last executing test programs: 1m22.860517363s ago: executing program 32 (id=137): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 1m20.050170111s ago: executing program 33 (id=198): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$getregset(0x4205, r0, 0x201, &(0x7f00000009c0)={&(0x7f0000000000)=""/120, 0x78}) 1m19.609706602s ago: executing program 2 (id=205): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0xfffffffc, @local, 0x1}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m19.588512044s ago: executing program 2 (id=206): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmmsg$unix(r0, &(0x7f0000008400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x1, 0x4000) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001280)='\\', 0xffffffe3}], 0x1}, 0x24004044) 1m19.575652135s ago: executing program 2 (id=207): bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0x8, @private1, 0x3dd}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m19.562545945s ago: executing program 2 (id=208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x2581eb1cfaf2d8bb, 0xc0, 0x340, 0x0}) 1m19.45790783s ago: executing program 2 (id=209): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m19.418518632s ago: executing program 2 (id=210): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x6480a9b56fc96144, '\x00', @a}) 1m14.384793189s ago: executing program 5 (id=323): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 1m14.185517069s ago: executing program 5 (id=326): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000440)={[{@nouid32}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x441, 0x124) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x5, 0x8, 0x80000007, 0x8, 0x3, 0x8}) 1m13.976789709s ago: executing program 5 (id=327): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x2004ce, &(0x7f00000001c0), 0x3, 0x45d, &(0x7f0000001400)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 1m13.812019297s ago: executing program 5 (id=328): socket$xdp(0x2c, 0x3, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m13.720750581s ago: executing program 5 (id=329): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f0000000280)=ANY=[@ANYBLOB='utf8=0,uni_xlate=0,shortname=winnt,rodir,codepage=862,shortname=lower,quiet,shortname=winnt,shortname=win95,iocharset=cp932,rodir,\x00ni_xlate=1,nonumtail=0,shortname=winnt,nonumtail=0,\x00'], 0x25, 0x365, &(0x7f0000000a00)="$eJzs3U9oHNUfAPDvdpJsGtpfcvhB0dPqTRBpKoJ6SigVijloZfHfxcWmWrNrIYsL6SGbvSjFk+JF0JO3HvTYs3gQ8ebBqxakKl7sRQoNjuzu7OxsdqPJYWOLn88hfPN97zvvzcwjMwnJy2vt2Lg4G5du374V8/OlmFk5uxJ3SrEUxyKJvp2Y6P25yXkA4B53J03j97Tvn3t/uDCIPPsB4P7Ve/6/cXKYKB+i+NqJaUwJAJiyA37//9zE7JWpTQsAmKKx5//DI817fsw/k/9OAABw/3rh5VeeXV2LuFCpzEc03mtVW9V4eti+eikuRz3W43Qsxm5E/0Wh/7bQ/fjM+bVzpytdPy9FtVvRqkY02q1q/01hNYnLaT3KsRyLsZTVp3l90q1f7tVXImKn3Rs/GqVWdTYWsvF/WIj1OBOL8f+x+ojza+fOVLIDVBuD+nZEJ+YHJ9GdfxKL8d3rcSXqcTG6tcP5by9XKmfTtZH61vVyrx8AAAAAAAAAAAAAAAAAAAAAAEzDY5XcUr7/Tdpot969MNLhZtY/3x+n2v882x+o098fKC0Pdue5luzdH2h0f55WdSaO/WtnDQAAAAAAAAAAAAAAAAAAAPeW5tZc1Or19c3m1tWNYtAuZN7+5vOvjsegaSYrfSsZVkWWXN9szuZHHnQsHDmJfIg0L0+TkT5ZkEQMOu/Urt/IZ1zsU87HGivvBuWxplI2p1q9fvKhnz6ZVPVnN9jpZZIYuyyjQSkbv9DU+F83MR8Ru/tV7R+UJ9+LPPgjTdP9yrc/Hq+KUsRMHHoaBwi+vvXmA483Tz3Ry3yZbfrwyKOLL/740We/btTq0elfmXp9brO5m04+zoni3enOdbxPUlg/pew6lyashMlBZ5jpbDa3asn3v7304Aff7umcTF4/aTHzzv5jfbE3M9cPShFLg4vwd1OdnbD4u8GTo7fy6kbt1bv56j38jTv16UrtxvbNXw5aVfgiYaMOAAAAAAAAAAAAAAAAAAA4EoU/MD6Ep56f3owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OgN//9/IeiMZQ4S3G3HeFN5fbO57+DHj/RUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4D/srAAD//xu8baw=") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='s'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x107}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) 1m13.665867424s ago: executing program 34 (id=329): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f0000000280)=ANY=[@ANYBLOB='utf8=0,uni_xlate=0,shortname=winnt,rodir,codepage=862,shortname=lower,quiet,shortname=winnt,shortname=win95,iocharset=cp932,rodir,\x00ni_xlate=1,nonumtail=0,shortname=winnt,nonumtail=0,\x00'], 0x25, 0x365, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='s'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x107}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) 1m4.349023222s ago: executing program 35 (id=210): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x6480a9b56fc96144, '\x00', @a}) 1m2.044835994s ago: executing program 7 (id=521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 1m1.994824607s ago: executing program 7 (id=522): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m1.93636063s ago: executing program 7 (id=525): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000100)={0x20}, 0xfdef) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000080)='trans=tcp,') 1m1.864811914s ago: executing program 7 (id=528): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x2000c16, &(0x7f0000000300), 0xff, 0x25e, &(0x7f0000000e80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x8402a, &(0x7f0000000140)={[{@nr_inodes}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) 1m1.758460739s ago: executing program 7 (id=533): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0xc854) 1m1.116288491s ago: executing program 7 (id=543): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000240)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@oldalloc}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4f6, &(0x7f0000001000)="$eJzs3M9vVNUeAPDvnXZogcejj8cjoQ+1gMbGxBYKCgs3mJi40MSIC1k2bSGVAQztQkgjQ2JwTeLeuDTuNHGrS+PKPwAXLkwMCVE2gKsxd+bedjpzpzMttbXt55MMnHN/nB/3njNz7j29N4AdayT9J4n4V0Tci4j9jejyDUYa/z1+uDD15OHCVFRrtfO/J/XtHqXxTL7f3iwyWooofZK0JNgwd+Pm5clKZeZ6VOvx8fkrH47P3bj58uyVyUszl2auTpw9e/rUyTOvTryyLO2IGOxaqYL80no9Gv742pHDb164+/ZUf2tizfXoKN/rj2rXTSM/th280JzeNrCvKZy01+vWhhaGng1mzbCc9v+FyrELm10gYMPUarXaQOfV1Vqr221LgC0ric0uAbA58h/69Po3/zSWlDdi+LHpHpxrXAA9erhQuxUx9Xix/v1RyrYpt1zfplYYM63KSES8X/3z8/QTK92H+GWdMgQAdrzvz2XDwCRaxn+lONS03b+zOZShiPhPRByIiP9GxMGI+F/Esm2XSSJqK+R/sHXBYv7fZLMIpftrrVsv0vHfa9ncVv7J8s03GerLYvsi8gHzzInsmIxGeeDibGXmZIf0d3XJv3n8l37S/POxYFaO+/0tg83pyfnJtdW23YPbEcP9rfVP+tMTl0/jJBFxOCKGV5HuUFN49qUvjyxGWi4rute/rlYwpbcu82e1LyJebJz/aiw7/0s5Js3zk6W2+cnxwajMnBhPW8GJwkL++NOddzrl37X+3/7aussbZ747//QVz6Tnf09T+498/nap/kNJRLI4XzsXUetbXR53fv60nu7I8fZ1a23/u5L36uG8f300OT9//WTEruSt9uUTS/vm8Xz7tP6jx4v7/4Fsn/RI/D8i0kb8TEQ8G9GXl/1oRByLiIKqLfrh9ec/6LSux/b/t0nrP134/Zdk7aB+/pfm63sM5OmnS/ouH733ZLh44j6r//6Vz//pemg0W1L8/Zcs+4rotaTrcAgBAADgH68U9b/9L40thkulsbHGPaCDsadUuTY3/1xEXJ1uPCMwFOXSxdnKTH5DbijKSX7/c6gpPtESP5XdN/6sb3c9PjZ1rTK92ZWHHW5vvc8nbf0/9dsq7/MCW9A2eg4NWKVu/f/Q3Q0qCLDh/P7DztXU/zu92aLqL2Vge/L7DztXUf+/FV+t+OyC7wzY+mr6MuxoK/f/7u/bBLau/nh3MVx/7LnwaVtgOzL+hx2p+0PyA6t+9n8pUBsoXjUYBW8MGFxTFl0Duwvy2pRAOrJaxwTLEdHbxrvXkkU+BOz8hofS6hIciPZVfbHSXknxexwiotpxr/SodC3PpUO9Nv6eA/k7Uda72Xy91E/LPZ7upw243gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALaVvwIAAP//CB3NTQ==") r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x2000000000006) 1m1.057547493s ago: executing program 36 (id=543): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000240)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@oldalloc}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4f6, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x2000000000006) 48.848437542s ago: executing program 8 (id=846): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$poke(0x420e, r0, 0x0, 0x80) 48.814120204s ago: executing program 8 (id=848): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') exit(0xfffffffffffffffb) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 47.970275525s ago: executing program 8 (id=873): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@minixdf}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x563, &(0x7f0000000a00)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunIyla+uPCV5sl6LDgd7P0J6V0XQZTTrWOnC7cDfeyBBEHIj3eu+VDP8B/4qBDoaMohfeVE560nZL02Rd1nTm84GzvW/OSd7z5Jzn7fvmnJAABtZo9k8h4uWI+CqJOBwRSb5uOPKVo6vbLT+6MZUtSaysfPxn0tguqzdfq/m8g3nlpYj49YuIk4XWdmuLS7PlSiWdz+tj9bmrY7XFpVOX58oz6Ux6ZWJy8sxbkxPvvvN2z2J948Lf33507/0zXx5f/uanB0fuJHE2DuXrNsbxDG5urIzGaP6eFOPsExuOr/7XizZ3haTfO8C2DOV5XoysDzgcQ3nWA/99n0fECjCgkg75vyfvKXZqf4Cd0hwHNOf2PZoHvzAenludALXGP7z62Ujsa8yNDiwnj82MsvnuSA/az9r4+Y+7d7Ilevc5BEBHN29FxOnh4db+L8n7v+073cU2T7ah/4Odc+/c6qimNf8La+Of2GT8c3CT3N2OzvlfeNCDZtrKxn/vtYk/NzKU1/7XGPMVk0uXK2nWt/0/Ik5EcW9WH9+ijTPL91fards4/suWrP3mWDDfjwfDex9/znS5Xn6WmDd6eCvilU3Hv8na8U82Of7Z+3GhyzaOpXdfa7euc/zP18oPEa9vevzXr2glW1+fHGucD2PNs6LVX7eP/dau/X7Hnx3/A1vHP5JsvF5be/o2vt/3T9pu3WPxR/fn/57kk0a5+enU9XK9Pj8esSf5sPXxifXnNuvN7bP4Txzfuv9bP/9/WXud/RHxaZfx3z7646v7uom/T8d/+qmO/9MX7n/w2Xft2u+u/3uzUTqRP9JN/9dhv4qx7bMZAAAAAAAAdq9CRByKpFBaKxcKpdLq/R1H40ChUq3VT16qLlyZjsZ3ZUeiWGhe6T684X6I8fx+2GZ94on6ZEQciYivh/Y36qWpamW638EDAAAAAAAAAAAAAAAAAADALnGwzff/M78P9XvvgOfOT37D4OqY/734pSdgV/L3HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcMl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KkL589ny8ryoxtTWX362uLCbPXaqem0NluaW5gqTVXnr5ZmqtWZSlqaqs51er1KtXp1fCIWro/V01p9rLa4dHGuunClfvHyXHkmvZgWdyQqAAAAAAAAAAAAAAAAAAAAeLHUFpdmy5VKOq+gsK3C8O7YDYUeF/rdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAun8DAAD//0DeL9I=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740), 0x1000) 47.828486493s ago: executing program 8 (id=875): ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = io_uring_setup(0x787b, &(0x7f00000000c0)={0x0, 0x8c43b, 0x1, 0x3, 0xb6}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x32, 0x0, 0xffffd000) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 47.784334825s ago: executing program 8 (id=876): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 47.756784376s ago: executing program 8 (id=877): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 32.734308124s ago: executing program 37 (id=877): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 17.31716123s ago: executing program 6 (id=1651): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[], 0x1, 0x5516, &(0x7f0000000540)="$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") sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x4000016) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x533201, 0x80) 16.961472998s ago: executing program 6 (id=1659): io_uring_setup(0x7883, &(0x7f0000000000)={0x0, 0x9d81, 0x0, 0xffffffbe, 0x3bd}) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x0, 0x7, 0x3fffff}, 0x0, 0x0, 0x0) 16.961100138s ago: executing program 6 (id=1660): r0 = fsopen(&(0x7f0000000000)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fspick(r1, &(0x7f00000002c0)='.\x00', 0x0) 16.90881812s ago: executing program 6 (id=1661): unshare(0x64000600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x4000, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xffff}) 16.903519241s ago: executing program 6 (id=1663): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) rename(&(0x7f0000000040)='./file2\x00', &(0x7f0000000100)='./file0\x00') 16.877161672s ago: executing program 6 (id=1667): capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.596269349s ago: executing program 1 (id=1820): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000cd0a0100000000002500000001000480180000000900000000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41100, 0xe}, 0x94) 8.576214589s ago: executing program 1 (id=1821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 8.532188862s ago: executing program 1 (id=1822): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e0000000000000000001c00038004000100140003800c000180050002"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8.514021643s ago: executing program 1 (id=1823): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) 8.272883165s ago: executing program 1 (id=1826): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x12) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101a43, 0x15) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfc6, 0xfffffffffffffff7, 0x6976}) 7.605944077s ago: executing program 1 (id=1831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb700000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 7.570204019s ago: executing program 38 (id=1831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb700000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 4.707247319s ago: executing program 9 (id=1887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0xc, 0x4, 0x9e3, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0xd) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r1, 0x1}, 0x20) 3.039946411s ago: executing program 9 (id=1889): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000000100)=""/123, 0x7b) shutdown(r0, 0x1) 2.04908393s ago: executing program 3 (id=1891): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x80) 2.03961743s ago: executing program 9 (id=1892): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 1.03297431s ago: executing program 39 (id=1667): capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.007143221s ago: executing program 3 (id=1894): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 976.560913ms ago: executing program 3 (id=1897): mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000f3437b00001e3b"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001540)=""/4072, 0xfe8}], 0x1}}], 0x1, 0x10160, 0x0) 907.324556ms ago: executing program 9 (id=1902): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 906.087466ms ago: executing program 3 (id=1903): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x0, 0xffff}, {}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 864.461968ms ago: executing program 9 (id=1905): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x80000000, 0x4) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/139, 0x8b}, 0x7}], 0x1, 0x40000102, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) 856.357948ms ago: executing program 4 (id=1906): syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000040)='./bus\x00', 0xa18008, &(0x7f0000000480)=ANY=[], 0x1, 0x550f, &(0x7f00000087c0)="$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") r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[], 0x98) 788.547472ms ago: executing program 0 (id=1909): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x201, 0x470bd27, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xe, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x0) 725.233495ms ago: executing program 0 (id=1910): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40008c0) 659.238328ms ago: executing program 3 (id=1911): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xf, 0x1, 0xf, 0x1000, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x5}, 0x50) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20801, 0x0) io_setup(0x501, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000000)='hy', 0x2, 0x310d, 0x0, 0x0, r0}]) 555.496483ms ago: executing program 3 (id=1912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) 465.982208ms ago: executing program 0 (id=1913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000040000000c00000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 383.764032ms ago: executing program 0 (id=1914): capset(&(0x7f0000001480)={0x20080522}, &(0x7f00000014c0)={0x0, 0x0, 0x4a6, 0x3, 0xfffffff7, 0x3}) r0 = syz_io_uring_setup(0x6123, &(0x7f0000000100)={0x0, 0x0, 0x400, 0xfffffffd, 0x1f6}, &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/14, 0xe}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 361.215183ms ago: executing program 4 (id=1915): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}, 0x1}, 0x1c) 277.426537ms ago: executing program 0 (id=1916): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgid(0x0) 208.33538ms ago: executing program 4 (id=1917): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000900)={r1, &(0x7f00000006c0), 0x0}, 0x20) 167.042542ms ago: executing program 4 (id=1918): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="05031600d3fc140000004788106f7b2b2c2898651aa39f66f93cbc02be6aea80f47ceba8123f", 0x26, 0x4, &(0x7f0000000140)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 135.087754ms ago: executing program 4 (id=1919): r0 = epoll_create1(0x0) r1 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x90000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x3, r1, &(0x7f0000000000)) 98.660596ms ago: executing program 4 (id=1920): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x78d, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCzbdhsQ80mW7Kb0oQcWkTwIqh4EPTSsy/15tWXq/4XHqSlalqseJDIbGbbbbObbtrsbjCfD0z2eWZm8zzffWaeeWZn2AlgzxpL/+QiDkXEh0nESDY/iYiBWqo/4sTGerfXVgvplMT6+pu/J7V1bq2tFqLhPakDWebJiPjhvYjDuc3lVpZX5qZLpeJilp+ozp+fqCyvHDk3Pz1bnC0uHJucmjp6/IXjx3Yu1j9/Xjl4/aPXnv36xN/vPnH1gx+TOBEHs2WNceyUsRjLPpOB9CO8x6s7XViPJb2uAA8l3TX7NvbyOBQj0VdLtTDUzZoBAJ2yDgDsQYkxAADsMfXvAW6trRbqU2+/keiuG69ExP6N+OvXNzeW9GfX7PbXroMO30ruuTKSRMToDpQ/FhGff/v2l+kUWTu4lgZ0w6XLEXFmdGxz/59sumdhu57bauH6YO1l7L7Ze+34A730XTr+ebHZ+C93Z/wTTcY/g0323Yfx4P0/dy1L9O1AcZuk47+XG+5tu90Qf2a0L8v9rzbmG0jOnisV077t/xExHgODaX6ytmrzkdv4zX9utiq/cfz3x8fvfJGWn77eXSN3rX/w3vfMTFenHzXuuhuXI57qbxZ/cqf9kxbj31NtlvH6S+9/1mpZGn8ab33aHH9nrV+JeKZp+99ty2TL+xMnapvDRH2jaOKbXz4dblV+Y/unU1p+/VygG9L2H946/tGk8X7NyvbL+OnKyPetlj04/ubb/77krVp6Xzbv4nS1ujgZsS95Y/P8o3ffW8/X10/jH3+6+f6/UWzz7T89JzzTZvz913/76uHj76w0/plttf/2E1dvz7Xsu9tr/6laajyb007/124FH+WzAwAAAAAAAAAAAAAAAAAAAAAAAIB25SLiYCS5/J10LpfPbzzD+/EYzpXKlerhs+WlhZmoPSt7NAZy9Z+6HGn4PdTJ7Pfw6/mj9+Wfj4jHIuKTwaFaPl8ol2Z6HTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZA60eP5/6tfBXtcOAOiY/b2uAADQdY7/ALD3bO/4P9SxegAA3eP8HwD2nraP/2c6Ww8AoHu2e/7f16F6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8J916uTJdFr/a221kOZnLiwvzZUvHJkpVuby80uFfKG8eD4/Wy7Plor5Qnm+5T+6tPFSKpfPT8XC0sWJarFSnagsr5yeLy8tVE+fm5+eLZ4uDnQtMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoX2V5ZW66VCouSmyZGNod1dg1if7YFdWQ6FiisZcY6l0HBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDL/RsAAP//gWUuJA==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7a680000) 68.599757ms ago: executing program 5 (id=1893): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000001c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@acl}, {@resuid}, {@errors_remount}]}, 0x1, 0x5ab, &(0x7f0000000240)="$eJzs3U9oHGUbAPBnZrNN/+T70g8+QaWHokKF0k3SP1o9tVexUOhB8aJhsw0lm2zJJrYJAdN7EXsQlV7qTQ8eFQ8exItHr14Uz0KxQaHpQVc2O5tu092waZusZn8/mOR9Z2bned+ZfV5mhhk2gL51uP4njXgmIs4nEcMtywYiW3i4sd7qylLx3spSMYla7cJvSSQRcXdlqdhcP8n+H4iI5Yh4OiK+y0ccTdc3uadZqC4sTo2Xy6XZrD4yN315pLqweOzS9PhkabI0c+LlV06dPnlq7PhYa3Pv1Vpr+a319frPN96//sNrt258/sWh5eKH40mciaFsWWs/nqTGPsnHmQ3zT25HsB5Ket0AHkkuy/N6Kj0Vw5HLsr6dWuvgMLgjzQO2UW0woraupQj0gUTSQ59qngfUr3+b006ef9w+27gAqcddXVkqvhfN+AONexOxd+3aZP/vyQNXJvXrzYM72VB2peVrETE6MPDw9z/Jvn9dufJmm5mjT6yVbJdvzzYO1MPHP10ff6LN+DPUvHf6mJrj32o2/q22iZ/rMP6d32S7rev++dYvn3SMf20wnm0bP1mPn7SJn0bEO1328eYbX5/utKz2acSRaB+/Kdn8/vDIxUvl0mjjb9sY3xw59Grn/kfs7xC/cc9271pDWvu/J2tT2mX/v/r+y+eWN4n/4vObH/92+39fRHzQZfz/3f3s9U7Lbl9L7tTPArZ6/JPIx60u47905vBPWXGw891FAAAAAAAAAABgq9K1Z9mStLBeTtNCofEO7/9jf1quVOeOXqzMz0w0nnk7GPm0+aTVcKOe1Otj2fO4zfrxDfUTuSxgbt9avVCslCd63HcAAAAAAAAAAAAAAAAAAAD4pziw4f3/P3Jr7/9v/LlqYLfyozzQvzrl/74dbgew8x7M/6Rn7QB2nvN/6Fs1+Q/9S/5D/5L/0L/kP/Qv+Q/9S/5D/5L/AAAAAAAAAAAAAAAAAAAAAAAAAACwLc6fO1efavdWlor1+sTAwvxU5d1jE6XqVGF6vlgoVmYvFyYrlclyqVCsTLfbxnJLOalULo/GzPzVkblSdW6kurD49nRlfqb5m6Kl/I70CgAAAAAAAAAAAAAAAAAAAP5dhtamJC1E5Bv1NC0UIv4TEQeTSC5eKpdGI+K/EfFjLj9Yr4/1utEAAAAAAAAAAAAAAAAAAACwy1QXFqfGy+XS7PYVBrJQ2xii+8LAVlaOiOUn24z6Frf8qXy2A3u863ZHIfcY38PBfjoEPRyUAAAAAAAAAAAAAAAAAACgT91/6bfbT/y1vQ0CAAAAAAAAAAAAAAAAAACAvpT+mkREfToy/MLQxqV7ktXc2v+IuHLzwkdXx+fmZsfq8++sz5/7OJt/vBftB7rVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANxXXVicGi+XS7OPWBjsYp1e9xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgUfwdAAD//9pZzuw=") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) fallocate(r0, 0x3, 0x7fffff, 0x8000c62) 50.492328ms ago: executing program 0 (id=1921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0x4000009f, 0x0, 0xffffffff840385e6}]}) 0s ago: executing program 9 (id=1922): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f757365725f78617474722c666c7573685f6d657267652c6673796e635f6d6f64653d706f7369782c64697361626c655f6578745f6964656e746966792c6261636b67726f756e645f67633d73796e632c6673796e635f6d6f64653d7374726963742c6e6f626172726965722c6e6f696e6c696e655f646174612c6e6f626172726965722c71756f74612c6261636b67726f756e645f67633d6f66662c6e6f61636c2c6e6f657874656e745f63616368652c6e6f646973636172642c6163746976655f6c6f67733d342c00e62bc03000c35169ed09803fa1bee488c680f339e530b5e8ad120a2b4f078093a8e0ba2b3d1b5fe99356b80a454c1ec2f8e12392bbffe9fae2fa05e18a6b61f5eded2e484f574d2757a5fe762c770477aa3460313ee54451c6a6159eca600d6c85a8c09cef9996dc851a5f5edf1a4a22576c6dfe6b9e8dade2d3a8e6a8c7710733c1f69aabd8880291"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') fsync(r0) kernel console output (not intermixed with test programs): nterface number 0 [ 54.576187][ T1987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 54.583638][ T6] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 54.597790][ T819] EXT4-fs (loop6): unmounting filesystem. [ 54.603666][ T6] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 54.613846][ T6] usb 9-1: config 0 interface 85 has no altsetting 0 [ 54.623169][ T6] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 54.632304][ T6] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.648439][ T1999] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 54.651449][ T6] usb 9-1: Product: syz [ 54.657879][ T1999] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.661222][ T6] usb 9-1: Manufacturer: syz [ 54.676784][ T356] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 54.684315][ T6] usb 9-1: SerialNumber: syz [ 54.689946][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.690204][ T6] usb 9-1: config 0 descriptor?? [ 54.717698][ T1999] fscrypt (loop6, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 54.730745][ T2002] EXT4-fs: Ignoring removed orlov option [ 54.737668][ T2002] EXT4-fs (loop4): Test dummy encryption mode enabled [ 54.744922][ T2002] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.745430][ T819] EXT4-fs (loop6): unmounting filesystem. [ 54.756725][ T2002] EXT4-fs (loop4): 1 truncate cleaned up [ 54.766417][ T2002] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 54.803480][ T287] EXT4-fs (loop4): unmounting filesystem. [ 54.961210][ T558] Bluetooth: hci0: command 0x1003 tx timeout [ 54.961437][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.044086][ T28] audit: type=1400 audit(1774020133.516:337): avc: denied { mounton } for pid=2017 comm="syz.9.678" path="/25/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 55.157851][ T24] usb 9-1: USB disconnect, device number 4 [ 55.208231][ T2026] syzkaller0: tun_chr_ioctl cmd 1074025692 [ 55.412374][ T2040] EXT4-fs: Ignoring removed bh option [ 55.418847][ T2038] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 55.431525][ T2040] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 55.436380][ T2038] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.475337][ T2040] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 55.487299][ T2038] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.688: bg 0: block 112: padding at end of block bitmap is not set [ 55.511457][ T2038] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 55.524404][ T2038] EXT4-fs (loop9): This should not happen!! Data will be lost [ 55.524404][ T2038] [ 55.547836][ T1689] EXT4-fs (loop9): unmounting filesystem. [ 55.589595][ T2051] netlink: 8 bytes leftover after parsing attributes in process `syz.9.692'. [ 55.603516][ T28] audit: type=1400 audit(1774020134.076:338): avc: denied { bind } for pid=2046 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.637498][ T819] EXT4-fs (loop6): unmounting filesystem. [ 55.661965][ T2056] set_capacity_and_notify: 14 callbacks suppressed [ 55.661981][ T2056] loop6: detected capacity change from 0 to 512 [ 55.741999][ T2056] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.694: iget: bad i_size value: 38620345925642 [ 55.775597][ T2056] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.694: couldn't read orphan inode 15 (err -117) [ 55.796398][ T2056] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 55.845322][ T2056] netlink: 52 bytes leftover after parsing attributes in process `syz.6.694'. [ 55.883797][ T2056] netlink: 56 bytes leftover after parsing attributes in process `syz.6.694'. [ 55.895316][ T2078] loop4: detected capacity change from 0 to 512 [ 55.918787][ T819] EXT4-fs (loop6): unmounting filesystem. [ 55.926468][ T2078] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.704: iget: bad i_size value: 38620345925642 [ 55.957441][ T2078] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.704: couldn't read orphan inode 15 (err -117) [ 55.972030][ T2083] loop6: detected capacity change from 0 to 512 [ 56.012700][ T2078] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 56.032291][ T2083] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 56.065831][ T2083] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.084724][ T2054] loop9: detected capacity change from 0 to 131072 [ 56.092138][ T2078] syz.4.704 (pid 2078) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 56.103015][ T2078] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.704: bg 0: block 5: invalid block bitmap [ 56.115298][ T2054] F2FS-fs (loop9): Invalid log sectorsize (67108873) [ 56.117922][ T819] EXT4-fs (loop6): unmounting filesystem. [ 56.122096][ T2054] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 56.142147][ T2054] F2FS-fs (loop9): invalid crc value [ 56.149015][ T287] EXT4-fs (loop4): unmounting filesystem. [ 56.202332][ T2054] F2FS-fs (loop9): Found nat_bits in checkpoint [ 56.283165][ T2054] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 56.293851][ T2054] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 56.405521][ T2113] loop8: detected capacity change from 0 to 128 [ 56.594869][ T2132] rtc_cmos 00:00: Alarms can be up to one day in the future [ 56.620802][ T2130] loop1: detected capacity change from 0 to 4096 [ 56.628732][ T2136] loop8: detected capacity change from 0 to 256 [ 56.674673][ T2130] EXT4-fs (loop1): Test dummy encryption mode enabled [ 56.693222][ T2136] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 56.705738][ T2130] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 56.719698][ T2130] System zones: 0-5 [ 56.724536][ T2130] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.763399][ T284] EXT4-fs (loop1): unmounting filesystem. [ 56.803853][ T2142] loop8: detected capacity change from 0 to 256 [ 56.824230][ T2142] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 56.843462][ T2144] loop1: detected capacity change from 0 to 512 [ 56.853989][ T2146] loop9: detected capacity change from 0 to 256 [ 57.086300][ T287] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 57.101055][ T287] FAT-fs (loop4): Filesystem has been set read-only [ 57.342615][ T284] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 57.355639][ T284] FAT-fs (loop1): Filesystem has been set read-only [ 57.385494][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.400373][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.420838][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.431051][ T60] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 57.442975][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.455798][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.468684][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.476238][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 57.476612][ T829] rtc_cmos 00:00: Alarms can be up to one day in the future [ 57.496433][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.501108][ T829] rtc_cmos 00:00: Alarms can be up to one day in the future [ 57.503885][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.521155][ T829] rtc_cmos 00:00: Alarms can be up to one day in the future [ 57.528691][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.536520][ T829] rtc_cmos 00:00: Alarms can be up to one day in the future [ 57.538793][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.550303][ T829] rtc rtc0: __rtc_set_alarm: err=-22 [ 57.561128][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.578741][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.586200][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.601017][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.618632][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.626081][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 57.632421][ T60] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 57.647004][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.654541][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.661952][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 57.667266][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.674815][ T39] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 57.683165][ T24] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 57.691866][ T60] usb 5-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 57.701120][ T39] hid-generic 00A0:0086:0003.0005: hidraw0: HID v0.05 Device [syz1] on syz0 [ 57.701350][ T2203] F2FS-fs (loop1): fault_injection options not supported [ 57.710791][ T24] usb 9-1: config 1 has no interface number 0 [ 57.724895][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.733157][ T60] usb 5-1: Product: syz [ 57.738130][ T24] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 57.748737][ T60] usb 5-1: Manufacturer: syz [ 57.753666][ T60] usb 5-1: SerialNumber: syz [ 57.758633][ T2203] F2FS-fs (loop1): invalid crc value [ 57.759520][ T24] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 57.774620][ T24] usb 9-1: config 1 interface 105 has no altsetting 0 [ 57.779879][ T2196] F2FS-fs (loop9): QUOTA feature is enabled, so ignore qf_name [ 57.783274][ T24] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 57.799256][ T24] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 57.799425][ T2203] F2FS-fs (loop1): Found nat_bits in checkpoint [ 57.807994][ T24] usb 9-1: Product: syz [ 57.815405][ T2196] F2FS-fs (loop9): invalid crc value [ 57.818433][ T24] usb 9-1: Manufacturer: syz [ 57.828505][ T24] usb 9-1: SerialNumber: syz [ 57.842883][ T2189] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 57.851072][ T2189] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 57.853675][ T2203] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 57.867103][ T2196] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 57.909833][ T2196] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=60000, run fsck to fix. [ 57.920481][ T2196] F2FS-fs (loop9): Bad quota inode 2:393216 [ 57.926480][ T2196] F2FS-fs (loop9): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 57.936872][ T2196] F2FS-fs (loop9): Cannot turn on quotas: error -22 [ 57.943912][ T2196] F2FS-fs (loop9): Mounted with checkpoint version = 753bd00b [ 57.981455][ T60] usb 5-1: USB disconnect, device number 4 [ 58.020100][ T2213] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.163491][ T2224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.240267][ T2196] F2FS-fs (loop9): QUOTA feature is enabled, so ignore jquota_fmt [ 58.249086][ T2196] F2FS-fs (loop9): Start checkpoint disabled! [ 58.255728][ T2196] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 58.270243][ T2189] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 