last executing test programs: 8m23.422394535s ago: executing program 2 (id=3): writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) 8m23.224111111s ago: executing program 2 (id=8): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 8m23.012086888s ago: executing program 2 (id=12): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2m12.445370938s ago: executing program 1 (id=11049): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0xd6, 0xffffffffffffffff, 0x0, 0x1000000}, {0xffffffff, 0x0, 0x9, 0x3}]}) 2m12.189351175s ago: executing program 1 (id=11050): r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x20048870) 2m12.06065705s ago: executing program 1 (id=11052): syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1fc, &(0x7f0000000640)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5000000001021d74be84dc5f6ec909000a0000003c0001800c00028004000100000000002c00018014000300200100"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 2m11.812850997s ago: executing program 1 (id=11055): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@dioread_lock}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@init_itable_val}, {@nodioread_nolock}]}, 0x1, 0x5e6, &(0x7f0000000540)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) 2m11.548320505s ago: executing program 1 (id=11059): r0 = socket(0x28, 0x801, 0x0) r1 = epoll_create(0x628) epoll_ctl$EPOLL_CTL_ADD(r1, 0x7ffffffe, r0, &(0x7f00000001c0)={0x30000009}) 2m10.184085936s ago: executing program 1 (id=11086): unshare(0x22020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) 2m10.141210498s ago: executing program 32 (id=11086): unshare(0x22020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) 1m1.852889002s ago: executing program 0 (id=12310): unshare(0x40600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0xffffffffffffffff, 0x4, 0xd) 1m1.802491554s ago: executing program 0 (id=12313): unshare(0x20060400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x240102, 0x0) getdents64(r0, 0x0, 0x0) 1m1.727218076s ago: executing program 0 (id=12325): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 1m1.689933417s ago: executing program 0 (id=12316): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$eJzs3M9rHOUbAPBnJptt2ub73VRErBcjIi2I26SSYotgKxUvHgS9Cg3ppoRsf5BEatIcNvoPiHoWvAhqUTzYcy+KXr1oe1U8CEVioyCikdkfSdpk09TudmL7+cC7877z7u7zPDvszrywuwHctwazmzRib0ScSCJKzf1pRBTrvb6IWuN+S4vzY78vzo8lsbz8yi9JJBFxfXF+rPVcSXO7uznoi4hvn0/igbfWx52enZscrVYrU83xgZnT5w5Mz849NXF69FTlVOXM8KFnRg6OHBo6PNKxWv/44eil3x578afanx//dfHXdz9M4mj0N+fW1tEpgzG48pqsVYiI0U4Hy0lPs561dSaFWzwo7XJSAAC0la65hnsoStETqxdvpfjyu1yTAwAAADpiuSdiGQAAALjHJdb/AAAAcI9rfQ/g+uL8WKvl+42Eu+vasYgYaNS/1GyNmULU6tu+6I2IXdeTWPuz1qTxsDs2GBE/Xj38WdaiS79D3kxtISIe3uj4J/X6B+q/4l5ffxoRQx2IP3jT+L9U/9EOxM+7fgDuT5ePNU5k689/6cr1T2xw/itscO76N/I+/7Wu/5bWXf+t1t/T5vrv5S3GuPDR++fbzWX1P3vphU9bLYufbe+oqNtwbSHikcJG9Scr9Sdt6j+xxRilv89X2s3lXf/yBxH7YuP6W5LN/5/owPhEtTLUuN0wxsI3I5+0i593/dnx39Wm/tb/P7U7/ue2GOO148c/X7fz6mp38/rTn4vJq/VesbnnjdGZmanhiGLy0vr9BzfPpXWf1nNk9e9/fPP3/0b1Z58JtebrkK0FFprbbPzmTTGfu3jhi3b5tNZ/eR7/k22O/9r6vy6sP/5vbzHGE1+9s7/d3Nr1b9ay+K21MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0pBHRH0laXumnabkcsTsiHoxdafXs9MyT42dfP3Mym4sYiN50fKJaGYqIUmOcZOPhen91fPCm8dMRsSci3ivtrI/LY2erJ/MuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBW7I6I/krQcEWlELJXStFzOOysAAACg4wZuHBbzygMAAADonoG8EwAAAAC6zvofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALtvz6OUrSUTUjuyst0yxOdeba2ZAt6V5JwDkpifvBIDcFPJOAMjNba7xXS7APSi5xXxf25kdHc8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO1r397LV5KIqB3ZWW+ZYnOuN9fMgG5L804AyE3PZpOFu5cHcPd5i8P9yxofSG4x37d6n9qNMzu6lhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA209/vSVpOSKKzX3lcsT/ImIgepPxiWplKCL+HxHfl3p3ZOPhlUf35ZY3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnTU9Ozc5Wq1WprJOGs3Oyh6d1U7SeMVq2yUfnTvsFGNbpLFNO3l/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkIfp2bnJ0Wq1MjWddyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3qZn5yZHq9XKVBc7edcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+/gkAAP//FUoKgg==") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m1.407249376s ago: executing program 0 (id=12320): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/xfrm_stat\x00') 59.468036675s ago: executing program 0 (id=12350): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x0) 59.365695418s ago: executing program 33 (id=12350): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x0) 17.817871306s ago: executing program 6 (id=13140): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a408000010000081500030014000200fc020000000000000000000000000000140001002001000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000214000200fc0200000000000000000000000000ff5876a326cf6f9901e907"], 0x5c}}, 0x0) 17.758033038s ago: executing program 6 (id=13141): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) fcntl$setlease(r0, 0x400, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 17.646186471s ago: executing program 6 (id=13146): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 17.530279895s ago: executing program 6 (id=13148): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1800080, &(0x7f0000000380)={[{@barrier}, {@barrier_val}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@noauto_da_alloc}, {@quota}, {@quota}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@nobh}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./bus\x00', 0x149c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 16.929862973s ago: executing program 6 (id=13153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.939881974s ago: executing program 6 (id=13183): r0 = socket(0x10, 0x803, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000001540)=[&(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0x0, 0x0, 0x4}]) 14.795645249s ago: executing program 34 (id=13183): r0 = socket(0x10, 0x803, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000001540)=[&(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0x0, 0x0, 0x4}]) 12.874610437s ago: executing program 7 (id=13204): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 12.684076353s ago: executing program 7 (id=13207): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) 12.599861316s ago: executing program 7 (id=13211): creat(&(0x7f0000000380)='./bus\x00', 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) setxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000"], 0xff3c, 0x1) 12.494782899s ago: executing program 7 (id=13213): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1800080, &(0x7f0000000380)={[{@barrier}, {@barrier_val}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@noauto_da_alloc}, {@quota}, {@quota}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@nobh}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./bus\x00', 0x149c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 11.990769334s ago: executing program 7 (id=13216): r0 = syz_io_uring_setup(0x29be, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x263}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002700)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 10.401533212s ago: executing program 7 (id=13227): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = syz_clone3(&(0x7f0000001880)={0x100000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x21) 10.311071475s ago: executing program 35 (id=13227): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = syz_clone3(&(0x7f0000001880)={0x100000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x21) 1.691629309s ago: executing program 5 (id=13429): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000abaff9)={0x77359400}, 0x10) 1.617165371s ago: executing program 5 (id=13431): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="4800000010003b0c00"/20, @ANYRES32=r1, @ANYBLOB="0000000000620000280012800b00010065727370616e00001800028004001200060010"], 0x48}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) 1.447254596s ago: executing program 5 (id=13434): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x9) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1.290264891s ago: executing program 4 (id=13439): r0 = open(&(0x7f0000000180)='./bus\x00', 0x4007e, 0x10) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x4) read$FUSE(r0, 0x0, 0x0) 1.279127631s ago: executing program 8 (id=13440): sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='x\x00\x00\x00', 0x4, 0x4044c80, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x8927, &(0x7f0000000140)) 1.174813454s ago: executing program 8 (id=13441): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.158699935s ago: executing program 4 (id=13442): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) 998.10592ms ago: executing program 4 (id=13445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) 942.370301ms ago: executing program 9 (id=13447): r0 = syz_io_uring_setup(0x386f, &(0x7f0000000300)={0x0, 0x2bf7, 0x40, 0x3, 0xd1}, &(0x7f0000001180), &(0x7f0000000440), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001140)={0x1, 0x0, &(0x7f0000000400)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1) 859.119664ms ago: executing program 8 (id=13448): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0040}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x1fffff, 0x0, 0x0, 0x0) 815.293495ms ago: executing program 9 (id=13449): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000300060001000000000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 699.901809ms ago: executing program 8 (id=13451): syz_mount_image$exfat(&(0x7f0000000440), &(0x7f0000000400)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000002a80)="$eJzs3AuYzlW7MPD7Xmv9GdOkp0kOw1rr/vOkwTJJkkOKHJIkSZKcEpImSRISQ0gSkpwPk+QwhOQwjUnjfD7knDR5pUmSkJzC+q7pbW/vu3v3297f2/581577d13rmnXPeu71rDX3zDz/9b+u5/m+x8i6zevVakpE8C/Bv35JAYAYABgCANcBQAAAleIrxeeOF5CY8q89CftzPZJ2tVfAriauf97G9c/buP55G9c/b+P6521c/7yN65+3cf0Zy8u2zyl2Pbe82/j+f17Gr///i+SUn/z1xvI39vxvpHD98zauf97G9c/buP55G9c/b+P6/+9X85+Mcf3zNq4/Y3nZ1b7/zO3qtqv9+8cYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjLG84569QAPBv/au9LsYYY4wxxhhjjP15fP6rvQLGGGOMMcYYY4z9z0MQIEFBAPkgP8RAAYiFayAOroWCcB1E4HqIhxugENwIhaEIFIVikADFoQRoMGCBIISSUAqicBOUhpshEcpAWSgHDspDEtwCFeBWqAi3QSW4HSrDHVAFqkI1qA53Qg24C+6GmlAL7oHaUAfqQj24F+rDfdAA7oeG8AA0ggehMTwETeBhaAqPQDN4FJrDY9ACHoeW0ApaQxto+3+V/zL0gVegL/SDFOgPA+BVGAiDYDC8BkPgdRgKb8AweBOGwwgYCW/BKHgbRsM7MAbGwjgYDxNgIkyCyTAFpkIqvAvT4D2YDu/DDJgJs2A2pMEcmAsfwDyYDwvgQ1gIH8EiWAxLYCmkw8eQAcsgEz6B5fApZMEKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22w2ewA3bCLtgNe2Av7IPPYT98AQfgS8iGr/6b+Wf/Q35PBAQUKFChwnyYD2MwBmMxFuMwDgtiQYxgBOMxHgthISyMhbEoFsUETMASWAINGiQkLIklMYpRLI2lMRETsSyWRYcOkzAJK+CtWBErYiWshJWxMlbBqlgVq2N1rIE18G6EKgHUwtpYG+tiXbwX78X7sAE2wIbYEBthI2yMjbEJNsGm2BSbYTNsjs2xBbbAltgSW2NrbIttsR22w/bYHjtiR+yEnbAzdsZkTMYu2AW7Ylfsht2wO3bHHtgDe2Iv7IUv48v4Cr6C/bC26I8DcAAOxIEHcv8YXsPXcSi+gW/gmzgcR+BIfAvfwrdxNJ7BMTgWx+E4rCEm4iScjCSmYiqm4jSchtNxOs7AmTgTZ2MazsG5OBfn4Xycjx/iQvwIP8LFuBiXYjqmYwYuw0zMxOV4FrNwBa7EVbga1+BqXIfrcR1uxE24EbfgFtyG2/Az/Ax34k7cjbtxL+7Fz/Fz/AK/wOGYjdl4EA/iITyEh/Ew5mAOHsEjeBSP4jE8hsfxOJ7Ak3gKT+JpPI1n8Cyew3N4AS/gRXwx4dtme8tsGA4ilxJK5BP5RIyIEbEiVsSJOFFQFBQRERHxIl4UEoVEYVFYFBVFRYJIECVECWGEESRCUVKUFFERFaVFaZEoEkVZUVY44USSSBIVRAVRUVQUlcTtorK4Q1QRVUUHV11UFzVER3e3qClqiVqitqgj6op6op6oL+qLBqKBaCgaikaikWgsHhJNRH8cjI+I3Mo0FyOwhRiJLUUr0Vq0EW/jE6KdGI3tRQfRUTwlxuIY7CzauWTxrOgiJmFX8byYjC+I7mIq9hAviZ6il+gtXhZ9RHvXV/QTM7C/GCBm40AxSAwWr4l5WEfkVqyueFMMFyPESPGWWIpvi9HiHTFGjBXjxHgxQUwUk8RkMUVMFaniXTFNvCemi/fFDDFTzBKzRZqYI+aKD8Q8MV8sEB+KheIjsUgsFkvEUpEuPhYZYpnIFJ+I5eJTkSVWiJVilVgt1oi1Yp1YLzaIjWKT2Cy2iK1im9guPhM7xE6xS+wWe8ResU98LvaLL8QB8aXIFl+Jg+Iv4pD4WhwW34gc8a04Ir4TR8X34pj4QRwXP4oT4qQ4JX4Sp8XP4ow4K86J8+KC+EVcFJfEZeEFSJRCSqlkIPPJ/DJGFpCx8hoZJ6+VBeV1MiKvl/HyBllI3igLyyKyqCwmE2RxWUJqaaSVJENZUpaSUXmTLC1vlomyjCwry0kny8skeYusIG+VFeVtspK8XVaWd8gqsqqsJqvLO2UNeZe8W9aUteQ9srasI+vKevJeWV/eJxvI+2VD+YBsJB+UjeVDsol8WDaVj8hm8lHZXD4mW8jHZUvZSraWbWRb+YRsJ5+U7WUH2VE+JTvJp2Vn+YxMls/KLvI52VU+L7vJF2R3+aLsIV+SPWUv2Vtekpell31lP5ki+8sB8lU5UA6Sg+Vrcoh8XQ6Vb8hh8k05XI6QI+VbcpR8W46W78gxcqwcJ8fLCXKinCQnyylyqkyV78pp8j05Xb4vZ8iZcpacLdPkHDn4t5kW/Bfy3/sH+cN+ffZtcrv8TO6QO+UuuVvukXvlPrlP7pf75QF5QGbLbHlQHpSH5CF5WB6WOTJHHpFH5FF5VB6Tx+RxeVyekCflefmTPC1/lmfkWXlWnpcX5AV58befAShUQkmlVKDyqfwqRhVQseoaFaeuVQXVdSqirlfx6gZVSN2oCqsiqqgqphJUcVVCaWWUVaRCVVKVUlF1kyqtblaJqowqq8opp8qrJHXLv5z/R+trq9qqdqqdaq/aq46qo+qkOqnOqrNKVsmqi+qiuqquqpvqprqr7qqH6qF6qp6qt+qt+qg+qq/qq1JUihqgXlUD1SA1WL2mhqjX1VA1VA1Tw9RwNVyNVCPVKDVKjVaj1Rg1Ro1T49QENUFNUpPUFDVFpapUNU1NU9PVdDVDzVCz1CyVptLUXDVXzVPz1AK1QC1UC9UitUgtUUtUukpXGSpDZapMtVwtV1lqhVqhVqlVao1ao9apdWqD2qA2qU1qi9qistR2tV3tUDvULrVL7VF71D61T+1X+9UBdUBlq2x1UB1Uh9QhdVgdVjkqRx1RR9RRdVQdU8fUcXVcnVAn1Cl1Sp1Wp9UZdUadU+fUBXVBXVQX1WV1OfeyLxCBCFSggnxBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEoAMT2ICCMCgZlAqiwU1B6eDmIDEoE5QNygUuKB8kBbcEFYJbg4rBbUGl4PagcnBHUCWoGlQLqgd3BjWCu4K7g5pBreCeoHZQJ6gb1AvuDeoH9wUNgvuDhsEDQaPgwaBx8FDQJHg4aBo8EjQLHg2aB48FLYLHg5ZBq6B10CZo+6fO7/2ZIk+6vrqfTtH99QD9qh6oB+nB+jU9RL+uh+o39DD9ph6uR+iR+i09Sr+tR+t39Bg9Vo/T4/UEPVFP0pP1FD1Vp+p39TT9np6u39cz9Ew9S8/WaXqOnqs/0PP0fL1Af6gX6o/0Ir1YL9FLdbr+WGfoZTpTf6KX6091ll6hV+pVerVeo9fqdXq93qA36k16s96it+pterv+TO/QO/UuvVvv0Xv1Pv253q+/0Af0lzpbf6UP6r/oQ/prfVh/o3P0t/qI/k4f1d/rY/oHfVz/qE/ok/qU/kmf1j/rM/qsPqfP6wv6F31RX9KXtc+9uM99eTfKKJPP5DMxJsbEmlgTZ+JMQVPQREzExJt4U8gUMoVNYVPUFDUJJsGUMCVMLjJkSpqSJmqiprQpbRJNoilryhpnnEkySaaCqWAqmoqmkqlkKpvKpoqpYqqZauZOc6e5y9xlapqa5h5zj6lj6ph6pp6pb+qbBqaBaWgamkamkWlsGpsmpolpapqaZqaZaW6amxamhWlpWprWprVpa9qadqadaW/am46mo+lkOpnOprNJNsmmi+liupquppvpZrqb7qaH6WF6mp6mt+lt+pg+pq/pa1JMihlgBpiBZqAZbAabIWaIGWqGmmFmmBlfYVPN3JPTKDPKjDajzRgz1owz480EM9FMMpPNFDPVpJpUM81MM9PNdDPDzDCzzCyTZtLMXDPXzDPzzAKzwCw0C80is8gsMUtMukk3GSbDZJpMs9wsN1kmy6w0K81qs9qsNWvNerPebDQbzWaz2Ww1W812s93sMDvMLrPL7DF7zD6zz+w3+80Bc8Bkm+yY3w535rA5bHJMjjlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86ZC+YXc9FcMpeNNzFWQKy9xsbZa21Be52NsQXs38ZFbTGbYIvbElbbwrbI38XGWptoy9iytpx1trxNsrf8Lq5iq9pqtrq909awd9m7fxfXt/fZBvZ+29A+YOvZe/8ubmQftI3tY7aJfdw2ta1sM9vGNreP2Rb2cdvStrKtbRvbyT5tO9tnbLJ91naxz/0uzrDL7Hq7wW60m+x++4U9Z8/bo/Z7e8H+YvvafnaIfd0OtW/YYfZNO9yO+F08zo63E+xEO8lOtlPs1N/Fs+xsm2bn2Ln2AzvPzv9dnG4/tgttpl1kF9sldumvce6aMu0ndrn91GbZFXalXWVX2zV2rV3372tdZbfYrXab3Wc/tzvsTrvL7rZ77N5f49x9HLBf2mz7lT1iv7OH7Nf2sD1mc+y3v8a5+wP4wR63P9oT9qQ9ZX+yp+3P9ow9++v+c/f+k71kL1tvgZAESVIUUD7KTzFUgGLpGoqja6kgXUcRup7i6QYqRDdSYSpCRakYJVBxKkGaDFkiCqkklaIo3USl6WZKpDJUlsqRo/KURLdQBbqVKtJtVIlup8p0B1WhqlSNqtOdVIPuorupJtWie6g21aG6VI/upfp0HzWg+6khPUCN6EFqTA9RE3qYmtIj1Iwepeb0GLWgx6kltaLW1Iba0hPUjp6k9tSBOtJT1Imeps70DCXTs9SFnqOu9Dx1oxeoO71IPegl6km9qDe9TH3oFepL/SiF+tMAepUG0iAaTK/REHqdhtIbNIzepOE0gkbSWzSK3qbR9A6NobE0jsbTBJpIk2gyTaGplErv0jR6j6bT+zSDZtIsmk1pNIfm0gc0j+bTAvqQFtJHtIgW0xJaSun0MWXQMsqkT2g5fUpZtIJW0ipaTWtoLa2j9bSBNtIm2kxbaCtto+30Ge2gnbSLdtMe2kv76HPaT1/QAfqSsukrOkh/oUP0NR2mbyiHvqUj9B0dpe/pGP1Ax+lHOkEn6RT9RKfpZzpDZ+kcnacL9AtdpEt0mTxBiKEIZajCIMwX5g9jwgJhbHhNGBdeGxYMrwsj4fVhfHhDWCi8MSwcFgmLhsXChLB4WCLUoQltSGEYlgxLhdHwprB0eHOYGJYJy4blQheWD5PCW8IK4a1hxfC2sFJ4e1g5vCOsElYNH3ugenhnWCO8K7w7rBnWCu8Ja4d1wrphvfDesH54X9ggvD9sGD4QVgwfDBuHD4VNwofDpuEjYbPw0bB5+FjYInw8bBm2CluHbcK24RNhu/DJsH3YIewYPhV2Cp8OO4fPhMnhs2GX8Lk/HE8J+4cDwlfDV0Pv75dLokuj6dGPoxnRZdHM6CfR5dFPo1nRFdGV0VXR1dE10bXRddH10Q3RjdFN0c3RLdGt0W1R7+vlB4dOOOmUC1w+l9/FuAIu1l3j4ty1rqC7zkXc9S7e3eAKuRtdYVfEFXXFXIIr7ko47YyzjlzoSrpSLupucqXdzS7RlXFlXTnnXHmX5Nq4tq6ta+eedO1dB9fRPeWeck+7p90z7hn3rOvinnNd3fOum3vBdXcvuhfdS66n6+V6u5ddH/eK6+v6uRSX4ga4AW6gG+gGu8FuiBvihrqhbpgb5oa74W6kG+lGuVFutBvtxrgxbpwb5ya4CW6Sm+SmuCku1aW6aW6am+6muxluhpvlZrk0l+bmurlunpvnFrgFbmHiQrfILXJL3BKX7tJdhstwmS7TLXfLXZbLcivdSrfarXZr3Vq33q13G91Gt9ltdlvdVrfdbXc73A63y+1ye9wet8/tc/vdfnfAHXDZLtsddAfdIXfIHXbfuBz3rTvivnNH3ffumPvBHXc/uhPupDvlfnKn3c/ujDvrzrnz7oL7xV10l9xl511q5N3ItMh7kemR9yMzIjMjsyKzI2mROZG5kQ8i8yLzIwsiH0YWRj6KLIosjiyJLI2kRz6OZESWRTIjn0SWRz6NZEVWRFZGVkVWR9ZEvC++I/QlfSkf9Tf50v5mn+jL+LK+nHe+vE/yt/gK/lZf0d/mK/nbfWV/h6/iq/pq/nHf0rfyrX0b39Y/4dv5J31738F39E/5Tv5p39k/45P9s76Lf8539c/7bv4F392/6Hv4l3xP38v39i/7Pv4V39f38ym+vx/gX/UD/SA/2L/mh/jX/VD/hh/m3/TD/Qg/0r/lR/m3/Wj/jh/jx/pxfryf4Cf6SX6yn+Kn+lT/rp/m3/PT/ft+hp/pZ/nZPs3P8XP9B36en+8X+A/9Qv+RX+QX+yV+qU/3H/sMv8xn+k/8cv+pz/Ir/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3n/kdfqff5Xf7PX6v3+c/9/v9F/6A/9Jn+6/8Qf8Xf8h/7Q/7b3yO/9Yf8d/5o/57f8z/4I/7H/0Jf9Kf8j/50/5nf8af9ef8eX/B/+Iv+kv+8n/1PWv5/ifvpTPGGGOM/f8v9Q/G+/+D74nfWq4BAHDtzmI5fzsuAWBz4b/2B4mEThEAeLZfj0f+rdWunZKS8ttjsyQEpRYDQORK/q+XaL/FK6AjPA3J0AEq/MP1DRK9LtAfzB+9HSD2b3Ji/voxB/9h/lv/k/mfeGpcRuXwXPw/mX8xQGKpKzkF4Ep8Zf6K/8n8Rdr9wfoLfJ0K0P5vcuLgSnxl/iR4Ep6D5L97JGOMMcYYY4wx9leDRLVulHsihn9+Pk9QV3Lyw5X4j87njDHGGGOMMcYYu/pe6NX7mSeSkzt04w53uMOdf+9c7f9MjDHGGGOMsT/blYv+q70SxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMs7/p/8XFiV3uPjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2NX2fwIAAP//sN45jQ==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 