last executing test programs: 14.270095401s ago: executing program 1 (id=4636): unshare(0xa020480) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) pselect6(0x40, &(0x7f0000000300), &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0) 14.244600435s ago: executing program 1 (id=4637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 14.168942817s ago: executing program 1 (id=4638): unshare(0x60400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000019c0), 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r2, 0x0) 14.168226347s ago: executing program 1 (id=4639): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl(r1, 0x8b01, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x4002, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x11, 0x22f, &(0x7f0000000880)="$eJzs3bFqU1EYB/CvJrWlIOkgFEXwiotTaCvOtkgFMaAoGXSy2BalqQULBR1aN19CX0FHV8FBXH0BEaQKLnbroETqrY1tk3gLuYmY32/JB+f8c79zuOSSISd3Ti0tzi2vLGxubsTw8EAUp2IqtgZiNI5EIVJPAgD4n2zV6/Gtnup1LwBAd3j+A0D/yfj8v97FlgCAnPn+DwD95+at21enK5WZG0kyHLH0dLW6Wk1f0/HphbgftZiP8SjF94j6rrS+fKUyM55s+zwa1aX1nfz6arWwNz8RpRhtnp9IUnvzgzGyk/8wEvMxGaU43jw/2TR/NM6d/eP65SjF+7uxHLWYi+1sI782kSSXrlX25Yd+zQMAAAAAAAAAAAAAAAAAAAAAgDyUk11Nz+8pl1uNp/ns5wPtP5+nGCeLvV07AAAAAAAAAAAAAAAAAAAA/CtWHj1enK3V5h+2Kx68e/HmwFAxItqmmhYDO9c9XCqP4tiZT89azSkcbn86W7w+3Yn3+VHPtdW3G/dOnF8Zu5AtNRQRHW5j8MDtN9jq1rq4OFv7WorIaTde5rTPxUyTf6/6r5PHnk/Nvlr7+CVrG13/KAIAAAAAAAAAAAAAAAAAgL7X+NFvrzsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN5p/P9/+6KQYU6rotdrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwEAAP//1eGaqQ==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x19, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = add_key$fscrypt_v1(0x0, &(0x7f00000004c0)={'fscrypt:', @desc3}, &(0x7f0000000700)={0x0, "31e024b5bca2a2ff71cd40050b23b5d9033abd5b12abf8a52ed635d09ee90ee7b5653370953f159266514b3411433a515130a158ba270d263a523fd3b06e6e5c"}, 0x48, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000500)={r7}, &(0x7f0000000780)={'enc=', 'oaep', ' hash=', {'hmac(sha256-neon)\x00'}}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x25}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}]}) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x3, 0x2, 0xc9, 0xffff}]}) writev(r8, &(0x7f0000000580)=[{&(0x7f0000000ac0)="0d0c0ba0f2d3ce883fe7df24c71af050e98dce8946bac16207e273bd1ab7d6aebde004bff27574c107fbd00d3da01554aaa3ed81ca6da6503453a39b4aa5ff5b1b128d2a65ce3e2295434f6932323aa7beed52bfb152a54a5675fffe5c64a8cf25c88d9e6494cfe302fd1fe15c5282f465477bf882ebf68a9feb49bb42c69d0ae4c6f1", 0x83}, {&(0x7f0000000b80)="52bfb5f616a78d2bc797314dcdf6ebaf2de0bea29023c91e45c3fe98f9e78730067597b87f1f94c67af5e0cf28d695b522638e27b5b1243b2e87efadab097be5acaea76003cb7015d598b116c551ad9ddc535415678f706cb6d17b84a18334ba8a09626d7023a8dc016c740315a376963f6d06430d6db531d94cf7111866b301a94c5a72816c0a2a626bb9bcedfe3180810c0e8de7e55c12fcdb5e02eaada9601c2f438be4e455ee16f209da3feb22edb4a6f2b4694b73e98ab865c905b1f6c73bf30069cb8ec9671872", 0xca}], 0x2) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 13.745708991s ago: executing program 1 (id=4642): bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)) ioctl$TCFLSH(r4, 0x400455c8, 0x40000000004) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[@ANYRES32=r7, @ANYBLOB="297c00f9c21980234eab918ac814309e197710e2d610b50fc9fa30d71b80aa11665fc7ff638d11ea1f12", @ANYRES32=r6, @ANYRES16, @ANYRESHEX=r1, @ANYBLOB="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", @ANYRES8, @ANYRESDEC], 0x2, 0x1e8, &(0x7f00000001c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x7800, 0x700, 0x9, 0xfffffffe, {{0xa, 0x4, 0x3, 0x2, 0x28, 0x68, 0x0, 0xd5, 0x4, 0x0, @multicast2, @empty, {[@generic={0x89, 0x7, "bdf908e0ff"}, @noop, @rr={0x7, 0xb, 0x81, [@dev={0xac, 0x14, 0x14, 0x34}, @broadcast]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x5, 0x6, 0x6, 0x80, r8, 0x8, '\x00', r9, r8, 0x0, 0x5, 0x3, 0x5}, 0x48) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f00000003a8407a730bf85edacab3"], 0x0}, 0x0) r10 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) fstat(r8, &(0x7f00000004c0)) ioctl$HIDIOCSREPORT(r10, 0x400c4808, &(0x7f0000000000)={0x3}) syz_usb_control_io$hid(r0, 0x0, 0x0) 11.655912572s ago: executing program 4 (id=4695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000060000000000000005000000c5200000010000008f030400fcffffff950000000000000008840800dc0800006060000155dd684618210000688f041b61e5815fee92c8634d2bd2e8460aa143e7dab64951651cca98d33f43215f2f25e37a30b01e2122f79b5d8c234560a4c223bf85e51192c4f9ed6e099ad8a9354f2dcea4cba7f89052f6a4257cbc62f2d4", @ANYRES32, @ANYBLOB="000000000000000018280000", @ANYRES32, @ANYBLOB="a449d0a685369d839e1df66333eaa07a0466125918be218a0d90d9399f6c7e728e579c852f"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x7, 0x9, 0x1}, 0x10}, 0x80) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000240)=""/183, 0x26, 0xb7, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x9, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000040), 0x20, r3}, 0x38) 11.642714704s ago: executing program 4 (id=4696): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}, 0x0) 10.249690198s ago: executing program 1 (id=4708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x32) 8.568003515s ago: executing program 4 (id=4729): socket$inet_icmp(0x2, 0x2, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000400)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)) 7.701122408s ago: executing program 4 (id=4745): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) 5.688927127s ago: executing program 0 (id=4761): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000000), 0x400000) 5.356540158s ago: executing program 0 (id=4763): r0 = gettid() syslog(0x2, &(0x7f0000000c00)=""/143, 0x8f) tkill(r0, 0x7) 5.296053467s ago: executing program 0 (id=4764): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r0, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) 5.286949859s ago: executing program 0 (id=4765): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x4}, {0x8}, {0x8}]}}]}]}, 0x44}}, 0x0) 5.270537691s ago: executing program 0 (id=4766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}, @NFQA_CFG_CMD={0x8}, @NFQA_CFG_MASK={0x8}]}, 0x2c}}, 0x0) 5.225000138s ago: executing program 0 (id=4767): epoll_create(0x5) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x210, 0x140, 0x140, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'pimreg1\x00', 'hsr0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_hsr\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@empty, @private0, [], [], 'veth0\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0xffffffffffffffe5}}}}, 0x43c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x3, 0x106001, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x9, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000001680)=@known='system.advise\x00') 4.519803287s ago: executing program 4 (id=4775): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r0, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) 4.519609637s ago: executing program 4 (id=4776): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x4}, {0x8}, {0x8}]}}]}]}, 0x44}}, 0x0) 2.486368078s ago: executing program 3 (id=4787): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty, @in=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}}, 0x0) 2.40604433s ago: executing program 3 (id=4788): syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @random="5f198721fa66", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a8b4ce", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x2000) r5 = dup3(r0, r1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x46, 0x6a, 0xa, 0xff00}, [@call={0x55}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 2.336145061s ago: executing program 3 (id=4789): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x2, 0x3, 0x0, 0x9, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_x_sec_ctx={0x1, 0x8}]}, 0x58}, 0x1, 0x7}, 0x0) 2.335677331s ago: executing program 3 (id=4790): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x5509, &(0x7f0000000500)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x9) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x0, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) 1.983938795s ago: executing program 3 (id=4791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000800)={0x8f, 0x0, 0xa}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.662089355s ago: executing program 3 (id=4792): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x94b) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 576.210641ms ago: executing program 2 (id=4795): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x3f}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") 368.006933ms ago: executing program 2 (id=4796): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x0, 0x0) r0 = inotify_init() readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1) inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0xc2000a22) creat(&(0x7f0000000180)='./file0\x00', 0x0) 125.64829ms ago: executing program 2 (id=4798): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty, @in=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}}, 0x0) 100.077904ms ago: executing program 2 (id=4799): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x4b0ad, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40286608, &(0x7f0000000240)=@v1={0x0, @adiantum, 0x0, @desc4}) 83.097327ms ago: executing program 2 (id=4800): open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0xa00001, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2800060, 0x0) 0s ago: executing program 2 (id=4801): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'veth0\x00', &(0x7f0000000a40)=@ethtool_ts_info={0x49}}) kernel console output (not intermixed with test programs): nvalid maxpacket 553, setting to 64 [ 294.826934][ T372] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.836083][ T372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.843848][ T372] usb 4-1: Product: syz [ 294.847908][ T372] usb 4-1: Manufacturer: syz [ 294.852326][ T372] usb 4-1: SerialNumber: syz [ 295.684567][ T23] audit: type=1400 audit(1719585584.389:797): avc: denied { view } for pid=10480 comm="syz.0.3475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 295.786437][ T18] usb 3-1: USB disconnect, device number 26 [ 295.931333][T10485] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196) [ 295.947285][T10485] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.048049][T10492] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 296.064007][T10492] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 296.236859][ T372] cdc_ncm 4-1:1.0: bind() failure [ 296.264605][T10492] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 296.274081][T10492] EXT4-fs (loop2): orphan cleanup on readonly fs [ 296.280781][T10492] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 4: comm syz.2.3478: lblock 0 mapped to illegal pblock 4 (length 1) [ 296.294023][ T372] usb 4-1: USB disconnect, device number 25 [ 296.311013][T10492] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 296.350962][T10492] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noquota,errors=continue,noload,init_itable=0x0000000000001000,usrjquota="init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 296.467763][T10509] device syzkaller0 entered promiscuous mode [ 296.789621][T10526] EXT4-fs (loop1): orphan cleanup on readonly fs [ 296.797097][T10526] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (137363456 > 6144). [ 296.809530][T10526] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 296.824498][T10526] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 296.831423][T10526] EXT4-fs error (device loop1): ext4_orphan_get:1260: comm syz.1.3493: bad orphan inode 14 [ 296.841664][T10526] ext4_test_bit(bit=13, block=18) = 1 [ 296.847089][T10526] is_bad_inode(inode)=0 [ 296.851087][T10526] NEXT_ORPHAN(inode)=0 [ 296.854985][T10526] max_ino=32 [ 296.858147][T10526] i_nlink=1 [ 296.865953][T10526] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 296.900284][ T23] audit: type=1400 audit(1719585585.609:798): avc: denied { setattr } for pid=10525 comm="syz.1.3493" name="" dev="pipefs" ino=80401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 296.940863][T10546] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 296.949974][T10546] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 296.960432][T10546] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 296.988321][T10546] EXT4-fs (loop4): orphan cleanup on readonly fs [ 297.011062][T10546] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 4: comm syz.4.3500: lblock 0 mapped to illegal pblock 4 (length 1) [ 297.037813][T10546] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 297.037829][T10546] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noquota,errors=continue,noload,init_itable=0x0000000000001000,usrjquota="init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 297.337990][T10574] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 297.383816][T10583] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 297.392772][T10583] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 297.449207][T10583] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 297.459324][T10583] EXT4-fs (loop0): orphan cleanup on readonly fs [ 297.465674][T10583] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 4: comm syz.0.3514: lblock 0 mapped to illegal pblock 4 (length 1) [ 297.480490][T10583] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 297.488666][T10583] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,noquota,errors=continue,noload,init_itable=0x0000000000001000,usrjquota="init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 297.516830][ T486] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 297.596874][ T9] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 297.612826][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 297.625224][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 297.625224][ T9] [ 297.635085][ T9] EXT4-fs (loop1): Total free blocks count 0 [ 297.641725][ T9] EXT4-fs (loop1): Free/Dirty block details [ 297.648562][ T9] EXT4-fs (loop1): free_blocks=2415919104 [ 297.654193][ T9] EXT4-fs (loop1): dirty_blocks=16 [ 297.659353][ T9] EXT4-fs (loop1): Block reservation details [ 297.667364][ T9] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 297.687299][T10595] 9pnet: p9_fd_create_unix (10595): problem connecting socket: ./file0: -111 [ 297.833725][T10609] FAT-fs (loop2): Directory bread(block 64) failed [ 297.843126][T10609] FAT-fs (loop2): Directory bread(block 65) failed [ 297.863006][T10609] FAT-fs (loop2): Directory bread(block 66) failed [ 297.870083][T10609] FAT-fs (loop2): Directory bread(block 67) failed [ 297.876585][T10609] FAT-fs (loop2): Directory bread(block 68) failed [ 297.883320][T10609] FAT-fs (loop2): Directory bread(block 69) failed [ 297.887427][ T486] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.890200][T10609] FAT-fs (loop2): Directory bread(block 70) failed [ 297.902433][ T486] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 553, setting to 64 [ 297.906561][T10609] FAT-fs (loop2): Directory bread(block 71) failed [ 297.923103][T10609] FAT-fs (loop2): Directory bread(block 72) failed [ 297.929638][T10609] FAT-fs (loop2): Directory bread(block 73) failed [ 298.145596][T10614] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 298.161166][T10614] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 298.172875][T10614] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 298.182004][T10614] EXT4-fs (loop0): orphan cleanup on readonly fs [ 298.189023][T10614] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 4: comm syz.0.3526: lblock 0 mapped to illegal pblock 4 (length 1) [ 298.205975][T10614] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 298.216598][T10614] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,noquota,errors=continue,noload,init_itable=0x0000000000001000,usrjquota="init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 298.261405][ T486] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.276286][ T486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.284717][ T486] usb 4-1: Product: syz [ 298.291809][ T486] usb 4-1: Manufacturer: syz [ 298.296460][ T486] usb 4-1: SerialNumber: syz [ 298.359592][T10638] netlink: 'syz.2.3536': attribute type 37 has an invalid length. [ 298.371970][T10638] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3536'. [ 298.382779][T10638] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10638 comm=syz.2.3536 [ 298.420857][ T23] audit: type=1400 audit(1719585587.129:799): avc: denied { setopt } for pid=10643 comm="syz.2.