last executing test programs: 2.493505743s ago: executing program 0 (id=3253): r0 = socket(0x18, 0x0, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private}}}}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) linkat(r1, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/../file0\x00', 0x400) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x24000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x19538000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0x2020) 2.343928538s ago: executing program 3 (id=3258): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x2}]}, @IFLA_LINKMODE={0x5}]}, 0x30}}, 0x0) 2.301159689s ago: executing program 3 (id=3260): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000353000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000a12000/0x4000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 2.222446803s ago: executing program 1 (id=3263): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r6, 0x10f, 0x83, &(0x7f0000000400), &(0x7f0000000440)=0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000380)={[{@shortname_mixed}, {@fat=@tz_utc}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@uni_xlateno}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@utf8}, {@shortname_lower}, {@shortname_win95}, {@utf8no}, {@fat=@discard}, {@shortname_lower}, {@uni_xlateno}]}, 0x3, 0x350, &(0x7f0000000580)="$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") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) 2.178086805s ago: executing program 3 (id=3264): ftruncate(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOt7rW1aSpOmNOk6LYt28T8QQcEnn3wR/AOEZR78A2RgQF/EB1FRRGf0QVDnSpIbp5Mmbd1pm07z+cBpzrn35n7PuSEn98fpvQGMrRci4o2ImIiIlyOimE9P87TYLux3l7t/753ldkoiy976axJJPq23rnZ5MiKud98SUxHxtS9HfDM5HLe5u7exVKtVt/NypVXfqjR3926u15fWqmvVzfn5udcWXl94dWE2yz1WO0u9zE++9Pn3Pv2t3y3++ca329X63EeiEH3tOE3dphc626KnvY22zyLYCEzk7SmMuiIAAJxIex//gxHxic7+fzEmOntzfSZGUTMAAADgtGRfmI5/JxEZAAAAcGmlETEdSVrOxwJMR5peyc8NfDiupbVGs/Wp1cbO5kp7XkQpCunqeq06m48VLkUhaZfn8jG2vfIrfeX5iHgmIr5fvNopl5cbtZURn/sAAACAcXG97/j/H8W0kz/egP8TAAAAAC6u0tACAAAAcFk45AcAAIDLr//4/70R1QMAAAA4E1958812ynrPv155e3dno/H2zZVqc6Nc31kuLze2t8prjcZa55599ePWV2s0tj4Tmzu3Kq1qs1Vp7u4t1hs7m63F9UcegQ0AAACco2c+fvvXSUTsf/ZqJ0V+H0CAR/xh1BUATtPEqCsAjIy7eMP4Koy6AsDIJcfMN3gHAACefDMfPXz9v/f8f+cG4HIz1gcAxo/r/zC+CkYAwlhLI+ID3exTw5YZev3/lyeNkmURd4oHpzi/CAAA52u6k5K0nB8HTEealssRT0ekpSgkq+u16mx+fPCrYuGpdnmu887k2DHDAAAAAAAAAAAAAAAAAAAAAAAAAEBXliWRAQAAAJdaRPqnpHM3/4iZ4kvT/ecHriT/LMYf88KP3vrBraVWa3uuPf1vnWd5XYmI1g/z6a8MfXwYAAAAcNqS/aGzusfp+evcudYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDFw/947y710nnH/8sWIKA2KPxlTndepKETEtb8nMXngfUlETJxC/P13I+LZQfGTeJBlWSmvxaD4V884fqmzaQbHTyPi+inEh3F2u93/vDHo+5fGC53Xwd+/yTw9ruH9X5pHfrbTzw3qf54+tLb6wBjP3f1ZZWj8dyOemxzc//T632RI/BcPre1fWZYdjvGNr+/tDYuf/ThiZuDvT/JIrEqrvlVp7u7dXK8vrVXXqpvz83OvLby+8OrCbGV1vVbN/w6M8b2P/fzBUe2/NiD+b3/T7X+Pav9Lw1ba5z93b937UDdbGBT/xosDf3+nYkj8NP/t+2Seb8+f6eX3u/mDnv/pneePav/KkO1/3Od/44Ttf/mr3/39CRcFAM5Bc3dvY6lWq24fkZk6wTJPYuYXUxeiGv9nJvtO95O7KPV5v5n23urDKb1WXYCKHchk5xZrIi5Ik/+XGWm3BAAAnIGHO/2jrgkAAAAAAAAAAAAAAAAAAACMr/O4nVh/zP3RNBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ej/DQAA///M/t/r") open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 1.869022847s ago: executing program 2 (id=3267): creat(&(0x7f0000000180)='./control\x00', 0x0) r0 = inotify_init() r1 = epoll_create(0xfd) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00007a8000)) inotify_add_watch(r0, &(0x7f0000000400)='./control\x00', 0x10000029) open$dir(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) ppoll(&(0x7f00000009c0)=[{r1}], 0x1, &(0x7f0000000a00)={0x0, 0x989680}, 0x0, 0x0) 1.806818459s ago: executing program 2 (id=3268): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551c, 0xffffffffffffffff) 1.78318712s ago: executing program 2 (id=3269): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x2b}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'nhpoly1305-avx2\x00'}}}]}, 0x13c}}, 0x0) 1.746928932s ago: executing program 2 (id=3270): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) unshare(0x60400) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000080)=""/54, 0x36) getdents(r3, 0xfffffffffffffffd, 0x58) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) 1.698723033s ago: executing program 3 (id=3271): syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020400) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 1.228609421s ago: executing program 4 (id=3272): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0x0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast1, @loopback, [], [], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 1.199840353s ago: executing program 0 (id=3273): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) clock_adjtime(0x0, &(0x7f0000000140)={0x930b}) 1.168065834s ago: executing program 1 (id=3274): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000353000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000a12000/0x4000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 1.153474925s ago: executing program 4 (id=3275): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 1.146054135s ago: executing program 0 (id=3276): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{}], 'k'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "89"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "af4b"}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x51}, 0x20) 1.084767338s ago: executing program 0 (id=3277): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x26e1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xf40, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2001095, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x1c08734, &(0x7f0000000900)={[{@dioread_nolock}, {@noload}, {@grpquota}, {@minixdf}, {@grpquota}, {@errors_continue}, {@sb={'sb', 0x3d, 0x4}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@grpquota}, {@abort}, {@commit={'commit', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@init_itable_val={'init_itable', 0x3d, 0xffffffffffffffff}}]}, 0x1, 0x486, &(0x7f0000000440)="$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") ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x0) 1.084595488s ago: executing program 4 (id=3278): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x2}]}, @IFLA_LINKMODE={0x5}]}, 0x30}}, 0x0) 1.084354958s ago: executing program 3 (id=3279): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x80}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@flushpolicy={0x10, 0x1d, 0x6a1d63bef531ea9b}, 0x10}}, 0x0) 1.084240307s ago: executing program 1 (id=3280): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@can_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0xd}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}]}, 0x1c}}, 0x0) 1.060762569s ago: executing program 1 (id=3281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) close(r0) 1.060408459s ago: executing program 4 (id=3282): socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x0, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast2, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000fab70400000000000185000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x5b}, 0x20) 937.768673ms ago: executing program 3 (id=3283): r0 = socket(0x18, 0x0, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private}}}}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) linkat(r1, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/../file0\x00', 0x400) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x24000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x19538000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0x2020) 864.913596ms ago: executing program 2 (id=3285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc1, 0x0, 0x2}]}) 785.508169ms ago: executing program 0 (id=3286): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0x0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast1, @loopback, [], [], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 785.386499ms ago: executing program 1 (id=3287): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x3c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 785.269399ms ago: executing program 2 (id=3288): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005000)}, 0x0) r1 = dup(0xffffffffffffffff) getdents64(r1, &(0x7f0000000000)=""/134, 0x86) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) memfd_create(&(0x7f0000000040)='-/{!-\xf9-$\x00', 0x1) r2 = creat(&(0x7f0000000600)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x104) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 680.185433ms ago: executing program 0 (id=3289): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 679.970443ms ago: executing program 1 (id=3290): syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020400) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 85.080716ms ago: executing program 4 (id=3291): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000353000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000a12000/0x4000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 0s ago: executing program 4 (id=3292): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@can_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0xd}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): r after parsing attributes in process `syz.0.2031'. [ 148.945429][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.953661][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.960495][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.969559][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.978758][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.985619][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.993465][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.996163][ T18] usb 2-1: USB disconnect, device number 16 [ 149.013166][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.029979][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.043055][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.057961][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.073961][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.082190][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.091266][ T2401] device bridge_slave_1 left promiscuous mode [ 149.097785][ T2401] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.105816][ T2401] device bridge_slave_0 left promiscuous mode [ 149.111726][ T2401] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.204690][ T5792] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 149.407519][ T5797] EXT4-fs error (device loop4): ext4_ext_check_inode:540: inode #15: comm syz.4.2035: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 149.425526][ T5797] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.2035: couldn't read orphan inode 15 (err -117) [ 149.437914][ T5797] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 149.446770][ T5797] ext4 filesystem being mounted at /root/syzkaller.0Fo2gA/24/file2 supports timestamps until 2038 (0x7fffffff) [ 149.482852][ T13] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 149.533706][ T5803] netlink: 'syz.0.2038': attribute type 24 has an invalid length. [ 149.574290][ T5813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2043'. [ 149.920561][ T5828] netlink: 'syz.1.2049': attribute type 24 has an invalid length. [ 149.928250][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 149.950828][ T23] audit: type=1400 audit(2000000118.839:815): avc: denied { mount } for pid=5831 comm="syz.1.2051" name="/" dev="ramfs" ino=46022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 149.972963][ T23] audit: type=1400 audit(2000000118.859:816): avc: denied { unmount } for pid=5064 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 150.052862][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.062949][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 150.076553][ T13] usb 4-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.091619][ T13] usb 4-1: config 1 interface 0 has no altsetting 0 [ 150.098149][ T375] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 150.106066][ T13] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 150.115550][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.163314][ T13] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 150.350221][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2058'. [ 150.359095][ T375] usb 3-1: Using ep0 maxpacket: 16 [ 150.392906][ T121] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 150.482966][ T375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 150.496932][ T375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 150.526160][ T18] usb 4-1: USB disconnect, device number 13 [ 150.662857][ T375] usb 3-1: New USB device found, idVendor=0582, idProduct=87d1, bcdDevice=f8.e7 [ 150.671839][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.680190][ T375] usb 3-1: Product: syz [ 150.685161][ T375] usb 3-1: Manufacturer: syz [ 150.689545][ T375] usb 3-1: SerialNumber: syz [ 150.695162][ T375] usb 3-1: config 0 descriptor?? [ 150.762851][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.773581][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.783093][ T121] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.795825][ T121] usb 2-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 150.804897][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.813408][ T121] usb 2-1: config 0 descriptor?? [ 151.003920][ T375] usb 3-1: USB disconnect, device number 23 [ 151.061541][ T5876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2070'. [ 151.071187][ T5772] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 151.079517][ T5772] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 151.225869][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.232722][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.240532][ T5892] device bridge_slave_0 entered promiscuous mode [ 151.247538][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.254392][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.261797][ T5892] device bridge_slave_1 entered promiscuous mode [ 151.294771][ T121] wacom 0003:056A:00B3.0024: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 151.305449][ T121] wacom 0003:056A:00B3.0024: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.1-1/input0 [ 151.317322][ T121] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B3.0024/input/input23 [ 151.339176][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.346146][ T5892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.353284][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.360016][ T5892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.382161][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.389744][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.397549][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.423656][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.431931][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.440444][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.447295][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.452805][ T13] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 151.454517][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.470447][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.477309][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.484568][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.492415][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.538548][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.548175][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.565824][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.583400][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.617352][ T5902] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 151.618638][ T5899] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 151.643752][ T5905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2083'. [ 151.657508][ T121] usb 2-1: USB disconnect, device number 17 [ 151.713280][ T9] device bridge_slave_1 left promiscuous mode [ 151.719391][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.726658][ T9] device bridge_slave_0 left promiscuous mode [ 151.732735][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.822879][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.834585][ T13] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 151.843442][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.852282][ T13] usb 5-1: config 0 descriptor?? [ 151.942813][ T18] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 152.044023][ T5926] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 152.182791][ T18] usb 3-1: Using ep0 maxpacket: 16 [ 152.304620][ T18] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.314702][ T18] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 152.325394][ T18] usb 3-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 152.339173][ T18] usb 3-1: config 1 interface 0 has no altsetting 0 [ 152.345639][ T18] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 152.354452][ T18] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.550783][ T5950] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 152.576781][ T5949] erofs: (device loop3): fill_inode_lazy: unsupported physical clusterbits 14 for nid 36, please upgrade kernel [ 152.579913][ T18] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 152.588459][ T5949] erofs: (device loop3): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 152.616244][ T5949] erofs: (device loop3): fill_inode_lazy: unsupported physical clusterbits 14 for nid 36, please upgrade kernel [ 152.628004][ T5949] erofs: (device loop3): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 152.641847][ T5949] erofs: (device loop3): fill_inode_lazy: unsupported physical clusterbits 14 for nid 36, please upgrade kernel [ 152.653512][ T5949] erofs: (device loop3): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 152.663514][ T5949] erofs: (device loop3): fill_inode_lazy: unsupported physical clusterbits 14 for nid 36, please upgrade kernel [ 152.675452][ T5949] erofs: (device loop3): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 152.693664][ T13] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 152.712297][ T5957] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 152.721203][ T13] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0025/input/input26 [ 152.809363][ T13] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 153.032985][ T13] usb 3-1: USB disconnect, device number 24 [ 153.116670][ T1267] usb 5-1: USB disconnect, device number 21 [ 153.759624][ T3014] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 153.790223][ T3014] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 153.826047][ T6034] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 153.843201][ T7] tipc: Left network mode [ 154.067895][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.074817][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.082215][ T6048] device bridge_slave_0 entered promiscuous mode [ 154.089323][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.097704][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.105215][ T6048] device bridge_slave_1 entered promiscuous mode [ 154.247718][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.254579][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.261730][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.268718][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.280003][ T6057] F2FS-fs (loop3): invalid crc value [ 154.302879][ T6057] F2FS-fs (loop3): Found nat_bits in checkpoint [ 154.341098][ T6057] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 154.347479][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.374035][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.382079][ T5892] attempt to access beyond end of device [ 154.382079][ T5892] loop3: rw=2049, want=45104, limit=40427 [ 154.396351][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.414120][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.422194][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.429054][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.478257][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.486695][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.493554][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.515126][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.523301][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.544121][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.562590][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.573282][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.590855][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.608970][ T6091] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 154.617143][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.884172][ T6098] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 154.913071][ T7] device bridge_slave_1 left promiscuous mode [ 154.919081][ T6093] erofs: (device loop1): fill_inode_lazy: unsupported physical clusterbits 14 for nid 36, please upgrade kernel [ 154.930629][ T6093] erofs: (device loop1): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 154.935011][ T7] bridge1: port 1(bridge_slave_1) entered disabled state [ 154.947425][ T6093] erofs: (device loop1): fill_inode_lazy: unsupported physical clusterbits 14 for nid 36, please upgrade kernel [ 154.959203][ T6093] erofs: (device loop1): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 154.959415][ T7] device bridge_slave_0 left promiscuous mode [ 154.975363][ T6093] erofs: (device loop1): fill_inode_lazy: unsupported physical clusterbits 14 for nid 36, please upgrade kernel [ 154.987159][ T6093] erofs: (device loop1): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 154.997131][ T6093] erofs: (device loop1): fill_inode_lazy: unsupported physical clusterbits 14 for nid 36, please upgrade kernel [ 155.002982][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.008799][ T6093] erofs: (device loop1): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 155.054429][ T6110] loop4: p1 < > p4 [ 155.059332][ T6110] loop4: p4 size 8388608 extends beyond EOD, truncated [ 155.080635][ T6102] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 155.336324][ T6122] netlink: 'syz.4.2156': attribute type 3 has an invalid length. [ 155.344215][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2156'. [ 155.451495][ T6122] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.658885][ T23] audit: type=1400 audit(2000000124.549:817): avc: denied { mount } for pid=6133 comm="syz.0.2167" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 155.688791][ T6136] overlayfs: failed to clone upperpath [ 155.717437][ T6120] F2FS-fs (loop2): invalid crc value [ 155.760320][ T6120] F2FS-fs (loop2): Found nat_bits in checkpoint [ 155.792648][ T6120] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 155.874578][ T6048] attempt to access beyond end of device [ 155.874578][ T6048] loop2: rw=2049, want=45104, limit=40427 [ 155.913124][ T6162] overlayfs: failed to clone upperpath [ 156.253873][ T6165] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 156.877065][ T6193] loop3: p1 < > p4 [ 156.895369][ T6193] loop3: p4 size 8388608 extends beyond EOD, truncated [ 156.913426][ T6201] overlayfs: failed to clone upperpath [ 157.023418][ T23] audit: type=1400 audit(2000000125.919:818): avc: denied { setattr } for pid=6202 comm="syz.2.2192" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 157.142812][ T6193] netlink: 'syz.3.2188': attribute type 3 has an invalid length. [ 157.150351][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2188'. [ 157.159856][ T6193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.275102][ T6199] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.282189][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.325198][ T6199] device bridge_slave_0 entered promiscuous mode [ 157.332226][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.339197][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.347148][ T6199] device bridge_slave_1 entered promiscuous mode [ 157.686242][ T6226] F2FS-fs (loop2): invalid crc value [ 157.774048][ T6226] F2FS-fs (loop2): Found nat_bits in checkpoint [ 157.821286][ T6226] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 157.821900][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.835460][ T6199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.842654][ T6199] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.849435][ T6199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.866027][ T6048] attempt to access beyond end of device [ 157.866027][ T6048] loop2: rw=2049, want=45104, limit=40427 [ 157.885134][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.893271][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.900472][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.919384][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.927726][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.934579][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.942120][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.950289][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.957149][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.971111][ T2428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.979274][ T2428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.989029][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.003314][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.053512][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.065117][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.103186][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.163159][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.214096][ T2401] device bridge_slave_1 left promiscuous mode [ 158.221197][ T2401] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.246390][ T2401] device bridge_slave_0 left promiscuous mode [ 158.265561][ T2401] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.285890][ T23] audit: type=1400 audit(2000000127.179:819): avc: denied { wake_alarm } for pid=6258 comm="syz.0.2214" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.540644][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.548804][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.557372][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.565481][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.573679][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.581680][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.624484][ T6266] F2FS-fs (loop2): invalid crc value [ 158.645622][ T6266] F2FS-fs (loop2): Found nat_bits in checkpoint [ 158.684921][ T6266] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 158.734710][ T6048] attempt to access beyond end of device [ 158.734710][ T6048] loop2: rw=2049, want=45104, limit=40427 [ 158.739134][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.756301][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.775965][ T6251] device bridge_slave_0 entered promiscuous mode [ 158.803146][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.810087][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.818566][ T6251] device bridge_slave_1 entered promiscuous mode [ 158.910025][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.916878][ T6251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.924003][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.930751][ T6251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.952842][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.960438][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.969507][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.983754][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.992230][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.000971][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.007847][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.015534][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.025975][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.034336][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.041205][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.069792][ T6298] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 159.078056][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.093449][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.111487][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.123526][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.185546][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.219769][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.268401][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.287385][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.314799][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.579475][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.657666][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.686071][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.713496][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 159.730428][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.829576][ T6332] netlink: 'syz.2.2241': attribute type 4 has an invalid length. [ 159.845462][ T6340] netlink: 'syz.2.2241': attribute type 17 has an invalid length. [ 159.854204][ T6340] device lo entered promiscuous mode [ 159.860298][ T6340] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 159.884544][ T6339] loop1: p1 < > p4 [ 159.898950][ T6339] loop1: p4 size 8388608 extends beyond EOD, truncated [ 160.134077][ T6330] device lo left promiscuous mode [ 160.139441][ T6332] syz.2.2241 (6332) used greatest stack depth: 19320 bytes left [ 160.251632][ T6352] netlink: 'syz.1.2209': attribute type 3 has an invalid length. [ 160.259313][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2209'. [ 160.273048][ T6352] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.453727][ T2401] device bridge_slave_1 left promiscuous mode [ 160.460784][ T2401] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.475296][ T2401] device bridge_slave_0 left promiscuous mode [ 160.487805][ T2401] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.771211][ T6359] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 160.877071][ T23] audit: type=1400 audit(2000000129.769:820): avc: denied { getopt } for pid=6367 comm="syz.1.