660.93961ms ago: executing program 3 (id=13452): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="00de10bf3cc58d", 0x7}, {0x0}], 0x2) 660.51767ms ago: executing program 9 (id=13453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 625.650291ms ago: executing program 3 (id=13454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x7c13b9973772a955) 568.656883ms ago: executing program 4 (id=13455): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x6c) getdents64(r0, &(0x7f0000000100)=""/131, 0x83) 467.353295ms ago: executing program 9 (id=13456): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4e, @private2, @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x7f, 0x4038a0b, 0x1, @private1, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) 444.966796ms ago: executing program 5 (id=13457): io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x5, 0x801) io_submit(r0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0x800002, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x8000000, 0x2, 0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) 380.586438ms ago: executing program 3 (id=13458): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 361.291269ms ago: executing program 8 (id=13459): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000001b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) 342.21577ms ago: executing program 9 (id=13460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x2c}}, 0x2008040) 273.598512ms ago: executing program 3 (id=13461): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) listen(r0, 0xb) 251.804002ms ago: executing program 4 (id=13462): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x9, 0x6}, {0x6}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 229.887673ms ago: executing program 5 (id=13463): mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) 173.604935ms ago: executing program 9 (id=13464): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000540), 0x1, 0x7a1, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) lseek(r0, 0x3c, 0x3) 120.151927ms ago: executing program 3 (id=13465): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x83) 84.244167ms ago: executing program 5 (id=13466): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1200}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 50.273719ms ago: executing program 3 (id=13467): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x28, {0x28, 0x8, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f545cb92e449c42123ec25cd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18.08882ms ago: executing program 4 (id=13468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080)) 0s ago: executing program 8 (id=13469): openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x4b, &(0x7f0000000040), &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 470.229042][ T649] hid-multitouch 0003:1FD2:6007.0009: ignoring exceeding usage max [ 470.241856][T26507] loop4: detected capacity change from 0 to 16 [ 470.247307][ T649] hid-multitouch 0003:1FD2:6007.0009: unknown main item tag 0x2 [ 470.294907][ T649] hid-multitouch 0003:1FD2:6007.0009: unknown global tag 0xe [ 470.313332][ T649] hid-multitouch 0003:1FD2:6007.0009: item 0 0 1 14 parsing failed [ 470.323412][ T649] hid-multitouch: probe of 0003:1FD2:6007.0009 failed with error -22 [ 470.331670][T26507] erofs: (device loop4): mounted with root inode @ nid 36. [ 470.375355][ T536] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 470.390505][ T536] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 470.428497][ T536] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 470.468860][ T1780] usb 7-1: USB disconnect, device number 5 [ 470.561337][T26532] loop4: detected capacity change from 0 to 256 [ 470.630022][ T649] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 470.667548][T26541] loop5: detected capacity change from 0 to 512 [ 470.685222][T26541] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf,. Quota mode: writeback. [ 470.756116][T26546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12426'. [ 470.944236][ T30] kauditd_printk_skb: 1251 callbacks suppressed [ 470.944253][ T30] audit: type=1400 audit(475.060:108384): avc: denied { read write } for pid=26374 comm="syz-executor" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 471.060017][ T649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.074316][ T30] audit: type=1400 audit(475.087:108385): avc: denied { ioctl } for pid=26508 comm="syz.3.12409" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 471.109649][ T649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.141470][ T649] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 471.185163][ T649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.199410][ T30] audit: type=1400 audit(475.097:108386): avc: denied { read write } for pid=350 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 471.258629][ T649] usb 4-1: config 0 descriptor?? [ 471.288992][ T30] audit: type=1400 audit(475.097:108387): avc: denied { open } for pid=350 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 471.321305][T26571] audit: audit_backlog=65 > audit_backlog_limit=64 [ 471.328657][ T350] audit: audit_backlog=65 > audit_backlog_limit=64 [ 471.348822][T23491] audit: audit_backlog=65 > audit_backlog_limit=64 [ 471.356493][T26574] audit: audit_backlog=65 > audit_backlog_limit=64 [ 471.365890][T26571] audit: audit_lost=2487 audit_rate_limit=0 audit_backlog_limit=64 [ 471.368038][T26574] audit: audit_lost=2488 audit_rate_limit=0 audit_backlog_limit=64 [ 471.430994][ T39] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 471.517698][ T39] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 471.527006][T26584] loop6: detected capacity change from 0 to 128 [ 471.559442][T26587] loop7: detected capacity change from 0 to 256 [ 471.659417][T26587] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 471.713452][T26595] overlayfs: conflicting lowerdir path [ 471.844360][ T649] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 472.045215][ T39] usb 4-1: USB disconnect, device number 125 [ 472.071394][T26615] loop4: detected capacity change from 0 to 128 [ 472.157397][T26615] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 472.260523][T26616] fido_id[26616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 472.482062][T26605] loop6: detected capacity change from 0 to 40427 [ 472.517565][T26605] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 472.554437][T26605] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 472.642699][T26605] F2FS-fs (loop6): invalid crc value [ 472.699793][T26605] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 472.771822][T26605] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 472.782025][T26605] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 472.831628][T26664] tipc: Started in network mode [ 472.854377][T26664] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 472.867251][T26659] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 472.918256][T26664] tipc: Enabling of bearer rejected, failed to enable media [ 472.979007][T26668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12480'. [ 473.002567][T26668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12480'. [ 473.017785][T26668] device vlan3 entered promiscuous mode [ 473.485560][T26696] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 473.536490][T26696] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.12494: inode #1: comm syz.3.12494: iget: illegal inode # [ 473.588777][T26696] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.12494: error while reading EA inode 1 err=-117 [ 473.608237][T26696] EXT4-fs (loop3): 1 orphan inode deleted [ 473.614566][T26696] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,stripe=0x0000000000000008,nombcache,noinit_itable,nomblk_io_submit,minixdf,nobarrier,inode_readahead_blks=0x0000000000000000,usrjquota=,block_validity,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 474.001095][T26706] set_capacity_and_notify: 4 callbacks suppressed [ 474.001146][T26706] loop4: detected capacity change from 0 to 40427 [ 474.056966][T26706] F2FS-fs (loop4): invalid crc value [ 474.100444][T26706] F2FS-fs (loop4): Found nat_bits in checkpoint [ 474.251725][T26706] F2FS-fs (loop4): Start checkpoint disabled! [ 474.270424][T26747] netlink: 'syz.5.12517': attribute type 2 has an invalid length. [ 474.296283][T26706] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 474.371748][T26706] attempt to access beyond end of device [ 474.371748][T26706] loop4: rw=2049, want=45104, limit=40427 [ 474.465857][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 474.519271][ T326] attempt to access beyond end of device [ 474.519271][ T326] loop4: rw=2049, want=40976, limit=40427 [ 474.606759][ T39] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 475.008174][ T39] usb 4-1: config 0 interface 0 has no altsetting 0 [ 475.017349][ T39] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 475.046315][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.070488][ T39] usb 4-1: config 0 descriptor?? [ 475.139874][T26807] loop6: detected capacity change from 0 to 128 [ 475.226597][T26811] loop7: detected capacity change from 0 to 1024 [ 475.285493][T26811] EXT4-fs (loop7): Ignoring removed bh option [ 475.395249][T26811] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 475.481743][T26830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12556'. [ 475.563672][T26835] loop4: detected capacity change from 0 to 1024 [ 475.605770][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.612712][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.633496][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.638724][T26835] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 475.642218][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.658265][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.665168][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.672212][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.679132][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.686328][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.694038][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.700967][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.707916][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.715625][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.722541][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.729494][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.736418][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.743323][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.755340][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.762315][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.769296][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.776218][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.783179][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.790105][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.797006][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.804485][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.820754][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.827682][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.853331][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.860276][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.918198][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.925144][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.951154][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.958131][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 475.990437][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 476.015881][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 476.022869][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 476.062698][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 476.080006][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 476.099616][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 476.129136][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 476.144827][ T39] wacom 0003:056A:00C5.000B: unknown main item tag 0x0 [ 476.167833][ T39] wacom 0003:056A:00C5.000B: hidraw0: USB HID v0.08 Device [HID 056a:00c5] on usb-dummy_hcd.3-1/input0 [ 476.194132][ T39] usb 4-1: USB disconnect, device number 126 [ 476.257198][T26871] loop6: detected capacity change from 0 to 256 [ 476.308061][T26875] loop4: detected capacity change from 0 to 512 [ 476.333389][T26871] FAT-fs (loop6): Directory bread(block 64) failed [ 476.340042][T26871] FAT-fs (loop6): Directory bread(block 65) failed [ 476.373943][T26875] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 476.383542][T26871] FAT-fs (loop6): Directory bread(block 66) failed [ 476.390621][T26871] FAT-fs (loop6): Directory bread(block 67) failed [ 476.398460][T26871] FAT-fs (loop6): Directory bread(block 68) failed [ 476.402730][T26875] EXT4-fs error (device loop4): ext4_iget_extra_inode:4604: inode #15: comm syz.4.12564: corrupted in-inode xattr [ 476.407571][T26871] FAT-fs (loop6): Directory bread(block 69) failed [ 476.423722][T26871] FAT-fs (loop6): Directory bread(block 70) failed [ 476.430383][T26871] FAT-fs (loop6): Directory bread(block 71) failed [ 476.436979][T26871] FAT-fs (loop6): Directory bread(block 72) failed [ 476.443565][T26871] FAT-fs (loop6): Directory bread(block 73) failed [ 476.454991][ T30] kauditd_printk_skb: 816 callbacks suppressed [ 476.455008][ T30] audit: type=1400 audit(480.143:109183): avc: denied { mount } for pid=26870 comm="syz.6.12576" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 476.488160][T26875] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.12564: couldn't read orphan inode 15 (err -117) [ 476.504749][T26875] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 476.531003][ T30] audit: type=1400 audit(480.143:109184): avc: denied { read write } for pid=26870 comm="syz.6.12576" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.602981][ T30] audit: type=1400 audit(480.143:109185): avc: denied { open } for pid=26870 comm="syz.6.12576" path="/dev/loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.675781][ T30] audit: type=1400 audit(480.143:109186): avc: denied { ioctl } for pid=26870 comm="syz.6.12576" path="/dev/loop6" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.709440][ T30] audit: type=1400 audit(480.171:109187): avc: denied { bind } for pid=26876 comm="syz.7.12578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 476.783092][T26898] xt_hashlimit: size too large, truncated to 1048576 [ 476.789927][ T30] audit: type=1400 audit(480.171:109188): avc: denied { read } for pid=26876 comm="syz.7.12578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 476.882504][ T30] audit: type=1400 audit(480.189:109189): avc: denied { create } for pid=26879 comm="syz.5.12579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 476.915275][T26895] fido_id[26895]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 476.930362][T22338] audit: audit_backlog=65 > audit_backlog_limit=64 [ 476.949772][T26912] audit: audit_backlog=65 > audit_backlog_limit=64 [ 476.956091][T26374] audit: audit_backlog=65 > audit_backlog_limit=64 [ 477.030087][T26915] loop7: detected capacity change from 0 to 128 [ 478.996361][ C1] sched: RT throttling activated [ 478.996361][ C0] sched: RT throttling activated [ 479.048841][T26915] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 479.669314][T26975] loop6: detected capacity change from 0 to 2048 [ 479.681298][T26933] loop3: detected capacity change from 0 to 40427 [ 479.721637][T26933] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 479.760346][T26933] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 479.778930][T26975] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 