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 298.822522][T10680] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.830075][T10680] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.837398][T10680] device bridge_slave_0 entered promiscuous mode [ 298.845797][T10680] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.852675][T10680] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.860089][T10680] device bridge_slave_1 entered promiscuous mode [ 298.904440][T10680] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.911275][T10680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.918410][T10680] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.925161][T10680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.949046][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.956861][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.963954][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.987733][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.995802][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.002649][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.010744][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.019019][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.025837][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.033157][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.040941][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.054114][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.066963][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.079279][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.097598][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.105839][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.277253][ T7] device bridge_slave_1 left promiscuous mode [ 299.287482][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.295046][ T7] device bridge_slave_0 left promiscuous mode [ 299.301439][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.556962][ T486] cdc_ncm 4-1:1.0: bind() failure [ 299.571460][ T486] usb 4-1: USB disconnect, device number 26 [ 299.574232][ T23] audit: type=1400 audit(1719585588.279:800): avc: denied { shutdown } for pid=10702 comm="syz.1.3562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 299.767149][T10712] EXT4-fs (loop2): orphan cleanup on readonly fs [ 299.774364][T10712] Quota error (device loop2): v2_read_file_info: Number of blocks too big for quota file size (137363456 > 6144). [ 299.790098][T10712] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 299.805176][T10712] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 299.811920][T10712] EXT4-fs error (device loop2): ext4_orphan_get:1260: comm syz.2.3567: bad orphan inode 14 [ 299.822215][T10712] ext4_test_bit(bit=13, block=18) = 1 [ 299.827496][T10712] is_bad_inode(inode)=0 [ 299.831387][T10712] NEXT_ORPHAN(inode)=0 [ 299.835359][T10712] max_ino=32 [ 299.839364][T10712] i_nlink=1 [ 299.842316][T10712] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 299.874474][T10716] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.881653][T10716] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.889581][T10716] device bridge_slave_0 entered promiscuous mode [ 299.896715][T10716] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.903686][T10716] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.910967][T10716] device bridge_slave_1 entered promiscuous mode [ 299.961810][T10716] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.968769][T10716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.975852][T10716] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.982653][T10716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.004713][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.013530][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.021454][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.078778][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.087054][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.093909][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.101605][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.109982][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.116834][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.124381][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.132441][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.149421][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.166923][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.206391][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.234803][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.248877][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.876790][ T342] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 300.992971][T10767] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 301.003915][T10767] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,grpquota,i_version,user_xattr,nomblk_io_submit,,errors=continue [ 301.019469][T10770] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue [ 301.022943][ T23] audit: type=1400 audit(1719585589.729:801): avc: denied { append } for pid=10766 comm="syz.2.3586" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 301.033991][T10770] ext4 filesystem being mounted at /root/syzkaller.4GKn0e/5/file0 supports timestamps until 2038 (0x7fffffff) [ 301.052284][ T7] device bridge_slave_1 left promiscuous mode [ 301.073122][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.080926][ T7] device bridge_slave_0 left promiscuous mode [ 301.087239][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.123011][T10767] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 301.134169][T10767] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 301.145957][T10767] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 301.154342][T10767] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 301.162527][T10767] EXT4-fs error (device loop2) in ext4_setattr:5881: error 27 [ 301.170033][T10767] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 301.178283][T10767] EXT4-fs warning (device loop2): ext4_evict_inode:304: couldn't mark inode dirty (err -27) [ 301.636887][ T342] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 301.644965][ T342] usb 4-1: config 179 has no interface number 0 [ 301.666389][ T342] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 301.709013][ T342] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 301.722893][T10789] binder: BINDER_SET_CONTEXT_MGR already set [ 301.729082][T10789] binder: 10788:10789 ioctl 4018620d 200001c0 returned -16 [ 301.881977][ T342] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 301.892225][ T342] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 301.905693][ T342] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 301.920648][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.946950][T10752] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 302.178126][T10800] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 302.185866][T10800] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 302.197193][T10800] F2FS-fs (loop4): invalid crc value [ 302.204236][T10800] F2FS-fs (loop4): Found nat_bits in checkpoint [ 302.234236][T10800] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 302.241154][T10800] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 303.317315][ T4842] usb 4-1: USB disconnect, device number 27 [ 303.346879][ T18] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 303.575661][ T23] audit: type=1326 audit(1719585592.279:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.4.3606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54d8732b99 code=0x0 [ 303.731466][T10848] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 303.806782][ T18] usb 2-1: Using ep0 maxpacket: 16 [ 303.926877][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.938040][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.947627][ T18] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.960188][ T18] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 303.969083][ T18] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.977627][ T18] usb 2-1: config 0 descriptor?? [ 304.500363][T10825] EXT4-fs (loop1): old and new quota format mixing [ 304.518123][ T18] microsoft 0003:045E:07DA.002A: invalid report_count 29542 [ 304.525223][ T18] microsoft 0003:045E:07DA.002A: item 0 2 1 9 parsing failed [ 304.532945][ T18] microsoft 0003:045E:07DA.002A: parse failed [ 304.539200][ T18] microsoft: probe of 0003:045E:07DA.002A failed with error -22 [ 304.895532][ T342] usb 2-1: USB disconnect, device number 30 [ 305.186871][ T4842] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 305.546904][ T4842] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 305.567425][ T4842] usb 4-1: config 179 has no interface number 0 [ 305.573926][ T4842] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 305.589678][ T4842] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 305.600602][ T4842] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 305.610515][ T4842] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 305.625499][ T4842] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 305.634937][ T4842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.686876][T10873] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 306.248161][T10913] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 306.461267][ T9011] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 306.475843][ T9011] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 306.489052][ T9011] EXT4-fs (loop2): This should not happen!! Data will be lost [ 306.489052][ T9011] [ 306.498850][ T9011] EXT4-fs (loop2): Total free blocks count 0 [ 306.504691][ T9011] EXT4-fs (loop2): Free/Dirty block details [ 306.555279][ T9011] EXT4-fs (loop2): free_blocks=2415919104 [ 306.561053][ T9011] EXT4-fs (loop2): dirty_blocks=16 [ 306.566055][ T9011] EXT4-fs (loop2): Block reservation details [ 306.572357][ T9011] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 307.272377][T10942] input: syz0 as /devices/virtual/input/input35 [ 307.476866][ T486] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 307.610078][ T18] usb 4-1: USB disconnect, device number 28 [ 307.726788][ T486] usb 3-1: Using ep0 maxpacket: 8 [ 308.121934][ T486] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 308.132629][ T486] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 308.141860][T10965] binder: BINDER_SET_CONTEXT_MGR already set [ 308.147711][ T486] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.154582][T10965] binder: 10964:10965 ioctl 4018620d 20000040 returned -16 [ 308.285499][T10969] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 308.294375][T10969] ext4 filesystem being mounted at /root/syzkaller.vDjubO/113/bus supports timestamps until 2038 (0x7fffffff) [ 308.316947][ T486] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.325976][ T486] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.334159][ T486] usb 3-1: Product: syz [ 308.334859][T10969] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 308.338450][ T486] usb 3-1: Manufacturer: syz [ 308.348224][T10969] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 308.351214][ T486] usb 3-1: SerialNumber: syz [ 308.363365][T10969] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #20: comm syz.0.3650: mark inode dirty (error -27) [ 308.376065][T10969] EXT4-fs warning (device loop0): ext4_evict_inode:321: xattr delete (err -27) [ 308.521024][T10983] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 308.715393][T10987] input: syz0 as /devices/virtual/input/input36 [ 308.723526][ T23] audit: type=1400 audit(1719585597.389:803): avc: denied { read } for pid=10982 comm="syz.0.3655" name="loop-control" dev="devtmpfs" ino=9188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 308.813022][ T23] audit: type=1400 audit(1719585597.389:804): avc: denied { open } for pid=10982 comm="syz.0.3655" path="/dev/loop-control" dev="devtmpfs" ino=9188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 308.841257][ T23] audit: type=1400 audit(1719585597.399:805): avc: denied { ioctl } for pid=10982 comm="syz.0.3655" path="/dev/loop-control" dev="devtmpfs" ino=9188 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 308.868237][ T486] usb 3-1: 0:2 : does not exist [ 308.880433][ T486] usb 3-1: USB disconnect, device number 27 [ 308.988312][T10995] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 309.183117][ T381] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 309.199153][ T381] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 309.212048][ T381] EXT4-fs (loop1): This should not happen!! Data will be lost [ 309.212048][ T381] [ 309.221784][ T381] EXT4-fs (loop1): Total free blocks count 0 [ 309.227944][ T381] EXT4-fs (loop1): Free/Dirty block details [ 309.233685][ T381] EXT4-fs (loop1): free_blocks=2415919104 [ 309.239608][ T381] EXT4-fs (loop1): dirty_blocks=16 [ 309.244646][ T381] EXT4-fs (loop1): Block reservation details [ 309.250718][ T381] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 309.412526][T11004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3659'. [ 309.867304][ T486] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 310.187515][T11037] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 310.354077][ T486] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 310.366417][ T486] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 310.377083][ T486] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.386333][T11043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3671'. [ 310.395480][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3671'. [ 