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.921392][ T6375] netlink: 'syz.4.2256': attribute type 4 has an invalid length. [ 160.969076][ T23] audit: type=1400 audit(2000000129.859:821): avc: denied { bind } for pid=6380 comm="syz.2.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.025371][ T6384] netlink: 'syz.4.2256': attribute type 17 has an invalid length. [ 161.134977][ T6384] device lo entered promiscuous mode [ 161.153351][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 161.380497][ T6374] device lo left promiscuous mode [ 161.479710][ T6395] loop4: p1 < > p4 [ 161.484278][ T6395] loop4: p4 size 8388608 extends beyond EOD, truncated [ 161.698839][ T6395] netlink: 'syz.4.2264': attribute type 3 has an invalid length. [ 161.706406][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2264'. [ 161.715940][ T6395] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.812331][ T6414] FAT-fs (loop3): Directory bread(block 64) failed [ 161.829024][ T6414] FAT-fs (loop3): Directory bread(block 65) failed [ 161.862904][ T6414] FAT-fs (loop3): Directory bread(block 66) failed [ 161.870858][ T6414] FAT-fs (loop3): Directory bread(block 67) failed [ 161.896681][ T6414] FAT-fs (loop3): Directory bread(block 68) failed [ 161.918541][ T6421] netlink: 'syz.2.2274': attribute type 4 has an invalid length. [ 161.923377][ T6414] FAT-fs (loop3): Directory bread(block 69) failed [ 161.947025][ T6421] netlink: 'syz.2.2274': attribute type 17 has an invalid length. [ 161.964946][ T6421] device lo entered promiscuous mode [ 161.966303][ T6414] FAT-fs (loop3): Directory bread(block 70) failed [ 162.007671][ T6414] FAT-fs (loop3): Directory bread(block 71) failed [ 162.015741][ T6420] device lo left promiscuous mode [ 162.034634][ T6414] FAT-fs (loop3): Directory bread(block 72) failed [ 162.042998][ T6414] FAT-fs (loop3): Directory bread(block 73) failed [ 162.121542][ T6425] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 162.509350][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.516747][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.541276][ T6435] device bridge_slave_0 entered promiscuous mode [ 162.548599][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.555948][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.566427][ T6435] device bridge_slave_1 entered promiscuous mode [ 162.869302][ T6451] loop2: p1 < > p4 [ 162.874318][ T6451] loop2: p4 size 8388608 extends beyond EOD, truncated [ 162.957493][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.964373][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.971480][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.978251][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.006184][ T6463] netlink: 'syz.2.2287': attribute type 3 has an invalid length. [ 163.014344][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2287'. [ 163.024157][ T6463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.054181][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.062150][ T2633] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.078767][ T2633] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.093733][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.109378][ T2633] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.116266][ T2633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.124304][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.132378][ T2633] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.139232][ T2633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.164375][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.176013][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.197668][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.208978][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.225136][ T6478] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 163.240750][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.256262][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.268058][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.393811][ T2401] device bridge_slave_1 left promiscuous mode [ 163.400610][ T2401] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.414723][ T2401] device bridge_slave_0 left promiscuous mode [ 163.424020][ T2401] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.910118][ T6538] IPv6: sit1: Disabled Multicast RS [ 165.867072][ T6607] overlayfs: failed to clone upperpath [ 166.666122][ T6645] futex_wake_op: syz.3.2360 tries to shift op by 35; fix this program [ 167.107720][ T6676] futex_wake_op: syz.1.2371 tries to shift op by 35; fix this program [ 167.271690][ T6692] tc_dump_action: action bad kind [ 167.804299][ T6695] IPv6: sit1: Disabled Multicast RS [ 168.060007][ T23] audit: type=1400 audit(2000000136.949:822): avc: denied { mounton } for pid=6717 comm="syz.0.2388" path="/root/syzkaller.yaQRvm/479/file0" dev="sda1" ino=2081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=fifo_file permissive=1 [ 168.249578][ T6737] tc_dump_action: action bad kind [ 169.865637][ T6796] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,init_itable=0x0000000000000003,discard,max_batch_time=0x0000000004000000,block_validity,i_version,bsddf,min_batch_time=0x0000000000000008,max_batch_time=0x0000000000000006,noquota,stripe=0x00000000000000ff,discard,errors=continue [ 170.262808][ T2633] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 170.274991][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.281916][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.289300][ T6822] device bridge_slave_0 entered promiscuous mode [ 170.296140][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.303585][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.310871][ T6822] device bridge_slave_1 entered promiscuous mode [ 170.463355][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.470230][ T6822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.477366][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.484209][ T6822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.544685][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.552572][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.560609][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.578211][ T6840] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,init_itable=0x0000000000000003,discard,max_batch_time=0x0000000004000000,block_validity,i_version,bsddf,min_batch_time=0x0000000000000008,max_batch_time=0x0000000000000006,noquota,stripe=0x00000000000000ff,discard,errors=continue [ 170.621386][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.634961][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.641871][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.653084][ T2633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.659818][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.672928][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.673318][ T2633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.679767][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.689746][ T2633] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 170.705875][ T2633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.718349][ T513] device bridge_slave_1 left promiscuous mode [ 170.724957][ T513] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.736283][ T2633] usb 3-1: config 0 descriptor?? [ 170.741488][ T513] device bridge_slave_0 left promiscuous mode [ 170.747828][ T513] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.935678][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.944466][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.964208][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.973276][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.081532][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.092367][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.121313][ T6818] overlayfs: failed to resolve './file1': -2 [ 171.128775][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.138289][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.146639][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.155090][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.163981][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.172121][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.242900][ T2633] usbhid 3-1:0.0: can't add hid device: -71 [ 171.257725][ T2633] usbhid: probe of 3-1:0.0 failed with error -71 [ 171.268414][ T2633] usb 3-1: USB disconnect, device number 25 [ 171.366793][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.373816][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.384363][ T6868] device bridge_slave_0 entered promiscuous mode [ 171.394245][ T6868] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.401237][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.409314][ T6868] device bridge_slave_1 entered promiscuous mode [ 171.480141][ T6868] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.487011][ T6868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.494119][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.500865][ T6868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.538419][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.546748][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.554360][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.589808][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.598592][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.605461][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.613897][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.629149][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.636034][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.662656][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.761928][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.798479][ T23] audit: type=1400 audit(2000000140.689:823): avc: denied { read } for pid=6888 comm="syz.4.2450" path="socket:[53827]" dev="sockfs" ino=53827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.823404][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.854322][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.883108][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.899351][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.938326][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.993135][ T513] device bridge_slave_1 left promiscuous mode [ 171.999117][ T513] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.025992][ T513] device bridge_slave_0 left promiscuous mode [ 172.045557][ T513] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.366646][ T6512] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 172.932852][ T6512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.943988][ T6512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.956363][ T6512] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 172.978794][ T6512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.015305][ T6512] usb 4-1: config 0 descriptor?? [ 173.052353][ T6956] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 173.099521][ T6956] EXT4-fs (loop4): Remounting filesystem read-only [ 173.126430][ T6956] EXT4-fs error (device loop4): ext4_clear_blocks:858: inode #13: comm syz.4.2475: attempt to clear invalid blocks 1024 len 1 [ 173.140266][ T6956] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz.4.2475: invalid indirect mapped block 1819239214 (level 0) [ 173.162129][ T6956] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz.4.2475: invalid indirect mapped block 67174400 (level 2) [ 173.182685][ T6956] EXT4-fs (loop4): 1 truncate cleaned up [ 173.188506][ T6956] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,resgid=0x0000000000000000, [ 173.271082][ T6910] overlayfs: failed to resolve './file1': -2 [ 173.382901][ T6512] usbhid 4-1:0.0: can't add hid device: -71 [ 173.388687][ T6512] usbhid: probe of 4-1:0.0 failed with error -71 [ 173.447237][ T6512] usb 4-1: USB disconnect, device number 14 [ 173.562784][ T18] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 173.932867][ T18] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.945242][ T7018] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 173.959120][ T7018] EXT4-fs (loop3): orphan cleanup on readonly fs [ 173.960599][ T6989] F2FS-fs (loop1): invalid crc value [ 173.966999][ T7018] Quota error (device loop3): v2_read_file_info: Block with free entry too big (32513 >= 6). [ 173.970664][ T18] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 173.983744][ T7018] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 173.990615][ T18] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 174.005271][ T7018] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 174.020382][ T7018] EXT4-fs error (device loop3): ext4_orphan_get:1236: inode #16: comm syz.3.2502: casefold flag without casefold feature [ 174.029927][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.033411][ T7018] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.2502: bg 0: block 40: padding at end of block bitmap is not set [ 174.046124][ T6989] F2FS-fs (loop1): Found nat_bits in checkpoint [ 174.055017][ T7018] EXT4-fs error (device loop3) in ext4_free_blocks:5019: Corrupt filesystem [ 174.097459][ T6989] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 174.104622][ T6989] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 174.117859][ T7018] EXT4-fs (loop3): 1 truncate cleaned up [ 174.128979][ T7018] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,,errors=continue [ 174.165718][ T6822] attempt to access beyond end of device [ 174.165718][ T6822] loop1: rw=2049, want=45104, limit=40427 [ 174.190499][ T7018] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #15: comm syz.3.2502: corrupted xattr block 19 [ 174.202367][ T7018] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 174.211430][ T7018] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #15: comm syz.3.2502: corrupted xattr block 19 [ 174.229743][ T7018] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 174.238220][ T7035] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #15: comm syz.3.2502: corrupted xattr block 19 [ 174.251241][ T7035] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 174.260361][ T23] audit: type=1400 audit(2000000143.149:824): avc: denied { mounton } for pid=7017 comm="syz.3.2502" path="/root/syzkaller.lJi5t3/2/file2/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.260532][ T7035] EXT4-fs error (device loop3): ext4_lookup:1814: inode #16: comm syz.3.2502: casefold flag without casefold feature [ 174.594122][ T7045] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 174.608842][ T7045] EXT4-fs (loop3): Remounting filesystem read-only [ 174.615585][ T7045] EXT4-fs error (device loop3): ext4_clear_blocks:858: inode #13: comm syz.3.2511: attempt to clear invalid blocks 1024 len 1 [ 174.629141][ T7045] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz.3.2511: invalid indirect mapped block 1819239214 (level 0) [ 174.646496][ T7045] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz.3.2511: invalid indirect mapped block 67174400 (level 2) [ 174.660572][ T7045] EXT4-fs (loop3): 1 truncate cleaned up [ 174.666444][ T7045] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resgid=0x0000000000000000, [ 174.734804][ T6972] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 174.982876][ T18] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 174.990983][ T23] audit: type=1400 audit(2000000143.879:825): avc: denied { mounton } for pid=7065 comm="syz.3.2517" path="/root/syzkaller.lJi5t3/8/file0" dev="ramfs" ino=55173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 175.012892][ T18] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input27 [ 175.030292][ T23] audit: type=1400 audit(2000000143.919:826): avc: denied { unlink } for pid=7065 comm="syz.3.2517" name="bus" dev="incremental-fs" ino=55174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.060309][ T18] input: failed to attach handler kbd to device input27, error: -5 [ 175.171129][ T7072] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 175.172815][ T6512] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 175.180083][ T7072] EXT4-fs (loop3): orphan cleanup on readonly fs [ 175.192821][ T371] usb 5-1: USB disconnect, device number 22 [ 175.200179][ T7072] Quota error (device loop3): v2_read_file_info: Block with free entry too big (32513 >= 6). [ 175.211460][ T7072] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 175.226586][ T7072] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 175.233342][ T7072] EXT4-fs error (device loop3): ext4_orphan_get:1236: inode #16: comm syz.3.2519: casefold flag without casefold feature [ 175.246814][ T7072] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.2519: bg 0: block 40: padding at end of block bitmap is not set [ 175.262239][ T7072] EXT4-fs error (device loop3) in ext4_free_blocks:5019: Corrupt filesystem [ 175.271445][ T7072] EXT4-fs (loop3): 1 truncate cleaned up [ 175.276907][ T7072] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,,errors=continue [ 175.314078][ T7072] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #15: comm syz.3.2519: corrupted xattr block 19 [ 175.325974][ T7072] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 175.335405][ T7072] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #15: comm syz.3.2519: corrupted xattr block 19 [ 175.347942][ T7072] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 175.357413][ T7072] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #15: comm syz.3.2519: corrupted xattr block 19 [ 175.369244][ T7072] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 175.378100][ T7072] EXT4-fs error (device loop3): ext4_lookup:1814: inode #16: comm syz.3.2519: casefold flag without casefold feature [ 175.543926][ T6512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.555116][ T6512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.555141][ T6512] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 175.555152][ T6512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.566666][ T6512] usb 2-1: config 0 descriptor?? [ 175.594041][ T7088] overlayfs: failed to clone upperpath [ 175.632660][ T7091] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 175.647838][ T7091] EXT4-fs (loop3): Remounting filesystem read-only [ 175.654908][ T7091] EXT4-fs error (device loop3): ext4_clear_blocks:858: inode #13: comm syz.3.2526: attempt to clear invalid blocks 1024 len 1 [ 175.669290][ T7091] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz.3.2526: invalid indirect mapped block 1819239214 (level 0) [ 175.683426][ T7091] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz.3.2526: invalid indirect mapped block 67174400 (level 2) [ 175.698148][ T7091] EXT4-fs (loop3): 1 truncate cleaned up [ 175.703733][ T7091] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resgid=0x0000000000000000, [ 175.764610][ T7110] bridge1: port 1(bridge_slave_1) entered listening state [ 175.805465][ T7064] overlayfs: failed to resolve './file1': -2 [ 175.903154][ T6512] usbhid 2-1:0.0: can't add hid device: -71 [ 175.909045][ T6512] usbhid: probe of 2-1:0.0 failed with error -71 [ 175.934664][ T6512] usb 2-1: USB disconnect, device number 18 [ 176.016728][ T7114] F2FS-fs (loop4): invalid crc value [ 176.032639][ T7114] F2FS-fs (loop4): Found nat_bits in checkpoint [ 176.077132][ T7114] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 176.090448][ T7114] attempt to access beyond end of device [ 176.090448][ T7114] loop4: rw=2049, want=45160, limit=40427 [ 176.111397][ T6435] attempt to access beyond end of device [ 176.111397][ T6435] loop4: rw=2049, want=45168, limit=40427 [ 176.158797][ T7147] bridge1: port 1(bridge_slave_1) entered listening state [ 176.179700][ T7151] overlayfs: failed to clone upperpath [ 176.183415][ T7142] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 176.203542][ T7142] EXT4-fs (loop3): Remounting filesystem read-only [ 176.213054][ T7142] EXT4-fs error (device loop3): ext4_clear_blocks:858: inode #13: comm syz.3.2548: attempt to clear invalid blocks 1024 len 1 [ 176.226624][ T7142] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz.3.2548: invalid indirect mapped block 1819239214 (level 0) [ 176.250285][ T7142] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz.3.2548: invalid indirect mapped block 67174400 (level 2) [ 176.277611][ T7142] EXT4-fs (loop3): 1 truncate cleaned up [ 176.283702][ T7142] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resgid=0x0000000000000000, [ 176.485941][ T7161] EXT4-fs (loop2): Unrecognized mount option "measure" or missing value [ 176.519107][ T7176] bridge0: port 2(bridge_slave_1) entered listening state [ 176.810166][ T7181] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 176.842133][ T7181] ext4 filesystem being mounted at /root/syzkaller.xkPxyF/46/file1 supports timestamps until 2038 (0x7fffffff) [ 177.080142][ T23] audit: type=1400 audit(2000000145.969:827): avc: denied { execute_no_trans } for pid=7180 comm="syz.4.2564" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=56605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 177.111258][ T23] audit: type=1400 audit(2000000145.999:828): avc: denied { execute } for pid=7180 comm="syz.4.2564" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 177.142809][ T5] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 177.310414][ T7211] bridge0: port 2(bridge_slave_1) entered listening state [ 177.502996][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.522789][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.532465][ T5] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 177.541373][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.550055][ T5] usb 4-1: config 0 descriptor?? [ 177.605824][ T7215] F2FS-fs (loop2): Found nat_bits in checkpoint [ 177.630449][ T7215] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 177.651326][ T7219] F2FS-fs (loop4): invalid crc value [ 177.669577][ T7219] F2FS-fs (loop4): Found nat_bits in checkpoint [ 177.699829][ T7219] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 177.708932][ T7227] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 177.718210][ T7227] ext4 filesystem being mounted at /root/syzkaller.2guPr6/13/file1 supports timestamps until 2038 (0x7fffffff) [ 177.729536][ T7219] attempt to access beyond end of device [ 177.729536][ T7219] loop4: rw=2049, want=45160, limit=40427 [ 177.752161][ T6435] attempt to access beyond end of device [ 177.752161][ T6435] loop4: rw=2049, want=45168, limit=40427 [ 177.795443][ T7191] overlayfs: failed to resolve './file1': -2 [ 177.903363][ T5] usbhid 4-1:0.0: can't add hid device: -71 [ 177.909162][ T5] usbhid: probe of 4-1:0.0 failed with error -71 [ 177.928288][ T5] usb 4-1: USB disconnect, device number 15 [ 178.113054][ T121] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 178.185030][ T7241] EXT4-fs (loop4): Unrecognized mount option "measure" or missing value [ 178.352791][ T121] usb 2-1: Using ep0 maxpacket: 32 [ 178.472903][ T121] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 178.485968][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.504527][ T121] usb 2-1: config 0 descriptor?? [ 178.542977][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 178.550622][ T121] rndis_host: probe of 2-1:0.0 failed with error -22 [ 178.562177][ T7250] F2FS-fs (loop4): invalid crc value [ 178.571864][ T7250] F2FS-fs (loop4): Found nat_bits in checkpoint [ 178.595963][ T7250] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 178.609262][ T23] audit: type=1400 audit(2000000147.499:829): avc: denied { create } for pid=7249 comm="syz.4.2584" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 178.630691][ T6435] attempt to access beyond end of device [ 178.630691][ T6435] loop4: rw=2049, want=45104, limit=40427 [ 178.666695][ T7260] bridge0: port 2(bridge_slave_1) entered listening state [ 178.785834][ T5] usb 2-1: USB disconnect, device number 19 [ 179.148118][ T7268] F2FS-fs (loop2): Found nat_bits in checkpoint [ 179.190761][ T7268] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 179.319577][ T7276] F2FS-fs (loop4): invalid crc value [ 179.326567][ T7276] F2FS-fs (loop4): Found nat_bits in checkpoint [ 179.355526][ T7276] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 179.422434][ T7276] attempt to access beyond end of device [ 179.422434][ T7276] loop4: rw=2049, want=45160, limit=40427 [ 179.439681][ T6435] attempt to access beyond end of device [ 179.439681][ T6435] loop4: rw=2049, want=45168, limit=40427 [ 179.524386][ T7294] incfs: Options parsing error. -22 [ 179.529520][ T7294] incfs: mount failed -22 [ 179.557919][ T7298] netlink: 'syz.2.2599': attribute type 4 has an invalid length. [ 179.570950][ T7298] netlink: 'syz.2.2599': attribute type 11 has an invalid length. [ 180.021748][ T7296] F2FS-fs (loop1): invalid crc value [ 180.032054][ T7296] F2FS-fs (loop1): Found nat_bits in checkpoint [ 180.073976][ T7296] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 180.085199][ T7311] EXT4-fs (loop4): Unrecognized mount option "measure" or missing value [ 180.121599][ T6822] attempt to access beyond end of device [ 180.121599][ T6822] loop1: rw=2049, want=45104, limit=40427 [ 180.373956][ T7308] F2FS-fs (loop2): Found nat_bits in checkpoint [ 180.462947][ T7308] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 180.572428][ T7338] incfs: Options parsing error. -22 [ 180.578489][ T7338] incfs: mount failed -22 [ 180.791003][ T7354] netlink: 'syz.2.2611': attribute type 4 has an invalid length. [ 180.798862][ T7348] EXT4-fs (loop4): Unrecognized mount option "measure" or missing value [ 180.799629][ T7354] netlink: 'syz.2.2611': attribute type 11 has an invalid length. [ 180.892518][ T7336] F2FS-fs (loop1): invalid crc value [ 180.899577][ T7336] F2FS-fs (loop1): Found nat_bits in checkpoint [ 180.932228][ T7336] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 180.999109][ T7369] incfs: Options parsing error. -22 [ 181.001021][ T7336] attempt to access beyond end of device [ 181.001021][ T7336] loop1: rw=2049, want=45160, limit=40427 [ 181.007597][ T7369] incfs: mount failed -22 [ 181.033506][ T6822] attempt to access beyond end of device [ 181.033506][ T6822] loop1: rw=2049, want=45168, limit=40427 [ 181.242293][ T7382] netlink: 'syz.2.2629': attribute type 4 has an invalid length. [ 181.250902][ T7382] netlink: 'syz.2.2629': attribute type 11 has an invalid length. [ 181.426705][ T7367] F2FS-fs (loop3): Found nat_bits in checkpoint [ 181.464183][ T7392] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 181.470436][ T7392] EXT4-fs (loop4): mount failed [ 181.476411][ T7367] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 182.016557][ T7414] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 182.025541][ T7414] ext4 filesystem being mounted at /root/syzkaller.xkPxyF/71/file1 supports timestamps until 2038 (0x7fffffff) [ 182.025697][ T7419] incfs: Options parsing error. -22 [ 182.047384][ T7419] incfs: mount failed -22 [ 182.191996][ T7425] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a843c098, mo2=0000] [ 182.199869][ T7425] System zones: 0-2, 18-18, 34-34 [ 182.206694][ T7425] EXT4-fs (loop4): 1 orphan inode deleted [ 182.212652][ T7425] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x0000000000000007,nolazytime,minixdf,noauto_da_alloc,init_itable=0x0000000000000080,init_itable=0x0000000000000002,dioread_nolock,debug,,errors=continue [ 182.245828][ T7425] ext4 filesystem being mounted at /root/syzkaller.xkPxyF/73/file1 supports timestamps until 2038 (0x7fffffff) [ 182.307174][ T7423] F2FS-fs (loop3): invalid crc value [ 182.330397][ T7423] F2FS-fs (loop3): Found nat_bits in checkpoint [ 182.421772][ T7423] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 182.558819][ T6868] attempt to access beyond end of device [ 182.558819][ T6868] loop3: rw=2049, want=45104, limit=40427 [ 182.613647][ T7445] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 182.625771][ T7445] EXT4-fs (loop4): mount failed [ 182.765487][ T7441] F2FS-fs (loop2): Found nat_bits in checkpoint [ 183.006726][ T7441] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 183.424287][ T7480] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a843c098, mo2=0000] [ 183.432124][ T7480] System zones: 0-2, 18-18, 34-34 [ 183.446531][ T7480] EXT4-fs (loop2): 1 orphan inode deleted [ 183.452567][ T7480] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x0000000000000007,nolazytime,minixdf,noauto_da_alloc,init_itable=0x0000000000000080,init_itable=0x0000000000000002,dioread_nolock,debug,,errors=continue [ 183.478304][ T7480] ext4 filesystem being mounted at /root/syzkaller.5xDRrJ/98/file1 supports timestamps until 2038 (0x7fffffff) [ 184.250754][ T7491] F2FS-fs (loop1): invalid crc value [ 184.324902][ T7491] F2FS-fs (loop1): Found nat_bits in checkpoint [ 184.371139][ T7491] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 184.405654][ T6822] attempt to access beyond end of device [ 184.405654][ T6822] loop1: rw=2049, want=45104, limit=40427 [ 184.433871][ T7496] F2FS-fs (loop4): Found nat_bits in checkpoint [ 184.484783][ T7496] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 184.869203][ T7531] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a843c098, mo2=0000] [ 184.878356][ T7531] System zones: 0-2, 18-18, 34-34 [ 184.886924][ T7531] EXT4-fs (loop4): 1 orphan inode deleted [ 184.892491][ T7531] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x0000000000000007,nolazytime,minixdf,noauto_da_alloc,init_itable=0x0000000000000080,init_itable=0x0000000000000002,dioread_nolock,debug,,errors=continue [ 184.892592][ T7531] ext4 filesystem being mounted at /root/syzkaller.xkPxyF/79/file1 supports timestamps until 2038 (0x7fffffff) [ 185.039407][ T7550] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 185.096360][ T7550] ext4 filesystem being mounted at /root/syzkaller.2guPr6/34/file0 supports timestamps until 2038 (0x7fffffff) [ 185.114106][ T23] audit: type=1400 audit(2000000154.009:830): avc: denied { ioctl } for pid=7548 comm="syz.1.2680" path="/root/syzkaller.2guPr6/34/file0/file0/file0" dev="loop1" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 185.141625][ T7550] fs-verity: sha512 using implementation "sha512-generic" [ 185.456739][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2685'. [ 185.550280][ T23] audit: type=1400 audit(2000000154.439:831): avc: denied { mount } for pid=7586 comm="syz.1.2695" name="/" dev="tmpfs" ino=57738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 185.574649][ T23] audit: type=1400 audit(2000000154.449:832): avc: denied { unmount } for pid=6822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 185.635316][ T7589] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 185.646649][ T7589] ext4 filesystem being mounted at /root/syzkaller.lJi5t3/53/file0 supports timestamps until 2038 (0x7fffffff) [ 185.701178][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2701'. [ 185.804201][ T7607] EXT4-fs (loop1): INFO: recovery required on readonly filesystem [ 185.815287][ T7607] EXT4-fs (loop1): write access will be enabled during recovery [ 185.823904][ T7607] EXT4-fs (loop1): barriers disabled [ 185.829083][ T7607] JBD2: no valid journal superblock found [ 185.837422][ T7607] EXT4-fs (loop1): error loading journal [ 185.915342][ T23] audit: type=1400 audit(2000000154.809:833): avc: denied { create } for pid=7618 comm="syz.3.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 185.944634][ T7619] 9pnet: Insufficient options for proto=fd [ 186.006124][ T7630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2714'. [ 186.863070][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 187.179958][ T7659] syz.1.2725 (7659) used greatest stack depth: 19192 bytes left [ 187.237955][ T23] audit: type=1400 audit(2000000156.129:834): avc: denied { mounton } for pid=7675 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 187.275737][ T7676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2732'. [ 187.309089][ T7679] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 187.345863][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.352833][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.360514][ T7675] device bridge_slave_0 entered promiscuous mode [ 187.367845][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.374932][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.382154][ T7675] device bridge_slave_1 entered promiscuous mode [ 187.430124][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.437096][ T7675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.444225][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.451135][ T7675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.464897][ T7679] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 46 [ 187.524975][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.532707][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.545430][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.245623][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.256181][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.355330][ T7704] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 188.396143][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.405274][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.422889][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.431608][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.445098][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2745'. [ 188.464174][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.472304][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.498793][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.507737][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.530938][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.604918][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.630399][ T7720] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 188.644107][ T7720] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 46 [ 188.665771][ T23] audit: type=1326 audit(2000000157.559:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.2.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c005aab99 code=0x7ffc0000 [ 188.673917][ T7724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=567 sclass=netlink_route_socket pid=7724 comm=syz.2.2746 [ 188.699540][ T23] audit: type=1326 audit(2000000157.559:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.2.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c005aab99 code=0x7ffc0000 [ 188.892096][ T2401] device bridge_slave_1 left promiscuous mode [ 188.898060][ T23] audit: type=1326 audit(2000000157.559:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.2.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f0c005aab99 code=0x7ffc0000 [ 188.921528][ T2401] bridge1: port 1(bridge_slave_1) entered disabled state [ 188.929119][ T2401] device bridge_slave_0 left promiscuous mode [ 188.935276][ T2401] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.939968][ T7736] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2753'. [ 188.970650][ T23] audit: type=1326 audit(2000000157.559:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.2.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c005aab99 code=0x7ffc0000 [ 188.994147][ T23] audit: type=1326 audit(2000000157.559:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.2.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c005aab99 code=0x7ffc0000 [ 189.388086][ T2633] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 189.437074][ T7749] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 189.460645][ T7749] ext4 filesystem being mounted at /root/syzkaller.xkPxyF/96/file0 supports timestamps until 2038 (0x7fffffff) [ 189.564468][ T7768] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2765'. [ 189.883146][ T2633] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 189.999121][ T7785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=567 sclass=netlink_route_socket pid=7785 comm=syz.4.2772 [ 190.013726][ T2633] usb 2-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 190.022689][ T2633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.034446][ T2633] usb 2-1: config 0 descriptor?? [ 190.282514][ T7805] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 190.302101][ T23] kauditd_printk_skb: 53 callbacks suppressed [ 190.302112][ T23] audit: type=1400 audit(2000000159.169:893): avc: denied { ioctl } for pid=7801 comm="syz.0.2777" path="/dev/loop-control" dev="devtmpfs" ino=9190 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 190.570880][ T7809] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2779'. [ 190.592839][ T2633] usb 2-1: string descriptor 0 read error: -71 [ 190.599288][ T2633] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 190.621251][ T2633] usb 2-1: USB disconnect, device number 20 [ 190.810097][ T7821] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a843c098, mo2=0000] [ 190.818383][ T7821] System zones: 0-2, 18-18, 34-34 [ 190.826582][ T7821] EXT4-fs (loop2): 1 orphan inode deleted [ 190.832231][ T7821] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x0000000000000007,nolazytime,minixdf,noauto_da_alloc,init_itable=0x0000000000000080,init_itable=0x0000000000000002,dioread_nolock,debug,,errors=continue [ 190.857392][ T7821] ext4 filesystem being mounted at /root/syzkaller.5xDRrJ/118/file1 supports timestamps until 2038 (0x7fffffff) [ 191.544818][ T7848] attempt to access beyond end of device [ 191.544818][ T7848] loop0: rw=2049, want=129, limit=128 [ 191.565093][ T7848] buffer_io_error: 413 callbacks suppressed [ 191.565102][ T7848] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 191.579726][ T7848] attempt to access beyond end of device [ 191.579726][ T7848] loop0: rw=2049, want=133, limit=128 [ 191.759674][ T23] audit: type=1326 audit(2000000160.649:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.3.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ac2b47b99 code=0x7ffc0000 [ 191.773762][ T7865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=567 sclass=netlink_route_socket pid=7865 comm=syz.3.2795 [ 191.783232][ T23] audit: type=1326 audit(2000000160.649:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.3.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ac2b47b99 code=0x7ffc0000 [ 191.883152][ T7885] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 191.903100][ T23] audit: type=1326 audit(2000000160.649:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.3.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f1ac2b47b99 code=0x7ffc0000 [ 191.953230][ T23] audit: type=1326 audit(2000000160.649:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.3.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ac2b47b99 code=0x7ffc0000 [ 191.961832][ T7881] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a843c098, mo2=0000] [ 192.054401][ T7881] System zones: 0-2, 18-18, 34-34 [ 192.060067][ T23] audit: type=1326 audit(2000000160.649:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.3.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ac2b47b99 code=0x7ffc0000 [ 192.083376][ T23] audit: type=1326 audit(2000000160.649:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.3.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1ac2b47b99 code=0x7ffc0000 [ 192.107282][ T7881] EXT4-fs (loop1): 1 orphan inode deleted [ 192.109148][ T23] audit: type=1326 audit(2000000160.649:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.3.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ac2b47b99 code=0x7ffc0000 [ 192.128676][ T7881] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x0000000000000007,nolazytime,minixdf,noauto_da_alloc,init_itable=0x0000000000000080,init_itable=0x0000000000000002,dioread_nolock,debug,,errors=continue [ 192.136602][ T23] audit: type=1326 audit(2000000160.649:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.3.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ac2b47b99 code=0x7ffc0000 [ 192.184846][ T7881] ext4 filesystem being mounted at /root/syzkaller.2guPr6/59/file1 supports timestamps until 2038 (0x7fffffff) [ 192.196726][ T23] audit: type=1326 audit(2000000160.649:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.3.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f1ac2b47b99 code=0x7ffc0000 [ 192.352858][ T74] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 192.475419][ T7899] print_req_error: 464 callbacks suppressed [ 192.475434][ T7899] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 [ 192.765248][ T74] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.798232][ T74] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.808390][ T74] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 192.817397][ T74] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.889661][ T74] usb 1-1: config 0 descriptor?? [ 192.983831][ T7939] FAT-fs (loop2): Directory bread(block 64) failed [ 192.992836][ T7939] FAT-fs (loop2): Directory bread(block 65) failed [ 193.001293][ T7939] FAT-fs (loop2): Directory bread(block 66) failed [ 193.012913][ T7939] FAT-fs (loop2): Directory bread(block 67) failed [ 193.019286][ T7939] FAT-fs (loop2): Directory bread(block 68) failed [ 193.027315][ T7939] FAT-fs (loop2): Directory bread(block 69) failed [ 193.042863][ T7939] FAT-fs (loop2): Directory bread(block 70) failed [ 193.057891][ T7939] FAT-fs (loop2): Directory bread(block 71) failed [ 193.064378][ T7939] FAT-fs (loop2): Directory bread(block 72) failed [ 193.070695][ T7939] FAT-fs (loop2): Directory bread(block 73) failed [ 193.202134][ T7945] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 193.215401][ T7945] jbd2_journal_init_inode: Cannot locate journal superblock [ 193.222734][ T7945] EXT4-fs (loop4): Could not load journal inode [ 193.382940][ T371] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 193.385398][ T74] sony 0003:054C:024B.0026: hiddev96,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.0-1/input0 [ 193.418434][ T74] sony 0003:054C:024B.0026: failed to claim input [ 193.456688][ T7954] blk_update_request: I/O error, dev loop0, sector 8200 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 0 [ 193.632835][ T371] usb 3-1: Using ep0 maxpacket: 32 [ 193.902762][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.922886][ T371] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 193.931933][ T371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.939759][ T371] usb 3-1: Product: syz [ 193.943773][ T371] usb 3-1: Manufacturer: syz [ 193.948130][ T371] usb 3-1: SerialNumber: syz [ 193.964519][ T371] usb 3-1: config 0 descriptor?? [ 194.240052][ T8005] blk_update_request: I/O error, dev loop0, sector 6656 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 194.275006][ T8005] blk_update_request: I/O error, dev loop0, sector 6912 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 194.882928][ T371] (unnamed net_device) (uninitialized): Assigned a random MAC address: 9a:1a:75:8d:e3:90 [ 194.908948][ T371] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 194.926684][ T371] usb 3-1: USB disconnect, device