479.800575][T26933] F2FS-fs (loop3): invalid crc value [ 479.846961][T26933] F2FS-fs (loop3): Found nat_bits in checkpoint [ 479.892935][T26994] xt_hashlimit: size too large, truncated to 1048576 [ 479.985797][T26997] tipc: MTU too low for tipc bearer [ 480.046373][T26933] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 480.088670][T26933] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 480.145327][ T1780] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 480.427133][ T1780] usb 5-1: Using ep0 maxpacket: 16 [ 480.557338][ T1780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.583468][ T1780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.638304][ T1780] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 480.695264][ T1780] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 480.712248][ T1780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.768553][ T1780] usb 5-1: config 0 descriptor?? [ 480.787354][T27008] loop6: detected capacity change from 0 to 1024 [ 480.820193][T27008] EXT4-fs (loop6): Ignoring removed bh option [ 480.886800][T27008] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 481.029631][T27008] EXT4-fs (loop6): Ignoring removed bh option [ 481.085900][T27008] EXT4-fs (loop6): changing journal_checksum during remount not supported; ignoring [ 481.133743][T27008] EXT4-fs error (device loop6): ext4_remount:6053: comm syz.6.12637: Abort forced by user [ 481.187513][T27008] EXT4-fs (loop6): re-mounted. Opts: debug,init_itable,block_validity,journal_async_commit,bh,noinit_itable,. Quota mode: none. [ 481.231844][T26979] loop5: detected capacity change from 0 to 131072 [ 481.278909][T26979] F2FS-fs (loop5): Test dummy encryption mode enabled [ 481.295866][ T1780] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 481.309468][T26979] F2FS-fs (loop5): invalid crc value [ 481.316584][ T1780] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 481.351168][T26979] F2FS-fs (loop5): Found nat_bits in checkpoint [ 481.370915][ T1780] microsoft 0003:045E:07DA.000C: no inputs found [ 481.409145][ T1780] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 481.482888][T26979] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 481.528258][ T1780] usb 5-1: USB disconnect, device number 121 [ 481.549264][T26933] F2FS-fs (loop3): Start checkpoint disabled! [ 481.756288][T27026] fido_id[27026]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 481.904713][ T30] kauditd_printk_skb: 423 callbacks suppressed [ 481.904730][ T30] audit: type=1400 audit(485.171:109583): avc: denied { prog_load } for pid=27033 comm="syz.7.12648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 481.995381][ T30] audit: type=1400 audit(485.171:109584): avc: denied { bpf } for pid=27033 comm="syz.7.12648" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 482.085480][ T30] audit: type=1400 audit(485.171:109585): avc: denied { perfmon } for pid=27033 comm="syz.7.12648" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 482.183203][ T30] audit: type=1400 audit(485.171:109586): avc: denied { perfmon } for pid=27033 comm="syz.7.12648" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 482.280561][ T30] audit: type=1400 audit(485.171:109587): avc: denied { bpf } for pid=27033 comm="syz.7.12648" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 482.322800][ T30] audit: type=1400 audit(485.171:109588): avc: denied { prog_run } for pid=27033 comm="syz.7.12648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 482.404723][ T30] audit: type=1400 audit(485.282:109589): avc: denied { read write } for pid=22338 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 482.454169][T27053] overlayfs: workdir and upperdir must be separate subtrees [ 482.485302][T27055] loop5: detected capacity change from 0 to 512 [ 482.497406][ T30] audit: type=1400 audit(485.282:109590): avc: denied { open } for pid=22338 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 482.550970][T27059] loop7: detected capacity change from 0 to 512 [ 482.565569][T27055] EXT4-fs (loop5): Test dummy encryption mode enabled [ 482.576737][T27055] EXT4-fs (loop5): Test dummy encryption mode enabled [ 482.583695][ T30] audit: type=1400 audit(485.282:109591): avc: denied { ioctl } for pid=22338 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 482.611974][T27063] loop4: detected capacity change from 0 to 16 [ 482.618711][ T30] audit: type=1400 audit(485.310:109592): avc: denied { map_create } for pid=27039 comm="syz.3.12650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 482.640069][T27055] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 482.666913][T27038] loop6: detected capacity change from 0 to 40427 [ 482.676995][T27059] EXT4-fs (loop7): Ignoring removed oldalloc option [ 482.693944][T27059] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 482.695704][T27063] erofs: (device loop4): mounted with root inode @ nid 36. [ 482.718516][T27038] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 482.734651][T27055] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.12644: Directory hole found for htree leaf block 0 [ 482.755987][T27038] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 482.762171][T27055] EXT4-fs (loop5): Remounting filesystem read-only [ 482.772074][T27038] F2FS-fs (loop6): fault_type options not supported [ 482.773522][T27059] EXT4-fs (loop7): 1 truncate cleaned up [ 482.783857][T27038] F2FS-fs (loop6): invalid crc value [ 482.792195][T27038] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 482.792387][T27059] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,data=journal,noload,oldalloc,,errors=continue. Quota mode: none. [ 482.866988][T27038] F2FS-fs (loop6): Start checkpoint disabled! [ 482.880198][T27038] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 482.921940][T27038] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 482.981584][T27071] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12663'. [ 483.072484][ T45] attempt to access beyond end of device [ 483.072484][ T45] loop6: rw=2049, want=45104, limit=40427 [ 483.223592][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 483.287371][T27082] loop6: detected capacity change from 0 to 256 [ 483.347804][T27082] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 483.700476][ T649] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 483.709958][T27079] loop4: detected capacity change from 0 to 40427 [ 483.783751][T27079] F2FS-fs (loop4): invalid crc value [ 483.841351][T27079] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 483.891151][T27079] F2FS-fs (loop4): Start checkpoint disabled! [ 483.911137][T27079] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 483.960645][ T649] usb 6-1: Using ep0 maxpacket: 8 [ 483.995447][ T326] attempt to access beyond end of device [ 483.995447][ T326] loop4: rw=2049, want=45104, limit=40427 [ 484.008482][T27110] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 484.044015][T27110] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 484.069011][T27110] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,errors=continue,,errors=continue. Quota mode: writeback. [ 484.105557][ T649] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.155697][ T649] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 484.206886][T27110] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.12681: Logical block already allocated [ 484.247045][ T649] usb 6-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 484.285804][ T649] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.291072][T27123] tipc: Enabling of bearer rejected, failed to enable media [ 484.327903][ T649] usb 6-1: config 0 descriptor?? [ 484.469906][T27112] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 484.516574][T27112] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 484.543859][T27112] F2FS-fs (loop6): invalid crc value [ 484.624482][T27112] F2FS-fs (loop6): Found nat_bits in checkpoint [ 484.729358][T27112] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 484.741751][T27112] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 484.819679][ T326] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 484.840028][ T649] apple 0003:05AC:0232.000D: unknown main item tag 0x3 [ 484.847564][ T326] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 484.857957][ T649] apple 0003:05AC:0232.000D: unknown main item tag 0x0 [ 484.879749][ T649] apple 0003:05AC:0232.000D: unknown main item tag 0x0 [ 484.901576][ T649] apple 0003:05AC:0232.000D: unknown main item tag 0x0 [ 484.921398][ T649] apple 0003:05AC:0232.000D: unknown main item tag 0x0 [ 484.936166][ T649] apple 0003:05AC:0232.000D: unknown main item tag 0x0 [ 484.954268][ T649] apple 0003:05AC:0232.000D: unknown main item tag 0x0 [ 484.968767][ T649] apple 0003:05AC:0232.000D: unknown main item tag 0x0 [ 484.985607][T27129] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 485.003325][ T649] apple 0003:05AC:0232.000D: hidraw0: USB HID v0.00 Device [HID 05ac:0232] on usb-dummy_hcd.5-1/input0 [ 485.019789][T27129] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 485.050380][T27129] F2FS-fs (loop3): fault_type options not supported [ 485.072649][ T649] usb 6-1: USB disconnect, device number 125 [ 485.094460][T27129] F2FS-fs (loop3): invalid crc value [ 485.122933][T27129] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 485.200700][T27142] set_capacity_and_notify: 3 callbacks suppressed [ 485.200717][T27142] loop7: detected capacity change from 0 to 40427 [ 485.245380][T27129] F2FS-fs (loop3): Start checkpoint disabled! [ 485.259084][T27129] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 485.277795][T27129] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 485.286907][T27151] fido_id[27151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 485.321478][T27142] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 485.347064][T27142] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 485.376833][T27142] F2FS-fs (loop7): fault_type options not supported [ 485.417927][T27142] F2FS-fs (loop7): invalid crc value [ 485.430012][T23521] attempt to access beyond end of device [ 485.430012][T23521] loop3: rw=2049, want=45104, limit=40427 [ 485.453443][T27142] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 485.522833][T27158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12700'. [ 485.614152][T27142] F2FS-fs (loop7): Start checkpoint disabled! [ 485.622185][T27142] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 485.629364][T27142] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 485.742552][T27142] attempt to access beyond end of device [ 485.742552][T27142] loop7: rw=2049, want=45104, limit=40427 [ 485.814933][T23521] attempt to access beyond end of device [ 485.814933][T23521] loop7: rw=2049, want=45112, limit=40427 [ 485.872349][T27174] netlink: 'syz.5.12706': attribute type 12 has an invalid length. [ 485.911615][T27174] netlink: 'syz.5.12706': attribute type 29 has an invalid length. [ 485.919582][T27174] netlink: 148 bytes leftover after parsing attributes in process `syz.5.12706'. [ 485.964622][T27176] loop3: detected capacity change from 0 to 512 [ 486.113275][T27176] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 486.181522][T27176] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.12709: Failed to acquire dquot type 1 [ 486.221169][T27176] EXT4-fs (loop3): 1 truncate cleaned up [ 486.230389][T27176] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 486.298112][T27176] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.12709: Failed to acquire dquot type 1 [ 486.357803][T27161] loop6: detected capacity change from 0 to 40427 [ 486.431905][T27161] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 486.446195][T27161] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 486.519953][T27161] F2FS-fs (loop6): Found nat_bits in checkpoint [ 486.672089][T27217] netlink: 'syz.3.12725': attribute type 1 has an invalid length. [ 486.703586][T27161] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 486.710684][T27161] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 486.950515][T27234] loop4: detected capacity change from 0 to 4096 [ 486.964935][T27238] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 487.037887][T27234] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 487.076202][T27234] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 487.267042][T27253] xt_hashlimit: size too large, truncated to 1048576 [ 487.338550][ T30] kauditd_printk_skb: 626 callbacks suppressed [ 487.338566][ T30] audit: type=1400 audit(490.181:110215): avc: denied { read write } for pid=23491 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.445553][ T30] audit: type=1400 audit(490.181:110216): avc: denied { open } for pid=23491 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.526909][ T30] audit: type=1400 audit(490.181:110217): avc: denied { ioctl } for pid=23491 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.556657][T27275] bridge_slave_0: default FDB implementation only supports local addresses [ 487.634265][ T30] audit: type=1400 audit(490.237:110218): avc: denied { read write } for pid=350 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.702127][ T30] audit: type=1400 audit(490.237:110219): avc: denied { open } for pid=350 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.808455][ T30] audit: type=1400 audit(490.264:110220): avc: denied { ioctl } for pid=350 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.906115][ T30] audit: type=1400 audit(490.274:110221): avc: denied { read } for pid=27266 comm="syz.4.12748" dev="nsfs" ino=4026532723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 487.958089][T27291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12759'. [ 487.989099][ T30] audit: type=1400 audit(490.274:110222): avc: denied { read open } for pid=27266 comm="syz.4.12748" path="net:[4026532723]" dev="nsfs" ino=4026532723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 488.085343][ T30] audit: type=1400 audit(490.274:110223): avc: denied { create } for pid=27266 comm="syz.4.12748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 488.174533][ T30] audit: type=1400 audit(490.274:110224): avc: denied { read write } for pid=26374 comm="syz-executor" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 488.217607][T27300] loop7: detected capacity change from 0 to 512 [ 488.256943][T27303] loop4: detected capacity change from 0 to 512 [ 488.319897][T27303] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 488.391137][T27303] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 488.409801][T27300] EXT4-fs (loop7): 1 truncate cleaned up [ 488.415555][T27300] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,nogrpid,,errors=continue. Quota mode: none. [ 488.455162][T27300] EXT4-fs warning (device loop7): verify_group_input:165: Last group not full [ 488.477406][T27313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12769'. [ 488.565283][T27315] netlink: 'syz.5.12770': attribute type 1 has an invalid length. [ 488.605369][T27317] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12772'. [ 488.646330][T27319] loop4: detected capacity change from 0 to 1024 [ 488.771877][T27319] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 488.893765][T27331] tipc: Cannot configure node identity twice [ 489.094074][T27344] loop3: detected capacity change from 0 to 128 [ 489.163497][T27344] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 489.204067][T27330] loop7: detected capacity change from 0 to 40427 [ 489.233936][T27344] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.12783: No space for directory leaf checksum. Please run e2fsck -D. [ 489.261291][T27330] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 489.267958][T27330] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 489.280810][T27347] loop5: detected capacity change from 0 to 256 [ 489.294232][T27344] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.12783: checksumming directory block 0 [ 489.307919][T27330] F2FS-fs (loop7): invalid crc value [ 489.347740][T27330] F2FS-fs (loop7): Found nat_bits in checkpoint [ 489.390968][T27347] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 489.445602][T27347] FAT-fs (loop5): Filesystem has been set read-only [ 489.573400][T27330] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 