder: 2447:2448 ioctl 400c620e 200000000100 returned -22 [ 53.863858][ T378] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 53.874693][ T378] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 53.884248][ T19] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.944966][ T2455] loop5: detected capacity change from 0 to 131072 [ 53.952294][ T2455] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 53.960697][ T2455] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 53.969302][ T2455] F2FS-fs (loop5): invalid crc value [ 53.976581][ T2455] F2FS-fs (loop5): Found nat_bits in checkpoint [ 54.000685][ T2455] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 54.007844][ T2455] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 54.023872][ T2455] F2FS-fs (loop5): inaccessible inode: 1, run fsck to repair [ 54.032723][ T2455] F2FS-fs (loop5): inaccessible inode: 1, run fsck to repair [ 54.085291][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.096436][ T378] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 54.096687][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.108979][ T378] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 54.129009][ T378] usb 7-1: USB disconnect, device number 3 [ 54.134137][ T19] usb 8-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 54.144007][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.152813][ T19] usb 8-1: config 0 descriptor?? [ 54.415912][ T2472] fuse: Bad value for 'fd' [ 54.421063][ T2472] option changes via remount are deprecated (pid=2471 comm=syz.1.900) [ 54.429549][ T2472] cgroup: option or name mismatch, new: 0x0 ".", old: 0x0 "" [ 54.467249][ T2478] loop1: detected capacity change from 0 to 256 [ 54.518870][ T2484] loop1: detected capacity change from 0 to 256 [ 54.561262][ T19] logitech-djreceiver 0003:046D:C71F.0002: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.7-1/input0 [ 54.562288][ T2490] loop1: detected capacity change from 0 to 256 [ 54.666887][ T2504] loop6: detected capacity change from 0 to 256 [ 54.731047][ T2511] loop0: detected capacity change from 0 to 512 [ 54.756253][ T2511] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.918: bg 0: block 104: invalid block bitmap [ 54.776572][ T2511] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 54.783805][ T19] usb 8-1: USB disconnect, device number 2 [ 54.792329][ T2511] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.918: invalid indirect mapped block 1 (level 1) [ 54.810257][ T2511] EXT4-fs (loop0): 1 truncate cleaned up [ 54.816509][ T2511] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 54.843403][ T2511] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 54.858749][ T288] EXT4-fs (loop0): unmounting filesystem. [ 55.062578][ T2534] loop5: detected capacity change from 0 to 256 [ 55.226099][ T2551] xt_hashlimit: size too large, truncated to 1048576 [ 55.266243][ T2512] loop6: detected capacity change from 0 to 131072 [ 55.290297][ T2512] F2FS-fs (loop6): Test dummy encryption mode enabled [ 55.325207][ T2512] F2FS-fs (loop6): invalid crc value [ 55.360230][ T2512] F2FS-fs (loop6): Found nat_bits in checkpoint [ 55.424185][ T2512] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 55.636349][ T2571] overlayfs: upper fs is r/o, try multi-lower layers mount [ 55.816021][ T2584] loop5: detected capacity change from 0 to 1024 [ 55.872608][ T2584] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.314318][ T2584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.004081][ C0] sched: RT throttling activated [ 57.044836][ T2584] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.949: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 57.713919][ T2584] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.949: couldn't read orphan inode 11 (err -117) [ 57.755095][ T2584] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 57.808326][ T969] EXT4-fs (loop5): unmounting filesystem. [ 57.923322][ T2616] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 57.946899][ T2554] F2FS-fs (loop1): Test dummy encryption mode enabled [ 57.963317][ T2554] F2FS-fs (loop1): invalid crc value [ 58.001211][ T2554] F2FS-fs (loop1): Found nat_bits