310.404424][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3671'. [ 310.413166][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3671'. [ 310.536933][ T486] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.545973][ T486] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.553990][ T486] usb 3-1: Product: syz [ 310.558026][ T486] usb 3-1: Manufacturer: syz [ 310.562412][ T486] usb 3-1: SerialNumber: syz [ 310.625218][T11049] input: syz0 as /devices/virtual/input/input37 [ 310.878040][T11061] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,journal_ioprio=0x0000000000000007,sb=0x0000000000000009,bsdgroups,journal_path=./file0,,errors=continue [ 310.896123][T11061] ext4 filesystem being mounted at /root/syzkaller.vDjubO/121/bus supports timestamps until 2038 (0x7fffffff) [ 311.057034][ T486] usb 3-1: 0:2 : does not exist [ 311.071113][ T486] usb 3-1: USB disconnect, device number 28 [ 311.080388][ T2751] udevd[2751]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 311.318902][ T13] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 311.341329][T11080] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 311.350209][T11080] ext4 filesystem being mounted at /root/syzkaller.LfTSGS/51/file0 supports timestamps until 2038 (0x7fffffff) [ 311.733432][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 311.991207][T11094] input: syz0 as /devices/virtual/input/input38 [ 312.196877][ T13] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 312.205429][ T13] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 312.215836][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.376864][ T13] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.386039][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.394425][ T13] usb 2-1: Product: syz [ 312.398705][ T13] usb 2-1: Manufacturer: syz [ 312.403166][ T13] usb 2-1: SerialNumber: syz [ 312.409020][T11111] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 312.630489][ T9011] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 312.655801][ T9011] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 312.674142][ T9011] EXT4-fs (loop0): This should not happen!! Data will be lost [ 312.674142][ T9011] [ 312.688746][ T9011] EXT4-fs (loop0): Total free blocks count 0 [ 312.695013][ T9011] EXT4-fs (loop0): Free/Dirty block details [ 312.701430][ T9011] EXT4-fs (loop0): free_blocks=2415919104 [ 312.707179][ T9011] EXT4-fs (loop0): dirty_blocks=16 [ 312.712083][ T9011] EXT4-fs (loop0): Block reservation details [ 312.717958][ T9011] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 312.747017][ T13] usb 2-1: 0:2 : does not exist [ 312.762444][ T13] usb 2-1: USB disconnect, device number 31 [ 312.818583][T11125] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 312.827402][T11125] ext4 filesystem being mounted at /root/syzkaller.vDjubO/132/file0 supports timestamps until 2038 (0x7fffffff) [ 313.106845][ T107] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 313.476908][ T107] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 313.485651][ T107] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 313.495776][ T107] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.619161][T11146] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,journal_ioprio=0x0000000000000007,sb=0x0000000000000009,bsdgroups,journal_path=./file0,,errors=continue [ 313.637184][T11146] ext4 filesystem being mounted at /root/syzkaller.vDjubO/135/bus supports timestamps until 2038 (0x7fffffff) [ 313.678214][T11150] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 313.692926][T11150] EXT4-fs (loop2): invalid journal inode [ 313.709627][T11150] EXT4-fs (loop2): can't get journal size [ 313.721752][T11150] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue [ 313.818737][ T9419] EXT4-fs error (device loop2): __ext4_iget:5217: inode #15: block 1803188595: comm syz-executor: invalid block [ 313.830849][ T9419] EXT4-fs error (device loop2): __ext4_iget:5217: inode #15: block 1803188595: comm syz-executor: invalid block [ 313.876888][ T107] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 313.885730][ T107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.896761][ T107] usb 4-1: Product: syz [ 313.902438][ T107] usb 4-1: Manufacturer: syz [ 313.908000][ T107] usb 4-1: SerialNumber: syz [ 314.110445][T11172] input: syz0 as /devices/virtual/input/input39 [ 314.314832][ T107] usb 4-1: 0:2 : does not exist [ 314.323531][ T107] usb 4-1: USB disconnect, device number 29 [ 314.448207][ T23] audit: type=1400 audit(1719585603.159:806): avc: denied { ioctl } for pid=11176 comm="syz.1.3716" path="socket:[88247]" dev="sockfs" ino=88247 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 314.485703][ T2751] udevd[2751]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 314.533953][T11184] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.540908][T11184] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.548328][T11184] device bridge_slave_0 entered promiscuous mode [ 314.555419][T11184] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.562345][T11184] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.569772][T11184] device bridge_slave_1 entered promiscuous mode [ 314.638351][T11184] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.645202][T11184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.652353][T11184] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.659207][T11184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.888398][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.895788][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.904030][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.912762][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.920824][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.938305][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 314.946456][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 314.964011][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 314.972156][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.987094][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.995118][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.007827][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.015928][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.026078][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.034723][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.218395][ T23] audit: type=1400 audit(1719585603.929:807): avc: denied { mounton } for pid=11198 comm="syz.1.3721" path="/proc/11198/cgroup" dev="proc" ino=87907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 315.247542][ T381] device bridge_slave_1 left promiscuous mode [ 315.266904][ T107] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 315.267733][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.281541][ T23] audit: type=1400 audit(1719585603.959:808): avc: denied { mounton } for pid=11198 comm="syz.1.3721" path="/proc/11198/cgroup" dev="nsfs" ino=4026532623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 315.305422][ T381] device bridge_slave_0 left promiscuous mode [ 315.313544][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.452641][T11208] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 315.472214][T11208] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 315.497434][T11208] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 2 with error 28 [ 315.509583][T11208] EXT4-fs (loop0): This should not happen!! Data will be lost [ 315.509583][T11208] [ 315.519346][T11208] EXT4-fs (loop0): Total free blocks count 0 [ 315.526916][ T107] usb 4-1: Using ep0 maxpacket: 16 [ 315.531990][T11208] EXT4-fs (loop0): Free/Dirty block details [ 315.542095][T11208] EXT4-fs (loop0): free_blocks=68451041280 [ 315.552218][T11208] EXT4-fs (loop0): dirty_blocks=64 [ 315.562325][T11208] EXT4-fs (loop0): Block reservation details [ 315.572466][T11208] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 315.590535][ T557] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 315.612892][ T557] EXT4-fs (loop0): This should not happen!! Data will be lost [ 315.612892][ T557] [ 315.806891][ T107] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 315.823936][ T107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.840219][ T107] usb 4-1: Product: syz [ 315.854378][ T107] usb 4-1: Manufacturer: syz [ 315.864472][ T107] usb 4-1: SerialNumber: syz [ 315.875027][T11215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3726'. [ 315.891485][ T107] usb 4-1: config 0 descriptor?? [ 315.937962][ T107] ums-freecom 4-1:0.0: USB Mass Storage device detected [ 316.139140][ T372] usb 4-1: USB disconnect, device number 30 [ 316.246699][T11233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3732'. [ 316.528735][ T381] Bluetooth: hci0: Frame reassembly failed (-84) [ 316.536716][ T23] audit: type=1400 audit(1719585605.239:809): avc: denied { bind } for pid=11241 comm="syz.2.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 316.556141][ T23] audit: type=1400 audit(1719585605.239:810): avc: denied { listen } for pid=11241 comm="syz.2.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 316.796778][ T4747] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 316.832092][T11251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3738'. [ 316.950606][T11261] EXT4-fs (loop3): orphan cleanup on readonly fs [ 316.959155][T11261] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.3743: bg 0: block 248: padding at end of block bitmap is not set [ 316.974380][T11261] Quota error (device loop3): write_blk: dquota write failed [ 316.982913][T11261] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 317.030230][T11261] EXT4-fs (loop3): 1 truncate cleaned up [ 317.035875][T11261] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 317.099512][T11261] EXT4-fs error (device loop3): ext4_lookup:1818: inode #2: comm syz.3.3743: deleted inode referenced: 12 [ 317.246916][ T4747] usb 3-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 317.276582][ T4747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.326126][ T4747] usb 3-1: config 0 descriptor?? [ 317.386948][ T124] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 317.636838][ T124] usb 4-1: Using ep0 maxpacket: 32 [ 317.756894][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.767853][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.777752][ T124] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 317.786620][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.795820][ T124] usb 4-1: config 0 descriptor?? [ 317.837289][ T124] hub 4-1:0.0: USB hub found [ 318.075602][ T124] hub 4-1:0.0: 1 port detected [ 318.428874][T11302] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 318.436560][T11302] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 318.448497][T11302] F2FS-fs (loop4): Found nat_bits in checkpoint [ 318.472990][T11302] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 318.480011][T11302] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 318.576840][ T3457] Bluetooth: hci0: command 0x1003 tx timeout [ 318.582746][ T96] Bluetooth: hci0: sending frame failed (-49) [ 319.267618][ T124] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 319.647117][T11339] Bluetooth: hci1: Frame reassembly failed (-84) [ 319.663046][T11261] EXT4-fs error (device loop3): ext4_lookup:1818: inode #2: comm syz.3.3743: deleted inode referenced: 12 [ 319.676861][ T557] Bluetooth: hci1: Frame reassembly failed (-84) [ 319.687693][T11261] EXT4-fs error (device loop3): ext4_lookup:1818: inode #2: comm syz.3.3743: deleted inode referenced: 12 [ 319.715407][T11261] EXT4-fs error (device loop3): ext4_lookup:1818: inode #2: comm syz.3.3743: deleted inode referenced: 12 [ 319.738675][T11261] EXT4-fs error (device loop3): ext4_lookup:1818: inode #2: comm syz.3.3743: deleted inode referenced: 12 [ 319.859929][T11342] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 319.867769][T11342] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 319.879644][T11342] F2FS-fs (loop4): Found nat_bits in checkpoint [ 319.904458][T11342] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 319.911441][T11342] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 320.108362][T11349] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 320.115420][T11349] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 320.124331][T11349] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 320.132178][T11349] System zones: 1-12 [ 320.136916][T11349] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2221: inode #15: comm syz.4.3772: corrupted in-inode xattr [ 320.148916][T11349] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.3772: couldn't read orphan inode 15 (err -117) [ 320.161344][T11349] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue [ 320.234666][T11356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3774'. [ 320.288348][T11358] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 320.417881][ T372] usb 4-1: USB disconnect, device number 31 [ 320.722212][ T4842] Bluetooth: hci0: command 0x1001 tx timeout [ 320.752987][ T8639] Bluetooth: hci0: sending frame failed (-49) [ 321.007291][T11374] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 321.014960][T11374] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 321.023968][T11364] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 321.031677][T11364] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 321.041171][T11374] F2FS-fs (loop0): Found nat_bits in checkpoint [ 321.048903][T11364] F2FS-fs (loop3): Found nat_bits in checkpoint [ 321.081497][T11374] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 321.084643][T11364] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 321.088449][T11374] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 321.102166][T11364] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 321.116833][T11364] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 321.418643][T11391] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 321.424431][T11394] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3784'. [ 321.425880][T11391] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 321.448437][T11391] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 321.456282][T11391] System zones: 1-12 [ 321.461350][T11391] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2221: inode #15: comm syz.0.3783: corrupted in-inode xattr [ 321.473604][T11391] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.3783: couldn't read orphan inode 15 (err -117) [ 321.485549][T11391] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue [ 321.648498][T11399] EXT4-fs (loop0): orphan cleanup on readonly fs [ 321.655586][T11399] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz.0.3787: bg 0: block 248: padding at end of block bitmap is not set [ 321.670214][T11399] Quota error (device loop0): write_blk: dquota write failed [ 321.677860][T11399] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 321.688358][T11399] EXT4-fs (loop0): 1 truncate cleaned up [ 321.694072][T11399] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 321.696791][ T4842] Bluetooth: hci1: command 0x1003 tx timeout [ 