489.594847][T27330] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 489.687911][T27286] F2FS-fs (loop6): Test dummy encryption mode enabled [ 489.742507][T27286] F2FS-fs (loop6): invalid crc value [ 489.804757][T26374] attempt to access beyond end of device [ 489.804757][T26374] loop7: rw=2049, want=45104, limit=40427 [ 489.809405][T27286] F2FS-fs (loop6): Found nat_bits in checkpoint [ 489.836796][T27370] EXT4-fs (loop4): orphan cleanup on readonly fs [ 489.844865][T27370] EXT4-fs error (device loop4): ext4_find_extent:929: inode #4: comm syz.4.12792: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 489.891814][T27370] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 489.907058][T27370] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 489.914199][T27370] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 489.982645][T27374] EXT4-fs error (device loop3): ext4_map_blocks:742: inode #3: block 1: comm syz.3.12793: lblock 1 mapped to illegal pblock 1 (length 1) [ 490.003073][T27374] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.12793: Failed to acquire dquot type 0 [ 490.009378][T27286] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 490.023152][T27374] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.12793: Freeing blocks not in datazone - block = 0, count = 4096 [ 490.105342][T27374] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.12793: Invalid inode bitmap blk 0 in block_group 0 [ 490.118468][ T45] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 490.133405][T27374] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 490.153932][T27374] EXT4-fs (loop3): 1 orphan inode deleted [ 490.159736][T27374] EXT4-fs (loop3): mounted filesystem without journal. Opts: €; noinit_itable,discard,data_err=ignore,nolazytime,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 490.183762][ T45] EXT4-fs error (device loop3): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0 [ 490.234696][T27385] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 490.698096][T27407] set_capacity_and_notify: 5 callbacks suppressed [ 490.698116][T27407] loop4: detected capacity change from 0 to 1024 [ 490.765717][T27407] EXT4-fs (loop4): Ignoring removed bh option [ 490.835257][T27407] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 490.916208][T27416] loop7: detected capacity change from 0 to 512 [ 491.018155][T27416] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 491.319985][ T649] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 491.402865][T27436] loop3: detected capacity change from 0 to 1024 [ 491.428956][T27436] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 2: comm syz.3.12818: lblock 2 mapped to illegal pblock 2 (length 1) [ 491.522929][T27436] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 48: comm syz.3.12818: lblock 0 mapped to illegal pblock 48 (length 1) [ 491.546301][T27387] loop5: detected capacity change from 0 to 131072 [ 491.571408][T27436] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.12818: Failed to acquire dquot type 0 [ 491.590706][T27436] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 491.601603][T27436] EXT4-fs error (device loop3): ext4_evict_inode:285: inode #11: comm syz.3.12818: mark_inode_dirty error [ 491.616384][T27436] EXT4-fs warning (device loop3): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 491.626944][T27436] EXT4-fs (loop3): 1 orphan inode deleted [ 491.632734][T27436] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 491.659340][ T326] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 491.689188][ T326] EXT4-fs error (device loop3): ext4_release_dquot:6263: comm kworker/u4:3: Failed to release dquot type 0 [ 491.718919][T27436] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.12818: Invalid inode table block 1 in block_group 0 [ 491.751961][T27436] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 491.765162][ T649] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 491.784095][ T649] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 491.821331][ T649] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 491.844074][T27449] netlink: 'syz.7.12824': attribute type 2 has an invalid length. [ 491.855248][ T649] usb 7-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 491.864844][T22338] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 491.880826][ T649] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.899261][ T649] usb 7-1: config 0 descriptor?? [ 491.914234][T22338] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 491.924302][T27421] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 491.938750][T22338] EXT4-fs error (device loop3): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error [ 492.234663][T27469] loop5: detected capacity change from 0 to 1024 [ 492.352433][T27469] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 492.426998][ T649] uclogic 0003:5543:0004.000E: unknown main item tag 0x3 [ 492.439410][ T649] uclogic 0003:5543:0004.000E: unknown main item tag 0x0 [ 492.446616][ T649] uclogic 0003:5543:0004.000E: unknown main item tag 0x0 [ 492.454937][ T649] uclogic 0003:5543:0004.000E: unknown main item tag 0x0 [ 492.462648][ T649] uclogic 0003:5543:0004.000E: unknown main item tag 0x0 [ 492.470915][ T649] uclogic 0003:5543:0004.000E: unknown main item tag 0x0 [ 492.478102][ T649] uclogic 0003:5543:0004.000E: unknown main item tag 0x0 [ 492.486220][ T649] uclogic 0003:5543:0004.000E: unknown main item tag 0x0 [ 492.494053][ T649] uclogic 0003:5543:0004.000E: No inputs registered, leaving [ 492.504959][ T649] uclogic 0003:5543:0004.000E: hidraw0: USB HID v0.08 Device [HID 5543:0004] on usb-dummy_hcd.6-1/input0 [ 492.669686][ T649] usb 7-1: USB disconnect, device number 6 [ 492.743091][T27493] fido_id[27493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 492.768822][ T30] kauditd_printk_skb: 685 callbacks suppressed [ 492.768841][ T30] audit: type=1400 audit(751.192:110879): avc: denied { read write } for pid=350 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.852983][T27509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12851'. [ 492.869718][ T30] audit: type=1400 audit(751.192:110880): avc: denied { open } for pid=350 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.920783][ T30] audit: type=1400 audit(751.192:110881): avc: denied { ioctl } for pid=350 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 493.038000][ T30] audit: type=1400 audit(751.210:110882): avc: denied { read write } for pid=26374 comm="syz-executor" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 493.127862][ T30] audit: type=1400 audit(751.210:110883): avc: denied { read write open } for pid=26374 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 493.201897][T22338] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.214270][T26374] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.231849][T23491] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.243975][ T30] audit: type=1400 audit(751.210:110884): avc: denied { ioctl } for pid=26374 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 493.269829][T22338] audit: audit_lost=2515 audit_rate_limit=0 audit_backlog_limit=64 [ 493.321756][T27532] netlink: 96 bytes leftover after parsing attributes in process `syz.5.12863'. [ 493.628035][T27556] loop6: detected capacity change from 0 to 16 [ 493.651034][T27556] erofs: (device loop6): mounted with root inode @ nid 36. [ 493.692824][T27521] loop4: detected capacity change from 0 to 40427 [ 493.717379][T27559] xt_hashlimit: size too large, truncated to 1048576 [ 493.754089][T27521] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 493.761795][T27521] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 493.774121][T27562] device bridge0 entered promiscuous mode [ 493.798594][T27521] F2FS-fs (loop4): invalid crc value [ 493.847227][T27521] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 493.923003][T27572] loop3: detected capacity change from 0 to 256 [ 493.989593][T27521] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 494.012398][T27521] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 494.121506][T27567] attempt to access beyond end of device [ 494.121506][T27567] loop4: rw=2049, want=45104, limit=40427 [ 494.609616][T27604] loop3: detected capacity change from 0 to 256 [ 494.655293][T27604] FAT-fs (loop3): Directory bread(block 64) failed [ 494.672986][T27604] FAT-fs (loop3): Directory bread(block 65) failed [ 494.682787][T27608] tipc: Can't bind to reserved service type 0 [ 494.688435][T27604] FAT-fs (loop3): Directory bread(block 66) failed [ 494.715891][T27604] FAT-fs (loop3): Directory bread(block 67) failed [ 494.733597][T27604] FAT-fs (loop3): Directory bread(block 68) failed [ 494.750449][T27604] FAT-fs (loop3): Directory bread(block 69) failed [ 494.761918][T27612] loop5: detected capacity change from 0 to 128 [ 494.768436][T27604] FAT-fs (loop3): Directory bread(block 70) failed [ 494.777776][T27612] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 494.787000][T27604] FAT-fs (loop3): Directory bread(block 71) failed [ 494.794631][T27604] FAT-fs (loop3): Directory bread(block 72) failed [ 494.809689][T27604] FAT-fs (loop3): Directory bread(block 73) failed [ 494.819480][T27612] VFS: Lookup of 'file0' in vfat loop5 would have caused loop [ 495.080648][ T39] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 495.341145][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 495.418206][T27653] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 495.471466][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.527454][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.579722][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 495.611766][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.653139][ T39] usb 5-1: config 0 descriptor?? [ 495.699100][ T39] hub 5-1:0.0: USB hub found [ 495.980319][ T39] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 496.096120][T27698] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12934'. [ 496.123437][T27700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12936'. [ 496.305405][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 496.311825][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 496.359828][ T39] usb 5-1: USB disconnect, device number 122 [ 496.631449][T27723] set_capacity_and_notify: 1 callbacks suppressed [ 496.631466][T27723] loop6: detected capacity change from 0 to 512 [ 496.679099][T27708] loop3: detected capacity change from 0 to 40427 [ 496.688763][T27723] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.12947: bg 0: block 376: padding at end of block bitmap is not set [ 496.712303][T27723] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.12947: inode #1: comm syz.6.12947: iget: illegal inode # [ 496.753293][T27723] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.12947: error while reading EA inode 1 err=-117 [ 496.772131][T27708] F2FS-fs (loop3): invalid crc value [ 496.819741][T27708] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 496.826018][T27723] EXT4-fs (loop6): 1 orphan inode deleted [ 496.836828][T27723] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000007,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,noquota,dioread_lock,noblock_validity,nojournal_checksum,,errors=continue. Quota mode: none. [ 496.961900][T27708] F2FS-fs (loop3): Start checkpoint disabled! [ 496.989286][T27708] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 497.150952][T23521] attempt to access beyond end of device [ 497.150952][T23521] loop3: rw=2049, want=45104, limit=40427 [ 497.922672][T27769] loop3: detected capacity change from 0 to 512 [ 497.987714][T27769] EXT4-fs (loop3): Test dummy encryption mode enabled [ 497.994594][T27769] EXT4-fs (loop3): Ignoring removed nobh option [ 498.007268][T27772] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12970'. [ 498.039486][T27769] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 498.039486][T27769] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 498.039486][T27769] [ 498.101537][T27769] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 498.145723][T27769] EXT4-fs (loop3): 1 truncate cleaned up [ 498.158573][T27769] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,quota,test_dummy_encryption,usrquota,nobh,jqfmt=vfsv1,noinit_itable,max_batch_time=0x0000000000000003,jqfmt=vfsv0,nouser_xattr,,errors=continue. Quota mode: writeback. [ 498.212953][ T30] kauditd_printk_skb: 638 callbacks suppressed [ 498.212969][ T30] audit: type=1400 audit(756.221:111506): avc: denied { read write } for pid=27775 comm="syz.7.12971" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 498.214635][T27776] loop7: detected capacity change from 0 to 1024 [ 498.219355][ T30] audit: type=1400 audit(756.221:111507): avc: denied { open } for pid=27775 comm="syz.7.12971" path="/dev/loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 498.320304][ T30] audit: type=1400 audit(756.221:111508): avc: denied { ioctl } for pid=27775 comm="syz.7.12971" path="/dev/loop7" dev="devtmpfs" ino=123 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 498.375928][ T30] audit: type=1400 audit(756.340:111509): avc: denied { mount } for pid=27768 comm="syz.3.12968" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 498.427101][T27776] EXT4-fs (loop7): Ignoring removed bh option [ 498.448270][ T30] audit: type=1400 audit(756.340:111510): avc: denied { read write } for pid=27768 comm="syz.3.12968" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 498.517609][T27776] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,bh,jqfmt=vfsv1,stripe=0x0000000000000002,noload,grpquota,,errors=continue. Quota mode: writeback. [ 498.636549][ T30] audit: type=1400 audit(756.340:111511): avc: denied { read write open } for pid=27768 comm="syz.3.12968" path="/dev/loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 498.663344][T27735] loop5: detected capacity change from 0 to 131072 [ 498.718023][T27735] F2FS-fs (loop5): invalid crc value [ 498.748492][T27735] F2FS-fs (loop5): Found nat_bits in checkpoint [ 498.780606][ T30] audit: type=1400 audit(756.340:111512): avc: denied { ioctl } for pid=27768 comm="syz.3.12968" path="/dev/loop3" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 498.871269][ T30] audit: type=1400 audit(756.387:111513): avc: denied { write } for pid=27768 comm="syz.3.12968" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 498.907259][T27735] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 498.916746][T27735] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 498.947528][ T30] audit: type=1400 audit(756.387:111514): avc: denied { add_name } for pid=27768 comm="syz.3.12968" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 499.003884][ T1780] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 499.029003][ T30] audit: type=1400 audit(756.387:111515): avc: denied { create } for pid=27768 comm="syz.3.12968" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 499.177328][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 499.285744][ T1780] usb 4-1: Using ep0 maxpacket: 8 [ 499.298311][ T356] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 499.315483][ T356] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 499.416211][ T1780] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.435811][ T1780] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.482186][ T1780] usb 4-1: config 0 interface 0 has no altsetting 0 [ 499.488870][ T1780] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 499.502090][T27806] tipc: Enabling of bearer rejected, failed to enable media [ 499.519521][T27803] fido_id[27803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 499.540926][ T1780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.579813][ T1780] usb 4-1: config 0 descriptor?? [ 499.643428][T27810] loop7: detected capacity change from 0 to 256 [ 499.711301][T27810] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 499.745047][T27816] loop5: detected capacity change from 0 to 512 [ 499.800425][T27818] overlayfs: overlapping lowerdir path [ 499.857543][T27816] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 499.944276][T27826] loop7: detected capacity change from 0 to 1024 [ 499.955081][T27826] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 499.995339][T27755] loop6: detected capacity change from 0 to 131072 [ 