number 26 [ 195.110582][ T8061] blk_update_request: I/O error, dev loop0, sector 8448 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 0 [ 195.202849][ T375] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 195.313863][ T6512] usb 1-1: USB disconnect, device number 8 [ 195.373511][ T6048] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 195.381041][ T6048] FAT-fs (loop2): Filesystem has been set read-only [ 195.391530][ T6048] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 195.605835][ T8088] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 195.616636][ T8088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 195.624967][ T8088] System zones: 1-12 [ 195.629851][ T8088] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2221: inode #15: comm syz.4.2864: corrupted in-inode xattr [ 195.647657][ T8088] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.2864: couldn't read orphan inode 15 (err -117) [ 195.660160][ T8088] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 195.692870][ T375] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 195.717514][ T375] usb 4-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 195.727786][ T375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.736525][ T375] usb 4-1: config 0 descriptor?? [ 195.737132][ T8096] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.748470][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.755899][ T8096] device bridge_slave_0 entered promiscuous mode [ 195.765221][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.772146][ T8096] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.781183][ T8096] device bridge_slave_1 entered promiscuous mode [ 196.066439][ T8106] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 196.084962][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.092330][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.093326][ T375] usb 4-1: string descriptor 0 read error: -71 [ 196.108059][ T8106] EXT4-fs error (device loop1): ext4_quota_enable:6052: comm syz.1.2867: Bad quota inum: 4278190083, type: 0 [ 196.115000][ T375] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 196.120021][ T8106] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=4278190083). Please run e2fsck to fix. [ 196.131349][ T375] usb 4-1: USB disconnect, device number 16 [ 196.143693][ T8106] EXT4-fs (loop1): mount failed [ 196.155042][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.173420][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.187733][ T6512] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.194650][ T6512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.202462][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.212042][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.220572][ T6512] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.227524][ T6512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.235470][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.274970][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.286705][ T2401] device bridge_slave_1 left promiscuous mode [ 196.292735][ T2401] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.301518][ T2401] device bridge_slave_0 left promiscuous mode [ 196.307784][ T2401] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.737708][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.756289][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.773148][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.800703][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.813599][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.822093][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.843389][ T8134] EXT4-fs (loop3): orphan cleanup on readonly fs [ 196.851683][ T8134] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.2876: bg 0: block 248: padding at end of block bitmap is not set [ 196.866345][ T8134] __quota_error: 39 callbacks suppressed [ 196.866353][ T8134] Quota error (device loop3): write_blk: dquota write failed [ 196.879795][ T8134] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 196.882347][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.893529][ T8134] EXT4-fs (loop3): 1 truncate cleaned up [ 196.898061][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.904014][ T8134] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 196.957341][ T8134] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 196.974337][ T8134] EXT4-fs (loop3): re-mounted. Opts: (null) [ 196.980575][ T8134] EXT4-fs error (device loop3): ext4_lookup:1818: inode #2: comm syz.3.2876: deleted inode referenced: 12 [ 197.558420][ T8166] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 197.664651][ T8166] EXT4-fs error (device loop2): ext4_quota_enable:6052: comm syz.2.2886: Bad quota inum: 4278190083, type: 0 [ 197.676680][ T8166] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=4278190083). Please run e2fsck to fix. [ 197.703114][ T8166] EXT4-fs (loop2): mount failed [ 198.110945][ T8187] EXT4-fs (loop3): orphan cleanup on readonly fs [ 198.129980][ T8187] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.2891: bg 0: block 248: padding at end of block bitmap is not set [ 198.155387][ T8187] Quota error (device loop3): write_blk: dquota write failed [ 198.162625][ T8187] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 198.178173][ T8187] EXT4-fs (loop3): 1 truncate cleaned up [ 198.185224][ T8187] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 198.200637][ T8187] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 198.218318][ T8187] EXT4-fs (loop3): re-mounted. Opts: (null) [ 198.225298][ T8187] EXT4-fs error (device loop3): ext4_lookup:1818: inode #2: comm syz.3.2891: deleted inode referenced: 12 [ 198.384581][ T8219] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 198.630385][ T23] audit: type=1400 audit(2000000167.519:942): avc: denied { link } for pid=8218 comm="syz.4.2903" name="#2118" dev="sda1" ino=2118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 199.077823][ T8245] EXT4-fs (loop4): orphan cleanup on readonly fs [ 199.088687][ T8245] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.2910: bg 0: block 248: padding at end of block bitmap is not set [ 199.113630][ T8245] Quota error (device loop4): write_blk: dquota write failed [ 199.129166][ T8245] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 199.149447][ T8245] EXT4-fs (loop4): 1 truncate cleaned up [ 199.190107][ T8245] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 199.263070][ T8245] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 199.286053][ T8251] syz.0.2912 (8251): /proc/8250/oom_adj is deprecated, please use /proc/8250/oom_score_adj instead. [ 199.306838][ T8245] EXT4-fs (loop4): re-mounted. Opts: (null) [ 199.322933][ T8245] EXT4-fs error (device loop4): ext4_lookup:1818: inode #2: comm syz.4.2910: deleted inode referenced: 12 [ 199.574011][ T8266] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 199.710692][ T23] audit: type=1326 audit(2000000168.599:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.2.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c772b99 code=0x7ffc0000 [ 199.735576][ T23] audit: type=1326 audit(2000000168.629:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.2.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c772b99 code=0x7ffc0000 [ 199.778234][ T23] audit: type=1326 audit(2000000168.629:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.2.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb73c772b99 code=0x7ffc0000 [ 200.120679][ T8281] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 200.130044][ T8281] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2921'. [ 200.382895][ T376] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 200.582535][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2937'. [ 200.665078][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2936'. [ 200.812877][ T376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 200.824042][ T376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 200.835718][ T376] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.848604][ T376] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.857545][ T376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.867006][ T376] usb 5-1: config 0 descriptor?? [ 200.882888][ T8295] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 201.356496][ T376] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 201.365808][ T376] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 201.380234][ T376] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 201.403201][ T376] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 201.410523][ T376] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 201.427118][ T376] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 201.438936][ T376] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 201.459153][ T376] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 201.473944][ T376] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 201.661525][ T8357] FAT-fs (loop1): Directory bread(block 64) failed [ 201.667984][ T8357] FAT-fs (loop1): Directory bread(block 65) failed [ 201.674549][ T8357] FAT-fs (loop1): Directory bread(block 66) failed [ 201.680928][ T8357] FAT-fs (loop1): Directory bread(block 67) failed [ 201.687329][ T8357] FAT-fs (loop1): Directory bread(block 68) failed [ 201.696371][ T8357] FAT-fs (loop1): Directory bread(block 69) failed [ 201.702811][ T8357] FAT-fs (loop1): Directory bread(block 70) failed [ 201.709078][ T8357] FAT-fs (loop1): Directory bread(block 71) failed [ 201.715551][ T8357] FAT-fs (loop1): Directory bread(block 72) failed [ 201.721897][ T8357] FAT-fs (loop1): Directory bread(block 73) failed [ 202.199883][ T8371] netlink: 'syz.1.2951': attribute type 2 has an invalid length. [ 202.223313][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.898131][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2950'. [ 203.216198][ T8398] FAT-fs (loop1): Directory bread(block 64) failed [ 203.222542][ T8398] FAT-fs (loop1): Directory bread(block 65) failed [ 203.259615][ T8398] FAT-fs (loop1): Directory bread(block 66) failed [ 203.273468][ T8398] FAT-fs (loop1): Directory bread(block 67) failed [ 203.294431][ T8398] FAT-fs (loop1): Directory bread(block 68) failed [ 203.303814][ T8398] FAT-fs (loop1): Directory bread(block 69) failed [ 203.310261][ T8398] FAT-fs (loop1): Directory bread(block 70) failed [ 203.317421][ T8398] FAT-fs (loop1): Directory bread(block 71) failed [ 203.324225][ T8398] FAT-fs (loop1): Directory bread(block 72) failed [ 203.330679][ T8398] FAT-fs (loop1): Directory bread(block 73) failed [ 203.505302][ T8418] netlink: 'syz.0.2968': attribute type 2 has an invalid length. [ 203.759816][ T2633] usb 5-1: USB disconnect, device number 23 [ 203.833030][ T8374] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 204.417068][ T8374] usb 3-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 204.644368][ T8434] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 204.695419][ T8374] usb 3-1: config 255 has an invalid descriptor of length 43, skipping remainder of the config [ 204.705602][ T8374] usb 3-1: config 255 has no interfaces? [ 204.711083][ T8374] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 204.718534][ T8434] ext4 filesystem being mounted at /root/syzkaller.h4z4Eg/37/file0 supports timestamps until 2038 (0x7fffffff) [ 204.719925][ T8374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.854009][ T8449] FAT-fs (loop0): Directory bread(block 64) failed [ 204.909115][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2976'. [ 204.909844][ T8449] FAT-fs (loop0): Directory bread(block 65) failed [ 204.932880][ T8449] FAT-fs (loop0): Directory bread(block 66) failed [ 204.939263][ T8449] FAT-fs (loop0): Directory bread(block 67) failed [ 204.988405][ T8449] FAT-fs (loop0): Directory bread(block 68) failed [ 204.994921][ T8449] FAT-fs (loop0): Directory bread(block 69) failed [ 205.001346][ T8449] FAT-fs (loop0): Directory bread(block 70) failed [ 205.008676][ T8449] FAT-fs (loop0): Directory bread(block 71) failed [ 205.015346][ T8449] FAT-fs (loop0): Directory bread(block 72) failed [ 205.021770][ T8449] FAT-fs (loop0): Directory bread(block 73) failed [ 205.028514][ T8374] usb 3-1: string descriptor 0 read error: -71 [ 205.037624][ T8374] usb 3-1: USB disconnect, device number 27 [ 205.484232][ T8463] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 205.497479][ T8463] System zones: 0-1, 3-12 [ 205.502128][ T8463] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue [ 205.540338][ T8463] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 205.624933][ T8483] overlayfs: workdir and upperdir must be separate subtrees [ 206.755322][ T8489] FAT-fs (loop3): Directory bread(block 64) failed [ 206.761661][ T8489] FAT-fs (loop3): Directory bread(block 65) failed [ 206.773663][ T8489] FAT-fs (loop3): Directory bread(block 66) failed [ 206.807940][ T8489] FAT-fs (loop3): Directory bread(block 67) failed [ 206.814789][ T8489] FAT-fs (loop3): Directory bread(block 68) failed [ 206.826232][ T8489] FAT-fs (loop3): Directory bread(block 69) failed [ 206.832861][ T8489] FAT-fs (loop3): Directory bread(block 70) failed [ 206.840951][ T8489] FAT-fs (loop3): Directory bread(block 71) failed [ 206.847659][ T8489] FAT-fs (loop3): Directory bread(block 72) failed [ 206.854177][ T8489] FAT-fs (loop3): Directory bread(block 73) failed [ 207.053766][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2999'. [ 207.073084][ T8513] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 207.081034][ T8513] System zones: 0-1, 3-12 [ 207.095089][ T8513] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue [ 207.100198][ T8505] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 207.155281][ T8505] ext4 filesystem being mounted at /root/syzkaller.h4z4Eg/43/file0 supports timestamps until 2038 (0x7fffffff) [ 207.287496][ T8529] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 207.296496][ T8529] ext4 filesystem being mounted at /root/syzkaller.2guPr6/118/file0 supports timestamps until 2038 (0x7fffffff) [ 207.345363][ T8529] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 207.360201][ T8529] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 207.382810][ T23] kauditd_printk_skb: 35 callbacks suppressed [ 207.382818][ T23] audit: type=1400 audit(2000000176.308:981): avc: denied { rename } for pid=8528 comm="syz.1.3006" name="bus" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 207.425336][ T8541] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 207.446033][ T8541] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 207.471559][ T8541] Quota error (device loop2): write_blk: dquota write failed [ 207.479081][ T8541] Quota error (device loop2): qtree_write_dquot: Error -27 occurred while creating quota [ 207.516493][ T8541] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 207.551662][ T8541] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 207.581477][ T8557] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 207.592588][ T8541] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 207.619109][ T8541] EXT4-fs error (device loop2) in ext4_orphan_del:3211: error 27 [ 207.642091][ T8541] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 207.665990][ T8541] EXT4-fs error (device loop2) in ext4_orphan_cleanup:2816: error 27 [ 207.733127][ T8541] EXT4-fs (loop2): 1 truncate cleaned up [ 207.762824][ T8541] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,journal_ioprio=0x0000000000000000,,errors=continue [ 207.775409][ T124] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 207.836640][ T8541] ext4 filesystem being mounted at /root/syzkaller.OM06fc/25/file1 supports timestamps until 2038 (0x7fffffff) [ 207.999329][ T8573] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 208.033124][ T8573] ext4 filesystem being mounted at /root/syzkaller.h4z4Eg/51/file0 supports timestamps until 2038 (0x7fffffff) [ 208.058592][ T8573] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 208.133615][ T23] audit: type=1400 audit(2000000177.068:982): avc: denied { create } for pid=8591 comm="syz.1.