in checkpoint [ 58.050941][ T2633] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.065860][ T2631] exfat: Deprecated parameter 'utf8' [ 58.074221][ T2631] exfat: Deprecated parameter 'utf8' [ 58.090789][ T2631] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 58.103211][ T2633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.115168][ T2554] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 58.170362][ T2633] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #11: comm syz.7.969: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 58.211976][ T2633] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.969: couldn't read orphan inode 11 (err -117) [ 58.244285][ T2633] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 60.055274][ T1816] EXT4-fs (loop7): unmounting filesystem. [ 60.131797][ T2657] set_capacity_and_notify: 3 callbacks suppressed [ 60.131824][ T2657] loop1: detected capacity change from 0 to 256 [ 60.158057][ T2657] FAT-fs (loop1): Directory bread(block 64) failed [ 60.201998][ T2657] FAT-fs (loop1): Directory bread(block 65) failed [ 60.210395][ T2657] FAT-fs (loop1): Directory bread(block 66) failed [ 60.217719][ T2657] FAT-fs (loop1): Directory bread(block 67) failed [ 60.224559][ T2657] FAT-fs (loop1): Directory bread(block 68) failed [ 60.231086][ T2657] FAT-fs (loop1): Directory bread(block 69) failed [ 60.238818][ T2657] FAT-fs (loop1): Directory bread(block 70) failed [ 60.245549][ T2657] FAT-fs (loop1): Directory bread(block 71) failed [ 60.252370][ T2657] FAT-fs (loop1): Directory bread(block 72) failed [ 60.265793][ T2657] FAT-fs (loop1): Directory bread(block 73) failed [ 60.415134][ T2681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.989'. [ 60.669619][ T2683] loop5: detected capacity change from 0 to 40427 [ 60.697401][ T2683] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 60.717201][ T2683] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 60.736245][ T2683] F2FS-fs (loop5): invalid crc value [ 60.756616][ T2683] F2FS-fs (loop5): Found nat_bits in checkpoint [ 60.785684][ T2653] loop0: detected capacity change from 0 to 131072 [ 60.804299][ T2653] F2FS-fs (loop0): invalid crc value [ 60.827362][ T2653] F2FS-fs (loop0): Found nat_bits in checkpoint [ 60.835405][ T2683] F2FS-fs (loop5): Start checkpoint disabled! [ 60.852107][ T2683] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 60.873265][ T2683] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 60.882968][ T2683] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 60.892290][ T2653] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 61.342491][ T2687] loop1: detected capacity change from 0 to 131072 [ 61.378369][ T2715] loop0: detected capacity change from 0 to 256 [ 61.393700][ T2687] F2FS-fs (loop1): Found nat_bits in checkpoint [ 61.519024][ T2687] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 61.737055][ T2726] loop0: detected capacity change from 0 to 40427 [ 61.754155][ T378] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 61.762400][ T2726] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 61.771323][ T2726] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 61.794889][ T2726] F2FS-fs (loop0): invalid crc value [ 61.811228][ T2726] F2FS-fs (loop0): Found nat_bits in checkpoint [ 61.857191][ T2751] loop7: detected capacity change from 0 to 512 [ 61.870008][ T2726] F2FS-fs (loop0): Start checkpoint disabled! [ 61.877121][ T2751] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 61.884976][ T2726] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 61.886288][ T2751] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.893984][ T2726] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 61.920701][ T2726] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 61.929561][ T1816] EXT4-fs (loop7): unmounting filesystem. [ 61.954202][ T378] usb 7-1: Using ep0 maxpacket: 16 [ 61.966253][ T2756] loop1: detected capacity change from 0 to 512 [ 61.971847][ T378] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 149, changing to 11 [ 61.989310][ T378] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1917, setting to 1024 [ 62.001804][ T378] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.009333][ T378] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 62.019278][ T378] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.059102][ T378] usb 7-1: config 0 descriptor?? [ 62.079595][ T2723] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 62.238799][ T2780] loop1: detected capacity change from 0 to 256 [ 62.265621][ T2780] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.290361][ T2723] loop6: detected capacity change from 0 to 16 [ 62.291539][ T2780] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 62.310373][ T2723] erofs: (device loop6): mounted with root inode @ nid 36. [ 62.333724][ T2780] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 62.484995][ T2786] EXT4-fs (loop1): Test dummy encryption mode enabled [ 62.515637][ T2786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 62.537876][ T2786] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.597082][ T413] EXT4-fs (loop1): unmounting filesystem. [ 62.695240][ T2789] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 62.703861][ T2789] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 62.713062][ T2789] F2FS-fs (loop7): invalid crc value [ 62.719728][ T2789] F2FS-fs (loop7): Found nat_bits in checkpoint [ 62.738490][ T378] usb 7-1: USB disconnect, device number 4 [ 62.752248][ T2789] F2FS-fs (loop7): Start checkpoint disabled! [ 62.758830][ T2789] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 62.766439][ T2789] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 62.773563][ T2789] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 62.855747][ T2809] EXT4-fs: Ignoring removed orlov option [ 62.861784][ T2809] EXT4-fs (loop7): Test dummy encryption mode enabled [ 62.868886][ T2809] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 62.893396][ T2809] EXT4-fs (loop7): 1 truncate cleaned up [ 62.899247][ T2809] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 62.922477][ T1816] EXT4-fs (loop7): unmounting filesystem. [ 62.974272][ T2814] EXT4-fs (loop7): Test dummy encryption mode enabled [ 62.994324][ T2814] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 63.003394][ T2814] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.070684][ T1816] EXT4-fs (loop7): unmounting filesystem. [ 63.261550][ T2839] fuse: Bad value for 'fd' [ 63.275438][ T2839] option changes via remount are deprecated (pid=2838 comm=syz.0.1062) [ 63.284766][ T2839] cgroup: option or name mismatch, new: 0x0 ".", old: 0x0 "" [ 63.357739][ T359] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.410532][ T2857] EXT4-fs (loop5): Test dummy encryption mode enabled [ 63.419500][ T2857] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 63.428701][ T2857] ext4 filesystem being mounted at /175/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.464386][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 63.464398][ T28] audit: type=1326 audit(1773249521.764:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01979c799 code=0x7fc00000 [ 63.496265][ T28] audit: type=1326 audit(1773249521.764:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb01979c799 code=0x7fc00000 [ 63.509191][ T969] EXT4-fs (loop5): unmounting filesystem. [ 63.530183][ T28] audit: type=1326 audit(1773249521.764:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01979c799 code=0x7fc00000 [ 63.555066][ T28] audit: type=1326 audit(1773249521.764:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01979c799 code=0x7fc00000 [ 63.583730][ T28] audit: type=1326 audit(1773249521.764:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01979c799 code=0x7fc00000 [ 63.659607][ T28] audit: type=1326 audit(1773249521.764:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01979c799 code=0x7fc00000 [ 63.706127][ T2880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1069'. [ 63.714496][ T28] audit: type=1326 audit(1773249521.764:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01979c799 code=0x7fc00000 [ 63.750001][ T28] audit: type=1326 audit(1773249521.764:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01979c799 code=0x7fc00000 [ 63.797281][ T28] audit: type=1326 