500.011984][T27755] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 500.020851][T27755] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 500.032288][T27755] F2FS-fs (loop6): invalid crc value [ 500.087527][T27826] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000200000,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none. [ 500.132324][ T1780] smartjoyplus 0003:6666:8804.0010: unknown main item tag 0x0 [ 500.139875][ T1780] smartjoyplus 0003:6666:8804.0010: unknown main item tag 0x0 [ 500.149444][T27755] F2FS-fs (loop6): Found nat_bits in checkpoint [ 500.206782][ T1780] smartjoyplus 0003:6666:8804.0010: unknown main item tag 0x0 [ 500.223083][T27755] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 500.237260][ T1780] smartjoyplus 0003:6666:8804.0010: unknown main item tag 0x0 [ 500.249162][T27755] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 500.276082][ T1780] smartjoyplus 0003:6666:8804.0010: unknown main item tag 0x0 [ 500.314161][ T1780] smartjoyplus 0003:6666:8804.0010: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.3-1/input0 [ 500.358678][ T1780] smartjoyplus 0003:6666:8804.0010: no output reports found [ 500.389181][T27755] F2FS-fs (loop6): inaccessible inode: 1, run fsck to repair [ 500.403811][ T1780] usb 4-1: USB disconnect, device number 127 [ 500.419907][T27755] F2FS-fs (loop6): inaccessible inode: 1, run fsck to repair [ 500.530071][T27851] loop5: detected capacity change from 0 to 1024 [ 500.601657][T27851] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 500.680086][T27851] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 500.736941][T27848] fido_id[27848]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 500.819056][T27851] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.13001: missing EA_INODE flag [ 500.958545][T27851] EXT4-fs (loop5): Remounting filesystem read-only [ 500.965179][T27851] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.13001: error while reading EA inode 11 err=-117 [ 501.043236][T27851] EXT4-fs (loop5): Remounting filesystem read-only [ 501.164240][T27877] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 501.190077][T27885] erofs: (device loop7): mounted with root inode @ nid 36. [ 501.227375][T27889] veth0_virt_wifi: vlans aren't supported yet for dev_uc|mc_add() [ 501.243947][T27885] erofs: (device loop7): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 501.273991][T27885] erofs: (device loop7): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 501.284090][T27885] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 501.292433][T27885] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 501.359306][T27896] netlink: 88 bytes leftover after parsing attributes in process `syz.4.13019'. [ 501.479370][T27905] netlink: 'syz.3.13025': attribute type 4 has an invalid length. [ 501.504827][T27905] netlink: 17 bytes leftover after parsing attributes in process `syz.3.13025'. [ 501.904268][T27893] F2FS-fs (loop5): fault_injection options not supported [ 501.912892][T27893] F2FS-fs (loop5): fault_type options not supported [ 501.928290][T27893] F2FS-fs (loop5): invalid crc value [ 501.971411][T27893] F2FS-fs (loop5): Found nat_bits in checkpoint [ 502.125274][T27893] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 502.289865][ T349] attempt to access beyond end of device [ 502.289865][ T349] loop5: rw=2049, want=45104, limit=40427 [ 502.301294][T27943] set_capacity_and_notify: 3 callbacks suppressed [ 502.301313][T27943] loop3: detected capacity change from 0 to 8192 [ 502.406849][T27947] loop6: detected capacity change from 0 to 1024 [ 502.528475][T27947] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #3: block 2: comm syz.6.13043: lblock 2 mapped to illegal pblock 2 (length 1) [ 502.636550][T27947] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #3: block 48: comm syz.6.13043: lblock 0 mapped to illegal pblock 48 (length 1) [ 502.652633][T27947] EXT4-fs error (device loop6): ext4_acquire_dquot:6227: comm syz.6.13043: Failed to acquire dquot type 0 [ 502.689452][T27947] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 502.710780][T27947] EXT4-fs error (device loop6): ext4_evict_inode:285: inode #11: comm syz.6.13043: mark_inode_dirty error [ 502.766569][T27947] EXT4-fs warning (device loop6): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 502.822913][T27947] EXT4-fs (loop6): 1 orphan inode deleted [ 502.828727][T27947] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 502.850711][ T369] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 502.885523][ T369] EXT4-fs error (device loop6): ext4_release_dquot:6263: comm kworker/u4:4: Failed to release dquot type 0 [ 502.986372][ T369] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 503.028625][T27962] loop3: detected capacity change from 0 to 1024 [ 503.035841][ T369] EXT4-fs error (device loop6): ext4_release_dquot:6263: comm kworker/u4:4: Failed to release dquot type 0 [ 503.064253][T23491] EXT4-fs error (device loop6): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 503.088736][T23491] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 503.109917][T23491] EXT4-fs error (device loop6): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error [ 503.126935][T27962] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 503.256647][T27962] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000200000,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none. [ 503.347381][T27956] loop5: detected capacity change from 0 to 40427 [ 503.395132][T27956] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 503.435647][T27956] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 503.502252][T27956] F2FS-fs (loop5): invalid crc value [ 503.559996][T27956] F2FS-fs (loop5): Found nat_bits in checkpoint [ 503.668584][ T30] kauditd_printk_skb: 562 callbacks suppressed [ 503.668603][ T30] audit: type=1400 audit(761.249:112074): avc: denied { read } for pid=27983 comm="syz.3.13058" dev="nsfs" ino=4026532676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 503.703513][T27937] loop4: detected capacity change from 0 to 131072 [ 503.724031][T27956] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 503.732440][T27956] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 503.747452][T27937] F2FS-fs (loop4): Test dummy encryption mode enabled [ 503.748068][ T30] audit: type=1400 audit(761.286:112075): avc: denied { read open } for pid=27983 comm="syz.3.13058" path="net:[4026532676]" dev="nsfs" ino=4026532676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 503.774472][T27982] loop6: detected capacity change from 0 to 8192 [ 503.787093][T27937] F2FS-fs (loop4): invalid crc value [ 503.820146][T27937] F2FS-fs (loop4): Found nat_bits in checkpoint [ 503.904094][T27937] F2FS-fs (loop4): recover fsync data on readonly fs [ 503.910958][ T30] audit: type=1400 audit(761.286:112076): avc: denied { create } for pid=27983 comm="syz.3.13058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 503.947481][T27937] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 503.976992][ T30] audit: type=1400 audit(761.286:112077): avc: denied { read write } for pid=27934 comm="syz.4.13037" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 504.006528][ T369] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 504.027580][ T30] audit: type=1400 audit(761.286:112078): avc: denied { open } for pid=27934 comm="syz.4.13037" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 504.037088][ T369] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 504.154080][ T30] audit: type=1400 audit(761.286:112079): avc: denied { ioctl } for pid=27934 comm="syz.4.13037" path="/dev/loop4" dev="devtmpfs" ino=120 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 504.203516][ T30] audit: type=1400 audit(761.295:112080): avc: denied { connect } for pid=27983 comm="syz.3.13058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 504.227478][ T30] audit: type=1400 audit(761.295:112081): avc: denied { getopt } for pid=27983 comm="syz.3.13058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 504.247411][ T30] audit: type=1400 audit(761.305:112082): avc: denied { read write } for pid=22338 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 504.271311][ T30] audit: type=1400 audit(761.305:112083): avc: denied { open } for pid=22338 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 504.810164][T28012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13070'. [ 504.858814][T28012] netlink: 'syz.6.13070': attribute type 22 has an invalid length. [ 504.866861][T28012] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13070'. [ 504.886691][T27996] loop5: detected capacity change from 0 to 40427 [ 504.956432][T27996] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 504.967733][T27996] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 504.986480][T27996] F2FS-fs (loop5): fault_type options not supported [ 504.999542][T28022] netlink: 152 bytes leftover after parsing attributes in process `syz.6.13074'. [ 505.010713][T27996] F2FS-fs (loop5): invalid crc value [ 505.021343][T27996] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 505.057388][T28024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13086'. [ 505.080241][T28026] xt_hashlimit: size too large, truncated to 1048576 [ 505.128745][T27996] F2FS-fs (loop5): Start checkpoint disabled! [ 505.136028][T27996] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 505.171015][T27996] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 505.265044][T23521] attempt to access beyond end of device [ 505.265044][T23521] loop5: rw=2049, want=45104, limit=40427 [ 505.546926][T28042] loop5: detected capacity change from 0 to 256 [ 505.574332][T28044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13084'. [ 505.584828][T28044] netlink: 'syz.3.13084': attribute type 22 has an invalid length. [ 505.592818][T28044] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13084'. [ 505.605863][T28042] exfat: Deprecated parameter 'namecase' [ 505.611635][T28042] exfat: Deprecated parameter 'namecase' [ 505.618083][T28042] exfat: Deprecated parameter 'namecase' [ 505.640726][T28042] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 505.868697][T28058] xt_hashlimit: size too large, truncated to 1048576 [ 505.877941][T28057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13091'. [ 506.015018][ T1780] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 506.123342][T28069] loop6: detected capacity change from 0 to 256 [ 506.201212][T28069] exfat: Deprecated parameter 'namecase' [ 506.207190][T28069] exfat: Deprecated parameter 'namecase' [ 506.213701][T28069] exfat: Deprecated parameter 'namecase' [ 506.252976][T28069] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 506.330216][ T1780] usb 5-1: Using ep0 maxpacket: 8 [ 506.471222][ T1780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.482230][ T1780] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 506.495152][ T1780] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 506.504247][ T1780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.513903][ T1780] usb 5-1: config 0 descriptor?? [ 506.774360][T28079] loop3: detected capacity change from 0 to 512 [ 506.905005][T28079] EXT4-fs (loop3): 1 truncate cleaned up [ 506.920170][T28079] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,nogrpid,,errors=continue. Quota mode: none. [ 507.007446][T28079] EXT4-fs warning (device loop3): verify_group_input:165: Last group not full [ 507.057762][ T1780] apple 0003:05AC:0232.0011: unknown main item tag 0x3 [ 507.064810][ T1780] apple 0003:05AC:0232.0011: unknown main item tag 0x0 [ 507.088137][ T1780] apple 0003:05AC:0232.0011: unknown main item tag 0x0 [ 507.121394][ T1780] apple 0003:05AC:0232.0011: unknown main item tag 0x0 [ 507.128354][ T1780] apple 0003:05AC:0232.0011: unknown main item tag 0x0 [ 507.146598][ T1780] apple 0003:05AC:0232.0011: unknown main item tag 0x0 [ 507.153613][ T1780] apple 0003:05AC:0232.0011: unknown main item tag 0x0 [ 507.161096][ T1780] apple 0003:05AC:0232.0011: unknown main item tag 0x0 [ 507.177583][ T1780] apple 0003:05AC:0232.0011: hidraw0: USB HID v0.00 Device [HID 05ac:0232] on usb-dummy_hcd.4-1/input0 [ 507.304149][ T39] usb 5-1: USB disconnect, device number 123 [ 507.423090][T28094] fido_id[28094]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 507.523784][T28098] EXT4-fs (loop5): orphan cleanup on readonly fs [ 507.531942][T28097] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 507.539979][T28097] FAT-fs (loop7): Filesystem has been set read-only [ 507.564412][T28098] EXT4-fs error (device loop5): ext4_find_extent:929: inode #4: comm syz.5.13106: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 507.654593][T28098] EXT4-fs warning (device loop5): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 507.700126][T28098] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 507.707301][T28098] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 507.730842][T28101] xt_hashlimit: size too large, truncated to 1048576 [ 507.749187][T28080] F2FS-fs (loop6): Test dummy encryption mode enabled [ 507.765670][T28080] F2FS-fs (loop6): invalid crc value [ 507.812910][T28080] F2FS-fs (loop6): Found nat_bits in checkpoint [ 507.883744][T28107] set_capacity_and_notify: 4 callbacks suppressed [ 507.883763][T28107] loop5: detected capacity change from 0 to 512 [ 507.949031][T28080] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 508.034013][T28107] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 508.454391][ T1780] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 508.545553][T28148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13130'. [ 508.671518][T28150] loop7: detected capacity change from 0 to 512 [ 508.736225][ T1780] usb 5-1: Using ep0 maxpacket: 8 [ 508.758921][T28150] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 508.866287][ T1780] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 508.885598][ T1780] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 508.896517][ T1780] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 508.907484][ T1780] usb 5-1: config 250 has no interface number 0 [ 508.914217][ T1780] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 508.926351][ T1780] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 508.962069][ T1780] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 509.006344][ T1780] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 509.035829][ T1780] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 509.053726][ T1780] usb 5-1: config 250 interface 228 has no altsetting 0 [ 509.109500][ T30] kauditd_printk_skb: 483 callbacks suppressed [ 509.109521][ T30] audit: type=1400 audit(766.259:112566): avc: denied { read write } for pid=26374 comm="syz-executor" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 509.213171][ T30] audit: type=1400 audit(766.259:112567): avc: denied { open } for pid=26374 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 509.239381][ T1780] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 509.256108][ T1780] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 509.294965][ T1780] usb 5-1: Product: syz [ 509.299210][ T1780] usb 5-1: SerialNumber: syz [ 509.332414][ T30] audit: type=1400 audit(766.259:112568): avc: denied { ioctl } for pid=26374 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 509.363339][T28186] loop5: detected capacity change from 0 to 256 [ 509.398015][ T1780] hub 5-1:250.228: bad descriptor, ignoring hub [ 509.419363][ T1780] hub: probe of 5-1:250.228 failed with error -5 [ 509.440935][ T30] audit: type=1400 audit(766.278:112569): avc: denied { read write } for pid=23491 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 509.478097][T28191] loop6: detected capacity change from 0 to 1024 [ 509.514693][T28191] EXT4-fs (loop6): Ignoring removed bh option [ 509.521663][ T30] audit: type=1400 audit(766.278:112570): avc: denied { open } for pid=23491 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 509.547882][T28191] EXT4-fs (loop6): Ignoring removed nobh option [ 509.556053][ T30] audit: type=1400 audit(766.278:112571): avc: denied { ioctl } for pid=23491 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 509.583373][ T30] audit: type=1400 audit(766.287:112572): avc: denied { ioctl } for pid=28121 