58.278349][ T2189] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 58.372354][ T2231] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 58.688108][ T24] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 58.699202][ T24] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 58.710149][ T24] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 58.722249][ T24] aqc111 9-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, da:df:db:3a:ac:72 [ 58.737421][ T24] usb 9-1: USB disconnect, device number 5 [ 58.743644][ T24] aqc111 9-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 58.797915][ T24] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 58.801102][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 58.807340][ T24] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 58.824061][ T24] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 59.042463][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 59.042478][ T28] audit: type=1400 audit(1774020137.516:353): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.216314][ T2240] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.232067][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 59.240477][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.248798][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 59.257108][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.273114][ T2245] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.284932][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.297864][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.310909][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.321285][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.329760][ T2247] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 59.339401][ T2245] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.350776][ T2247] EXT4-fs (loop9): orphan cleanup on readonly fs [ 59.357929][ T2247] EXT4-fs error (device loop9): ext4_free_blocks:6221: comm syz.9.769: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.371884][ T2247] EXT4-fs (loop9): 1 orphan inode deleted [ 59.390376][ T2247] EXT4-fs (loop9): shut down requested (2) [ 59.397998][ T2240] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.551428][ T2266] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 59.570048][ T2273] EXT4-fs: Ignoring removed oldalloc option [ 59.578421][ T2273] EXT4-fs: Ignoring removed bh option [ 59.587048][ T2273] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.664824][ T28] audit: type=1326 audit(1774020138.136:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.4.785" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a93d9c799 code=0x0 [ 59.758769][ T2295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.775293][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 59.784011][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.793583][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 59.834834][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.862617][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.873129][ T2293] F2FS-fs (loop4): fault_injection options not supported [ 59.880721][ T2293] F2FS-fs (loop4): invalid crc value [ 59.897348][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.900643][ T2305] EXT4-fs (loop8): Test dummy encryption mode enabled [ 59.906357][ T2293] F2FS-fs (loop4): Found nat_bits in checkpoint [ 59.914320][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.939940][ T2305] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.952973][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.985662][ T2295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.994197][ T2293] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 60.098148][ T2323] input: syz0 as /devices/virtual/input/input6 [ 60.159909][ T2333] netlink: 'syz.6.801': attribute type 9 has an invalid length. [ 60.209516][ T2335] ext4 filesystem being mounted at /47/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.306295][ T28] audit: type=1400 audit(1774020138.776:355): avc: denied { setopt } for pid=2354 comm="syz.9.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.471050][ T60] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 60.531123][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 60.552024][ T2366] F2FS-fs (loop9): Wrong secs_per_zone / total_sections (4285726721, 24) [ 60.569485][ T2366] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 60.573393][ T2371] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 60.586462][ T2366] F2FS-fs (loop9): Unrecognized mount option "01777777777777777777777avڋ{DB!}e" or missing value [ 60.671333][ T60] usb 7-1: unable to get BOS descriptor or descriptor too short [ 60.681846][ T60] usb 7-1: not running at top speed; connect to a high speed hub [ 60.698400][ T2377] netlink: 165 bytes leftover after parsing attributes in process `syz.9.819'. [ 60.707623][ T60] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.721187][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 60.726587][ T60] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.731063][ T356] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 60.740093][ T24] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.757023][ T24] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.768345][ T24] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 60.781648][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 60.788275][ T24] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 60.797528][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.807002][ T24] usb 9-1: config 0 descriptor?? [ 60.813536][ T60] usb 7-1: string descriptor 0 read error: -22 [ 60.819806][ T60] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.828990][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.839331][ T60] usb 7-1: 0:2 : does not exist [ 60.931176][ T356] usb 2-1: Using ep0 maxpacket: 32 [ 60.937575][ T356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.948532][ T356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.958306][ T356] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 60.967403][ T356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.977049][ T356] usb 2-1: config 0 descriptor?? [ 61.385298][ T356] savu 0003:1E7D:2D5A.0007: item fetching failed at offset 0/8 [ 61.393093][ T356] savu 0003:1E7D:2D5A.0007: parse failed [ 61.398736][ T356] savu: probe of 0003:1E7D:2D5A.0007 failed with error -22 [ 61.443812][ T60] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 61.453753][ T291] usb 9-1: USB disconnect, device number 6 [ 61.457198][ T60] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 61.468920][ T60] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 61.479397][ T60] usb 7-1: USB disconnect, device number 6 [ 61.587855][ T356] usb 2-1: USB disconnect, device number 5 [ 62.002550][ T2388] set_capacity_and_notify: 17 callbacks suppressed [ 62.002586][ T2388] loop4: detected capacity change from 0 to 512 [ 62.030908][ T2390] netlink: 104 bytes leftover after parsing attributes in process `syz.6.831'. [ 62.043431][ T2388] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.075963][ T2398] netlink: 12 bytes leftover after parsing attributes in process `syz.8.826'. [ 62.085577][ T2398] netlink: 12 bytes leftover after parsing attributes in process `syz.8.826'. [ 62.086911][ T2388] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.094731][ T2398] netlink: 12 bytes leftover after parsing attributes in process `syz.8.826'. [ 62.185466][ T2410] loop6: detected capacity change from 0 to 2048 [ 62.236881][ T2410] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.270068][ T2410] fs-verity: sha512 using implementation "sha512-avx2" [ 62.281612][ T2419] loop4: detected capacity change from 0 to 512 [ 62.293370][ T2410] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.832: bg 0: block 345: padding at end of block bitmap is not set [ 62.309995][ T2410] EXT4-fs (loop6): Remounting filesystem read-only [ 62.322583][ T2410] fs-verity (loop6, inode 13): Error -117 writing Merkle tree block 0 [ 62.333086][ T2410] fs-verity (loop6, inode 13): Error -117 building Merkle tree [ 62.348607][ T2410] syz.6.832 (2410) used greatest stack depth: 20496 bytes left [ 62.367508][ T2419] ext4 filesystem being mounted at /195/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.410088][ T2436] loop8: detected capacity change from 0 to 128 [ 62.501005][ T291] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 62.619866][ T2469] loop6: detected capacity change from 0 to 512 [ 62.642894][ T2469] ext4 filesystem being mounted at /170/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.682349][ T291] usb 10-1: unable to get BOS descriptor or descriptor too short [ 62.682817][ T2475] loop1: detected capacity change from 0 to 128 [ 62.699165][ T291] usb 10-1: not running at top speed; connect to a high speed hub [ 62.717755][ T291] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.729240][ T291] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.769209][ T291] usb 10-1: string descriptor 0 read error: -22 [ 62.781256][ T291] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.800109][ T291] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.809292][ T2487] loop6: detected capacity change from 0 to 256 [ 62.817358][ T291] usb 10-1: 0:2 : does not exist [ 62.829383][ T2487] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 62.867406][ T2471] loop4: detected capacity change from 0 to 40427 [ 62.883234][ T2471] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 62.904996][ T2471] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 62.924044][ T2471] F2FS-fs (loop4): invalid crc value [ 62.935710][ T2471] F2FS-fs (loop4): Found nat_bits in checkpoint [ 62.937392][ T2497] loop6: detected capacity change from 0 to 256 [ 62.953899][ T28] audit: type=1400 audit(1774020141.426:356): avc: denied { ioctl } for pid=2498 comm="syz.1.867" path="socket:[26650]" dev="sockfs" ino=26650 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.991916][ T2471] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 62.994010][ T2497] FAT-fs (loop6): Directory bread(block 64) failed [ 62.998978][ T2471] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 63.018307][ T2497] FAT-fs (loop6): Directory bread(block 65) failed [ 63.025086][ T2497] FAT-fs (loop6): Directory bread(block 66) failed [ 63.035842][ T2497] FAT-fs (loop6): Directory bread(block 67) failed [ 63.036689][ T2471] syz.4.856: attempt to access beyond end of device [ 63.036689][ T2471] loop4: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 63.042437][ T2497] FAT-fs (loop6): Directory bread(block 68) failed [ 63.042460][ T2497] FAT-fs (loop6): Directory bread(block 69) failed [ 63.069549][ T2497] FAT-fs (loop6): Directory bread(block 70) failed [ 63.076201][ T2497] FAT-fs (loop6): Directory bread(block 71) failed [ 63.077350][ T28] audit: type=1326 audit(1774020141.546:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2501 comm="syz.1.879" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79b659c799 code=0x0 [ 63.082873][ T2497] FAT-fs (loop6): Directory bread(block 72) failed [ 63.106205][ T287] syz-executor: attempt to access beyond end of device [ 63.106205][ T287] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 63.112125][ T2497] FAT-fs (loop6): Directory bread(block 73) failed [ 63.247574][ T2508] loop4: detected capacity change from 0 to 512 [ 63.279105][ T2508] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.320514][ T2503] F2FS-fs (loop1): fault_injection options not supported [ 63.347697][ T2513] EXT4-fs: Ignoring removed bh option [ 63.354708][ T2503] F2FS-fs (loop1): invalid crc value [ 63.361497][ T2513] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.410792][ T2517] lo: Caught tx_queue_len zero misconfig [ 63.417929][ T2503] F2FS-fs (loop1): Found nat_bits in checkpoint [ 63.439414][ T291] usb 10-1: 5:0: cannot get min/max values for control 2 (id 5) [ 63.473160][ T291] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 63.519893][ T291] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 63.539576][ T291] usb 10-1: USB disconnect, device number 2 [ 63.562942][ T2503] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 63.937578][ T2509] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 63.988434][ T2509] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 64.008785][ T2509] F2FS-fs (loop6): invalid crc value [ 64.023726][ T28] audit: type=1400 audit(1774020142.496:358): avc: denied { accept } for pid=2531 comm="syz.9.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 64.064313][ T2509] F2FS-fs (loop6): Found nat_bits in checkpoint [ 64.180633][ T2509] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 64.194732][ T2509] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 64.528224][ T2541] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.883: bg 0: block 234: padding at end of block bitmap is not set [ 64.558875][ T2541] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 64.585411][ T2541] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.585411][ T2541] [ 64.607183][ T2541] EXT4-fs (loop1): Total free blocks count 0 [ 64.620833][ T2541] EXT4-fs (loop1): Free/Dirty block details [ 64.633462][ T2541] EXT4-fs (loop1): free_blocks=0 [ 64.648337][ T2541] EXT4-fs (loop1): dirty_blocks=8192 [ 64.660006][ T2541] EXT4-fs (loop1): Block reservation details [ 64.674371][ T2541] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 64.714541][ T334] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 64.747484][ T334] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.747484][ T334] [ 64.911010][ T356] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 64.912693][ T284] EXT4-fs unmount: 27 callbacks suppressed [ 65.112729][ T356] usb 7-1: unable to get BOS descriptor or descriptor too short [ 65.126902][ T2568] netlink: 16 bytes leftover after parsing attributes in process `syz.9.894'. [ 65.136207][ T356] usb 7-1: not running at top speed; connect to a high speed hub [ 65.153200][ T356] usb 7-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 65.174467][ T356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.191324][ T356] usb 7-1: Product: syz [ 65.200359][ T356] usb 7-1: Manufacturer: syz [ 65.215992][ T356] usb 7-1: SerialNumber: syz [ 65.345560][ T2579] tap0: tun_chr_ioctl cmd 1074025677 [ 65.350931][ T2579] tap0: linktype set to 781 [ 65.381008][ T6] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 65.406602][ T28] audit: type=1400 audit(1774020143.876:359): avc: denied { write } for pid=2586 comm="syz.9.903" name="vlan0" dev="proc" ino=4026532904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 65.508518][ T2596] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 65.509675][ T2597] exfat: Deprecated parameter 'utf8' [ 65.527263][ T2597] exfat: Deprecated parameter 'utf8' [ 65.536574][ T2597] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 65.581061][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 65.590144][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 65.619059][ T6] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 65.637504][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.661332][ T6] usb 2-1: Product: syz [ 65.665561][ T28] audit: type=1400 audit(1774020144.136:360): avc: denied { connect } for pid=2606 comm="syz.4.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.686053][ T6] usb 2-1: Manufacturer: syz [ 65.690679][ T6] usb 2-1: SerialNumber: syz [ 66.011423][ T28] audit: type=1326 audit(1774020144.486:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2634 comm="syz.9.