321.706934][T11399] EXT4-fs error (device loop0): ext4_lookup:1818: inode #2: comm syz.0.3787: deleted inode referenced: 12 [ 321.714542][ T8639] Bluetooth: hci1: sending frame failed (-49) [ 321.746844][ T124] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 322.116877][ T124] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 322.125387][ T124] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 322.135304][ T124] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.297065][ T124] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.306044][ T124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.313838][ T124] usb 4-1: Product: syz [ 322.317994][ T124] usb 4-1: Manufacturer: syz [ 322.322385][ T124] usb 4-1: SerialNumber: syz [ 322.646938][ T124] usb 4-1: 0:2 : does not exist [ 322.653529][ T124] usb 4-1: USB disconnect, device number 32 [ 322.660784][ T2751] udevd[2751]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 322.816832][ T4747] Bluetooth: hci0: command 0x1009 tx timeout [ 323.376900][ T372] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 323.616852][ T372] usb 4-1: Using ep0 maxpacket: 16 [ 323.776915][ T107] Bluetooth: hci1: command 0x1001 tx timeout [ 323.782796][ T8639] Bluetooth: hci1: sending frame failed (-49) [ 323.896914][ T372] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 323.905993][ T372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.913782][ T372] usb 4-1: Product: syz [ 323.917841][ T372] usb 4-1: Manufacturer: syz [ 323.922221][ T372] usb 4-1: SerialNumber: syz [ 323.927476][ T372] usb 4-1: config 0 descriptor?? [ 323.967294][ T372] ums-freecom 4-1:0.0: USB Mass Storage device detected [ 324.170231][ T372] usb 4-1: USB disconnect, device number 33 [ 324.639084][T11421] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 324.646644][T11421] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 324.658777][T11421] F2FS-fs (loop4): Found nat_bits in checkpoint [ 324.683448][T11421] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 324.690405][T11421] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 324.726351][ T23] audit: type=1400 audit(1719585613.429:811): avc: denied { module_load } for pid=11429 comm="syz.3.3796" path="/sys/power/wakeup_count" dev="sysfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 324.780225][ T23] audit: type=1400 audit(1719585613.489:812): avc: denied { mounton } for pid=11429 comm="syz.3.3796" path="/proc/11429/task" dev="proc" ino=89010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 325.028284][T11433] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 325.035453][T11433] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 325.044223][T11433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 325.052125][T11433] System zones: 1-12 [ 325.056670][T11433] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2221: inode #15: comm syz.4.3797: corrupted in-inode xattr [ 325.069541][T11433] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.3797: couldn't read orphan inode 15 (err -117) [ 325.081442][T11433] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue [ 325.181539][T11444] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3801'. [ 325.446924][T11453] input: syz1 as /devices/virtual/input/input40 [ 325.856831][ T4747] Bluetooth: hci1: command 0x1009 tx timeout [ 325.886816][ T124] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 326.126789][ T124] usb 4-1: Using ep0 maxpacket: 16 [ 326.288102][T11462] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 326.295839][T11462] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 326.308180][T11462] F2FS-fs (loop4): Found nat_bits in checkpoint [ 326.332669][T11462] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 326.340064][T11462] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 326.407162][ T124] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 326.416464][ T124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.424734][ T124] usb 4-1: Product: syz [ 326.428690][ T124] usb 4-1: Manufacturer: syz [ 326.433065][ T124] usb 4-1: SerialNumber: syz [ 326.438463][ T124] usb 4-1: config 0 descriptor?? [ 326.477399][ T124] ums-freecom 4-1:0.0: USB Mass Storage device detected [ 326.598505][T11472] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 326.609675][T11472] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 326.625509][T11472] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 326.633548][T11472] System zones: 1-12 [ 326.638739][T11472] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2221: inode #15: comm syz.4.3809: corrupted in-inode xattr [ 326.651196][T11472] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.3809: couldn't read orphan inode 15 (err -117) [ 326.663458][T11472] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue [ 326.685055][ T13] usb 4-1: USB disconnect, device number 34 [ 326.708418][T11476] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.715248][T11476] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.723235][T11476] device bridge_slave_0 entered promiscuous mode [ 326.730173][T11476] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.737073][T11476] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.744551][T11476] device bridge_slave_1 entered promiscuous mode [ 326.812934][T11476] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.819926][T11476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.827076][T11476] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.833907][T11476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.866402][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.874528][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.882349][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.890037][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.921795][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.930356][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.937393][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.944757][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.953197][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.960046][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.967307][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.171005][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.193603][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 327.206918][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.227385][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.229651][ T4842] usb 3-1: USB disconnect, device number 29 [ 327.235778][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 327.249571][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 327.288468][T11491] tipc: Started in network mode [ 327.293180][T11491] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 327.303007][T11491] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 327.311218][T11491] tipc: Enabled bearer , priority 10 [ 327.319657][T11491] tipc: Enabling of bearer rejected, failed to enable media [ 327.948735][ T23] audit: type=1400 audit(1719585616.659:813): avc: denied { mount } for pid=11505 comm="syz.0.3819" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 327.971067][ T23] audit: type=1400 audit(1719585616.659:814): avc: denied { unmount } for pid=9545 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 328.048079][ T557] device bridge_slave_1 left promiscuous mode [ 328.054120][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.061466][ T557] device bridge_slave_0 left promiscuous mode [ 328.291759][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.307250][ T18] tipc: 32-bit node address hash set to 1000000 [ 328.391608][T11522] tipc: Started in network mode [ 328.396294][T11522] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 328.405531][T11522] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 328.413586][T11522] tipc: Enabled bearer , priority 10 [ 328.421456][T11522] tipc: Enabling of bearer rejected, failed to enable media [ 328.692320][T11531] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3828'. [ 328.701188][T11531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3828'. [ 328.816843][ T372] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 329.057300][ T372] usb 4-1: Using ep0 maxpacket: 16 [ 329.337082][ T372] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 329.352391][ T372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.372479][ T372] usb 4-1: Product: syz [ 329.376477][ T372] usb 4-1: Manufacturer: syz [ 329.381967][ T372] usb 4-1: SerialNumber: syz [ 329.392227][ T372] usb 4-1: config 0 descriptor?? [ 329.406898][ T18] tipc: 32-bit node address hash set to 1000000 [ 329.447616][ T372] ums-freecom 4-1:0.0: USB Mass Storage device detected [ 329.459709][T11537] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.466791][T11537] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.474481][T11537] device bridge_slave_0 entered promiscuous mode [ 329.483575][T11537] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.490682][T11537] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.498173][T11537] device bridge_slave_1 entered promiscuous mode [ 329.583181][T11537] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.590052][T11537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.597229][T11537] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.604119][T11537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.702228][ T3457] usb 4-1: USB disconnect, device number 35 [ 329.722630][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.730439][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.738037][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.757492][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.765616][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.772461][ T4842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.779982][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.788067][ T4842] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.795589][ T4842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.802833][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.810838][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.825020][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.837026][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 329.851026][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 329.860148][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 329.877603][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 329.885674][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 329.894099][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 329.902709][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 330.401159][T11565] tipc: Enabling of bearer rejected, already enabled [ 330.411261][T11565] tipc: Enabling of bearer rejected, failed to enable media [ 330.725764][T11569] Bluetooth: hci0: Frame reassembly failed (-84) [ 330.737493][ T381] Bluetooth: hci0: Frame reassembly failed (-84) [ 330.744050][ T381] Bluetooth: hci0: Frame reassembly failed (-84) [ 330.899255][ T557] device bridge_slave_1 left promiscuous mode [ 330.905308][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.914790][ T557] device bridge_slave_0 left promiscuous mode [ 330.920969][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.096981][T11582] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3840'. [ 331.106026][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3840'. [ 331.632119][T11598] tipc: Started in network mode [ 331.636877][T11598] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 331.647245][T11598] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 331.655518][T11598] tipc: Enabled bearer , priority 10 [ 331.668437][T11598] tipc: Enabling of bearer rejected, failed to enable media [ 331.737012][ T23] audit: type=1400 audit(1719585620.439:815): avc: denied { write } for pid=11602 comm="syz.1.3852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 331.822033][ T23] audit: type=1400 audit(1719585620.509:816): avc: denied { setopt } for pid=11611 comm="syz.1.3855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 331.886952][ T124] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 332.606538][T11632] tipc: Enabling of bearer rejected, already enabled [ 332.615160][T11632] tipc: Enabling of bearer rejected, failed to enable media [ 332.661856][T11640] tipc: Enabling of bearer rejected, failed to enable media [ 332.716780][ T124] usb 3-1: Using ep0 maxpacket: 16 [ 332.746856][ T18] tipc: 32-bit node address hash set to 1000000 [ 332.747072][ T3457] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 332.817239][ T486] Bluetooth: hci0: command 0x1003 tx timeout [ 332.823566][ T8499] Bluetooth: hci0: sending frame failed (-49) [ 332.996945][ T124] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 333.005844][ T124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.013898][ T124] usb 3-1: Product: syz [ 333.017881][ T124] usb 3-1: Manufacturer: syz [ 333.022254][ T124] usb 3-1: SerialNumber: syz [ 333.027575][ T124] usb 3-1: config 0 descriptor?? [ 333.067357][ T124] ums-freecom 3-1:0.0: USB Mass Storage device detected [ 333.116871][ T3457] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 333.125120][ T3457] usb 2-1: config 179 has no interface number 0 [ 333.131154][ T3457] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 333.142360][ T3457] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 333.153168][ T3457] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 333.163347][ T3457] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 333.176401][ T3457] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 333.185196][ T3457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.206847][T11623] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 333.270240][ T124] usb 3-1: USB disconnect, device number 30 [ 333.843635][ T23] audit: type=1326 audit(1719585622.549:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d8732b99 code=0x7ffc0000 [ 333.867206][ T23] audit: type=1326 audit(1719585622.549:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d8732b99 code=0x7ffc0000 [ 333.887294][T11673] tipc: Enabling of bearer rejected, failed to enable media [ 333.890744][ T23] audit: type=1326 audit(1719585622.579:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f54d8732b99 code=0x7ffc0000 [ 333.921677][ T23] audit: type=1326 audit(1719585622.579:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d8732b99 code=0x7ffc0000 [ 333.949710][ T23] audit: type=1326 audit(1719585622.579:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d8732b99 code=0x7ffc0000 [ 333.973275][ T23] audit: type=1326 audit(1719585622.579:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f54d8732b99 code=0x7ffc0000 [ 333.997194][ T23] audit: type=1326 audit(1719585622.579:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d8732b99 code=0x7ffc0000 [ 334.023866][ T23] audit: type=1326 audit(1719585622.579:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d8732b99 code=0x7ffc0000 [ 334.048988][ T23] audit: type=1326 audit(1719585622.579:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54d8732b99 code=0x7ffc0000 [ 334.072644][ T23] audit: type=1326 audit(1719585622.579:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d8732b99 code=0x7ffc0000 [ 334.671055][T11704] tipc: Enabling of bearer rejected, failed to enable media [ 334.899318][T11709] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3888'. [ 334.908179][T11709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3888'. [ 334.924810][ T107] Bluetooth: hci0: command 0x1001 tx timeout [ 335.057386][ T124] usb 2-1: USB disconnect, device number 32 [ 335.083707][ T8499] Bluetooth: hci0: sending frame failed (-49) [ 335.202214][T11730] tipc: Enabling of bearer rejected, failed to enable media [ 335.936960][ T3457] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 336.016572][T11764] tipc: Enabling of bearer rejected, failed to enable media [ 336.238730][T11769] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 336.297074][ T3457] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 336.310327][ T3457] usb 3-1: config 179 has no interface number 0 [ 336.318451][ T3457] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 336.329491][ T3457] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 336.340314][ T3457] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 336.350534][ T3457] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 336.363768][ T3457] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 336.373021][ T3457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.396895][T11743] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 336.653829][T11777] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3914'. [ 336.662690][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3914'. [ 336.928032][T11786] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 336.935746][T11786] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 336.945840][T11786] F2FS-fs (loop0): invalid crc value [ 336.952423][T11786] F2FS-fs (loop0): Found nat_bits in checkpoint [ 336.977703][T11786] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 336.984594][T11786] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 337.136776][ T3457] Bluetooth: hci0: command 0x1009 tx timeout [ 337.270750][T11786] attempt to access beyond end of device [ 337.270750][T11786] loop0: rw=2049, want=40432, limit=40427 [ 337.615131][T11801] input: syz1 as /devices/virtual/input/input41 [ 338.375114][ T4842] usb 3-1: USB disconnect, device number 31 [ 338.442843][T11823] EXT4-fs error (device loop2): ext4_orphan_get:1260: comm syz.2.3929: bad orphan inode 15 [ 338.452970][T11823] ext4_test_bit(bit=14, block=18) = 1 [ 338.458200][T11823] is_bad_inode(inode)=0 [ 338.462142][T11823] NEXT_ORPHAN(inode)=1023 [ 338.466373][T11823] max_ino=32 [ 338.469361][T11823] i_nlink=0 [ 338.472515][T11823] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2930: inode #15: comm syz.2.3929: corrupted xattr block 19 [ 338.484846][T11823] EXT4-fs warning (device loop2): ext4_evict_inode:321: xattr delete (err -117) [ 338.494054][T11823] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 338.503207][T11823] ext4 filesystem being mounted at /root/syzkaller.TD4pA7/21/bus supports timestamps until 2038 (0x7fffffff) [ 338.520033][T11823] EXT4-fs warning (device loop2): ext4_empty_dir:3004: inode #12: comm syz.2.3929: directory missing '.' [ 338.531164][T11823] EXT4-fs warning (device loop2): ext4_rmdir:3274: inode #12: comm syz.2.3929: empty directory 'file0' has too many links (3) [ 339.067475][T11853] EXT4-fs error (device loop0): ext4_orphan_get:1260: comm syz.0.3940: bad orphan inode 15 [ 339.086948][T11853] ext4_test_bit(bit=14, block=18) = 1 [ 339.092229][T11853] is_bad_inode(inode)=0 [ 339.096392][T11853] NEXT_ORPHAN(inode)=1023 [ 339.126796][T11853] max_ino=32 [ 339.129809][T11853] i_nlink=0 [ 339.137482][T11853] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2930: inode #15: comm syz.0.3940: corrupted xattr block 19 [ 339.167047][T11853] EXT4-fs warning (device loop0): ext4_evict_inode:321: xattr delete (err -117) [ 339.175908][T11853] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 339.216205][T11853] ext4 filesystem being mounted at /root/syzkaller.vDjubO/185/bus supports timestamps until 2038 (0x7fffffff) [ 339.251440][T11853] EXT4-fs warning (device loop0): ext4_empty_dir:3004: inode #12: comm syz.0.3940: directory missing '.' [ 339.271408][T11853] EXT4-fs warning (device loop0): ext4_rmdir:3274: inode #12: comm syz.0.3940: empty directory 'file0' has too many links (3) [ 339.293678][T11854] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c118, mo2=0002] [ 339.302611][T11854] System zones: 0-1, 3-12 [ 339.307731][T11854] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,journal_dev=0x0000000000000009,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,barrier,acl,debug,,errors=continue [ 339.432833][T11869] FAT-fs (loop0): Directory bread(block 64) failed [ 339.442441][ T9675] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2815: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 339.459643][T11869] FAT-fs (loop0): Directory bread(block 65) failed [ 339.466038][T11869] FAT-fs (loop0): Directory bread(block 66) failed [ 339.472554][T11869] FAT-fs (loop0): Directory bread(block 67) failed [ 339.481118][T11869] FAT-fs (loop0): Directory bread(block 68) failed [ 339.487907][T11869] FAT-fs (loop0): Directory bread(block 69) failed [ 339.494425][T11869] FAT-fs (loop0): Directory bread(block 70) failed [ 339.501027][T11869] FAT-fs (loop0): Directory bread(block 71) failed [ 339.517022][T11869] FAT-fs (loop0): Directory bread(block 72) failed [ 339.523348][T11869] FAT-fs (loop0): Directory bread(block 73) failed [ 339.733015][T11874] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3944'. [ 340.114560][ T23] kauditd_printk_skb: 169 callbacks suppressed [ 340.114569][ T23] audit: type=1400 audit(1719585628.819:996): avc: denied { bind } for pid=11890 comm="syz.2.3951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 340.343878][T11897] EXT4-fs error (device loop0): ext4_orphan_get:1260: comm syz.0.3954: bad orphan inode 15 [ 340.353953][T11897] ext4_test_bit(bit=14, block=18) = 1 [ 340.359203][T11897] is_bad_inode(inode)=0 [ 340.363154][T11897] NEXT_ORPHAN(inode)=1023 [ 340.367389][T11897] max_ino=32 [ 340.370340][T11897] i_nlink=0 [ 340.373468][T11897] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2930: inode #15: comm syz.0.3954: corrupted xattr block 19 [ 340.385695][T11897] EXT4-fs warning (device loop0): ext4_evict_inode:321: xattr delete (err -117) [ 340.394593][T11897] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 340.403364][T11897] ext4 filesystem being mounted at /root/syzkaller.vDjubO/188/bus supports timestamps until 2038 (0x7fffffff) [ 340.420986][T11897] EXT4-fs warning (device loop0): ext4_empty_dir:3004: inode #12: comm syz.0.3954: directory missing '.' [ 340.432125][T11897] EXT4-fs warning (device loop0): ext4_rmdir:3274: inode #12: comm syz.0.3954: empty directory 'file0' has too many links (3) [ 340.436795][ T124] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 340.534116][T11901] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.541704][T11901] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.553057][T11901] device bridge_slave_0 entered promiscuous mode [ 340.559880][T11901] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.567752][T11901] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.575277][T11901] device bridge_slave_1 entered promiscuous mode [ 340.687346][T11901] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.694278][T11901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.701445][T11901] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.708338][T11901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.745659][ T486] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.753987][T11925] EXT4-fs (loop4): Ignoring removed oldalloc option [ 340.765002][ T486] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.771685][T11925] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 340.779532][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.787567][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.809030][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.817189][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.824012][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.831561][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.840935][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.847900][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.874268][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.898596][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.907282][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.924590][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.048109][T11932] Bluetooth: hci1: Frame reassembly failed (-84) [ 341.057134][ T124] usb 3-1: New USB device found, idVendor=286a, idProduct=dd2d, bcdDevice=93.7e [ 341.135370][ T9011] Bluetooth: hci1: Frame reassembly failed (-84) [ 341.147025][ T124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.173462][ T124] usb 3-1: Product: syz [ 341.182787][ T124] usb 3-1: Manufacturer: syz [ 341.188110][ T124] usb 3-1: SerialNumber: syz [ 341.208361][ T124] usb 3-1: config 0 descriptor?? [ 341.247229][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 341.259837][ T124] usb-storage 3-1:0.0: USB Mass Storage device detected [ 341.273254][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 341.282970][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 341.298908][ T9011] tipc: Disabling bearer [ 341.304146][ T9011] tipc: Left network mode [ 341.579250][ T124] usb 3-1: USB disconnect, device number 32 [ 341.918279][T11948] loop3: p1 < > p4 [ 341.923144][T11948] loop3: p4 size 8388608 extends beyond EOD, truncated [ 341.956566][ T23] audit: type=1400 audit(1719585630.659:997): avc: denied { mounton } for pid=11947 comm="syz.3.3969" path="/dev/loop3p1" dev="devtmpfs" ino=93115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 342.057531][ T9011] device bridge_slave_1 left promiscuous mode [ 342.068929][ T9011] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.084608][ T9011] device bridge_slave_0 left promiscuous mode [ 342.091245][ T9011] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.379368][T11972] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3975'. [ 342.388232][T11972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3975'. [ 342.443780][ T3457] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 342.456890][T11969] EXT4-fs (loop4): Ignoring removed oldalloc option [ 342.466968][T11969] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 342.706783][ T3457] usb 4-1: Using ep0 maxpacket: 16 [ 342.715107][T11978] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 342.723054][T11978] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 342.733750][T11978] F2FS-fs (loop4): invalid crc value [ 342.740754][T11978] F2FS-fs (loop4): Found nat_bits in checkpoint [ 342.766400][T11978] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 342.773364][T11978] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 342.827021][ T3457] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.076821][ T3457] usb 4-1: language id specifier not provided by device, defaulting to English [ 343.129307][T11978] attempt to access beyond end of device [ 343.129307][T11978] loop4: rw=2049, want=40432, limit=40427 [ 343.140768][ T107] Bluetooth: hci1: command 0x1003 tx timeout [ 343.146594][ T96] Bluetooth: hci1: sending frame failed (-49) [ 343.152037][T11990] netlink: 'syz.1.3981': attribute type 4 has an invalid length. [ 343.164209][T11990] netlink: 'syz.1.3981': attribute type 4 has an invalid length. [ 343.308059][T11998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11998 comm=syz.2.3986 [ 343.345813][ T23] audit: type=1400 audit(1719585632.049:998): avc: denied { create } for pid=11997 comm="syz.2.3986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 343.396854][ T3457] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.40 [ 343.405701][ T3457] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.426772][ T3457] usb 4-1: Product: syz [ 343.430740][ T3457] usb 4-1: SerialNumber: syz [ 343.477457][ T3457] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 343.560120][ T381] Bluetooth: hci0: Frame reassembly failed (-84) [ 343.706850][ T107] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 343.726034][ T3457] usb 4-1: USB disconnect, device number 36 [ 343.896944][T12009] FAT-fs (loop1): Directory bread(block 64) failed [ 343.903275][T12009] FAT-fs (loop1): Directory bread(block 65) failed [ 343.909677][T12009] FAT-fs (loop1): Directory bread(block 66) failed [ 343.915934][T12009] FAT-fs (loop1): Directory bread(block 67) failed [ 343.922357][T12009] FAT-fs (loop1): Directory bread(block 68) failed [ 343.929291][T12009] FAT-fs (loop1): Directory bread(block 69) failed [ 343.935631][T12009] FAT-fs (loop1): Directory bread(block 70) failed [ 343.942164][T12009] FAT-fs (loop1): Directory bread(block 71) failed [ 343.948521][T12009] FAT-fs (loop1): Directory bread(block 72) failed [ 343.954792][T12009] FAT-fs (loop1): Directory bread(block 73) failed [ 344.073628][T12012] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3990'. [ 344.087004][ T107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.097792][ T107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.107421][ T107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 344.118078][ T107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 344.127546][ T107] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 344.140244][ T107] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 344.149159][ T107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.157618][ T107] usb 3-1: config 0 descriptor?? [ 344.353377][T12014] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 344.363308][T12014] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 344.598045][T12019] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 344.605700][T12019] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 344.616588][T12019] F2FS-fs (loop3): invalid crc value [ 344.623510][T12019] F2FS-fs (loop3): Found nat_bits in checkpoint [ 344.647008][ T107] ntrig 0003:1B96:000A.002B: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 344.661776][T12019] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 344.670310][T12019] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 344.788865][T12029] 9pnet: p9_errstr2errno: server reported unknown error [ 344.838007][T12034] netlink: 'syz.1.3997': attribute type 4 has an invalid length. [ 344.850000][T12034] netlink: 'syz.1.3997': attribute type 4 has an invalid length. [ 344.921647][ T107] usb 3-1: USB disconnect, device number 33 [ 344.987326][T12019] attempt to access beyond end of device [ 344.987326][T12019] loop3: rw=2049, want=40432, limit=40427 [ 345.216777][ T107] Bluetooth: hci1: command 0x1001 tx timeout [ 345.222663][ T8639] Bluetooth: hci1: sending frame failed (-49) [ 345.538409][T12048] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 345.598170][T12048] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 345.742157][ T107] Bluetooth: hci0: command 0x1003 tx timeout [ 345.758927][ T381] Bluetooth: hci0: Frame reassembly failed (-84) [ 345.830340][T12056] FAT-fs (loop1): Directory bread(block 64) failed [ 345.838775][T12056] FAT-fs (loop1): Directory bread(block 65) failed [ 345.845255][T12056] FAT-fs (loop1): Directory bread(block 66) failed [ 345.851705][T12056] FAT-fs (loop1): Directory bread(block 67) failed [ 345.858198][T12056] FAT-fs (loop1): Directory bread(block 68) failed [ 345.864727][T12054] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 345.864738][T12056] FAT-fs (loop1): Directory bread(block 69) failed [ 345.864787][T12056] FAT-fs (loop1): Directory bread(block 70) failed [ 345.885389][T12056] FAT-fs (loop1): Directory bread(block 71) failed [ 345.891801][T12056] FAT-fs (loop1): Directory bread(block 72) failed [ 345.898139][T12056] FAT-fs (loop1): Directory bread(block 73) failed [ 345.959377][T12060] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c118, mo2=0002] [ 345.967582][T12060] System zones: 0-1, 3-12 [ 345.972313][T12060] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,journal_dev=0x0000000000000009,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,barrier,acl,debug,,errors=continue [ 346.059523][T12064] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4005'. [ 346.119196][T12068] 9pnet: p9_errstr2errno: server reported unknown error [ 346.138325][T12070] netlink: 'syz.2.4008': attribute type 4 has an invalid length. [ 346.149961][T12070] netlink: 'syz.2.4008': attribute type 4 has an invalid length. [ 346.204748][T12075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12075 comm=syz.2.4010 [ 346.394976][T12086] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 346.404606][T12086] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 346.507831][ T23] audit: type=1326 audit(1719585635.219:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12088 comm="syz.3.4016" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f558d113b99 code=0x0 [ 346.583642][T12091] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 346.669692][T12091] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c118, mo2=0002] [ 346.677707][T12091] System zones: 0-1, 3-12 [ 346.682380][T12091] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,journal_dev=0x0000000000000009,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,barrier,acl,debug,,errors=continue [ 346.757717][T12103] 9pnet: p9_errstr2errno: server reported unknown error [ 346.789244][T12106] netlink: 'syz.1.4020': attribute type 4 has an invalid length. [ 346.803252][T12106] netlink: 'syz.1.4020': attribute type 4 has an invalid length. [ 346.914861][ T23] audit: type=1400 audit(1719585635.619:1000): avc: denied { wake_alarm } for pid=12121 comm="syz.1.4027" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 347.290588][T12124] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 347.298316][ T3457] Bluetooth: hci1: command 0x1009 tx timeout [ 347.299085][T12124] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 347.314339][T12124] F2FS-fs (loop1): invalid crc value [ 347.320900][T12124] F2FS-fs (loop1): Found nat_bits in checkpoint [ 347.355169][T12131] PF_BRIDGE: br_mdb_parse() with invalid entry [ 347.361797][ T23] audit: type=1400 audit(1719585636.069:1001): avc: denied { shutdown } for pid=12130 comm="syz.3.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 347.383393][T12124] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 347.390300][T12124] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 347.429610][T12137] 9pnet: p9_errstr2errno: server reported unknown error [ 347.722336][T12143] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4032'. [ 347.731288][T12143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4032'. [ 347.790449][ T107] Bluetooth: hci0: command 0x1001 tx timeout [ 347.811672][ T8639] Bluetooth: hci0: sending frame failed (-49) [ 347.877419][ T7] attempt to access beyond end of device [ 347.877419][ T7] loop1: rw=1, want=45104, limit=40427 [ 348.013681][ T23] audit: type=1326 audit(1719585636.719:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12159 comm="syz.2.4040" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c6cb53b99 code=0x0 [ 348.125422][T12165] PF_BRIDGE: br_mdb_parse() with invalid entry [ 348.689823][T12179] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 348.697473][T12179] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 348.707586][T12179] F2FS-fs (loop3): invalid crc value [ 348.714020][T12179] F2FS-fs (loop3): Found nat_bits in checkpoint [ 348.739308][T12179] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 348.746209][T12179] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 349.053379][T12179] attempt to access beyond end of device [ 349.053379][T12179] loop3: rw=2049, want=40432, limit=40427 [ 349.641189][ T23] audit: type=1400 audit(1719585638.349:1003): avc: denied { bind } for pid=12224 comm="syz.1.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 349.766023][ T23] audit: type=1326 audit(1719585638.469:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.1.4066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2e27b99 code=0x7ffc0000 [ 349.847904][ T23] audit: type=1326 audit(1719585638.499:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.1.4066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1df2e27b99 code=0x7ffc0000 [ 349.872139][ T3457] Bluetooth: hci0: command 0x1009 tx timeout [ 349.911900][ T23] audit: type=1326 audit(1719585638.499:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.1.4066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2e27b99 code=0x7ffc0000 [ 349.936215][ T23] audit: type=1326 audit(1719585638.499:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.1.4066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1df2e27b99 code=0x7ffc0000 [ 349.974971][ T23] audit: type=1326 audit(1719585638.499:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.1.4066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2e27b99 code=0x7ffc0000 [ 350.712335][T12284] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 350.829783][T12289] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.837116][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.088392][T12289] device bridge_slave_0 entered promiscuous mode [ 351.098283][T12289] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.105211][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.117468][T12289] device bridge_slave_1 entered promiscuous mode [ 351.241928][T12289] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.248802][T12289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.255944][T12289] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.262783][T12289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.326435][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.335196][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.343697][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 351.351545][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.486890][T12320] Bluetooth: hci1: Frame reassembly failed (-84) [ 351.512643][ T7] Bluetooth: hci1: Frame reassembly failed (-84) [ 351.519468][ T7] Bluetooth: hci1: Frame reassembly failed (-84) [ 351.577225][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.650171][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.666037][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.678134][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.691868][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.892233][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.900652][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.910958][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.919722][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 352.087893][T12332] loop0: p1 < > p4 [ 352.093456][T12332] loop0: p4 size 8388608 extends beyond EOD, truncated [ 352.134056][ T162] loop0: p1 < > p4 [ 352.136332][T12340] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4107'. [ 352.147142][ T162] loop0: p4 size 8388608 extends beyond EOD, truncated [ 352.227734][ T7] device veth3 left promiscuous mode [ 352.234010][ T7] bridge0: port 3(veth3) entered disabled state [ 352.244385][ T7] device bridge_slave_1 left promiscuous mode [ 352.250941][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.260597][ T7] device bridge_slave_0 left promiscuous mode [ 352.266695][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.537372][ T4747] Bluetooth: hci1: command 0x1003 tx timeout [ 353.543647][ T8639] Bluetooth: hci1: sending frame failed (-49) [ 353.578139][T12408] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue [ 353.925268][ T7] tipc: Disabling bearer [ 353.930451][ T7] tipc: Left network mode [ 353.949865][T12414] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.956868][T12414] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.964058][T12414] device bridge_slave_0 entered promiscuous mode [ 353.971368][T12414] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.978232][T12414] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.985464][T12414] device bridge_slave_1 entered promiscuous mode [ 354.031664][T12414] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.038530][T12414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.045721][T12414] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.052616][T12414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.075381][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.083205][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.090811][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.107461][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.115477][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.122770][ T4747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.131160][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.139487][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.146311][ T4747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.157105][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.177097][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 354.185302][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.193867][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.209956][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 354.222797][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 354.234438][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.522024][T12433] fuse: Bad value for 'fd' [ 354.668529][T12435] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4144'. [ 354.697302][ T7] device bridge_slave_1 left promiscuous mode [ 354.703723][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.711352][ T7] device bridge_slave_0 left promiscuous mode [ 354.717541][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.375469][T12475] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 355.384709][T12475] ext4 filesystem being mounted at /root/syzkaller.EelXvy/6/file0 supports timestamps until 2038 (0x7fffffff) [ 355.399897][T12475] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 355.408147][T12475] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 355.422116][T12475] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 355.430525][T12475] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 355.458001][T12414] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /root/syzkaller.EelXvy/6/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 355.480693][T12414] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /root/syzkaller.EelXvy/6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 355.503555][T12414] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /root/syzkaller.EelXvy/6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 355.527159][T12414] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /root/syzkaller.EelXvy/6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 355.549712][T12414] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /root/syzkaller.EelXvy/6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 355.627463][ T3457] Bluetooth: hci1: command 0x1001 tx timeout [ 355.633304][ T96] Bluetooth: hci1: sending frame failed (-49) [ 355.639655][T12414] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.EelXvy/6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 355.733856][T12492] fuse: Bad value for 'fd' [ 356.063949][ T23] kauditd_printk_skb: 44 callbacks suppressed [ 356.063959][ T23] audit: type=1326 audit(1719585644.769:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.1.4178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1df2e27b99 code=0x0 [ 356.326296][T12519] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 356.335731][T12519] ext4 filesystem being mounted at /root/syzkaller.HAI85e/8/bus supports timestamps until 2038 (0x7fffffff) [ 357.109349][T12529] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.116200][T12529] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.123932][T12529] device bridge_slave_0 entered promiscuous mode [ 357.136102][T12529] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.143499][T12529] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.151030][T12529] device bridge_slave_1 entered promiscuous mode [ 357.233947][T12529] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.240829][T12529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.247931][T12529] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.254675][T12529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.327738][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.335078][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.343345][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 357.362144][T12542] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue [ 357.387476][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.407458][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 357.435254][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 357.453652][T12537] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.460871][T12537] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.470303][T12537] device bridge_slave_0 entered promiscuous mode [ 357.483642][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 357.493246][T12537] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.500115][T12537] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.507795][T12537] device bridge_slave_1 entered promiscuous mode [ 357.514665][ T7] device bridge_slave_1 left promiscuous mode [ 357.520833][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.528034][ T7] device bridge_slave_0 left promiscuous mode [ 357.567108][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.701255][ T3457] Bluetooth: hci1: command 0x1009 tx timeout [ 357.756101][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 357.764622][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 357.773238][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 357.843923][T12537] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.850786][T12537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.857924][T12537] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.864654][T12537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.873260][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.884784][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.918167][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 