comm="syz.4.13116" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 509.615570][T28186] FAT-fs (loop5): Directory bread(block 64) failed [ 509.622646][T28186] FAT-fs (loop5): Directory bread(block 65) failed [ 509.629759][T28186] FAT-fs (loop5): Directory bread(block 66) failed [ 509.642662][T28191] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,barrier=0x0000000000000000,barrier=0x0000000000000004,noauto_da_alloc,quota,quota,errors=remount-ro,stripe=0x0000000000000010,bh,nobh,. Quota mode: writeback. [ 509.666944][ T1780] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 124 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 509.694920][T28186] FAT-fs (loop5): Directory bread(block 67) failed [ 509.702509][ T30] audit: type=1400 audit(766.287:112573): avc: denied { read write } for pid=349 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 509.731084][ T30] audit: type=1400 audit(766.306:112575): avc: denied { ioctl } for pid=28121 comm="syz.4.13116" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 509.756278][ T30] audit: type=1400 audit(766.324:112576): avc: denied { ioctl } for pid=28121 comm="syz.4.13116" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 509.776843][T28186] FAT-fs (loop5): Directory bread(block 68) failed [ 509.844170][T28186] FAT-fs (loop5): Directory bread(block 69) failed [ 509.850805][T28186] FAT-fs (loop5): Directory bread(block 70) failed [ 509.941079][T28186] FAT-fs (loop5): Directory bread(block 71) failed [ 509.947707][T28186] FAT-fs (loop5): Directory bread(block 72) failed [ 509.968760][T28186] FAT-fs (loop5): Directory bread(block 73) failed [ 510.047687][ T1780] usb 5-1: USB disconnect, device number 124 [ 510.061485][T23491] EXT4-fs error (device loop6): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /371/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 510.101859][ T1780] usblp0: removed [ 510.121891][T23491] EXT4-fs (loop6): Remounting filesystem read-only [ 510.141300][T23491] EXT4-fs error (device loop6): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /371/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 510.196181][T23491] EXT4-fs (loop6): Remounting filesystem read-only [ 510.210732][T23491] EXT4-fs error (device loop6): empty_inline_dir:1887: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 510.279368][T23491] EXT4-fs (loop6): Remounting filesystem read-only [ 510.307160][T23491] EXT4-fs warning (device loop6): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 510.331838][T23491] EXT4-fs error (device loop6): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /371/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 510.363225][T23491] EXT4-fs (loop6): Remounting filesystem read-only [ 510.371815][T23491] EXT4-fs error (device loop6): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /371/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 510.460157][T23491] EXT4-fs (loop6): Remounting filesystem read-only [ 510.467322][T23491] EXT4-fs error (device loop6): empty_inline_dir:1887: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 510.518708][T23491] EXT4-fs (loop6): Remounting filesystem read-only [ 510.546262][T23491] EXT4-fs warning (device loop6): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 510.603628][T28224] loop5: detected capacity change from 0 to 256 [ 510.619588][T23491] EXT4-fs error (device loop6): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /371/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 510.666907][T23491] EXT4-fs (loop6): Remounting filesystem read-only [ 510.680137][T28224] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 510.696247][T23491] EXT4-fs error (device loop6): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /371/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 510.725157][T28224] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 510.781860][T28232] loop4: detected capacity change from 0 to 512 [ 510.789378][T23491] EXT4-fs (loop6): Remounting filesystem read-only [ 510.801387][T23491] EXT4-fs error (device loop6): empty_inline_dir:1887: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 510.829075][T23491] EXT4-fs (loop6): Remounting filesystem read-only [ 510.836270][T28224] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 510.859482][T23491] EXT4-fs warning (device loop6): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 510.882398][T23491] EXT4-fs error (device loop6): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /371/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 510.927756][T23491] EXT4-fs (loop6): Remounting filesystem read-only [ 510.956878][T23491] EXT4-fs warning (device loop6): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 510.985974][T28232] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 511.013357][T23491] EXT4-fs warning (device loop6): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 511.105850][T23491] EXT4-fs warning (device loop6): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 511.136959][T28237] device vlan2 entered promiscuous mode [ 511.160060][T23491] EXT4-fs warning (device loop6): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 511.174966][T28237] device bridge0 entered promiscuous mode [ 511.236735][T23491] EXT4-fs warning (device loop6): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 511.314290][T23491] EXT4-fs warning (device loop6): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 511.373824][T23491] EXT4-fs warning (device loop6): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 511.416704][T28246] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 511.750363][T28260] sch_fq: defrate 4294967295 ignored. [ 511.864471][T28264] loop4: detected capacity change from 0 to 16 [ 511.946538][T28264] erofs: (device loop4): mounted with root inode @ nid 36. [ 512.020525][T28268] loop3: detected capacity change from 0 to 1024 [ 512.091652][T28268] EXT4-fs (loop3): Ignoring removed bh option [ 512.116120][T28268] EXT4-fs (loop3): Ignoring removed nobh option [ 512.172384][T28268] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,barrier=0x0000000000000000,barrier=0x0000000000000004,noauto_da_alloc,quota,quota,errors=remount-ro,stripe=0x0000000000000010,bh,nobh,. Quota mode: writeback. [ 512.381592][T22338] EXT4-fs error (device loop3): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /548/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 512.433652][T22338] EXT4-fs (loop3): Remounting filesystem read-only [ 512.449891][T22338] EXT4-fs error (device loop3): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /548/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 512.502897][T22338] EXT4-fs (loop3): Remounting filesystem read-only [ 512.520130][T22338] EXT4-fs error (device loop3): empty_inline_dir:1887: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 512.544754][T22338] EXT4-fs (loop3): Remounting filesystem read-only [ 512.555700][T22338] EXT4-fs warning (device loop3): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 512.573794][ T369] device bridge_slave_1 left promiscuous mode [ 512.580714][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.589415][T22338] EXT4-fs error (device loop3): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /548/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 512.620715][ T369] device bridge_slave_0 left promiscuous mode [ 512.654516][T22338] EXT4-fs (loop3): Remounting filesystem read-only [ 512.661421][T22338] EXT4-fs error (device loop3): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /548/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 512.669219][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.692817][T22338] EXT4-fs (loop3): Remounting filesystem read-only [ 512.702122][T22338] EXT4-fs error (device loop3): empty_inline_dir:1887: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 512.723782][ T369] device bridge0 left promiscuous mode [ 512.724080][T22338] EXT4-fs (loop3): Remounting filesystem read-only [ 512.735973][T22338] EXT4-fs warning (device loop3): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 512.750813][ T369] device veth1_macvtap left promiscuous mode [ 512.751867][T22338] EXT4-fs error (device loop3): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /548/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 512.760069][ T369] device veth0_vlan left promiscuous mode [ 512.782024][T22338] EXT4-fs (loop3): Remounting filesystem read-only [ 512.793020][T22338] EXT4-fs error (device loop3): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /548/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 512.816651][T22338] EXT4-fs (loop3): Remounting filesystem read-only [ 512.824632][T22338] EXT4-fs error (device loop3): empty_inline_dir:1887: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 512.867058][T22338] EXT4-fs (loop3): Remounting filesystem read-only [ 512.876220][T22338] EXT4-fs warning (device loop3): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 512.899767][T22338] EXT4-fs error (device loop3): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /548/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 512.923987][T22338] EXT4-fs (loop3): Remounting filesystem read-only [ 512.933516][T22338] EXT4-fs warning (device loop3): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 512.950652][T22338] EXT4-fs warning (device loop3): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 512.968327][T22338] EXT4-fs warning (device loop3): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 512.986235][T22338] EXT4-fs warning (device loop3): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 513.008678][T22338] EXT4-fs warning (device loop3): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 513.027474][T22338] EXT4-fs warning (device loop3): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 513.044892][T22338] EXT4-fs warning (device loop3): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 513.092897][T28282] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.100905][T28282] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.109399][T28282] device bridge_slave_0 entered promiscuous mode [ 513.159097][T28282] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.172143][T28292] loop4: detected capacity change from 0 to 256 [ 513.181641][T28282] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.189261][T28282] device bridge_slave_1 entered promiscuous mode [ 513.302272][T28292] FAT-fs (loop4): Directory bread(block 64) failed [ 513.342264][T28292] FAT-fs (loop4): Directory bread(block 65) failed [ 513.348884][T28292] FAT-fs (loop4): Directory bread(block 66) failed [ 513.385643][T28292] FAT-fs (loop4): Directory bread(block 67) failed [ 513.392293][T28292] FAT-fs (loop4): Directory bread(block 68) failed [ 513.416820][T28292] FAT-fs (loop4): Directory bread(block 69) failed [ 513.449133][T28292] FAT-fs (loop4): Directory bread(block 70) failed [ 513.475630][T28292] FAT-fs (loop4): Directory bread(block 71) failed [ 513.497667][T28292] FAT-fs (loop4): Directory bread(block 72) failed [ 513.516943][T28292] FAT-fs (loop4): Directory bread(block 73) failed [ 513.690731][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 513.707565][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 513.721735][ T536] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 513.749509][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 513.766940][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 513.767126][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.767141][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.767311][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 513.767561][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 513.767741][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.767756][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.831472][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 513.917634][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 513.928432][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 514.003392][ T536] usb 6-1: Using ep0 maxpacket: 16 [ 514.073570][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 514.134377][ T536] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.145050][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 514.154082][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 514.172278][ T536] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.177956][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 514.201882][T28282] device veth0_vlan entered promiscuous mode [ 514.262641][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 514.281884][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 514.324715][T28282] device veth1_macvtap entered promiscuous mode [ 514.372310][ T536] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.382906][ T536] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.391075][ T536] usb 6-1: Product: syz [ 514.405222][ T536] usb 6-1: Manufacturer: syz [ 514.454145][T28317] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.462582][ T536] usb 6-1: SerialNumber: syz [ 514.473547][T28317] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.488842][T28338] loop7: detected capacity change from 0 to 1024 [ 514.496615][T28317] device bridge_slave_0 entered promiscuous mode [ 514.503676][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 514.514486][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 514.533906][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 514.545221][ T30] kauditd_printk_skb: 1169 callbacks suppressed [ 514.545255][ T30] audit: type=1400 audit(771.270:113745): avc: denied { mounton } for pid=28337 comm="syz.7.13213" path="/202/file1" dev="tmpfs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 514.555357][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 514.582984][T28338] EXT4-fs (loop7): Ignoring removed bh option [ 514.592755][T28338] EXT4-fs (loop7): Ignoring removed nobh option [ 514.599628][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 514.608417][ T30] audit: type=1400 audit(771.288:113746): avc: denied { read write } for pid=350 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 514.632637][ T30] audit: type=1400 audit(771.288:113747): avc: denied { open } for pid=350 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 514.656418][ T30] audit: type=1400 audit(771.288:113748): avc: denied { ioctl } for pid=350 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 514.682219][ T30] audit: type=1400 audit(771.353:113749): avc: denied { module_request } for pid=28282 comm="syz-executor" kmod="netdev-geneve0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 514.709755][T28317] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.719436][T28338] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,barrier=0x0000000000000000,barrier=0x0000000000000004,noauto_da_alloc,quota,quota,errors=remount-ro,stripe=0x0000000000000010,bh,nobh,. Quota mode: writeback. [ 514.719548][T28317] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.750649][ T30] audit: type=1400 audit(771.473:113750): avc: denied { mount } for pid=28337 comm="syz.7.13213" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 514.772185][ T30] audit: type=1400 audit(771.473:113751): avc: denied { read write } for pid=28337 comm="syz.7.13213" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 514.809573][T28317] device bridge_slave_1 entered promiscuous mode [ 514.828131][ T30] audit: type=1400 audit(771.473:113752): avc: denied { open } for pid=28337 comm="syz.7.13213" path="/dev/loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 514.852327][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.856912][ T30] audit: type=1400 audit(771.473:113753): avc: denied { ioctl } for pid=28337 comm="syz.7.13213" path="/dev/loop7" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 514.885420][ T326] device bridge_slave_0 left promiscuous mode [ 514.902720][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.903480][ T536] usb 6-1: 0:2 : does not exist [ 514.925924][ T326] device veth1_macvtap left promiscuous mode [ 514.952320][ T536] usb 6-1: USB disconnect, device number 126 [ 514.954073][ T326] device veth0_vlan left promiscuous mode [ 514.971197][ T30] audit: type=1400 audit(771.528:113754): avc: denied { write } for pid=28337 