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6579c799 code=0x7ffc0000 [ 66.050604][ T356] usb 7-1: USB disconnect, device number 7 [ 66.055061][ T28] audit: type=1326 audit(1774020144.486:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2634 comm="syz.9.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6579c799 code=0x7ffc0000 [ 66.083569][ T28] audit: type=1326 audit(1774020144.516:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2634 comm="syz.9.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1a6579c799 code=0x7ffc0000 [ 66.109748][ T28] audit: type=1326 audit(1774020144.516:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2634 comm="syz.9.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a6579c502 code=0x7ffc0000 [ 66.134061][ T28] audit: type=1326 audit(1774020144.516:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2634 comm="syz.9.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1a6575cfce code=0x7ffc0000 [ 66.134993][ T6] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 66.157711][ T28] audit: type=1326 audit(1774020144.516:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2634 comm="syz.9.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1a6579c5c7 code=0x7ffc0000 [ 66.192882][ T28] audit: type=1326 audit(1774020144.516:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2634 comm="syz.9.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a6575cfce code=0x7ffc0000 [ 66.217706][ T28] audit: type=1326 audit(1774020144.516:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2634 comm="syz.9.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a6579c42b code=0x7ffc0000 [ 66.242322][ T2636] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 66.251467][ T2636] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.344712][ T2636] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #12: comm syz.9.926: corrupted xattr block 6 [ 66.365931][ T2636] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.377254][ T6] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 66.395759][ T2636] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #12: comm syz.9.926: corrupted xattr block 6 [ 66.430169][ T2636] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.477886][ T1689] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 66.499631][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.509408][ T1689] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 66.527523][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.537979][ T1689] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 66.550281][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.560005][ T1689] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 66.572409][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.581495][ T1689] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 66.589970][ T6] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 66.616284][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.619590][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.634165][ T6] usb 2-1: USB disconnect, device number 6 [ 66.643224][ T1689] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 66.684712][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.711574][ T1689] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 66.751020][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.767184][ T1689] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 66.811035][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.832751][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.858415][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.887757][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.919342][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.940089][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.950123][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.970361][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 66.990756][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 67.010795][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 67.020208][ T1689] EXT4-fs warning (device loop9): ext4_evict_inode:299: xattr delete (err -117) [ 67.039792][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 67.059893][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 67.078982][ T1689] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 67.092733][ T1689] EXT4-fs warning (device loop9): ext4_evict_inode:299: xattr delete (err -117) [ 67.120520][ T1689] EXT4-fs (loop9): unmounting filesystem. [ 67.143677][ T2678] set_capacity_and_notify: 6 callbacks suppressed [ 67.143693][ T2678] loop6: detected capacity change from 0 to 40427 [ 67.169517][ T2678] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 67.177734][ T2678] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 67.199807][ T2678] F2FS-fs (loop6): invalid crc value [ 67.211161][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 67.260812][ T2678] F2FS-fs (loop6): Found nat_bits in checkpoint [ 67.363238][ T2678] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 67.382958][ T2678] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 67.405669][ T2707] loop1: detected capacity change from 0 to 512 [ 67.658775][ T2720] loop1: detected capacity change from 0 to 512 [ 67.673214][ T2720] EXT4-fs: Ignoring removed nobh option [ 67.690198][ T2720] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.734345][ T2720] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.757565][ T2720] EXT4-fs (loop1): 1 truncate cleaned up [ 67.769780][ T2720] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 67.799405][ T284] EXT4-fs (loop1): unmounting filesystem. [ 67.969601][ T2745] lo: Caught tx_queue_len zero misconfig [ 68.150915][ T2769] loop4: detected capacity change from 0 to 2048 [ 68.215116][ T2769] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 68.402652][ T334] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:3: bg 0: block 234: padding at end of block bitmap is not set [ 68.439448][ T334] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 68.458916][ T2786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 68.468544][ T334] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.468544][ T334] [ 68.479148][ T2786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 68.493585][ T2788] loop6: detected capacity change from 0 to 256 [ 68.505465][ T334] EXT4-fs (loop4): Total free blocks count 0 [ 68.506968][ T2788] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.522340][ T334] EXT4-fs (loop4): Free/Dirty block details [ 68.533785][ T2788] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.544248][ T334] EXT4-fs (loop4): free_blocks=0 [ 68.560262][ T334] EXT4-fs (loop4): dirty_blocks=3328 [ 68.574324][ T334] EXT4-fs (loop4): Block reservation details [ 68.590500][ T334] EXT4-fs (loop4): i_reserved_data_blocks=208 [ 68.636941][ T2795] netlink: 72 bytes leftover after parsing attributes in process `syz.1.992'. [ 68.645350][ T334] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1278 with error 28 [ 68.658539][ T2795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.992'. [ 68.667654][ T2795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.992'. [ 68.678234][ T2795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.992'. [ 68.826665][ T2805] lo: Caught tx_queue_len zero misconfig [ 68.842333][ T2805] netem: incorrect gi model size [ 68.852870][ T2810] loop4: detected capacity change from 0 to 512 [ 68.855209][ T2811] loop9: detected capacity change from 0 to 512 [ 68.872919][ T2810] EXT4-fs: Ignoring removed orlov option [ 68.881028][ T2805] netem: change failed [ 68.885493][ T2810] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 68.950892][ T2810] EXT4-fs error (device loop4): ext4_iget_extra_inode:4758: inode #15: comm syz.4.997: corrupted in-inode xattr [ 68.980133][ T2810] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.997: couldn't read orphan inode 15 (err -117) [ 69.035651][ T2810] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 69.136157][ T2810] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 69.152647][ T2829] loop9: detected capacity change from 0 to 2048 [ 69.166632][ T287] EXT4-fs (loop4): unmounting filesystem. [ 69.193129][ T2835] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1011'. [ 69.242912][ T2829] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 69.485632][ T2829] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1008: bg 0: block 234: padding at end of block bitmap is not set [ 69.511291][ T2829] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 69.541005][ T2829] EXT4-fs (loop9): This should not happen!! Data will be lost [ 69.541005][ T2829] [ 69.542142][ T2866] loop4: detected capacity change from 0 to 4096 [ 69.558379][ T2829] EXT4-fs (loop9): Total free blocks count 0 [ 69.566847][ T2866] EXT4-fs (loop4): Test dummy encryption mode enabled [ 69.571026][ T2829] EXT4-fs (loop9): Free/Dirty block details [ 69.579644][ T2829] EXT4-fs (loop9): free_blocks=0 [ 69.585824][ T2866] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0003] [ 69.587318][ T2829] EXT4-fs (loop9): dirty_blocks=8192 [ 69.599228][ T2829] EXT4-fs (loop9): Block reservation details [ 69.604175][ T2866] System zones: [ 69.605263][ T2829] EXT4-fs (loop9): i_reserved_data_blocks=512 [ 69.606526][ T2866] 0-5 [ 69.622187][ T8] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 69.635575][ T2866] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.680470][ T2866] fs-verity: sha256 using implementation "sha256-avx2" [ 69.712254][ T287] EXT4-fs (loop4): unmounting filesystem. [ 69.853929][ T2876] batadv_slave_0: Caught tx_queue_len zero misconfig [ 69.895581][ T2880] netlink: 'syz.6.1029': attribute type 8 has an invalid length. [ 69.910637][ T2880] sch_fq: defrate 0 ignored. [ 70.007399][ T2888] loop4: detected capacity change from 0 to 512 [ 70.028112][ T2888] EXT4-fs: Ignoring removed orlov option [ 70.046827][ T2888] EXT4-fs (loop4): Test dummy encryption mode enabled [ 70.064922][ T2888] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.083183][ T2888] EXT4-fs (loop4): 1 truncate cleaned up [ 70.088850][ T2888] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 70.160290][ T2888] EXT4-fs (loop4): Online defrag not supported for encrypted files [ 70.181053][ T6] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 70.238596][ T287] EXT4-fs (loop4): unmounting filesystem. [ 70.248637][ T2899] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 70.258850][ T2899] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.296948][ T284] EXT4-fs (loop1): unmounting filesystem. [ 70.371084][ T6] usb 10-1: Using ep0 maxpacket: 8 [ 70.377387][ T2913] tipc: Started in network mode [ 70.381862][ T6] usb 10-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 70.393822][ T2913] tipc: Node identity ac1414aa, cluster identity 4711 [ 70.409594][ T2913] tipc: Enabling of bearer rejected, failed to enable media [ 70.412403][ T6] usb 10-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.452981][ T6] usb 10-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 70.481026][ T6] usb 10-1: config 0 interface 0 has no altsetting 0 [ 70.487746][ T6] usb 10-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 70.512771][ T2928] tipc: Enabling of bearer rejected, failed to enable media [ 70.519106][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.548509][ T6] usb 10-1: config 0 descriptor?? [ 70.658683][ T2940] netlink: 'syz.1.1054': attribute type 2 has an invalid length. [ 70.677012][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 70.677027][ T28] audit: type=1326 audit(1774020149.146:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2938 comm="syz.4.1055" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a93d9c799 code=0x0 [ 70.805132][ T2915] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (4285726721, 24) [ 70.830730][ T2915] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 70.849398][ T2915] F2FS-fs (loop6): Unrecognized mount option "01777777777777777777777avڋ{DB!}e" or missing value [ 70.965409][ T6] wacom 0003:056A:010E.0008: unbalanced collection at end of report description [ 70.989476][ T6] wacom 0003:056A:010E.0008: parse failed [ 71.003961][ T6] wacom: probe of 0003:056A:010E.0008 failed with error -22 [ 71.106794][ T28] audit: type=1400 audit(1774020149.576:402): avc: denied { accept } for pid=2958 comm="syz.6.1063" path="socket:[28938]" dev="sockfs" ino=28938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.145476][ T28] audit: type=1400 audit(1774020149.606:403): avc: denied { unmount } for pid=2960 comm="syz.1.1062" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.194750][ T291] usb 10-1: USB disconnect, device number 3 [ 71.217300][ T2967] netlink: 'syz.6.1066': attribute type 12 has an invalid length. [ 71.235818][ T2967] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1066'. [ 71.336128][ T28] audit: type=1400 audit(1774020149.806:404): avc: denied { unmount } for pid=2982 comm="syz.6.1074" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.373121][ T28] audit: type=1400 audit(1774020149.846:405): avc: denied { lock } for pid=2984 comm="syz.6.1075" path="socket:[28973]" dev="sockfs" ino=28973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.415337][ T28] audit: type=1400 audit(1774020149.886:406): avc: denied { remount } for pid=2989 comm="syz.6.1077" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.766547][ T3026] exfat: Deprecated parameter 'utf8' [ 71.781125][ T3026] exfat: Deprecated parameter 'utf8' [ 71.789956][ T3026] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 71.948620][ T3037] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1097'. [ 71.961029][ T60] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 72.110151][ T28] audit: type=1400 audit(1774020150.576:407): avc: denied { setopt } for pid=3054 comm="syz.6.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.153443][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 72.175129][ T60] usb 5-1: not running at top speed; connect to a high speed hub [ 72.194985][ T60] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 72.224151][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.241789][ T60] usb 5-1: Product: syz [ 72.256122][ T60] usb 5-1: Manufacturer: syz [ 72.260776][ T60] usb 5-1: SerialNumber: syz [ 72.504716][ T28] audit: type=1326 audit(1774020150.976:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3074 comm="syz.1.1115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79b659c799 code=0x0 [ 73.080414][ T60] usb 5-1: USB disconnect, device number 5 [ 73.118425][ T3091] set_capacity_and_notify: 3 callbacks suppressed [ 73.118443][ T3091] loop9: detected capacity change from 0 to 256 [ 73.136299][ T3091] exfat: Deprecated parameter 'utf8' [ 73.141879][ T3091] exfat: Deprecated parameter 'utf8' [ 73.147245][ T3091] exfat: Deprecated parameter 'utf8' [ 73.155360][ T3091] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 73.223384][ T3093] loop9: detected capacity change from 0 to 256 [ 73.241868][ T3093] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 73.428046][ T3111] loop1: detected capacity change from 0 to 2048 [ 73.493586][ T3111] loop1: p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 73.494298][ T3111] loop1: p3 start 4284289 is beyond EOD, truncated [ 73.613569][ T3123] syz.6.1137[3123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.613641][ T3123] syz.6.1137[3123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.667246][ T3129] xt_hashlimit: size too large, truncated to 1048576 [ 73.817238][ T3144] fuse: Bad value for 'fd' [ 73.864338][ T28] audit: type=1400 audit(1774020152.336:409): avc: denied { bind } for pid=3147 comm="syz.6.