audit(1773249521.764:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01979c799 code=0x7fc00000 [ 63.826466][ T28] audit: type=1326 audit(1773249521.764:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2792 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01979c799 code=0x7fc00000 [ 63.960289][ T2901] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.987910][ T2901] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 64.015577][ T2908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1082'. [ 64.044132][ T334] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 64.097199][ T2923] exfat: Unknown parameter '0177777777777777777777700000000000000000000' [ 64.098213][ T19] kernel write not supported for file /405/attr/exec (pid: 19 comm: kworker/0:1) [ 64.111060][ T2923] binder: 2922:2923 ioctl c018620c 200000000240 returned -22 [ 64.192681][ T2935] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 64.235507][ T334] usb 8-1: unable to get BOS descriptor or descriptor too short [ 64.243637][ T334] usb 8-1: not running at top speed; connect to a high speed hub [ 64.253376][ T334] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.265719][ T334] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.276877][ T334] usb 8-1: string descriptor 0 read error: -22 [ 64.283104][ T334] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.292173][ T334] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.305361][ T334] usb 8-1: 0:2 : does not exist [ 64.787504][ T2962] erofs: (device loop1): mounted with root inode @ nid 36. [ 64.803205][ T2960] exfat: Unknown parameter '0177777777777777777777700000000000000000000' [ 64.821600][ T2960] binder: 2959:2960 ioctl c018620c 200000000240 returned -22 [ 64.894310][ T2956] F2FS-fs (loop5): fault_injection options not supported [ 64.905947][ T2971] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1110: inode has both inline data and extents flags [ 64.924208][ T2956] F2FS-fs (loop5): fault_type options not supported [ 64.931329][ T2971] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1110: couldn't read orphan inode 15 (err -117) [ 64.945868][ T2971] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 64.945883][ T2956] F2FS-fs (loop5): invalid crc value [ 64.970514][ T2956] F2FS-fs (loop5): Found nat_bits in checkpoint [ 64.996896][ T413] EXT4-fs (loop1): unmounting filesystem. [ 65.049853][ T2956] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 65.079999][ T969] syz-executor: attempt to access beyond end of device [ 65.079999][ T969] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 65.128589][ T334] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 65.148036][ T334] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 65.166130][ T334] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 65.187044][ T334] usb 8-1: USB disconnect, device number 3 [ 65.198812][ T336] udevd[336]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: No such file or directory [ 65.222270][ T2995] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 65.332324][ T2994] set_capacity_and_notify: 13 callbacks suppressed [ 65.332340][ T2994] loop5: detected capacity change from 0 to 40427 [ 65.346206][ T2994] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 65.352731][ T2994] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 65.362192][ T2994] F2FS-fs (loop5): invalid crc value [ 65.368992][ T2994] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 65.384126][ T2257] Bluetooth: hci0: command 0x1003 tx timeout [ 65.390186][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.396679][ T2994] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 65.396702][ T2994] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 65.438249][ T969] syz-executor: attempt to access beyond end of device [ 65.438249][ T969] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 65.589357][ T3017] loop0: detected capacity change from 0 to 256 [ 66.208536][ T3059] loop0: detected capacity change from 0 to 512 [ 66.224428][ T3059] EXT4-fs: Ignoring removed nobh option [ 66.242064][ T3059] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.243093][ T3063] loop7: detected capacity change from 0 to 256 [ 66.258250][ T3063] exfat: Deprecated parameter 'utf8' [ 66.270293][ T3063] exfat: Deprecated parameter 'utf8' [ 66.284877][ T3059] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1145: iget: bad i_size value: 38620345925642 [ 66.286290][ T3063] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 66.310580][ T3059] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1145: couldn't read orphan inode 15 (err -117) [ 66.334148][ T2026] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 66.342114][ T3059] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 66.371741][ T3067] loop7: detected capacity change from 0 to 512 [ 66.373300][ T3059] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1145: invalid indirect mapped block 3973251072 (level 0) [ 66.411768][ T288] EXT4-fs (loop0): unmounting filesystem. [ 66.426221][ T3067] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.1148: bg 0: block 104: invalid block bitmap [ 66.440122][ T3067] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 66.465995][ T3067] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1148: invalid indirect mapped block 1 (level 1) [ 66.479999][ T3067] EXT4-fs (loop7): 1 truncate cleaned up [ 66.487153][ T3067] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 66.504425][ T3067] EXT4-fs (loop7): re-mounted. Quota mode: none. [ 66.536992][ T2026] usb 7-1: unable to get BOS descriptor or descriptor too short [ 66.549720][ T2026] usb 7-1: not running at top speed; connect to a high speed hub [ 66.570390][ T1816] EXT4-fs (loop7): unmounting filesystem. [ 66.579616][ T2026] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.614592][ T2026] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.635096][ T2026] usb 7-1: string descriptor 0 read error: -22 [ 66.641320][ T2026] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.651450][ T2026] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.665561][ T2026] usb 7-1: 0:2 : does not exist [ 66.831006][ T3035] loop5: detected capacity change from 0 to 262144 [ 66.851064][ T3035] F2FS-fs (loop5): Unrecognized mount option "chec" or missing value [ 67.161617][ T3111] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1167'. [ 67.307437][ T3129] fuse: Bad value for 'group_id' [ 67.336533][ T3131] loop1: detected capacity change from 0 to 512 [ 67.365999][ T3133] loop5: detected capacity change from 0 to 2048 [ 67.382800][ T3133] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.431283][ T3133] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 67.459998][ T3087] loop0: detected capacity change from 0 to 131072 [ 67.472544][ T3087] F2FS-fs (loop0): Test dummy encryption mode enabled [ 67.475747][ T969] EXT4-fs (loop5): unmounting filesystem. [ 67.486547][ T2026] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 67.495976][ T3087] F2FS-fs (loop0): invalid crc value [ 67.506955][ T2026] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 67.525155][ T3087] F2FS-fs (loop0): Found nat_bits in checkpoint [ 67.534524][ T2026] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 67.584183][ T2026] usb 7-1: USB disconnect, device number 5 [ 67.637065][ T3154] loop7: detected capacity change from 0 to 512 [ 67.645393][ T3087] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 67.649800][ T3154] EXT4-fs: Ignoring removed nobh option [ 67.685584][ T3154] ------------[ cut here ]------------ [ 67.691098][ T3154] EA inode 11 i_nlink=1026 [ 67.702698][ T3154] WARNING: CPU: 0 PID: 3154 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4e2/0x540 [ 67.715293][ T3087] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 67.717346][ T3154] Modules linked in: [ 67.729277][ T3154] CPU: 0 PID: 3154 Comm: syz.7.1183 Not tainted syzkaller #0 [ 67.736691][ T3154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 67.746884][ T3154] RIP: 0010:ext4_xattr_inode_update_ref+0x4e2/0x540 [ 67.753502][ T3154] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 7f 2f ba ff 49 8b 37 48 c7 c7 40 41 b5 85 89 da e8 3e 93 45 ff <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 18 7d fd 02 [ 67.773351][ T3154] RSP: 0018:ffffc90000967000 EFLAGS: 00010246 [ 67.779466][ T3154] RAX: 93d727f1f0e83c00 RBX: 