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 208.136853][ T8573] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 208.154234][ T124] usb 4-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 208.240524][ T124] usb 4-1: config 255 has an invalid descriptor of length 43, skipping remainder of the config [ 208.290623][ T124] usb 4-1: config 255 has no interfaces? [ 208.327572][ T124] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 208.357226][ T23] audit: type=1400 audit(2000000177.068:983): avc: denied { write } for pid=8591 comm="syz.1.3030" path="socket:[65678]" dev="sockfs" ino=65678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 209.254937][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.264773][ T23] audit: type=1400 audit(2000000177.068:984): avc: denied { nlmsg_read } for pid=8591 comm="syz.1.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 209.417761][ T8609] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 209.480762][ T8609] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 209.565301][ T8634] netlink: 'syz.2.3043': attribute type 2 has an invalid length. [ 209.740957][ T8609] Quota error (device loop1): write_blk: dquota write failed [ 209.749624][ T8609] Quota error (device loop1): qtree_write_dquot: Error -27 occurred while creating quota [ 209.763563][ T8609] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 209.771762][ T8609] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 209.779880][ T124] usb 4-1: string descriptor 0 read error: -71 [ 209.786081][ T8609] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 209.787048][ T124] usb 4-1: USB disconnect, device number 17 [ 209.803803][ T8609] EXT4-fs error (device loop1) in ext4_orphan_del:3211: error 27 [ 209.813159][ T8609] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 209.822000][ T8609] EXT4-fs error (device loop1) in ext4_orphan_cleanup:2816: error 27 [ 209.830792][ T8609] EXT4-fs (loop1): 1 truncate cleaned up [ 209.837022][ T8609] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,journal_ioprio=0x0000000000000000,,errors=continue [ 209.850331][ T8609] ext4 filesystem being mounted at /root/syzkaller.2guPr6/131/file1 supports timestamps until 2038 (0x7fffffff) [ 210.204437][ T8648] FAT-fs (loop1): Directory bread(block 64) failed [ 210.210849][ T8648] FAT-fs (loop1): Directory bread(block 65) failed [ 210.212452][ T371] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 210.224640][ T8648] FAT-fs (loop1): Directory bread(block 66) failed [ 210.230957][ T8648] FAT-fs (loop1): Directory bread(block 67) failed [ 210.237389][ T8648] FAT-fs (loop1): Directory bread(block 68) failed [ 210.243834][ T8648] FAT-fs (loop1): Directory bread(block 69) failed [ 210.250196][ T8648] FAT-fs (loop1): Directory bread(block 70) failed [ 210.256538][ T8648] FAT-fs (loop1): Directory bread(block 71) failed [ 210.263047][ T8648] FAT-fs (loop1): Directory bread(block 72) failed [ 210.269490][ T8648] FAT-fs (loop1): Directory bread(block 73) failed [ 210.344620][ T8652] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 210.353472][ T8652] ext4 filesystem being mounted at /root/syzkaller.OM06fc/32/file0 supports timestamps until 2038 (0x7fffffff) [ 210.369965][ T8652] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 210.378276][ T8652] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 210.442457][ T23] audit: type=1400 audit(2000000179.368:985): avc: denied { rename } for pid=8658 comm="syz.2.3054" name="file1" dev="sda1" ino=2122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 210.522833][ T371] usb 5-1: Using ep0 maxpacket: 8 [ 210.643749][ T371] usb 5-1: unable to get BOS descriptor or descriptor too short [ 210.712919][ T371] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 210.722851][ T371] usb 5-1: can't read configurations, error -71 [ 211.413239][ T2633] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 211.688893][ T8732] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.772917][ T2633] usb 1-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 211.808858][ T2633] usb 1-1: config 255 has an invalid descriptor of length 43, skipping remainder of the config [ 211.849529][ T2633] usb 1-1: config 255 has no interfaces? [ 211.862902][ T375] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 211.878622][ T2633] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 211.915354][ T2633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.103614][ T8746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3092'. [ 212.112837][ T375] usb 3-1: Using ep0 maxpacket: 8 [ 212.152982][ T8746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3092'. [ 212.233020][ T375] usb 3-1: unable to get BOS descriptor or descriptor too short [ 212.241351][ T8753] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 212.263815][ T2633] usb 1-1: string descriptor 0 read error: -71 [ 212.267254][ T23] audit: type=1400 audit(2000000181.198:986): avc: denied { unmount } for pid=6822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 212.270647][ T2633] usb 1-1: USB disconnect, device number 9 [ 212.606417][ T375] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 212.626054][ T375] usb 3-1: can't read configurations, error -71 [ 212.989170][ T8778] netlink: 'syz.2.3103': attribute type 2 has an invalid length. [ 213.397641][ T8799] cgroup1: Need name or subsystem set [ 213.486844][ T8805] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 213.495941][ T8805] ext4 filesystem being mounted at /root/syzkaller.h4z4Eg/65/file0 supports timestamps until 2038 (0x7fffffff) [ 213.649304][ T8816] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 214.083489][ T8833] futex_wake_op: syz.2.3125 tries to shift op by -1; fix this program [ 214.224706][ T8842] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 214.233515][ T8842] ext4 filesystem being mounted at /root/syzkaller.OM06fc/43/file0 supports timestamps until 2038 (0x7fffffff) [ 214.288751][ T8825] F2FS-fs (loop3): invalid crc_offset: 16 [ 214.301310][ T8825] F2FS-fs (loop3): Found nat_bits in checkpoint [ 214.302606][ T8839] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 214.323369][ T8839] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 214.333542][ T8839] Quota error (device loop0): write_blk: dquota write failed [ 214.340813][ T8839] Quota error (device loop0): qtree_write_dquot: Error -27 occurred while creating quota [ 214.449247][ T8857] netlink: 'syz.1.3130': attribute type 2 has an invalid length. [ 214.565021][ T8839] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 214.573628][ T8839] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 214.586680][ T8839] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 214.595799][ T8839] EXT4-fs error (device loop0) in ext4_orphan_del:3211: error 27 [ 214.604330][ T8839] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 214.612609][ T8839] EXT4-fs error (device loop0) in ext4_orphan_cleanup:2816: error 27 [ 214.615496][ T8825] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 214.621620][ T8839] EXT4-fs (loop0): 1 truncate cleaned up [ 214.634229][ T8839] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,journal_ioprio=0x0000000000000000,,errors=continue [ 214.646962][ T8839] ext4 filesystem being mounted at /root/syzkaller.h4z4Eg/70/file1 supports timestamps until 2038 (0x7fffffff) [ 214.666416][ T8825] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=400000, run fsck to fix. [ 214.709890][ T8862] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 214.822051][ T8872] futex_wake_op: syz.0.3136 tries to shift op by -1; fix this program [ 214.869074][ T8870] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 214.890794][ T8870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 214.898761][ T8870] System zones: 1-12 [ 214.904012][ T8870] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2221: inode #15: comm syz.4.3137: corrupted in-inode xattr [ 214.917890][ T8870] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.3137: couldn't read orphan inode 15 (err -117) [ 214.930234][ T8870] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 215.003137][ T23] audit: type=1326 audit(2000000183.938:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.4.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eeaa6b99 code=0x7ffc0000 [ 215.032385][ T23] audit: type=1326 audit(2000000183.938:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.4.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff9eeaa6b99 code=0x7ffc0000 [ 215.057997][ T23] audit: type=1326 audit(2000000183.938:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.4.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eeaa6b99 code=0x7ffc0000 [ 215.081396][ T23] audit: type=1326 audit(2000000183.938:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.4.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff9eeaa6b99 code=0x7ffc0000 [ 215.104632][ T23] audit: type=1326 audit(2000000183.938:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.4.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eeaa6b99 code=0x7ffc0000 [ 215.128489][ T23] audit: type=1326 audit(2000000183.938:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.4.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9eeaa6b99 code=0x7ffc0000 [ 215.166912][ T23] audit: type=1326 audit(2000000183.958:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.4.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eeaa6b99 code=0x7ffc0000 [ 215.193345][ T23] audit: type=1326 audit(2000000183.958:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.4.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9eeaa6b99 code=0x7ffc0000 [ 215.257065][ T8890] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 215.266163][ T8890] ext4 filesystem being mounted at /root/syzkaller.2guPr6/147/file0 supports timestamps until 2038 (0x7fffffff) [ 215.302789][ T2633] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 215.363287][ T8904] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 215.536052][ T8897] F2FS-fs (loop4): invalid crc_offset: 16 [ 215.538115][ T8910] futex_wake_op: syz.1.3150 tries to shift op by -1; fix this program [ 215.542814][ T2633] usb 4-1: Using ep0 maxpacket: 8 [ 215.569964][ T8897] F2FS-fs (loop4): Found nat_bits in checkpoint [ 215.586374][ T8912] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 215.604674][ T8912] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 215.612878][ T8912] System zones: 1-12 [ 215.617769][ T8912] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2221: inode #15: comm syz.2.3152: corrupted in-inode xattr [ 215.634845][ T8912] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz.2.3152: couldn't read orphan inode 15 (err -117) [ 215.647007][ T8912] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 215.666712][ T8897] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 215.682878][ T2633] usb 4-1: unable to get BOS descriptor or descriptor too short [ 215.711731][ T8897] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=400000, run fsck to fix. [ 215.723302][ T8918] ------------[ cut here ]------------ [ 215.728601][ T8918] WARNING: CPU: 0 PID: 8918 at mm/page_alloc.c:4875 __alloc_pages_nodemask+0x5d5/0x840 [ 215.738036][ T8918] Modules linked in: [ 215.741789][ T8918] CPU: 0 PID: 8918 Comm: syz.1.3151 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 215.751402][ T8918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 215.753729][ T2633] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 215.761324][ T8918] RIP: 0010:__alloc_pages_nodemask+0x5d5/0x840 [ 215.769538][ T2633] usb 4-1: can't read configurations, error -71 [ 215.774672][ T8918] Code: e1 07 80 c1 03 38 c1 0f 8c 12 fd ff ff 4c 89 f7 89 74 24 38 e8 1c 27 04 00 8b 74 24 38 48 8d bc 24 a0 00 00 00 e9 f5 fc ff ff <0f> 0b 31 db e9 ef fd ff ff 43 80 7c 3d 00 00 74 0a 48 8b 7c 24 48 [ 215.774678][ T8918] RSP: 0018:ffff8881db3ff8e0 EFLAGS: 00010246 [ 215.774686][ T8918] RAX: ffff8881db3ff990 RBX: 0000000000040dc0 RCX: 0000000000000000 [ 215.774691][ T8918] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffff8881db3ff9a8 [ 215.774697][ T8918] RBP: ffff8881db3ffa30 R08: dffffc0000000000 R09: ffff8881db3ff990 [ 215.774702][ T8918] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1103b67ff2c [ 215.774708][ T8918] R13: ffff8881db279150 R14: 000000000000001a R15: dffffc0000000000 [ 215.774715][ T8918] FS: 00007fcafe21c6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 215.774728][ T8918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.860431][ T8918] CR2: 0000000020001140 CR3: 00000001e8751000 CR4: 00000000003406b0 [ 215.868240][ T8918] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 215.876041][ T8918] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 215.883939][ T8918] Call Trace: [ 215.887073][ T8918] ? __warn+0x162/0x250 [ 215.891061][ T8918] ? report_bug+0x3a1/0x4e0 [ 215.895399][ T8918] ? __alloc_pages_nodemask+0x5d5/0x840 [ 215.900782][ T8918] ? __alloc_pages_nodemask+0x5d5/0x840 [ 215.906165][ T8918] ? do_invalid_op+0x6e/0x110 [ 215.910680][ T8918] ? invalid_op+0x1e/0x30 [ 215.914863][ T8918] ? __alloc_pages_nodemask+0x5d5/0x840 [ 215.920240][ T8918] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 215.925622][ T8918] kmalloc_order_trace+0x2a/0x100 [ 215.930471][ T8918] input_mt_init_slots+0xc6/0x9d0 [ 215.935331][ T8918] uinput_create_device+0x50f/0x620 [ 215.940363][ T8918] uinput_ioctl_handler+0xa63/0x16a0 [ 215.945482][ T8918] ? do_futex+0x13c1/0x19f0 [ 215.949823][ T8918] ? uinput_release+0x50/0x50 [ 215.954341][ T8918] ? memset+0x1f/0x40 [ 215.958151][ T8918] ? fsnotify+0x1280/0x1340 [ 215.962492][ T8918] ? uinput_poll+0x110/0x110 [ 215.966923][ T8918] do_vfs_ioctl+0x742/0x1720 [ 215.971351][ T8918] ? ioctl_preallocate+0x250/0x250 [ 215.976299][ T8918] ? __fget+0x407/0x490 [ 215.980288][ T8918] ? fget_many+0x20/0x20 [ 215.984369][ T8918] ? switch_fpu_return+0x1d4/0x410 [ 215.989314][ T8918] ? security_file_ioctl+0x7d/0xa0 [ 215.994260][ T8918] __x64_sys_ioctl+0xd4/0x110 [ 215.998775][ T8918] do_syscall_64+0xca/0x1c0 [ 216.003118][ T8918] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 216.008841][ T8918] RIP: 0033:0x7fcafef9ab99 [ 216.013161][ T8918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.033058][ T8918] RSP: 002b:00007fcafe21c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.041747][ T8918] RAX: ffffffffffffffda RBX: 00007fcaff128fa0 RCX: 00007fcafef9ab99 [ 216.049553][ T8918] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 216.054182][ T8926] netlink: 'syz.2.3154': attribute type 2 has an invalid length. [ 216.057366][ T8918] RBP: 00007fcaff01b77e R08: 0000000000000000 R09: 0000000000000000 [ 216.072729][ T8918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.072736][ T8918] R13: 000000000000000b R14: 00007fcaff128fa0 R15: 00007fffc73d1368 [ 216.072747][ T8918] ---[ end trace 1a9c56996626143b ]--- [ 216.202022][ T8941] futex_wake_op: syz.0.3162 tries to shift op by -1; fix this program [ 216.278203][ T8938] FAT-fs (loop1): Directory bread(block 64) failed [ 216.297109][ T8938] FAT-fs (loop1): Directory bread(block 65) failed [ 216.304233][ T8938] FAT-fs (loop1): Directory bread(block 66) failed [ 216.310657][ T8938] FAT-fs (loop1): Directory bread(block 67) failed [ 216.317004][ T8938] FAT-fs (loop1): Directory bread(block 68) failed [ 216.323954][ T8938] FAT-fs (loop1): Directory bread(block 69) failed [ 216.330342][ T8938] FAT-fs (loop1): Directory bread(block 70) failed [ 216.336700][ T8938] FAT-fs (loop1): Directory bread(block 71) failed [ 216.343207][ T8938] FAT-fs (loop1): Directory bread(block 72) failed [ 216.350053][ T8938] FAT-fs (loop1): Directory bread(block 73) failed [ 216.501150][ T8944] F2FS-fs (loop4): Corrupted extension count (3384082469 + 1 > 64) [ 216.513889][ T8944] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 216.522198][ T8944] F2FS-fs (loop4): Invalid uid value -1 [ 216.539175][ T8949] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 216.554084][ T8949] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 216.561945][ T8949] System zones: 1-12 [ 216.566564][ T8949] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2221: inode #15: comm syz.1.3164: corrupted in-inode xattr [ 216.578540][ T8949] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.3164: couldn't read orphan inode 15 (err -117) [ 216.590577][ T8949] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 216.788502][ T8970] futex_wake_op: syz.1.3173 tries to shift op by -1; fix this program [ 216.855267][ T8951] F2FS-fs (loop3): invalid crc_offset: 16 [ 216.872116][ T8951] F2FS-fs (loop3): Found nat_bits in checkpoint [ 216.901980][ T8983] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 216.915651][ T8983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 216.923931][ T8983] System zones: 1-12 [ 216.928885][ T8983] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2221: inode #15: comm syz.2.3177: corrupted in-inode xattr [ 216.946988][ T8983] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz.2.3177: couldn't read orphan inode 15 (err -117) [ 216.958939][ T8951] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 216.959303][ T8983] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 217.037578][ T8951] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=400000, run fsck to fix. [ 217.113389][ T9001] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 217.120795][ T9001] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 217.132988][ T8374] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 217.173985][ T9001] futex_wake_op: syz.0.3184 tries to shift op by 36; fix this program [ 217.306908][ T9008] FAT-fs (loop3): Unrecognized mount option "shortname=mir" or missing value [ 217.382849][ T8374] usb 2-1: Using ep0 maxpacket: 8 [ 217.492843][ T8999] F2FS-fs (loop4): Corrupted extension count (3384082469 + 1 > 64) [ 217.502962][ T8374] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.513343][ T8999] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 217.521398][ T8999] F2FS-fs (loop4): Invalid uid value -1 [ 217.568503][ T9020] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 217.577055][ T9020] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 217.586352][ T9020] System zones: 1-12 [ 217.703158][ T9020] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2221: inode #15: comm syz.2.3192: corrupted in-inode xattr [ 217.762244][ T8374] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 217.769708][ T8374] usb 2-1: can't read configurations, error -71 [ 217.780564][ T9020] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz.2.3192: couldn't read orphan inode 15 (err -117) [ 217.804684][ T9020] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 218.034676][ T9032] F2FS-fs (loop4): invalid crc_offset: 16 [ 218.049748][ T9032] F2FS-fs (loop4): Found nat_bits in checkpoint [ 218.091855][ T9032] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 218.126155][ T9043] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.183626][ T9032] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=400000, run fsck to fix. [ 218.256640][ T9048] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 218.267263][ T9048] ext4 filesystem being mounted at /root/syzkaller.2guPr6/166/file0 supports timestamps until 2038 (0x7fffffff) [ 218.731734][ T9048] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 218.739990][ T9048] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 218.759531][ T9048] EXT4-fs error (device loop1): ext4_get_first_dir_block:3604: inode #18: comm syz.1.3200: directory missing '.' [ 218.926114][ T9080] FAT-fs (loop1): Unrecognized mount option "shortname=mir" or missing value [ 219.300429][ T9084] FAT-fs (loop4): Directory bread(block 64) failed [ 219.306814][ T9084] FAT-fs (loop4): Directory bread(block 65) failed [ 219.313195][ T9084] FAT-fs (loop4): Directory bread(block 66) failed [ 219.319435][ T9084] FAT-fs (loop4): Directory bread(block 67) failed [ 219.325860][ T9084] FAT-fs (loop4): Directory bread(block 68) failed [ 219.332103][ T9084] FAT-fs (loop4): Directory bread(block 69) failed [ 219.338517][ T9084] FAT-fs (loop4): Directory bread(block 70) failed [ 219.344822][ T9084] FAT-fs (loop4): Directory bread(block 71) failed [ 219.351200][ T9084] FAT-fs (loop4): Directory bread(block 72) failed [ 219.357491][ T9084] FAT-fs (loop4): Directory bread(block 73) failed [ 219.537639][ T9089] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 219.545611][ T9089] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 219.591812][ T9089] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 219.600745][ T9089] System zones: 1-12 [ 219.606905][ T9089] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #15: comm syz.3.3213: corrupted in-inode xattr [ 219.625273][ T9083] F2FS-fs (loop2): invalid crc_offset: 16 [ 219.635679][ T9089] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.3213: couldn't read orphan inode 15 (err -117) [ 219.648820][ T9083] F2FS-fs (loop2): Found nat_bits in checkpoint [ 219.657905][ T9089] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue [ 219.707599][ T9083] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 219.740077][ T23] kauditd_printk_skb: 31 callbacks suppressed [ 219.740096][ T23] audit: type=1400 audit(2000000188.668:1026): avc: denied { write open } for pid=9086 comm="syz.3.3213" path="/root/syzkaller.lJi5t3/150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 219.814326][ T9083] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=400000, run fsck to fix. [ 219.844870][ T23] audit: type=1400 audit(2000000188.778:1027): avc: denied { read append } for pid=9086 comm="syz.3.3213" path="/root/syzkaller.lJi5t3/150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 219.892732][ T23] audit: type=1400 audit(2000000188.818:1028): avc: denied { map } for pid=9086 comm="syz.3.3213" path="/root/syzkaller.lJi5t3/150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 219.895845][ T9089] EXT4-fs warning (device loop3): dx_probe:791: inode #2: comm syz.3.3213: Unrecognised inode hash code 4 [ 219.940673][ T9108] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 219.950794][ T9089] EXT4-fs warning (device loop3): dx_probe:931: inode #2: comm syz.3.3213: Corrupt directory, running e2fsck is recommended [ 219.959146][ T9108] ext4 filesystem being mounted at /root/syzkaller.h4z4Eg/91/file0 supports timestamps until 2038 (0x7fffffff) [ 219.972350][ T9089] EXT4-fs warning (device loop3): dx_probe:791: inode #2: comm syz.3.3213: Unrecognised inode hash code 4 [ 219.994747][ T9089] EXT4-fs warning (device loop3): dx_probe:931: inode #2: comm syz.3.3213: Corrupt directory, running e2fsck is recommended [ 220.015604][ T23] audit: type=1326 audit(2000000188.948:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.1.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafef9ab99 code=0x7ffc0000 [ 220.049671][ T23] audit: type=1326 audit(2000000188.948:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.1.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcafef9ab99 code=0x7ffc0000 [ 220.073871][ T23] audit: type=1326 audit(2000000188.948:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.1.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafef9ab99 code=0x7ffc0000 [ 220.100636][ T23] audit: type=1326 audit(2000000188.948:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.1.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcafef9ab99 code=0x7ffc0000 [ 220.139137][ T23] audit: type=1326 audit(2000000188.948:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.1.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafef9ab99 code=0x7ffc0000 [ 220.168337][ T23] audit: type=1326 audit(2000000188.948:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.1.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafef9ab99 code=0x7ffc0000 [ 220.168739][ T9108] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 220.191996][ T23] audit: type=1326 audit(2000000189.008:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9114 comm="syz.1.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafef9ab99 code=0x7ffc0000 [ 220.269270][ T9108] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 220.345355][ T9108] EXT4-fs error (device loop0): ext4_get_first_dir_block:3604: inode #18: comm syz.0.3218: directory missing '.' [ 220.450398][ T9136] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 220.482767][ T9139] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 220.511840][ T9142] xt_NFQUEUE: number of total queues is 0 [ 220.613948][ T9146] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000006,nodelalloc,acl,noinit_itable,,errors=continue [ 220.877621][ T9162] FAT-fs (loop3): Directory bread(block 64) failed [ 220.883990][ T9162] FAT-fs (loop3): Directory bread(block 65) failed [ 220.890332][ T9162] FAT-fs (loop3): Directory bread(block 66) failed [ 220.896686][ T9162] FAT-fs (loop3): Directory bread(block 67) failed [ 220.903162][ T9162] FAT-fs (loop3): Directory bread(block 68) failed [ 220.909441][ T9162] FAT-fs (loop3): Directory bread(block 69) failed [ 220.915880][ T9162] FAT-fs (loop3): Directory bread(block 70) failed [ 220.922209][ T9162] FAT-fs (loop3): Directory bread(block 71) failed [ 220.928657][ T9162] FAT-fs (loop3): Directory bread(block 72) failed [ 220.934984][ T9162] FAT-fs (loop3): Directory bread(block 73) failed [ 221.341046][ T9189] xt_NFQUEUE: number of total queues is 0 [ 221.618131][ T9216] xt_NFQUEUE: number of total queues is 0 [ 221.807653][ T9227] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 221.816116][ T9227] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 221.831570][ T9227] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 221.840173][ T9227] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 221.848459][ T9227] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 221.983771][ T9227] EXT4-fs error (device loop3) in ext4_orphan_del:3211: error 27 [ 221.999247][ T9227] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 222.041454][ T9227] EXT4-fs error (device loop3) in ext4_orphan_cleanup:2816: error 27 [ 222.060648][ T9237] FAT-fs (loop1): Directory bread(block 64) failed [ 222.066472][ T9227] EXT4-fs (loop3): 1 truncate cleaned up [ 222.067476][ T9237] FAT-fs (loop1): Directory bread(block 65) failed [ 222.072552][ T9227] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 222.078868][ T9237] FAT-fs (loop1): Directory bread(block 66) failed [ 222.078881][ T9237] FAT-fs (loop1): Directory bread(block 67) failed [ 222.078910][ T9237] FAT-fs (loop1): Directory bread(block 68) failed [ 222.078921][ T9237] FAT-fs (loop1): Directory bread(block 69) failed [ 222.078958][ T9237] FAT-fs (loop1): Directory bread(block 70) failed [ 222.078970][ T9237] FAT-fs (loop1): Directory bread(block 71) failed [ 222.079005][ T9237] FAT-fs (loop1): Directory bread(block 72) failed [ 222.079017][ T9237] FAT-fs (loop1): Directory bread(block 73) failed [ 222.177915][ T9227] ext4 filesystem being mounted at /root/syzkaller.lJi5t3/159/file1 supports timestamps until 2038 (0x7fffffff) [ 222.761031][ T9253] xt_NFQUEUE: number of total queues is 0 [ 222.871917][ T9263] EXT4-fs error (device sda1): ext4_remount:5517: Abort forced by user [ 222.885975][ T9263] EXT4-fs (sda1): Remounting filesystem read-only [ 222.894763][ T9263] Aborting journal on device sda1-8. [ 222.970489][ T9274] EXT4-fs error (device sda1): ext4_journal_check_start:61: Detected aborted journal [ 222.979841][ T9274] EXT4-fs (sda1): Remounting filesystem read-only [ 223.089678][ T9263] EXT4-fs warning (device sda1): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed [ 223.569140][ T7] device bridge_slave_1 left promiscuous mode [ 223.584016][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.592201][ T7] device bridge_slave_0 left promiscuous mode [ 223.604497][ T7] bridge0: port 1(bridge_slave_0) entered disabled state SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: repeatedly failed to execute the program proc=0 req=3289 state=1 status=67 (errno 9: Bad file descriptor)