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.107774][ T28] audit: type=1400 audit(1774020152.576:410): avc: denied { append } for pid=3161 comm="syz.4.1153" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.135650][ T3162] loop4: detected capacity change from 0 to 7 [ 74.149573][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.158750][ C0] buffer_io_error: 4 callbacks suppressed [ 74.158767][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 74.161026][ T24] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 74.170978][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.189064][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 74.197414][ T3162] loop4: unable to read partition table [ 74.203359][ T3162] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 74.222912][ T103] loop1: p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 74.223432][ T103] loop1: p3 start 4284289 is beyond EOD, [ 74.324489][ T3165] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1154'. [ 74.339344][ T3165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1154'. [ 74.348532][ T3165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1154'. [ 74.372311][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 74.387849][ T103] truncated [ 74.391004][ T24] usb 10-1: not running at top speed; connect to a high speed hub [ 74.393207][ T24] usb 10-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 74.430993][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.439094][ T24] usb 10-1: Product: syz [ 74.481003][ T24] usb 10-1: Manufacturer: syz [ 74.485707][ T24] usb 10-1: SerialNumber: syz [ 74.791667][ T3172] loop4: detected capacity change from 0 to 2048 [ 74.822889][ T3172] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.933422][ T287] EXT4-fs (loop4): unmounting filesystem. [ 75.011962][ T454] udevd[454]: inotify_add_watch(7, /dev/loop1p15, 10) failed: No such file or directory [ 75.015073][ T459] udevd[459]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory [ 75.044468][ T3155] udevd[3155]: inotify_add_watch(7, /dev/loop1p17, 10) failed: No such file or directory [ 75.055807][ T337] udevd[337]: inotify_add_watch(7, /dev/loop1p18, 10) failed: No such file or directory [ 75.055943][ T3153] udevd[3153]: inotify_add_watch(7, /dev/loop1p19, 10) failed: No such file or directory [ 75.078201][ T3154] udevd[3154]: inotify_add_watch(7, /dev/loop1p20, 10) failed: No such file or directory [ 75.078415][ T377] udevd[377]: inotify_add_watch(7, /dev/loop1p22, 10) failed: No such file or directory [ 75.089010][ T731] udevd[731]: inotify_add_watch(7, /dev/loop1p21, 10) failed: No such file or directory [ 75.099308][ T3151] udevd[3151]: inotify_add_watch(7, /dev/loop1p23, 10) failed: No such file or directory [ 75.119355][ T729] udevd[729]: inotify_add_watch(7, /dev/loop1p25, 10) failed: No such file or directory [ 75.327767][ T24] usb 10-1: USB disconnect, device number 4 [ 75.875394][ T3212] loop9: detected capacity change from 0 to 1024 [ 75.914284][ T3212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.971933][ T3212] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 76.183403][ T1689] EXT4-fs (loop9): unmounting filesystem. [ 76.230504][ T3222] lo: Caught tx_queue_len zero misconfig [ 76.343211][ T3233] netlink: 'syz.1.1183': attribute type 1 has an invalid length. [ 76.647540][ T3261] loop4: detected capacity change from 0 to 256 [ 76.831180][ T3273] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 77.192669][ T3281] loop1: detected capacity change from 0 to 40427 [ 77.241086][ T3281] F2FS-fs (loop1): invalid crc value [ 77.254603][ T3281] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.319722][ T3293] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 77.361937][ T3281] F2FS-fs (loop1): Start checkpoint disabled! [ 77.374314][ T3281] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 77.395799][ T3281] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 77.498333][ T3300] loop9: detected capacity change from 0 to 256 [ 77.544075][ T10] kworker/u4:1: attempt to access beyond end of device [ 77.544075][ T10] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 77.621460][ T10] kworker/u4:1: attempt to access beyond end of device [ 77.621460][ T10] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 77.835827][ T3302] loop9: detected capacity change from 0 to 40427 [ 77.836301][ T3304] batadv_slave_0: Caught tx_queue_len zero misconfig [ 77.872838][ T3302] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 77.880728][ T3302] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 77.901278][ T3304] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1212'. [ 77.913385][ T3302] F2FS-fs (loop9): invalid crc value [ 77.921376][ T3304] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1212'. [ 77.939184][ T3304] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1212'. [ 77.959211][ T3302] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 78.011907][ T3284] F2FS-fs (loop4): invalid crc value [ 78.022029][ T3311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1215'. [ 78.040931][ T3311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1215'. [ 78.052484][ T3284] F2FS-fs (loop4): Found nat_bits in checkpoint [ 78.080721][ T3302] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 78.098035][ T3302] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 78.127691][ T3284] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 78.432369][ T3333] set_capacity_and_notify: 1 callbacks suppressed [ 78.432387][ T3333] loop1: detected capacity change from 0 to 256 [ 78.659487][ T3355] loop4: detected capacity change from 0 to 1024 [ 78.701464][ T3355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.710693][ T3359] fuse: Bad value for 'fd' [ 78.732242][ T3361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 78.767345][ T3355] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 78.829042][ T3379] loop9: detected capacity change from 0 to 512 [ 78.859181][ T3379] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 78.874650][ T287] EXT4-fs (loop4): unmounting filesystem. [ 78.880456][ T3379] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 78.888574][ T3379] System zones: 0-1, 15-15, 18-18, 34-34 [ 78.894819][ T3379] EXT4-fs (loop9): orphan cleanup on readonly fs [ 78.901307][ T3379] __quota_error: 1 callbacks suppressed [ 78.901318][ T3379] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 78.902699][ T3368] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.906928][ T3379] EXT4-fs warning (device loop9): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 78.937719][ T3368] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.937809][ T3379] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 78.957910][ T3379] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.1244: bad orphan inode 16 [ 78.958257][ T3391] loop4: detected capacity change from 0 to 256 [ 78.968956][ T3368] device bridge_slave_0 entered promiscuous mode [ 78.980615][ T3379] ext4_test_bit(bit=15, block=18) = 1 [ 78.986075][ T3379] is_bad_inode(inode)=0 [ 78.990260][ T3379] NEXT_ORPHAN(inode)=0 [ 78.997124][ T3368] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.004323][ T3379] max_ino=32 [ 79.007644][ T3368] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.014708][ T3379] i_nlink=2 [ 79.018275][ T3368] device bridge_slave_1 entered promiscuous mode [ 79.024784][ T3379] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 79.110372][ T3401] tipc: Enabling of bearer rejected, already enabled [ 79.114059][ T3379] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 79.170017][ T1689] EXT4-fs (loop9): unmounting filesystem. [ 79.193848][ T3368] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.200930][ T3368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.208230][ T3368] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.215278][ T3368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.228669][ T3417] loop4: detected capacity change from 0 to 4096 [ 79.242965][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.250377][ T3417] EXT4-fs (loop4): invalid inodes per group: 458784 [ 79.250377][ T3417] [ 79.260793][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.300312][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.330358][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.346849][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.353937][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.363770][ T28] audit: type=1400 audit(1774020157.836:412): avc: denied { search } for pid=3428 comm="syz.4.1263" name="/" dev="configfs" ino=13640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.401006][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.403511][ T3435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1262'. [ 79.412897][ T28] audit: type=1400 audit(1774020157.866:413): avc: denied { setattr } for pid=3428 comm="syz.4.1263" name="/" dev="configfs" ino=13640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.451252][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.458319][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.467656][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.476269][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.500338][ T3368] device veth0_vlan entered promiscuous mode [ 79.522120][ T28] audit: type=1400 audit(1774020157.996:414): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 79.562607][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.584474][ T3446] loop9: detected capacity change from 0 to 4096 [ 79.591586][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.601525][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.614046][ T3448] loop1: detected capacity change from 0 to 256 [ 79.632260][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.640669][ T3448] exfat: Deprecated parameter 'namecase' [ 79.653829][ T3448] exfat: Deprecated parameter 'namecase' [ 79.666093][ T3368] device veth1_macvtap entered promiscuous mode [ 79.674260][ T3448] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 79.692631][ T3446] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 79.707250][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.722404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.731136][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.768125][ T1689] EXT4-fs (loop9): unmounting filesystem. [ 79.795020][ T10] device bridge_slave_1 left promiscuous mode [ 79.817180][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.863103][ T10] device bridge_slave_0 left promiscuous mode [ 79.873837][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.888749][ T10] device veth1_macvtap left promiscuous mode [ 79.899452][ T10] device veth0_vlan left promiscuous mode [ 79.943106][ T3480] xt_hashlimit: size too large, truncated to 1048576 [ 79.997113][ T3483] xt_connbytes: Forcing CT accounting to be enabled [ 80.004621][ T3483] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 80.136742][ T28] audit: type=1400 audit(1774020158.606:415): avc: denied { setopt } for pid=3498 comm="syz.3.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.264783][ T28] audit: type=1400 audit(1774020158.736:416): avc: denied { write } for pid=291 comm="kworker/0:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30655 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.301540][ T60] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.311003][ T356] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 82.336395][ T28] audit: type=1400 audit(1774020160.806:417): avc: denied { rename } for pid=3530 comm="syz.6.1307" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.340025][ T3537] loop9: detected capacity change from 0 to 1024 [ 82.422133][ T3541] binder: 3540:3541 ioctl 541b 0 returned -22 [ 82.438412][ T3547] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1314'. [ 82.441922][ T3537] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 82.461100][ T3537] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.479638][ T3537] EXT4-fs error (device loop9): ext4_map_blocks:745: inode #15: comm syz.9.1310: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.493336][ T3537] EXT4-fs (loop9): Remounting filesystem read-only [ 82.501863][ T3537] EXT4-fs error (device loop9): ext4_ext_remove_space:2930: inode #15: comm syz.9.1310: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 82.502340][ T60] usb 4-1: unable to get BOS descriptor or descriptor too short [ 82.538437][ T60] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.555544][ T3537] EXT4-fs (loop9): Remounting filesystem read-only [ 82.558753][ T60] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.564626][ T356] usb 2-1: config 0 has no interfaces? [ 82.573625][ T60] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 82.585722][ T3558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3558 comm=syz.6.1319 [ 82.601010][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.603144][ T356] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.609064][ T60] usb 4-1: Product: syz [ 82.623309][ T1689] EXT4-fs (loop9): unmounting filesystem. [ 82.631008][ T60] usb 4-1: Manufacturer: syz [ 82.635748][ T60] usb 4-1: SerialNumber: syz [ 82.642241][ T60] usb 4-1: selecting invalid altsetting 1 [ 82.644047][ T356] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 82.648817][ T60] usb 4-1: unit 6 not found! [ 82.657659][ T356] usb 2-1: Product: syz [ 82.691200][ T356] usb 2-1: SerialNumber: syz [ 82.706873][ T356] usb 2-1: config 0 descriptor?? [ 82.979883][ T6] usb 2-1: USB disconnect, device number 7 [ 83.008616][ T3575] pimreg: tun_chr_ioctl cmd 1074025677 [ 83.014264][ T3575] pimreg: linktype set to 769 [ 83.044732][ T60] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 83.090923][ T3152] udevd[3152]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.113711][ T3578] loop9: detected capacity change from 0 to 512 [ 83.129333][ T3578] EXT4-fs (loop9): orphan cleanup on readonly fs [ 83.136649][ T3578] EXT4-fs error (device loop9): ext4_find_extent:936: inode #4: comm syz.9.1327: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 83.154087][ T3578] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=-117 [ 83.164163][ T3578] EXT4-fs warning (device loop9): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 83.178985][ T3578] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 83.185997][ T3578] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 83.196520][ T3578] EXT4-fs (loop9): unmounting filesystem. [ 83.266378][ T3587] 9pnet_fd: Insufficient options for proto=fd [ 83.275421][ T60] usb 4-1: USB disconnect, device number 2 [ 83.307032][ T3595] netem: change failed [ 83.453729][ T3614] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1343'. [ 83.512766][ T3624] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1348'. [ 83.521822][ T3624] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1348'. [ 83.530918][ T3624] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1348'. [ 83.533128][ T3627] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1349'. [ 83.557947][ T3629] loop1: detected capacity change from 0 to 1024 [ 83.582569][ T3629] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 83.598945][ T3629] EXT4-fs (loop1): shut down requested (1) [ 83.625102][ T284] EXT4-fs (loop1): unmounting filesystem. [ 83.651833][ T3639] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3639 comm=syz.1.1354 [ 83.690312][ T3641] input: syz1 as /devices/virtual/input/input8 [ 83.725985][ T28] audit: type=1326 audit(1774020162.196:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz.6.1358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88a1f9c799 code=0x0 [ 83.841037][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 83.860258][ T28] audit: type=1400 audit(1774020162.326:419): avc: denied { write } for pid=3669 comm="syz.3.1368" path="socket:[31970]" dev="sockfs" ino=31970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.929802][ T3677] input: syz0 as /devices/virtual/input/input9 [ 83.992297][ T3687] loop9: detected capacity change from 0 to 512 [ 84.043970][ T3692] loop9: detected capacity change from 0 to 1024 [ 84.051512][ T3692] EXT4-fs: Ignoring removed bh option [ 84.068008][ T3692] EXT4-fs: Ignoring removed oldalloc option [ 84.074460][ T3692] EXT4-fs: Ignoring removed nobh option [ 84.080585][ T3694] netlink: 'syz.3.1378': attribute type 11 has an invalid length. [ 84.084496][ T3692] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.100595][ T3694] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1378'. [ 84.114010][ T3692] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 84.137633][ T28] audit: type=1400 audit(1774020162.606:420): avc: denied { create } for pid=3699 comm="syz.4.1380" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 84.165020][ T28] audit: type=1400 audit(1774020162.606:421): avc: denied { mounton } for pid=3699 comm="syz.4.1380" path="/304/file0" dev="tmpfs" ino=1603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 84.188917][ T1689] EXT4-fs (loop9): unmounting filesystem. [ 84.189582][ T28] audit: type=1400 audit(1774020162.606:422): avc: denied { ioctl } for pid=3699 comm="syz.4.1380" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 84.204190][ T3704] loop4: detected capacity change from 0 to 512 [ 84.259146][ T3704] EXT4-fs: Ignoring removed i_version option [ 84.273849][ T3704] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.287396][ T28] audit: type=1400 audit(1774020162.766:423): avc: denied { rename } for pid=3703 comm="syz.4.1382" name="#b" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.310329][ T28] audit: type=1400 audit(1774020162.766:424): avc: denied { unlink } for pid=3703 comm="syz.4.1382" name="#c" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.336564][ T287] EXT4-fs (loop4): unmounting filesystem. [ 84.491403][ T3717] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.499794][ T3717] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.508412][ T3717] device bridge_slave_0 entered promiscuous mode [ 84.515929][ T3717] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.518788][ T28] audit: type=1400 audit(1774020162.986:425): avc: denied { bind } for pid=3726 comm="syz.4.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.530768][ T3717] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.559931][ T3717] device bridge_slave_1 entered promiscuous mode [ 84.581241][ T28] audit: type=1400 audit(1774020163.026:426): avc: denied { listen } for pid=3726 comm="syz.4.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.656406][ T3735] loop1: detected capacity change from 0 to 4096 [ 84.733592][ T3735] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 84.787756][ T3717] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.794837][ T3717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.802120][ T3717] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.809142][ T3717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.836063][ T284] EXT4-fs (loop1): unmounting filesystem. [ 84.857302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.866025][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.887242][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.933625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.959264][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.966340][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.980838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.997202][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.004373][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.032775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.056072][ T334] device bridge_slave_1 left promiscuous mode [ 85.062244][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.075950][ T334] device bridge_slave_0 left promiscuous mode [ 85.082591][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.090655][ T334] device veth1_macvtap left promiscuous mode [ 85.106777][ T334] device veth0_vlan left promiscuous mode [ 85.204354][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.244701][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.268585][ T3717] device veth0_vlan entered promiscuous mode [ 85.275381][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.283895][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.291932][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.306442][ T3717] device veth1_macvtap entered promiscuous mode [ 85.313675][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.322872][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.331530][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.352597][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.356396][ T3780] loop4: detected capacity change from 0 to 40427 [ 85.376880][ T3780] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 85.384889][ T3780] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 85.385112][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.394402][ T3780] F2FS-fs (loop4): invalid crc value [ 85.416943][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.425639][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.442824][ T3780] F2FS-fs (loop4): Found nat_bits in checkpoint [ 85.486587][ T3780] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 85.498074][ T3780] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 85.521084][ T356] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 85.732079][ T356] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 85.743676][ T356] usb 4-1: config 0 has no interface number 0 [ 85.749783][ T356] usb 4-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 85.762641][ T356] usb 4-1: config 0 interface 64 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.781689][ T356] usb 4-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 85.804740][ T356] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 85.814892][ T3806] loop4: detected capacity change from 0 to 128 [ 85.828819][ T356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.839680][ T3806] EXT4-fs (loop4): Test dummy encryption mode enabled [ 85.850059][ T356] usb 4-1: config 0 descriptor?? [ 85.858944][ T3806] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 85.871957][ T3806] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.910387][ T287] EXT4-fs (loop4): unmounting filesystem. [ 86.187417][ T3840] tipc: Started in network mode [ 86.192505][ T3840] tipc: Node identity ac14140f, cluster identity 4711 [ 86.199558][ T3840] tipc: New replicast peer: 255.255.255.255 [ 86.206087][ T3840] tipc: Enabled bearer , priority 10 [ 86.231589][ T3844] 9pnet_fd: Insufficient options for proto=fd [ 86.259602][ T356] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 86.270259][ T356] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 86.277764][ T356] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 86.285278][ T356] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 86.296960][ T356] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 86.304476][ T356] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 86.311858][ T356] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 86.318923][ T356] uclogic 0003:5543:0781.0009: collection stack underflow [ 86.326397][ T356] uclogic 0003:5543:0781.0009: item 0 0 0 12 parsing failed [ 86.333855][ T356] uclogic 0003:5543:0781.0009: parse failed [ 86.339806][ T356] uclogic: probe of 0003:5543:0781.0009 failed with error -22 [ 86.476185][ T60] usb 4-1: USB disconnect, device number 3 [ 86.988277][ T3859] syz.9.1445[3859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.988368][ T3859] syz.9.1445[3859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.053309][ T3874] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1449'. [ 87.114455][ T3880] device bridge0 entered promiscuous mode [ 87.120382][ T3880] device macsec1 entered promiscuous mode [ 87.152294][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.195930][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.228866][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.321135][ T60] tipc: Node number set to 2886997007 [ 89.300996][ T6] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 89.350088][ T28] audit: type=1400 audit(1774020423.817:427): avc: denied { mount } for pid=3919 comm="syz.1.1472" name="/" dev="ramfs" ino=32622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 89.451462][ T3937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1480'. [ 89.491002][ T6] usb 10-1: Using ep0 maxpacket: 16 [ 89.497282][ T6] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 89.515263][ T6] usb 10-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 89.528084][ T3942] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 89.528780][ T3943] loop1: detected capacity change from 0 to 512 [ 89.540061][ T3942] sch_tbf: burst 0 is lower than device veth0_to_hsr mtu (1514) ! [ 89.544965][ T6] usb 10-1: config 0 has no interface number 0 [ 89.562430][ T6] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 89.571632][ T3943] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 89.589742][ T6] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.598073][ T6] usb 10-1: Product: syz [ 89.602719][ T6] usb 10-1: Manufacturer: syz [ 89.607407][ T6] usb 10-1: SerialNumber: syz [ 89.615865][ T6] usb 10-1: config 0 descriptor?? [ 89.727145][ T3963] netlink: 'syz.3.1492': attribute type 11 has an invalid length. [ 89.763237][ T3963] netlink: 'syz.3.1492': attribute type 1 has an invalid length. [ 89.785474][ T3963] netlink: 3593 bytes leftover after parsing attributes in process `syz.3.1492'. [ 89.836867][ T6] usb 10-1: Found UVC 0.00 device syz (046d:08f3) [ 89.851571][ T6] usb 10-1: No valid video chain found. [ 89.860681][ T6] usb 10-1: USB disconnect, device number 5 [ 89.961630][ T28] audit: type=1326 audit(1774020424.437:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.1504" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79b659c799 code=0x0 [ 90.112321][ T3997] overlayfs: unrecognized mount option "\" or missing value [ 90.229950][ T4005] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1512'. [ 90.251615][ T4005] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 90.315690][ T3967] loop4: detected capacity change from 0 to 131072 [ 90.331472][ T3967] F2FS-fs (loop4): Test dummy encryption mode enabled [ 90.338662][ T3967] F2FS-fs (loop4): invalid crc value [ 90.351301][ T3967] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.385677][ T4020] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 90.403404][ T4024] fuse: Bad value for 'fd' [ 90.437190][ T3967] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 90.504253][ T4035] loop9: detected capacity change from 0 to 4096 [ 90.534092][ T4035] EXT4-fs (loop9): Test dummy encryption mode enabled [ 90.548888][ T4035] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 90.557230][ T4035] System zones: 0-5 [ 90.571371][ T4035] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 90.602141][ T28] audit: type=1400 audit(1774020425.077:429): avc: denied { module_load } for pid=4034 comm="syz.9.1525" path="/12/file0/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1 [ 90.625720][ T4035] Invalid ELF header magic: != ELF [ 90.655789][ T3717] EXT4-fs (loop9): unmounting filesystem. [ 90.684292][ T4043] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 90.706542][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 90.715437][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.747743][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 90.756130][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.805932][ T4061] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1536'. [ 91.079109][ T4094] loop1: detected capacity change from 0 to 256 [ 91.133085][ T4100] device macsec0 entered promiscuous mode [ 91.244064][ T4112] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1555'. [ 91.457787][ T4131] loop9: detected capacity change from 0 to 128 [ 91.477283][ T4131] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.489888][ T4133] loop3: detected capacity change from 0 to 512 [ 91.516734][ T4133] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1566: invalid indirect mapped block 2185560079 (level 0) [ 91.570197][ T4133] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1566: invalid indirect mapped block 2683928664 (level 1) [ 91.597694][ T4133] EXT4-fs (loop3): 1 truncate cleaned up [ 91.603619][ T4133] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 91.633992][ T3368] EXT4-fs (loop3): unmounting filesystem. [ 91.916845][ T4147] loop3: detected capacity change from 0 to 40427 [ 91.931135][ T4147] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 91.937525][ T4147] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 91.952602][ T28] audit: type=1326 audit(1774020426.427:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.9.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05cf9c799 code=0x7ffc0000 [ 91.969882][ T4147] F2FS-fs (loop3): invalid crc value [ 91.978641][ T28] audit: type=1326 audit(1774020426.427:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.9.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05cf9c799 code=0x7ffc0000 [ 92.005026][ T28] audit: type=1326 audit(1774020426.427:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.9.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05cf9c799 code=0x7ffc0000 [ 92.029055][ T4147] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 92.029953][ T28] audit: type=1326 audit(1774020426.427:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.9.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fb05cf9c799 code=0x7ffc0000 [ 92.064905][ T28] audit: type=1326 audit(1774020426.427:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.9.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05cf9c799 code=0x7ffc0000 [ 92.088429][ T28] audit: type=1326 audit(1774020426.427:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.9.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05cf9c799 code=0x7ffc0000 [ 92.121175][ T28] audit: type=1326 audit(1774020426.427:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.9.