0000000000000402 RCX: 0000000000080000 [ 67.787498][ T3154] RDX: ffffc90001a7b000 RSI: 0000000000021f35 RDI: 0000000000021f36 [ 67.795498][ T3154] RBP: ffffc900009670f0 R08: ffff8881f6f2759b R09: 1ffff1103ede4eb3 [ 67.803490][ T3154] R10: dffffc0000000000 R11: ffffed103ede4eb4 R12: ffff88813339d178 [ 67.811521][ T3154] R13: 1ffff11026673a5b R14: dffffc0000000000 R15: ffff88813339d1b8 [ 67.819541][ T3154] FS: 00007fbc8ecf46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 67.828709][ T3154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.835433][ T3154] CR2: 00007fff750baff8 CR3: 0000000124b12000 CR4: 00000000003506b0 [ 67.843431][ T3154] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.851485][ T3154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.859579][ T3154] Call Trace: [ 67.862865][ T3154] [ 67.866085][ T3154] ? ext4_xattr_block_csum+0x560/0x560 [ 67.871584][ T3154] ? __kasan_check_write+0x14/0x20 [ 67.876767][ T3154] ? ext4_xattr_inode_iget+0x266/0x350 [ 67.882328][ T3154] ext4_xattr_set_entry+0xc6d/0x21d0 [ 67.887681][ T3154] ext4_xattr_ibody_set+0x24e/0x6c0 [ 67.892894][ T3154] ext4_expand_extra_isize_ea+0x131d/0x1ea0 [ 67.898870][ T3154] __ext4_expand_extra_isize+0x2fe/0x3e0 [ 67.904634][ T3154] __ext4_mark_inode_dirty+0x3cf/0x600 [ 67.910126][ T3154] ext4_evict_inode+0xc17/0x1470 [ 67.915208][ T3154] ? _raw_spin_unlock+0x4c/0x70 [ 67.920065][ T3154] ? __cfi_ext4_evict_inode+0x10/0x10 [ 67.925748][ T3154] ? unlock_new_inode+0x97/0xc0 [ 67.930615][ T3154] ? __cfi_ext4_evict_inode+0x10/0x10 [ 67.936142][ T3154] evict+0x4d7/0x8f0 [ 67.940058][ T3154] ? proc_nr_inodes+0x2f0/0x2f0 [ 67.944997][ T3154] ? __kasan_check_write+0x14/0x20 [ 67.950116][ T3154] iput+0x620/0x670 [ 67.953964][ T3154] ext4_process_orphan+0x2b1/0x320 [ 67.959225][ T3154] ext4_orphan_cleanup+0xb1a/0x1220 [ 67.964557][ T3154] ? proc_register+0x546/0x720 [ 67.969342][ T3154] ? __cfi_ext4_orphan_cleanup+0x10/0x10 [ 67.975040][ T3154] ? ext4_register_sysfs+0x285/0x2c0 [ 67.980330][ T3154] ? errseq_check_and_advance+0x66/0x130 [ 67.986105][ T3154] ext4_fill_super+0x7050/0x7590 [ 67.991189][ T3154] ? __cfi_ext4_fill_super+0x10/0x10 [ 67.996520][ T3154] ? set_blocksize+0x1d0/0x470 [ 68.001288][ T3154] ? sb_set_blocksize+0xaa/0xf0 [ 68.006277][ T3154] get_tree_bdev+0x447/0x690 [ 68.010967][ T3154] ? __cfi_ext4_fill_super+0x10/0x10 [ 68.016398][ T3154] ext4_get_tree+0x1c/0x20 [ 68.020995][ T3154] vfs_get_tree+0x9a/0x270 [ 68.025626][ T3154] do_new_mount+0x251/0xb30 [ 68.030153][ T3154] path_mount+0x659/0xfc0 [ 68.034531][ T3154] ? user_path_at_empty+0x161/0x1c0 [ 68.040022][ T3154] __se_sys_mount+0x320/0x390 [ 68.044741][ T3154] ? __x64_sys_mount+0xd0/0xd0 [ 68.049529][ T3154] ? do_user_addr_fault+0x9ac/0x1050 [ 68.054955][ T3154] __x64_sys_mount+0xbf/0xd0 [ 68.059560][ T3154] x64_sys_call+0x65d/0x9a0 [ 68.064116][ T3154] do_syscall_64+0x4c/0xa0 [ 68.068544][ T3154] ? clear_bhb_loop+0x30/0x80 [ 68.073342][ T3154] ? clear_bhb_loop+0x30/0x80 [ 68.078095][ T3154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.084198][ T3154] RIP: 0033:0x7fbc8dd9da0a [ 68.088630][ T3154] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.108394][ T3154] RSP: 002b:00007fbc8ecf3e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.116849][ T3154] RAX: ffffffffffffffda RBX: 00007fbc8ecf3ee0 RCX: 00007fbc8dd9da0a [ 68.124875][ T3154] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fbc8ecf3ea0 [ 68.132951][ T3154] RBP: 0000200000000180 R08: 00007fbc8ecf3ee0 R09: 0000000000800718 [ 68.141020][ T3154] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 68.149117][ T3154] R13: 00007fbc8ecf3ea0 R14: 00000000000004a3 R15: 0000200000000ac0 [ 68.157330][ T3154] [ 68.160439][ T3154] ---[ end trace 0000000000000000 ]--- [ 68.216755][ T3154] EXT4-fs (loop7): 1 orphan inode deleted [ 68.235998][ T3154] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 68.279360][ T1816] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 68.315465][ T1816] ------------[ cut here ]------------ [ 68.320979][ T1816] kernel BUG at fs/namei.c:2962! [ 68.336748][ T1816] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 68.342847][ T1816] CPU: 0 PID: 1816 