357.925922][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.941584][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 357.950359][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.958692][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.965544][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.986591][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 357.995477][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 358.003526][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.010463][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.023580][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 358.031943][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.091432][T12559] fuse: Bad value for 'fd' [ 358.287558][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.295707][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.314916][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 358.323324][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.338625][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.346321][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.356108][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.364713][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.395788][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.404521][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.424011][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.432699][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.522261][T12569] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 358.531135][T12569] ext4 filesystem being mounted at /root/syzkaller.TD4pA7/116/bus supports timestamps until 2038 (0x7fffffff) [ 358.628259][T12582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4198'. [ 359.198561][T12608] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 359.207423][T12608] ext4 filesystem being mounted at /root/syzkaller.jp5EdK/11/file0 supports timestamps until 2038 (0x7fffffff) [ 359.225340][T12608] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 359.233707][T12608] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 359.259335][T12608] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 359.268171][T12608] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 359.281514][T12529] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /root/syzkaller.jp5EdK/11/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 359.307617][T12529] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /root/syzkaller.jp5EdK/11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 359.330685][T12529] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /root/syzkaller.jp5EdK/11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 359.354628][T12529] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /root/syzkaller.jp5EdK/11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 359.384089][T12529] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /root/syzkaller.jp5EdK/11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 359.406711][T12529] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.jp5EdK/11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 359.563967][T12620] fuse: Bad value for 'fd' [ 360.332947][ T23] audit: type=1400 audit(1719585649.039:1054): avc: denied { lock } for pid=12632 comm="syz.2.4218" path="socket:[98846]" dev="sockfs" ino=98846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 360.365185][T12633] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4218'. [ 360.752282][T12644] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 360.761212][T12644] ext4 filesystem being mounted at /root/syzkaller.TD4pA7/123/bus supports timestamps until 2038 (0x7fffffff) [ 360.900642][T12651] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.908295][T12651] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.105227][T12651] device bridge_slave_0 entered promiscuous mode [ 361.112715][T12651] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.119893][T12651] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.127334][T12651] device bridge_slave_1 entered promiscuous mode [ 361.189074][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 361.196438][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 361.205718][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 361.213897][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 361.222142][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.228997][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.236476][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 361.246412][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 361.254625][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 361.262862][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.269712][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.287431][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 361.295257][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 361.310561][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 361.327769][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 361.335582][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 361.350375][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 361.363129][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.480634][ T7] device bridge_slave_1 left promiscuous mode [ 361.496869][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.506130][ T7] device bridge_slave_0 left promiscuous mode [ 361.512221][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.694673][T12668] fuse: Bad value for 'fd' [ 361.862483][T12675] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4230'. [ 361.974206][T12662] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.981456][T12662] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.048374][T12662] device bridge_slave_0 entered promiscuous mode [ 362.110269][T12662] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.119121][T12662] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.126624][T12662] device bridge_slave_1 entered promiscuous mode [ 362.222617][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.230103][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.241982][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.250386][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.258857][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.265681][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.273303][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 362.306710][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.335264][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.350599][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.357482][ T486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.381199][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 362.389589][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 362.404548][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 362.440073][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 362.486436][T12698] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 362.496962][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 362.508816][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 362.517462][T12698] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 362.535133][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 362.549166][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 362.557263][T12698] System zones: 0-1, 15-15, 18-18, 34-34 [ 362.563296][T12698] EXT4-fs (loop2): orphan cleanup on readonly fs [ 362.601120][T12698] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 362.662799][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 362.676419][T12703] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 362.686052][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 362.695193][T12703] ext4 filesystem being mounted at /root/syzkaller.fDRetF/4/bus supports timestamps until 2038 (0x7fffffff) [ 362.698626][T12698] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 362.740010][T12698] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 362.749603][T12698] EXT4-fs error (device loop2): ext4_orphan_get:1260: comm syz.2.4238: bad orphan inode 16 [ 362.759740][T12698] ext4_test_bit(bit=15, block=18) = 1 [ 362.764945][T12698] is_bad_inode(inode)=0 [ 362.769433][T12698] NEXT_ORPHAN(inode)=0 [ 362.773423][T12698] max_ino=32 [ 362.776361][T12698] i_nlink=2 [ 362.779627][T12698] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 362.820163][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 362.828796][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 362.841603][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 362.847304][T12698] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 362.849819][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 363.516464][T12736] fuse: Bad value for 'fd' [ 363.817870][T12740] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 363.825677][T12740] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 363.834907][T12740] System zones: 0-1, 15-15, 18-18, 34-34 [ 363.843341][ T23] audit: type=1400 audit(1719585652.549:1055): avc: denied { create } for pid=12744 comm="syz.1.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 363.847340][T12740] EXT4-fs (loop2): orphan cleanup on readonly fs [ 363.869337][T12740] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 363.869356][T12740] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 363.869361][T12740] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 363.877802][T12740] EXT4-fs error (device loop2): ext4_orphan_get:1260: comm syz.2.4251: bad orphan inode 16 [ 363.910023][T12740] ext4_test_bit(bit=15, block=18) = 1 [ 363.910027][T12740] is_bad_inode(inode)=0 [ 363.910030][T12740] NEXT_ORPHAN(inode)=0 [ 363.910032][T12740] max_ino=32 [ 363.910035][T12740] i_nlink=2 [ 363.910061][T12740] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 363.927397][T12740] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 364.118755][ T7] device bridge_slave_1 left promiscuous mode [ 364.124754][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.160273][ T7] device bridge_slave_0 left promiscuous mode [ 364.166282][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.492736][T12763] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 364.509794][T12763] ext4 filesystem being mounted at /root/syzkaller.HAI85e/21/bus supports timestamps until 2038 (0x7fffffff) [ 365.063591][T12781] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 365.071450][T12781] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 365.081340][T12781] System zones: 0-1, 15-15, 18-18, 34-34 [ 365.114496][T12781] EXT4-fs (loop1): orphan cleanup on readonly fs [ 365.137527][T12781] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 365.158505][T12781] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 365.186786][T12781] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 365.194744][T12781] EXT4-fs error (device loop1): ext4_orphan_get:1260: comm syz.1.4264: bad orphan inode 16 [ 365.204810][T12781] ext4_test_bit(bit=15, block=18) = 1 [ 365.210314][T12781] is_bad_inode(inode)=0 [ 365.306858][T12781] NEXT_ORPHAN(inode)=0 [ 365.319002][T12781] max_ino=32 [ 365.326021][T12781] i_nlink=2 [ 365.340546][T12781] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 365.463610][T12781] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 365.484070][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 365.559077][T12812] EXT4-fs (loop1): 1 orphan inode deleted [ 365.564646][T12812] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 365.573475][T12812] ext4 filesystem being mounted at /root/syzkaller.H5V4GT/20/file0 supports timestamps until 2038 (0x7fffffff) [ 365.588639][ T18] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 365.605015][T12812] EXT4-fs error (device loop1): ext4_resize_begin:61: comm syz.1.4276: resize_inode disabled but reserved GDT blocks non-zero [ 365.624050][T12537] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /root/syzkaller.H5V4GT/20/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=4096 fake=0 [ 365.648296][T12537] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 365.658733][T12537] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 365.816814][T12820] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 365.825935][T12820] ext4 filesystem being mounted at /root/syzkaller.TD4pA7/136/bus supports timestamps until 2038 (0x7fffffff) [ 365.924521][T12825] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.931429][T12825] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.938974][T12825] device bridge_slave_0 entered promiscuous mode [ 365.948286][T12825] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.955190][T12825] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.177678][ T18] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.192589][T12825] device bridge_slave_1 entered promiscuous mode [ 366.262597][ T18] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.272383][ T18] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 366.281801][ T18] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.291505][ T18] usb 4-1: config 0 descriptor?? [ 366.302766][T12825] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.309650][T12825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.316764][T12825] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.323512][T12825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.351158][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.359699][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.368778][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.380940][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.389530][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.396371][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.412644][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.421064][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.427999][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.445782][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.453767][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.477283][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.494259][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.512782][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 366.531609][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.545195][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 366.646831][ T18] usbhid 4-1:0.0: can't add hid device: -71 [ 366.652613][ T18] usbhid: probe of 4-1:0.0 failed with error -71 [ 366.662462][ T18] usb 4-1: USB disconnect, device number 37 [ 366.707165][ T9] device bridge_slave_1 left promiscuous mode [ 366.713522][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.735515][ T9] device bridge_slave_0 left promiscuous mode [ 366.756922][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.787951][T12841] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 