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05cf9c799 code=0x7ffc0000 [ 92.142176][ T4147] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 92.154139][ T4147] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 92.174017][ T4169] loop1: detected capacity change from 0 to 256 [ 92.181881][ T4171] loop4: detected capacity change from 0 to 512 [ 92.188188][ T4169] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 92.212464][ T4173] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1582'. [ 92.212624][ T4171] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.240288][ T4173] netem: unknown loss type 13 [ 92.246690][ T4173] netem: change failed [ 92.258212][ T4171] EXT4-fs (loop4): 1 truncate cleaned up [ 92.268928][ T4171] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.296179][ T4176] loop9: detected capacity change from 0 to 2048 [ 92.308950][ T3368] syz-executor: attempt to access beyond end of device [ 92.308950][ T3368] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.355491][ T4176] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 92.373211][ T287] EXT4-fs (loop4): unmounting filesystem. [ 92.427771][ T3717] EXT4-fs (loop9): unmounting filesystem. [ 92.497837][ T4197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1592'. [ 93.081637][ T4240] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 93.113381][ T4240] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.163726][ T3717] EXT4-fs (loop9): unmounting filesystem. [ 93.251942][ T4253] netlink: 128 bytes leftover after parsing attributes in process `syz.9.1616'. [ 93.270984][ T4253] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1616'. [ 93.290094][ T4253] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1616'. [ 93.426850][ T4269] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 93.444563][ T4269] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 93.466116][ T4269] EXT4-fs error (device loop9): ext4_get_journal_inode:5743: inode #5: comm syz.9.1622: unexpected bad inode w/o EXT4_IGET_BAD [ 93.504859][ T4269] EXT4-fs (loop9): no journal found [ 93.510140][ T4269] EXT4-fs (loop9): can't get journal size [ 93.561396][ T4269] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 93.599623][ T3717] EXT4-fs (loop9): unmounting filesystem. [ 93.692071][ T4299] overlayfs: upper fs does not support file handles, falling back to index=off. [ 93.711981][ T4299] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 93.732797][ T4299] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 93.785294][ T4313] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.814429][ T4313] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.849930][ T4313] EXT4-fs error (device loop9): ext4_ext_check_inode:520: inode #11: comm syz.9.1645: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 93.875516][ T4313] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1645: couldn't read orphan inode 11 (err -117) [ 93.889233][ T4313] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 93.913848][ T4287] F2FS-fs (loop4): Found nat_bits in checkpoint [ 93.934697][ T3717] EXT4-fs (loop9): unmounting filesystem. [ 93.965082][ T4287] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 94.004284][ T4334] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1650'. [ 94.039348][ T287] syz-executor: attempt to access beyond end of device [ 94.039348][ T287] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.369809][ T4345] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 94.384353][ T4345] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 94.402512][ T4345] F2FS-fs (loop9): invalid crc value [ 94.433772][ T4345] F2FS-fs (loop9): Found nat_bits in checkpoint [ 94.454269][ T4365] user requested TSC rate below hardware speed [ 94.512251][ T4345] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 94.519305][ T4345] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 94.520982][ T6] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.633422][ T334] kworker/u4:3: attempt to access beyond end of device [ 94.633422][ T334] loop9: rw=1, sector=45096, nr_sectors = 24 limit=40427 [ 94.697448][ T4379] set_capacity_and_notify: 5 callbacks suppressed [ 94.697465][ T4379] loop1: detected capacity change from 0 to 512 [ 94.737809][ T4379] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 94.745908][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 94.754723][ T6] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.777938][ T4379] System zones: 1-12 [ 94.785165][ T6] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.797863][ T4379] EXT4-fs error (device loop1): ext4_iget_extra_inode:4758: inode #15: comm syz.1.1672: corrupted in-inode xattr [ 94.818558][ T6] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 94.833215][ T4379] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1672: couldn't read orphan inode 15 (err -117) [ 94.845304][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.852243][ T4379] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 94.868173][ T6] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 94.910051][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.936304][ T284] EXT4-fs (loop1): unmounting filesystem. [ 94.946320][ T6] usb 5-1: config 0 descriptor?? [ 95.576547][ T6] usb 5-1: USB disconnect, device number 6 [ 95.761533][ T4401] loop9: detected capacity change from 0 to 40427 [ 95.776933][ T4401] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 95.784923][ T4401] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 95.814392][ T4401] F2FS-fs (loop9): Found nat_bits in checkpoint [ 95.852365][ T4401] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 95.859454][ T4401] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 95.937886][ T3717] syz-executor: attempt to access beyond end of device [ 95.937886][ T3717] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 96.546629][ T4429] loop1: detected capacity change from 0 to 256 [ 96.607294][ T4437] loop9: detected capacity change from 0 to 128 [ 96.627759][ T4429] FAT-fs (loop1): Directory bread(block 64) failed [ 96.649432][ T4437] EXT4-fs (loop9): Test dummy encryption mode enabled [ 96.656493][ T4429] FAT-fs (loop1): Directory bread(block 65) failed [ 96.670621][ T4429] FAT-fs (loop1): Directory bread(block 66) failed [ 96.682130][ T4429] FAT-fs (loop1): Directory bread(block 67) failed [ 96.688690][ T4429] FAT-fs (loop1): Directory bread(block 68) failed [ 96.696517][ T4437] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 96.704463][ T4429] FAT-fs (loop1): Directory bread(block 69) failed [ 96.711766][ T4429] FAT-fs (loop1): Directory bread(block 70) failed [ 96.718374][ T4429] FAT-fs (loop1): Directory bread(block 71) failed [ 96.725122][ T4429] FAT-fs (loop1): Directory bread(block 72) failed [ 96.731820][ T4437] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.731888][ T4429] FAT-fs (loop1): Directory bread(block 73) failed [ 96.777407][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 96.777420][ T28] audit: type=1400 audit(1774020431.247:450): avc: denied { reparent } for pid=4436 comm="syz.9.1695" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 96.865867][ T3717] EXT4-fs (loop9): unmounting filesystem. [ 97.274823][ T4451] loop9: detected capacity change from 0 to 40427 [ 97.293106][ T4475] netlink: 'syz.4.1711': attribute type 25 has an invalid length. [ 97.311359][ T4451] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 97.319912][ T4451] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 97.331698][ T4475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1711'. [ 97.357825][ T4480] loop3: detected capacity change from 0 to 256 [ 97.381824][ T4451] F2FS-fs (loop9): Found nat_bits in checkpoint [ 97.391792][ T4484] loop4: detected capacity change from 0 to 16 [ 97.409433][ T4480] FAT-fs (loop3): Unrecognized mount option "iocharet=iso8859-6" or missing value [ 97.419631][ T4484] erofs: (device loop4): mounted with root inode @ nid 36. [ 97.491804][ T4451] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 97.501000][ T4451] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 98.005582][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1733'. [ 98.022692][ T4530] loop1: detected capacity change from 0 to 256 [ 98.022717][ T4526] device erspan0 entered promiscuous mode [ 98.029377][ T4530] exfat: Deprecated parameter 'namecase' [ 98.063732][ T4530] exfat: Deprecated parameter 'namecase' [ 98.089911][ T4530] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 98.153119][ T4541] loop4: detected capacity change from 0 to 256 [ 98.159714][ T4541] exfat: Deprecated parameter 'utf8' [ 98.193007][ T4546] netlink: 'syz.3.1742': attribute type 34 has an invalid length. [ 98.215467][ T4541] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 98.257545][ T28] audit: type=1400 audit(1774020432.727:451): avc: denied { rename } for pid=4540 comm="syz.4.1739" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=1048703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.330835][ T4557] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 98.369745][ T28] audit: type=1326 audit(1774020432.787:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.3.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281239c799 code=0x7ffc0000 [ 98.414323][ T28] audit: type=1326 audit(1774020432.787:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.3.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281239c799 code=0x7ffc0000 [ 98.475444][ T4574] netlink: 'syz.3.1756': attribute type 12 has an invalid length. [ 98.500840][ T28] audit: type=1326 audit(1774020432.787:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.3.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f281239c799 code=0x7ffc0000 [ 98.529054][ T4574] netlink: 'syz.3.1756': attribute type 29 has an invalid length. [ 98.537966][ T4574] netlink: 'syz.3.1756': attribute type 2 has an invalid length. [ 98.546263][ T28] audit: type=1326 audit(1774020432.787:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.3.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281239c799 code=0x7ffc0000 [ 98.570427][ T4574] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1756'. [ 98.597844][ T28] audit: type=1326 audit(1774020432.787:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.3.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281239c799 code=0x7ffc0000 [ 98.628096][ T4585] loop9: detected capacity change from 0 to 128 [ 98.671025][ T28] audit: type=1326 audit(1774020432.787:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.3.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f281239c799 code=0x7ffc0000 [ 98.704152][ T28] audit: type=1326 audit(1774020432.787:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.3.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281239c799 code=0x7ffc0000 [ 98.729114][ T28] audit: type=1326 audit(1774020432.787:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.3.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281239c799 code=0x7ffc0000 [ 98.768154][ T3152] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.015168][ T4628] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 99.035722][ T4628] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.058381][ T4638] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 99.073788][ T4638] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.099964][ T287] EXT4-fs (loop4): unmounting filesystem. [ 99.108869][ T3368] EXT4-fs (loop3): unmounting filesystem. [ 99.247192][ T4660] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 99.254782][ T4661] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 99.258473][ T4660] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.271895][ T4660] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.1790: Block bitmap for bg 0 marked uninitialized [ 99.285112][ T4661] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.289366][ T4660] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 99.341754][ T4660] EXT4-fs (loop4): 1 orphan inode deleted [ 99.357786][ T4660] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 99.424273][ T3368] EXT4-fs (loop3): unmounting filesystem. [ 99.458302][ T287] EXT4-fs (loop4): unmounting filesystem. [ 99.503109][ T4674] batadv_slave_0: Caught tx_queue_len zero misconfig [ 99.632036][ T4682] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 99.649947][ T4682] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.948473][ T3717] EXT4-fs (loop9): unmounting filesystem. [ 101.955456][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'. [ 102.261036][ T60] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 102.350993][ T829] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 102.416263][ T4724] set_capacity_and_notify: 6 callbacks suppressed [ 102.416282][ T4724] loop1: detected capacity change from 0 to 40427 [ 102.434772][ T4724] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 102.451119][ T4724] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 102.459482][ T4724] F2FS-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value [ 102.472313][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.483862][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.502121][ T60] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 102.519831][ T60] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 102.535414][ T60] usb 5-1: Manufacturer: syz [ 102.546962][ T829] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.547169][ T60] usb 5-1: config 0 descriptor?? [ 102.568296][ T829] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.588823][ T829] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 102.608290][ T829] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.627369][ T829] usb 10-1: config 0 descriptor?? [ 102.735259][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 102.735273][ T28] audit: type=1400 audit(1774020437.207:463): avc: denied { name_bind } for pid=4732 comm="syz.1.1821" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 102.802308][ T4737] loop1: detected capacity change from 0 to 1024 [ 102.821281][ T4737] EXT4-fs: Ignoring removed bh option [ 102.834206][ T4737] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.880438][ T28] audit: type=1400 audit(1774020437.347:464): avc: denied { setattr } for pid=4736 comm="syz.1.1823" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.912989][ T4737] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.1823: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 102.950339][ T28] audit: type=1400 audit(1774020437.387:465): avc: denied { write open } for pid=4736 comm="syz.1.1823" path=2F202864656C6574656429 dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.974777][ T28] audit: type=1400 audit(1774020437.387:466): avc: denied { link } for pid=4736 comm="syz.1.1823" name="#20" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.996829][ T4737] EXT4-fs (loop1): Remounting filesystem read-only [ 103.051218][ T284] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /372/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 103.079265][ T284] EXT4-fs (loop1): Remounting filesystem read-only [ 103.086569][ T284] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /372/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 103.111447][ T284] EXT4-fs (loop1): Remounting filesystem read-only [ 103.118063][ T284] EXT4-fs error (device loop1): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 103.140029][ T284] EXT4-fs (loop1): Remounting filesystem read-only [ 103.148471][ T284] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.162821][ T284] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /372/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 103.185311][ T284] EXT4-fs (loop1): Remounting filesystem read-only [ 103.192071][ T284] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /372/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 103.214612][ T284] EXT4-fs (loop1): Remounting filesystem read-only [ 103.221389][ T284] EXT4-fs error (device loop1): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 103.241468][ T284] EXT4-fs (loop1): Remounting filesystem read-only [ 103.248175][ T284] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.267875][ T284] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /372/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 103.306951][ T284] EXT4-fs (loop1): Remounting filesystem read-only [ 103.314231][ T284] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /372/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 103.341636][ T284] EXT4-fs (loop1): Remounting filesystem read-only [ 103.348225][ T284] EXT4-fs error (device loop1): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 103.373631][ T284] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.388987][ T284] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.404048][ T284] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.414981][ T60] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #200: -71 [ 103.421037][ T284] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.441790][ T284] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.447395][ T60] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 103.457054][ T284] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.479817][ T829] hid-led: probe of 0003:27B8:01ED.000C failed with error -71 [ 103.481009][ T60] uclogic 0003:256C:006D.000B: failed probing pen v2 parameters: -71 [ 103.496815][ T829] usb 10-1: USB disconnect, device number 6 [ 103.512969][ T284] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.515967][ T60] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 103.537882][ T284] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 103.555022][ T60] uclogic: probe of 0003:256C:006D.000B failed with error -71 [ 103.599714][ T60] usb 5-1: USB disconnect, device number 7 [ 103.663916][ T8] tipc: Left network mode [ 103.854789][ T4760] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.861916][ T4760] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.869392][ T4760] device bridge_slave_0 entered promiscuous mode [ 103.879613][ T4760] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.886712][ T4760] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.894234][ T4760] device bridge_slave_1 entered promiscuous mode [ 103.973285][ T4760] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.980373][ T4760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.987693][ T4760] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.994758][ T4760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.013451][ T4774] loop9: detected capacity change from 0 to 512 [ 104.035910][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.044726][ T4774] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.1835: inode has both inline data and extents flags [ 104.058140][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.067024][ T4774] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1835: couldn't read orphan inode 15 (err -117) [ 104.079224][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.101306][ T4774] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 104.110803][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.130666][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.137788][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.148331][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.163195][ T3717] EXT4-fs (loop9): unmounting filesystem. [ 104.169339][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.176416][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.191287][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.193581][ T4777] loop9: detected capacity change from 0 to 128 [ 104.205842][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.214438][ T4777] EXT4-fs: Ignoring removed nobh option [ 104.227160][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.248320][ T4760] device veth0_vlan entered promiscuous mode [ 104.256889][ T4777] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 104.266220][ T8] device bridge_slave_1 left promiscuous mode [ 104.273177][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.280694][ T8] device bridge_slave_0 left promiscuous mode [ 104.287310][ T4777] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.298095][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.306477][ T8] device bridge0 left promiscuous mode [ 104.329219][ T8] device veth1_macvtap left promiscuous mode [ 104.335721][ T8] device veth0_vlan left promiscuous mode [ 104.349659][ T3717] EXT4-fs (loop9): unmounting filesystem. [ 104.497123][ T4783] mmap: syz.9.1838 (4783) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.523754][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.543228][ T4760] device veth1_macvtap entered promiscuous mode [ 104.550394][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.559868][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.567586][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.604519][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.625105][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.977237][ T4823] loop7: detected capacity change from 0 to 7 [ 105.002539][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.011727][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 105.020959][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.030108][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 105.037969][ T4823] loop7: unable to read partition table [ 105.054337][ T4823] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 105.054367][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.075895][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 105.091027][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.100194][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 105.108070][ T3152] loop7: unable to read partition table [ 105.123348][ T4800] loop3: detected capacity change from 0 to 40427 [ 105.130425][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.139572][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 105.155218][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.164401][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 105.175094][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.181516][ T4836] tipc: Started in network mode [ 105.184245][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 105.197260][ T4836] tipc: Node identity ac14140f, cluster identity 4711 [ 105.199415][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.211050][ T4836] tipc: New replicast peer: 255.255.255.255 [ 105.213152][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 105.227189][ T4836] tipc: Enabled bearer , priority 10 [ 105.230966][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.242466][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 105.264459][ T4800] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.354771][ T28] audit: type=1400 audit(1774020439.827:467): avc: denied { create } for pid=4846 comm="syz.0.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 105.378535][ T4800] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.465606][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1868'. [ 105.475059][ T3368] syz-executor: attempt to access beyond end of device [ 105.475059][ T3368] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.491422][ T4855] n: the hash_elasticity option has been deprecated and is always 16 [ 105.512441][ T4855] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 105.533770][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1868'. [ 105.552398][ T4856] n: the hash_elasticity option has been deprecated and is always 16 [ 105.571321][ T4856] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 105.848150][ T4827] loop4: detected capacity change from 0 to 131072 [ 105.893910][ T4827] F2FS-fs (loop4): Found nat_bits in checkpoint [ 105.933713][ T4871] loop3: detected capacity change from 0 to 4096 [ 105.950037][ T4827] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 105.962609][ T4871] EXT4-fs (loop3): Test dummy encryption mode enabled [ 105.994974][ T4871] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.038779][ T4871] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #15: comm syz.3.1873: corrupted inode contents [ 106.058160][ T4871] EXT4-fs error (device loop3): ext4_dirty_inode:6139: inode #15: comm syz.3.1873: mark_inode_dirty error [ 106.101803][ T4871] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #15: comm syz.3.1873: corrupted inode contents [ 106.161481][ T4871] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1873: mark_inode_dirty error [ 106.206736][ T4871] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #15: comm syz.3.1873: corrupted inode contents [ 106.241763][ T4871] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1873: mark_inode_dirty error [ 106.273505][ T4871] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #15: comm syz.3.1873: corrupted inode contents [ 106.307801][ T4871] EXT4-fs error (device loop3): ext4_truncate:4320: inode #15: comm syz.3.1873: mark_inode_dirty error [ 106.341006][ T6] tipc: Node number set to 2886997007 [ 106.346759][ T4871] EXT4-fs error (device loop3) in ext4_setattr:5678: Corrupt filesystem [ 106.418013][ T3368] EXT4-fs (loop3): unmounting filesystem. [ 106.492222][ T4893] loop9: detected capacity change from 0 to 8192 [ 106.526487][ T4893] FAT-fs (loop9): Unrecognized mount option "`NX#EeOnøHԹ]%Ցew" or missing value [ 109.276430][ T4917] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 110.261434][ T4918] loop9: detected capacity change from 0 to 1024 [ 110.355669][ T4918] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 110.394345][ T3717] EXT4-fs (loop9): unmounting filesystem. [ 110.403554][ T4939] netlink: 'syz.3.1903': attribute type 16 has an invalid length. [ 110.413825][ T4939] netlink: 'syz.3.1903': attribute type 17 has an invalid length. [ 110.482876][ T4939] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.490083][ T4939] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.603842][ T334] tipc: Disabling bearer [ 110.609260][ T334] tipc: Left network mode [ 110.675234][ T4953] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.676639][ T4946] loop4: detected capacity change from 0 to 40427 [ 110.689466][ T4953] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.697158][ T4953] device bridge_slave_0 entered promiscuous mode [ 110.702433][ T4946] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(3584) blocks(512) [ 110.704319][ T4953] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.719085][ T4953] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.726641][ T4946] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 110.735448][ T4946] F2FS-fs (loop4): invalid crc value [ 110.761121][ T4953] device bridge_slave_1 entered promiscuous mode [ 110.782096][ T4946] F2FS-fs (loop4): Found nat_bits in checkpoint [ 110.836402][ T4946] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 110.839737][ T4953] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.849306][ T4946] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 110.850493][ T4953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.850577][ T4953] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.872198][ T4953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.910058][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.921251][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.929366][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.940055][ T287] syz-executor: attempt to access beyond end of device [ 110.940055][ T287] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.962573][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.970891][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.977968][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.985666][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.994234][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.001296][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.030174][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.040065][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.063676][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.079556][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.093533][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.108240][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.116663][ T4953] device veth0_vlan entered promiscuous mode [ 111.139058][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.153494][ T4953] device veth1_macvtap entered promiscuous mode [ 111.176712][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.191597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.218616][ T4994] loop4: detected capacity change from 0 to 2048 [ 111.252538][ T334] device bridge_slave_1 left promiscuous mode [ 111.254878][ T4996] loop5: detected capacity change from 0 to 1024 [ 111.262670][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.273913][ T4994] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 111.290058][ T334] device bridge_slave_0 left promiscuous mode [ 111.306959][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.317592][ T334] device veth1_macvtap left promiscuous mode [ 111.317936][ T4996] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 111.323746][ T334] device veth0_vlan left promiscuous mode [ 111.342796][ T4994] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 111.348531][ T4996] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.367795][ T4994] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 111.367834][ T4994] EXT4-fs (loop4): This should not happen!! Data will be lost [ 111.367834][ T4994] [ 111.367846][ T4994] EXT4-fs (loop4): Total free blocks count 0 [ 111.367856][ T4994] EXT4-fs (loop4): Free/Dirty block details [ 111.367865][ T4994] EXT4-fs (loop4): free_blocks=2415919504 [ 111.367876][ T4994] EXT4-fs (loop4): dirty_blocks=48 [ 111.367886][ T4994] EXT4-fs (loop4): Block reservation details [ 111.367894][ T4994] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 111.412836][ T4996] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1893: bg 0: block 112: padding at end of block bitmap is not set [ 111.450990][ T4996] EXT4-fs (loop5): Remounting filesystem read-only SYZFAIL: proc stdout read failed (errno 5: Input/output error) [ 111.461280][ T28] audit: type=1400 audit(1774020445.927:468): avc: denied { write } for pid=275 comm="syz-executor" path="pipe:[13877]" dev="pipefs" ino=13877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 111.488947][ T4953] EXT4-fs (loop5): unmounting filesystem. [ 111.848177][ T10] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 112.035056][ T334] tipc: Disabling bearer [ 112.040347][ T334] tipc: Left network mode [ 112.045654][ T334] tipc: Disabling bearer [ 112.051067][ T334] tipc: Left network mode [ 112.592119][ T334] device bridge_slave_1 left promiscuous mode [ 112.598482][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.605918][ T334] device bridge_slave_0 left promiscuous mode [ 112.612120][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.620128][ T334] device bridge_slave_1 left promiscuous mode [ 112.626484][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.634738][ T334] device bridge_slave_0 left promiscuous mode [ 112.640832][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.648824][ T334] device bridge_slave_1 left promiscuous mode [ 112.654983][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.662449][ T334] device bridge_slave_0 left promiscuous mode [ 112.668981][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.676837][ T334] device bridge_slave_1 left promiscuous mode [ 112.682953][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.690283][ T334] device bridge_slave_0 left promiscuous mode [ 112.696400][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.704107][ T334] device bridge_slave_1 left promiscuous mode [ 112.710179][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.717561][ T334] device bridge_slave_0 left promiscuous mode [ 112.723805][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.732037][ T334] device veth1_macvtap left promiscuous mode [ 112.738024][ T334] device veth0_vlan left promiscuous mode [ 112.744368][ T334] device veth1_macvtap left promiscuous mode [ 112.750364][ T334] device veth0_vlan left promiscuous mode [ 112.756464][ T334] device veth1_macvtap left promiscuous mode [ 112.762465][ T334] device veth0_vlan left promiscuous mode [ 112.768551][ T334] device veth1_macvtap left promiscuous mode [ 112.774725][ T334] device veth0_vlan left promiscuous mode