Comm: syz-executor Tainted: G W syzkaller #0 [ 68.351873][ T1816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.361935][ T1816] RIP: 0010:may_delete+0x701/0x710 [ 68.367067][ T1816] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 00 e7 f3 ff e9 77 fe ff ff e8 76 b1 ae ff 0f 0b e8 6f b1 ae ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 68.387670][ T1816] RSP: 0018:ffffc90001277c20 EFLAGS: 00010293 [ 68.394025][ T1816] RAX: ffffffff81c2ba71 RBX: ffff888133322220 RCX: ffff888121841440 [ 68.402202][ T1816] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 68.410274][ T1816] RBP: ffffc90001277c88 R08: 0000000000000003 R09: 0000000000000004 [ 68.418604][ T1816] R10: dffffc0000000000 R11: fffff5200024ef64 R12: dffffc0000000000 [ 68.426676][ T1816] R13: 0000000000000001 R14: ffff888117cdb250 R15: 1ffff11026664444 [ 68.434747][ T1816] FS: 000055558ae08500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 68.443779][ T1816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.450469][ T1816] CR2: 000055558ae33988 CR3: 00000001299ed000 CR4: 00000000003506b0 [ 68.458536][ T1816] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.466514][ T1816] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.474664][ T1816] Call Trace: [ 68.477948][ T1816] [ 68.480888][ T1816] vfs_rmdir+0x32/0x500 [ 68.485051][ T1816] incfs_kill_sb+0x105/0x220 [ 68.489649][ T1816] deactivate_locked_super+0xb5/0x120 [ 68.495112][ T1816] deactivate_super+0xaf/0xe0 [ 68.499796][ T1816] cleanup_mnt+0x474/0x500 [ 68.504224][ T1816] __cleanup_mnt+0x19/0x20 [ 68.508654][ T1816] task_work_run+0x1e1/0x250 [ 68.513259][ T1816] ? __cfi_task_work_run+0x10/0x10 [ 68.518471][ T1816] ? __x64_sys_umount+0x12d/0x170 [ 68.523514][ T1816] ? __cfi___x64_sys_umount+0x10/0x10 [ 68.528902][ T1816] exit_to_user_mode_loop+0x9b/0xb0 [ 68.534116][ T1816] exit_to_user_mode_prepare+0x87/0xd0 [ 68.539582][ T1816] syscall_exit_to_user_mode+0x1a/0x30 [ 68.545321][ T1816] do_syscall_64+0x58/0xa0 [ 68.549774][ T1816] ? clear_bhb_loop+0x30/0x80 [ 68.554471][ T1816] ? clear_bhb_loop+0x30/0x80 [ 68.559165][ T1816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.565074][ T1816] RIP: 0033:0x7fbc8dd9d9d7 [ 68.569495][ T1816] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 68.589111][ T1816] RSP: 002b:00007ffe7ed93818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 68.597545][ T1816] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fbc8dd9d9d7 [ 68.605535][ T1816] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7ed938d0 [ 68.613525][ T1816] RBP: 00007ffe7ed938d0 R08: 00007ffe7ed948d0 R09: 00000000ffffffff [ 68.621514][ T1816] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7ed949c0 [ 68.629937][ T1816] R13: 00007fbc8de32050 R14: 000000000001084b R15: 00007ffe7ed95a90 [ 68.638239][ T1816] [ 68.641264][ T1816] Modules linked in: [ 68.646160][ T1816] ---[ end trace 0000000000000000 ]--- [ 68.651717][ T1816] RIP: 0010:may_delete+0x701/0x710 [ 68.661575][ T1816] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 00 e7 f3 ff e9 77 fe ff ff e8 76 b1 ae ff 0f 0b e8 6f b1 ae ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 68.681543][ T1816] RSP: 0018:ffffc90001277c20 EFLAGS: 00010293 [ 68.687958][ T1816] RAX: ffffffff81c2ba71 RBX: ffff888133322220 RCX: ffff888121841440 [ 68.696279][ T1816] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 68.704474][ T1816] RBP: ffffc90001277c88 R08: 0000000000000003 R09: 0000000000000004 [ 68.712625][ T1816] R10: dffffc0000000000 R11: fffff5200024ef64 R12: dffffc0000000000 [ 68.720856][ T1816] R13: 0000000000000001 R14: ffff888117cdb250 R15: 1ffff11026664444 [ 68.729135][ T1816] FS: 000055558ae08500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 68.738239][ T1816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.745005][ T1816] CR2: 0000001b2e821ff8 CR3: 00000001299ed000 CR4: 00000000003506b0 [ 68.752993][ T1816] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.761209][ T1816] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.769432][ T1816] Kernel panic - not syncing: Fatal exception [ 68.775896][ T1816] Kernel Offset: disabled [ 68.780236][ T1816] Rebooting in 86400 seconds..