comm="syz.7.13213" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 515.002388][T26374] EXT4-fs error (device loop7): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /202/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 515.033471][T26374] EXT4-fs (loop7): Remounting filesystem read-only [ 515.045280][T26374] EXT4-fs error (device loop7): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /202/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 515.070742][T26374] EXT4-fs (loop7): Remounting filesystem read-only [ 515.078758][T26374] EXT4-fs error (device loop7): empty_inline_dir:1887: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 515.101560][T26374] EXT4-fs (loop7): Remounting filesystem read-only [ 515.108199][T26374] EXT4-fs warning (device loop7): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 515.123381][T26374] EXT4-fs error (device loop7): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /202/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 515.146687][T26374] EXT4-fs (loop7): Remounting filesystem read-only [ 515.153511][T26374] EXT4-fs error (device loop7): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /202/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 515.176268][T26374] EXT4-fs (loop7): Remounting filesystem read-only [ 515.183599][T26374] EXT4-fs error (device loop7): empty_inline_dir:1887: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 515.204113][T26374] EXT4-fs (loop7): Remounting filesystem read-only [ 515.210740][T26374] EXT4-fs warning (device loop7): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 515.225952][T26374] EXT4-fs error (device loop7): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /202/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 515.231012][T22112] udevd[22112]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 515.252110][T26374] EXT4-fs (loop7): Remounting filesystem read-only [ 515.272530][T26374] EXT4-fs error (device loop7): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /202/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 515.295809][T26374] EXT4-fs (loop7): Remounting filesystem read-only [ 515.303021][T26374] EXT4-fs error (device loop7): empty_inline_dir:1887: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 515.323845][T26374] EXT4-fs (loop7): Remounting filesystem read-only [ 515.330960][T26374] EXT4-fs warning (device loop7): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 515.346774][T26374] EXT4-fs error (device loop7): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /202/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 515.370958][T26374] EXT4-fs (loop7): Remounting filesystem read-only [ 515.380640][T26374] EXT4-fs warning (device loop7): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 515.477281][T26374] EXT4-fs warning (device loop7): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 515.542880][T28353] loop5: detected capacity change from 0 to 512 [ 515.551926][T26374] EXT4-fs warning (device loop7): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 515.599128][T26374] EXT4-fs warning (device loop7): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 515.620958][T28353] EXT4-fs (loop5): Ignoring removed orlov option [ 515.639960][T28353] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 515.670947][T28353] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 515.690107][T26374] EXT4-fs warning (device loop7): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 515.706235][T28353] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.13219: attempt to clear invalid blocks 2 len 1 [ 515.720622][T28353] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 515.736466][T28353] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.13219: invalid indirect mapped block 1819239214 (level 0) [ 515.751418][T28353] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.13219: invalid indirect mapped block 1819239214 (level 1) [ 515.768231][T28353] EXT4-fs (loop5): 1 truncate cleaned up [ 515.774617][T28353] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,init_itable=0x0000000000000003,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 515.796070][T26374] EXT4-fs warning (device loop7): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 515.857582][T28353] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work [ 515.869843][T26374] EXT4-fs warning (device loop7): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 515.920243][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 515.930757][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 515.946560][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 515.993346][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 516.005634][T24710] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.012779][T24710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.038998][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 516.068575][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 516.088026][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 516.097397][T24710] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.104493][T24710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.128690][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 516.145662][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 516.308191][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 516.388357][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 516.399255][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 516.407578][T28368] netlink: 'syz.5.13224': attribute type 2 has an invalid length. [ 516.416899][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 516.442885][T28317] device veth0_vlan entered promiscuous mode [ 516.495018][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 516.527590][T28317] device veth1_macvtap entered promiscuous mode [ 516.602410][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 516.612657][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 516.636551][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 516.670046][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 516.701674][T28377] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 516.999351][T28392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13236'. [ 517.200739][T28386] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.207834][T28386] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.221397][T28386] device bridge_slave_0 entered promiscuous mode [ 517.248485][T28386] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.284019][T28386] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.309314][T28386] device bridge_slave_1 entered promiscuous mode [ 517.317764][T24710] device bridge_slave_1 left promiscuous mode [ 517.327255][T24710] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.363798][T24710] device bridge_slave_0 left promiscuous mode [ 517.370033][T24710] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.385929][T28355] loop4: detected capacity change from 0 to 131072 [ 517.426209][T28355] F2FS-fs (loop4): Test dummy encryption mode enabled [ 517.437881][T24710] device veth1_macvtap left promiscuous mode [ 517.451717][T28355] F2FS-fs (loop4): invalid crc value [ 517.460362][T24710] device veth0_vlan left promiscuous mode [ 517.467825][T28418] loop5: detected capacity change from 0 to 512 [ 517.504571][T28355] F2FS-fs (loop4): Found nat_bits in checkpoint [ 517.543752][T28418] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 517.556559][T28424] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13248'. [ 517.598384][T28418] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.13247: invalid indirect mapped block 32768 (level 2) [ 517.624378][T28418] EXT4-fs (loop5): 1 orphan inode deleted [ 517.631441][T28418] EXT4-fs (loop5): 1 truncate cleaned up [ 517.645321][T28418] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,nolazytime,,errors=continue. Quota mode: none. [ 517.684803][T28418] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #12: block 7: comm syz.5.13247: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 517.710467][T28355] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 517.825488][T28427] netlink: 'syz.8.13249': attribute type 8 has an invalid length. [ 518.301643][T28451] loop3: detected capacity change from 0 to 4096 [ 518.355313][T28451] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 518.382486][T28451] EXT4-fs (loop3): Test dummy encryption mode enabled [ 518.457625][T28451] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 518.466012][T28451] System zones: 0-5 [ 518.479995][T28451] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 518.552546][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 518.580448][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 518.621011][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 518.669698][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 518.707999][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.715107][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.738424][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 518.755007][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 518.772435][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.779556][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.804579][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 518.840238][T28474] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13272'. [ 518.875606][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 518.884271][T28485] loop3: detected capacity change from 0 to 16 [ 518.903229][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 518.962583][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 518.972274][T28485] erofs: (device loop3): mounted with root inode @ nid 36. [ 518.985065][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 519.035207][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 519.048848][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 519.077723][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 519.112662][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 519.132227][T28500] loop3: detected capacity change from 0 to 512 [ 519.152832][T28386] device veth0_vlan entered promiscuous mode [ 519.197589][T28500] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 519.207692][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 519.216918][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 519.236889][T28386] device veth1_macvtap entered promiscuous mode [ 519.258062][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 519.265948][T28500] EXT4-fs (loop3): 1 truncate cleaned up [ 519.271749][T28500] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 519.282953][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 519.329041][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 519.347101][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 519.356664][T23521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 519.447537][T28510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13288'. [ 519.578115][T28516] xt_hashlimit: size too large, truncated to 1048576 [ 519.835059][T28534] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\Ãåý07†ðÿ$Áܲ¹" or missing value [ 519.993165][ T30] kauditd_printk_skb: 1017 callbacks suppressed [ 519.993182][ T30] audit: type=1400 audit(776.317:114772): avc: denied { read write } for pid=350 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 520.073704][ T30] audit: type=1400 audit(776.345:114773): avc: denied { read write open } for pid=350 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 520.146882][T28544] loop9: detected capacity change from 0 to 16 [ 520.160329][ T30] audit: type=1400 audit(776.345:114774): avc: denied { ioctl } for pid=350 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 520.209293][ T30] audit: type=1400 audit(776.409:114775): avc: denied { read write } for pid=28386 comm="syz-executor" name="loop9" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 520.226082][T28544] erofs: (device loop9): mounted with root inode @ nid 36. [ 520.278446][ T30] audit: type=1400 audit(776.409:114776): avc: denied { open } for pid=28386 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 520.300762][T28521] loop3: detected capacity change from 0 to 40427 [ 520.343714][ T30] audit: type=1400 audit(776.428:114777): avc: denied { ioctl } for pid=28386 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=125 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 520.353843][T28521] F2FS-fs (loop3): invalid crc value [ 520.429894][T28521] F2FS-fs (loop3): Found nat_bits in checkpoint [ 520.497384][T28521] F2FS-fs (loop3): Start checkpoint disabled! [ 520.505962][ T30] audit: type=1400 audit(776.455:114778): avc: denied { read write } for pid=28543 comm="syz.9.13302" name="loop9" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 520.534902][ T356] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 520.555633][ T356] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 520.567691][ T30] audit: type=1400 audit(776.455:114779): avc: denied { open } for pid=28543 comm="syz.9.13302" path="/dev/loop9" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 520.591884][ T30] audit: type=1400 audit(776.455:114780): avc: denied { ioctl } for pid=28543 comm="syz.9.13302" path="/dev/loop9" dev="devtmpfs" ino=125 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 520.591915][T28521] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 520.632130][ T30] audit: type=1400 audit(776.520:114781): avc: denied { mounton } for pid=28543 comm="syz.9.13302" path="/6/file1" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 520.820339][T28557] fido_id[28557]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 520.879885][T23521] attempt to access beyond end of device [ 520.879885][T23521] loop3: rw=2049, want=40968, limit=40427 [ 520.894372][T23521] attempt to access beyond end of device [ 520.894372][T23521] loop3: rw=2049, want=41000, limit=40427 [ 520.963304][T28578] loop4: detected capacity change from 0 to 256 [ 521.027462][T28585] loop9: detected capacity change from 0 to 1024 [ 521.140469][T28595] loop4: detected capacity change from 0 to 256 [ 521.162159][T28585] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 521.220547][T28595] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 521.275365][T28602] loop8: detected capacity change from 0 to 1024 [ 521.284230][T28595] FAT-fs (loop4): Filesystem has been set read-only [ 521.320773][T28602] EXT4-fs (loop8): Ignoring removed bh option [ 521.327394][T28595] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 521.341141][T28595] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 521.369250][T28611] loop9: detected capacity change from 0 to 512 [ 521.399491][T28602] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,bsdgroups,discard,debug_want_extra_isize=0x000000000000000c,data_err=ignore,bsddf,stripe=0x0000000000000002,bh,auto_da_alloc,,errors=continue. Quota mode: none. [ 521.444143][T28611] EXT4-fs (loop9): Test dummy encryption mode enabled [ 521.479708][T28611] EXT4-fs error (device loop9): ext4_orphan_get:1406: inode #15: comm syz.9.13331: inode has both inline data and extents flags [ 521.525534][T28611] EXT4-fs error (device loop9): ext4_orphan_get:1411: comm syz.9.13331: couldn't read orphan inode 15 (err -117) [ 521.554996][T28611] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 521.628647][T28629] loop3: detected capacity change from 0 to 256 [ 521.709435][T28629] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 521.791244][T28649] device vlan2 entered promiscuous mode [ 521.826997][T28649] device syz_tun entered promiscuous mode [ 521.959608][T28665] loop8: detected capacity change from 0 to 256 [ 522.055169][T28677] loop5: detected capacity change from 0 to 256 [ 522.106379][T28677] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 522.595663][T28711] EXT4-fs (loop5): Test dummy encryption mode enabled [ 522.653996][T28711] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.13379: inode has both inline data and extents flags [ 522.685496][T28711] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.13379: couldn't read orphan inode 15 (err -117) [ 522.739645][T28711] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 522.790211][T28688] F2FS-fs (loop8): invalid crc value [ 522.806665][T28688] F2FS-fs (loop8): Found nat_bits in checkpoint [ 522.977636][T28688] F2FS-fs (loop8): Start checkpoint disabled! [ 523.009262][T28688] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 523.096627][T28722] netlink: 'syz.5.13382': attribute type 5 has an invalid length. [ 523.147768][T23521] attempt to access beyond end of device [ 523.147768][T23521] loop8: rw=2049, want=40968, limit=40427 [ 523.159184][T23521] attempt to access beyond end of device [ 523.159184][T23521] loop8: rw=2049, want=41000, limit=40427 [ 523.193975][T28721] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 523.237614][T28729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13388'. [ 523.246782][T28729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13388'. [ 523.257040][T28729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.381148][T28737] device vlan3 entered promiscuous mode [ 523.401217][T28737] device gretap0 entered promiscuous mode [ 524.334723][T28773] EXT4-fs (loop4): Ignoring removed nobh option [ 524.341518][T28773] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 524.354144][T28773] EXT4-fs (loop4): orphan cleanup on readonly fs [ 524.361867][T28773] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 524.378351][T28773] EXT4-fs (loop4): Remounting filesystem read-only [ 524.385087][T28773] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.13406: Failed to acquire dquot type 0 [ 524.397377][T28773] EXT4-fs (loop4): Remounting filesystem read-only [ 524.404129][T28773] EXT4-fs (loop4): 1 truncate cleaned up [ 524.410990][T28779] EXT4-fs (loop3): Test dummy encryption mode enabled [ 524.419903][T28773] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,noblock_validity,nolazytime,journal_dev=0x0000000000000d41,nogrpid,nobh,errors=remount-ro,noinit_itable,min_batch_time=0x00000000000000012. Quota mode: writeback. [ 524.423669][T28783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13409'. [ 524.477594][T28779] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.13408: inode has both inline data and extents flags [ 524.545502][T28779] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.13408: couldn't read orphan inode 15 (err -117) [ 524.558893][T28779] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 525.058192][T28810] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 525.077766][T28810] EXT4-fs (loop3): orphan cleanup on readonly fs [ 525.094883][T28810] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #16: comm syz.3.13423: corrupted inode contents [ 525.133050][T28810] EXT4-fs error (device loop3): ext4_dirty_inode:6108: inode #16: comm syz.3.13423: mark_inode_dirty error [ 525.166548][T28810] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #16: comm syz.3.13423: corrupted inode contents [ 525.270189][T28810] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.13423: mark_inode_dirty error [ 525.310440][T28810] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #16: comm syz.3.13423: corrupted inode contents [ 525.372589][T28810] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 525.417392][T28830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13431'. [ 525.430656][ T30] kauditd_printk_skb: 674 callbacks suppressed [ 525.430674][ T30] audit: type=1400 audit(781.330:115454): avc: denied { write } for pid=28828 comm="syz.9.13430" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 525.461985][T28810] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #16: comm syz.3.13423: corrupted inode contents [ 525.539549][T28810] EXT4-fs error (device loop3): ext4_truncate:4317: inode #16: comm syz.3.13423: mark_inode_dirty error [ 525.552909][ T30] audit: type=1400 audit(781.376:115455): avc: denied { map } for pid=28828 comm="syz.9.13430" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 525.600001][T28810] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 525.632946][T28810] EXT4-fs (loop3): 1 truncate cleaned up [ 525.675538][T28810] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 525.691396][ T30] audit: type=1400 audit(781.404:115456): avc: denied { read write } for pid=349 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 525.752250][ T30] audit: type=1400 audit(781.404:115457): avc: denied { open } for pid=349 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 525.843866][ T30] audit: type=1400 audit(781.404:115458): avc: denied { ioctl } for pid=349 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 525.872957][ T30] audit: type=1400 audit(781.422:115459): avc: denied { read write } for pid=28386 comm="syz-executor" name="loop9" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 525.970715][ T30] audit: type=1400 audit(781.422:115460): avc: denied { open } for pid=28386 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 526.023791][ T30] audit: type=1400 audit(781.422:115461): avc: denied { ioctl } for pid=28386 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=125 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 526.111334][ T30] audit: type=1400 audit(781.477:115462): avc: denied { read write } for pid=28282 comm="syz-executor" name="loop8" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 526.153200][ T30] audit: type=1400 audit(781.477:115463): avc: denied { read write open } for pid=28282 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 526.232647][T28871] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13449'. [ 526.313126][T28876] set_capacity_and_notify: 7 callbacks suppressed [ 526.313147][T28876] loop8: detected capacity change from 0 to 256 [ 526.377621][T28876] exfat: Deprecated parameter 'namecase' [ 526.388740][T28876] exfat: Deprecated parameter 'namecase' [ 526.448921][T28876] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 526.461890][T28882] loop4: detected capacity change from 0 to 256 [ 526.511114][T28876] attempt to access beyond end of device [ 526.511114][T28876] loop8: rw=0, want=34225520832, limit=256 [ 526.556741][T28882] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 526.812383][T28898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13462'. [ 526.844484][T28890] loop8: detected capacity change from 0 to 8192 [ 526.896545][T28901] loop9: detected capacity change from 0 to 2048 [ 526.936656][T28905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13466'. [ 526.958904][T24710] ================================================================== [ 526.967044][T24710] BUG: KASAN: use-after-free in down_read_trylock+0x9d/0x660 [ 526.974583][T24710] Read of size 8 at addr ffff888136dd0070 by task kworker/u4:6/24710 [ 526.982678][T24710] [ 526.985110][T24710] CPU: 0 PID: 24710 Comm: kworker/u4:6 Tainted: G W syzkaller #0 [ 526.994170][T24710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.004268][T24710] Workqueue: writeback wb_workfn (flush-7:8) [ 527.010442][T24710] Call Trace: [ 527.013932][T24710] [ 527.016912][T24710] __dump_stack+0x21/0x30 [ 527.021340][T24710] dump_stack_lvl+0x110/0x170 [ 527.026038][T24710] ? show_regs_print_info+0x20/0x20 [ 527.031254][T24710] ? load_image+0x3e0/0x3e0 [ 527.035776][T24710] print_address_description+0x7f/0x2c0 [ 527.041341][T24710] ? down_read_trylock+0x9d/0x660 [ 527.046391][T24710] kasan_report+0xf1/0x140 [ 527.050887][T24710] ? down_read_trylock+0x9d/0x660 [ 527.055938][T24710] kasan_check_range+0x249/0x2a0 [ 527.060902][T24710] __kasan_check_read+0x11/0x20 [ 527.065784][T24710] down_read_trylock+0x9d/0x660 [ 527.070662][T24710] ? __init_rwsem+0x1d0/0x1d0 [ 527.075348][T24710] ? move_expired_inodes+0x6da/0x730 [ 527.080684][T24710] trylock_super+0x1f/0xf0 [ 527.085199][T24710] __writeback_inodes_wb+0x119/0x400 [ 527.090508][T24710] wb_writeback+0x41f/0x9d0 [ 527.095031][T24710] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 527.101032][T24710] ? __kasan_check_write+0x14/0x20 [ 527.106161][T24710] ? wb_workfn+0x483/0xf30 [ 527.110601][T24710] ? kfree+0xc4/0x270 [ 527.114626][T24710] ? wb_workfn+0x483/0xf30 [ 527.119049][T24710] wb_workfn+0xb0a/0xf30 [ 527.123313][T24710] ? inode_wait_for_writeback+0x220/0x220 [ 527.129059][T24710] ? _raw_spin_unlock+0x4d/0x70 [ 527.134002][T24710] ? finish_task_switch+0x16b/0x780 [ 527.139242][T24710] ? __switch_to_asm+0x3a/0x60 [ 527.144054][T24710] ? __schedule+0xb76/0x14c0 [ 527.148651][T24710] process_one_work+0x6be/0xba0 [ 527.153618][T24710] worker_thread+0xa59/0x1200 [ 527.158319][T24710] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 527.163798][T24710] ? __kthread_parkme+0xac/0x200 [ 527.168903][T24710] kthread+0x411/0x500 [ 527.172990][T24710] ? worker_clr_flags+0x190/0x190 [ 527.178038][T24710] ? kthread_blkcg+0xd0/0xd0 [ 527.182649][T24710] ret_from_fork+0x1f/0x30 [ 527.187090][T24710] [ 527.190140][T24710] [ 527.192467][T24710] Allocated by task 28688: [ 527.196955][T24710] __kasan_kmalloc+0xda/0x110 [ 527.201647][T24710] kmem_cache_alloc_trace+0x119/0x270 [ 527.207028][T24710] alloc_super+0x5e/0x7f0 [ 527.211377][T24710] sget+0x1e4/0x4c0 [ 527.215190][T24710] mount_bdev+0xf6/0x3e0 [ 527.219443][T24710] f2fs_mount+0x34/0x40 [ 527.223692][T24710] legacy_get_tree+0xed/0x190 [ 527.228403][T24710] vfs_get_tree+0x89/0x260 [ 527.232851][T24710] do_new_mount+0x25a/0xa20 [ 527.237373][T24710] path_mount+0x659/0xff0 [ 527.241716][T24710] __se_sys_mount+0x320/0x390 [ 527.246406][T24710] __x64_sys_mount+0xbf/0xd0 [ 527.251017][T24710] x64_sys_call+0x6bf/0x9a0 [ 527.255545][T24710] do_syscall_64+0x4c/0xa0 [ 527.259995][T24710] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 527.265938][T24710] [ 527.268297][T24710] Freed by task 356: [ 527.272201][T24710] kasan_set_track+0x4a/0x70 [ 527.276807][T24710] kasan_set_free_info+0x23/0x40 [ 527.281790][T24710] ____kasan_slab_free+0x125/0x160 [ 527.286919][T24710] __kasan_slab_free+0x11/0x20 [ 527.291691][T24710] slab_free_freelist_hook+0xc2/0x190 [ 527.297082][T24710] kfree+0xc4/0x270 [ 527.300900][T24710] destroy_super_work+0x40/0x50 [ 527.305776][T24710] process_one_work+0x6be/0xba0 [ 527.310647][T24710] worker_thread+0xa59/0x1200 [ 527.315336][T24710] kthread+0x411/0x500 [ 527.319423][T24710] ret_from_fork+0x1f/0x30 [ 527.323851][T24710] [ 527.326193][T24710] Last potentially related work creation: [ 527.331923][T24710] kasan_save_stack+0x3a/0x60 [ 527.336611][T24710] __kasan_record_aux_stack+0xd2/0x100 [ 527.342085][T24710] kasan_record_aux_stack_noalloc+0xb/0x10 [ 527.347910][T24710] insert_work+0x51/0x310 [ 527.352263][T24710] __queue_work+0x8e5/0xc60 [ 527.356778][T24710] queue_work_on+0xde/0x150 [ 527.361307][T24710] destroy_super_rcu+0xd1/0xe0 [ 527.366097][T24710] rcu_do_batch+0x532/0xbe0 [ 527.370712][T24710] rcu_core+0x5ee/0xf80 [ 527.374892][T24710] rcu_core_si+0x9/0x10 [ 527.379065][T24710] handle_softirqs+0x250/0x560 [ 527.383941][T24710] run_ksoftirqd+0x28/0x40 [ 527.388375][T24710] smpboot_thread_fn+0x45a/0x8c0 [ 527.393399][T24710] kthread+0x411/0x500 [ 527.397474][T24710] ret_from_fork+0x1f/0x30 [ 527.401898][T24710] [ 527.404242][T24710] Second to last potentially related work creation: [ 527.410830][T24710] kasan_save_stack+0x3a/0x60 [ 527.415532][T24710] __kasan_record_aux_stack+0xd2/0x100 [ 527.421008][T24710] kasan_record_aux_stack_noalloc+0xb/0x10 [ 527.426845][T24710] call_rcu+0x10b/0xf80 [ 527.431018][T24710] __put_super+0x26b/0x2d0 [ 527.435468][T24710] deactivate_locked_super+0xd4/0x100 [ 527.440872][T24710] deactivate_super+0xaf/0xe0 [ 527.445605][T24710] cleanup_mnt+0x45b/0x510 [ 527.450054][T24710] __cleanup_mnt+0x19/0x20 [ 527.454491][T24710] task_work_run+0x127/0x190 [ 527.459276][T24710] exit_to_user_mode_loop+0xd0/0xe0 [ 527.464502][T24710] exit_to_user_mode_prepare+0x87/0xd0 [ 527.470116][T24710] syscall_exit_to_user_mode+0x1a/0x30 [ 527.475658][T24710] do_syscall_64+0x58/0xa0 [ 527.480093][T24710] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 527.486004][T24710] [ 527.488345][T24710] The buggy address belongs to the object at ffff888136dd0000 [ 527.488345][T24710] which belongs to the cache kmalloc-2k of size 2048 [ 527.502414][T24710] The buggy address is located 112 bytes inside of [ 527.502414][T24710] 2048-byte region [ffff888136dd0000, ffff888136dd0800) [ 527.515785][T24710] The buggy address belongs to the page: [ 527.521423][T24710] page:ffffea0004db7400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x136dd0 [ 527.531685][T24710] head:ffffea0004db7400 order:3 compound_mapcount:0 compound_pincount:0 [ 527.540024][T24710] flags: 0x4000000000010200(slab|head|zone=1) [ 527.546116][T24710] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100043200 [ 527.554708][T24710] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 527.563302][T24710] page dumped because: kasan: bad access detected [ 527.569726][T24710] page_owner tracks the page as allocated [ 527.575445][T24710] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3674, ts 116213851661, free_ts 109252168347 [ 527.596142][T24710] post_alloc_hook+0x192/0x1b0 [ 527.601017][T24710] prep_new_page+0x1c/0x110 [ 527.605540][T24710] get_page_from_freelist+0x2d3a/0x2dc0 [ 527.611205][T24710] __alloc_pages+0x1a2/0x460 [ 527.615812][T24710] new_slab+0xa1/0x4d0 [ 527.619915][T24710] ___slab_alloc+0x381/0x810 [ 527.624544][T24710] __slab_alloc+0x49/0x90 [ 527.628888][T24710] kmem_cache_alloc_trace+0x146/0x270 [ 527.634277][T24710] copy_verifier_state+0x6a6/0xcd0 [ 527.639470][T24710] push_stack+0x19b/0x4f0 [ 527.643821][T24710] do_check+0xc401/0xea90 [ 527.648165][T24710] do_check_common+0xff5/0x19b0 [ 527.653036][T24710] bpf_check+0x33f4/0xf370 [ 527.657454][T24710] bpf_prog_load+0x10c4/0x1640 [ 527.662228][T24710] __sys_bpf+0x51d/0x7d0 [ 527.666488][T24710] __x64_sys_bpf+0x7c/0x90 [ 527.670907][T24710] page last free stack trace: [ 527.675587][T24710] free_unref_page_prepare+0x542/0x550 [ 527.681058][T24710] free_unref_page+0xae/0x540 [ 527.685762][T24710] __free_pages+0x6c/0x100 [ 527.690231][T24710] __free_slab+0xe8/0x1e0 [ 527.694589][T24710] __unfreeze_partials+0x160/0x190 [ 527.699718][T24710] put_cpu_partial+0xc6/0x120 [ 527.704418][T24710] __slab_free+0x1d4/0x290 [ 527.708862][T24710] ___cache_free+0x104/0x120 [ 527.713462][T24710] qlink_free+0x4d/0x90 [ 527.717720][T24710] qlist_free_all+0x5f/0xb0 [ 527.722245][T24710] kasan_quarantine_reduce+0x14a/0x170 [ 527.727721][T24710] __kasan_slab_alloc+0x2f/0xf0 [ 527.732590][T24710] slab_post_alloc_hook+0x4f/0x2b0 [ 527.737715][T24710] kmem_cache_alloc+0xf7/0x260 [ 527.742497][T24710] getname_flags+0xb9/0x500 [ 527.747031][T24710] user_path_at_empty+0x30/0x1c0 [ 527.751983][T24710] [ 527.754307][T24710] Memory state around the buggy address: [ 527.759947][T24710] ffff888136dcff00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 527.768043][T24710] ffff888136dcff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 527.776122][T24710] >ffff888136dd0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 527.784188][T24710] ^ [ 527.791917][T24710] ffff888136dd0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 527.799995][T24710] ffff888136dd0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 527.808067][T24710] ================================================================== [ 527.816133][T24710] Disabling lock debugging due to kernel taint [ 527.867361][T28905] device macsec1 entered promiscuous mode [ 527.917767][T28901] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 527.983680][ T356] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 528.374082][ T356] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 528.385016][ T356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 528.395927][ T356] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 528.408937][ T356] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 528.418019][ T356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.427457][ T356] usb 4-1: config 0 descriptor?? [ 528.450190][T28907] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 528.949400][ T356] hid-multitouch 0003:1FD2:6007.0013: ignoring exceeding usage max [ 528.958584][ T356] hid-multitouch 0003:1FD2:6007.0013: unknown main item tag 0x2 [ 528.967873][ T356] hid-multitouch 0003:1FD2:6007.0013: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 529.173342][ T536] usb 4-1: USB disconnect, device number 2 [ 530.390163][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!