366.812927][T12841] FAT-fs (loop2): Filesystem has been set read-only [ 366.970230][T12841] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 367.097822][T12849] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 367.105681][T12849] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 367.114082][T12849] System zones: 0-1, 15-15, 18-18, 34-34 [ 367.120866][T12849] EXT4-fs (loop2): orphan cleanup on readonly fs [ 367.128318][T12849] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 367.138271][T12849] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 367.153647][T12849] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 367.161398][T12849] EXT4-fs error (device loop2): ext4_orphan_get:1260: comm syz.2.4285: bad orphan inode 16 [ 367.171522][T12849] ext4_test_bit(bit=15, block=18) = 1 [ 367.176712][T12849] is_bad_inode(inode)=0 [ 367.181106][T12849] NEXT_ORPHAN(inode)=0 [ 367.185058][T12849] max_ino=32 [ 367.188138][T12849] i_nlink=2 [ 367.191083][T12849] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 367.222700][T12849] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 367.250845][T12862] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 367.268692][T12862] EXT4-fs error (device loop4): ext4_orphan_get:1236: inode #17: comm syz.4.4289: iget: bad i_size value: -6917529027641081756 [ 367.282126][T12862] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.4289: couldn't read orphan inode 17 (err -117) [ 367.294645][T12862] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 367.314446][T12862] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.4289: bg 0: block 65: padding at end of block bitmap is not set [ 367.328883][T12862] Quota error (device loop4): write_blk: dquota write failed [ 367.336164][T12862] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 367.590434][ T107] Bluetooth: hci0: command 0x1003 tx timeout [ 367.623871][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 367.633718][T12873] input: syz0 as /devices/virtual/input/input42 [ 367.668685][T12876] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 367.677677][T12876] ext4 filesystem being mounted at /root/syzkaller.rqDaIr/2/bus supports timestamps until 2038 (0x7fffffff) [ 367.698059][T12873] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 367.740235][T12873] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 367.749206][T12873] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a802c01c, mo2=0002] [ 367.757779][T12873] System zones: 0-2, 18-18, 34-34 [ 367.763475][T12873] EXT4-fs error (device loop4): ext4_orphan_get:1260: comm syz.4.4291: bad orphan inode 15 [ 367.773865][T12873] ext4_test_bit(bit=14, block=18) = 1 [ 367.780389][T12873] is_bad_inode(inode)=0 [ 367.784573][T12873] NEXT_ORPHAN(inode)=2264924160 [ 367.789262][T12873] max_ino=32 [ 367.789273][T12873] i_nlink=0 [ 367.789313][T12873] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 367.789585][T12873] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.4291: bg 0: block 80: padding at end of block bitmap is not set [ 367.789701][T12873] EXT4-fs error (device loop4) in ext4_free_blocks:5019: Corrupt filesystem [ 367.833419][T12873] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue [ 368.101314][T12888] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 368.111083][T12888] FAT-fs (loop3): Filesystem has been set read-only [ 368.117964][T12888] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 368.506773][ T18] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 368.660763][T12907] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 368.681478][T12907] EXT4-fs error (device loop1): ext4_orphan_get:1236: inode #17: comm syz.1.4301: iget: bad i_size value: -6917529027641081756 [ 368.694887][T12907] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.4301: couldn't read orphan inode 17 (err -117) [ 368.707479][T12907] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 368.727344][T12907] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.4301: bg 0: block 65: padding at end of block bitmap is not set [ 368.741788][T12907] Quota error (device loop1): write_blk: dquota write failed [ 368.749396][T12907] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 368.915930][ T18] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.927063][ T18] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.936893][ T18] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 368.945748][ T18] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.954496][ T18] usb 3-1: config 0 descriptor?? [ 369.043688][T12914] netlink: 'syz.1.4302': attribute type 4 has an invalid length. [ 369.072355][T12914] netlink: 'syz.1.4302': attribute type 4 has an invalid length. [ 369.288229][T12928] input: syz0 as /devices/virtual/input/input43 [ 369.303406][T12925] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 369.314711][T12925] FAT-fs (loop3): Filesystem has been set read-only [ 369.322082][T12925] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 369.338095][T12928] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 369.348181][T12928] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 369.357719][T12928] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a802c01c, mo2=0002] [ 369.368188][T12928] System zones: 0-2, 18-18, 34-34 [ 369.373981][T12928] EXT4-fs error (device loop4): ext4_orphan_get:1260: comm syz.4.4308: bad orphan inode 15 [ 369.384212][T12928] ext4_test_bit(bit=14, block=18) = 1 [ 369.389610][T12928] is_bad_inode(inode)=0 [ 369.393528][T12928] NEXT_ORPHAN(inode)=2264924160 [ 369.398408][T12928] max_ino=32 [ 369.401505][T12928] i_nlink=0 [ 369.404648][T12928] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 369.418834][ T18] usbhid 3-1:0.0: can't add hid device: -71 [ 369.425366][T12928] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.4308: bg 0: block 80: padding at end of block bitmap is not set [ 369.440495][T12928] EXT4-fs error (device loop4) in ext4_free_blocks:5019: Corrupt filesystem [ 369.450397][T12928] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue [ 369.612597][ T18] usbhid: probe of 3-1:0.0 failed with error -71 [ 369.619855][ T18] usb 3-1: USB disconnect, device number 34 [ 369.629031][ T486] Bluetooth: hci0: command 0x1001 tx timeout [ 369.635092][ T96] Bluetooth: hci0: sending frame failed (-49) [ 371.312968][T12949] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 371.334372][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4319'. [ 371.438277][T12962] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 371.445275][T12962] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 371.456377][T12962] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 371.469841][T12962] System zones: 1-12 [ 371.490327][T12962] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2221: inode #15: comm syz.4.4320: corrupted in-inode xattr [ 371.502455][T12962] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.4320: couldn't read orphan inode 15 (err -117) [ 371.515020][T12962] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 371.543212][T12969] EXT4-fs (loop3): Ignoring removed orlov option [ 371.564477][T12969] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 371.571196][T12962] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm syz.4.4320: Invalid inode table block 0 in block_group 0 [ 371.584343][T12962] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm syz.4.4320: Invalid inode table block 0 in block_group 0 [ 371.598260][T12962] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 371.608897][T12969] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 371.630077][T12962] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm syz.4.4320: Invalid inode table block 0 in block_group 0 [ 371.630183][T12979] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz.4.4320: path /root/syzkaller.fDRetF/21/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 371.643378][T12962] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 371.681076][T12979] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm syz.4.4320: Invalid inode table block 0 in block_group 0 [ 371.688246][T12962] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:455: comm syz.4.4320: Invalid block bitmap block 0 in block_group 0 [ 371.697473][T12979] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 371.710747][ T18] Bluetooth: hci0: command 0x1009 tx timeout [ 371.718915][T12962] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm syz.4.4320: Invalid inode table block 0 in block_group 0 [ 371.756899][ T388] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 371.765590][T12984] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue [ 372.446875][ T388] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 372.459313][ T388] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.469055][ T388] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 372.479733][ T388] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 372.490215][ T388] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 372.519795][T12996] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.526688][T12996] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.534051][T12996] device bridge_slave_0 entered promiscuous mode [ 372.542561][T12996] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.549645][T12996] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.557630][T12996] device bridge_slave_1 entered promiscuous mode [ 372.615799][ T388] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.626007][ T388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 372.633870][ T388] usb 3-1: SerialNumber: syz [ 372.664742][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 372.666115][T12970] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 372.672726][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 372.683872][T12970] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 372.697336][ T388] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 372.698311][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 372.705455][ T388] cdc_acm: probe of 3-1:1.0 failed with error -12 [ 372.714149][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 372.727750][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.734581][ T486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.754076][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 372.768956][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 372.777467][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.784319][ T486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.799923][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 372.807776][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 372.815974][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 372.823960][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 372.830951][T13003] input: syz0 as /devices/virtual/input/input44 [ 372.832475][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 372.863880][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 372.872617][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 372.875099][T13003] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 372.889684][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 372.890277][T13003] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 372.898499][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 372.906525][T13003] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a802c01c, mo2=0002] [ 372.921396][T13003] System zones: 0-2, 18-18, 34-34 [ 372.927210][T13003] EXT4-fs error (device loop3): ext4_orphan_get:1260: comm syz.3.4332: bad orphan inode 15 [ 372.937400][T13003] ext4_test_bit(bit=14, block=18) = 1 [ 372.942601][T13003] is_bad_inode(inode)=0 [ 372.946579][T13003] NEXT_ORPHAN(inode)=2264924160 [ 372.951293][T13003] max_ino=32 [ 372.953888][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 372.954294][T13003] i_nlink=0 [ 372.964999][T13003] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 372.969187][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 372.979348][T13003] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.4332: bg 0: block 80: padding at end of block bitmap is not set [ 372.979466][T13003] EXT4-fs error (device loop3) in ext4_free_blocks:5019: Corrupt filesystem [ 372.979597][T13003] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue [ 373.021906][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 373.030388][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 373.052179][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 373.061105][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 373.086495][T12970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12970 comm=syz.2.4322 [ 373.103415][ T107] usb 3-1: USB disconnect, device number 35 [ 373.127806][ T557] device bridge_slave_1 left promiscuous mode [ 373.133784][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.141556][ T557] device bridge_slave_0 left promiscuous mode [ 373.148233][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.251128][T13013] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 373.269108][T13013] EXT4-fs error (device loop3): ext4_orphan_get:1236: inode #17: comm syz.3.4335: iget: bad i_size value: -6917529027641081756 [ 373.282356][T13013] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.4335: couldn't read orphan inode 17 (err -117) [ 373.294408][T13013] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 373.310422][T13013] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.4335: bg 0: block 65: padding at end of block bitmap is not set [ 373.324951][T13013] Quota error (device loop3): write_blk: dquota write failed [ 373.332666][T13013] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 373.629266][T13026] EXT4-fs (loop1): Ignoring removed orlov option [ 373.655201][T13026] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 373.664851][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4341'. [ 373.689925][T13026] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 374.053286][T13039] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 374.061176][T13039] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 374.065924][T13024] F2FS-fs (loop3): Found nat_bits in checkpoint [ 374.077334][T13039] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 374.085103][T13039] System zones: 1-12 [ 374.089750][T13039] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2221: inode #15: comm syz.1.4344: corrupted in-inode xattr [ 374.102579][T13039] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.4344: couldn't read orphan inode 15 (err -117) [ 374.107607][T13024] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 374.114628][T13039] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 374.121032][T13024] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 374.223526][T13039] EXT4-fs error (device loop1): __ext4_get_inode_loc:4710: comm syz.1.4344: Invalid inode table block 0 in block_group 0 [ 374.236348][T13039] EXT4-fs error (device loop1): __ext4_get_inode_loc:4710: comm syz.1.4344: Invalid inode table block 0 in block_group 0 [ 374.249213][T13039] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 374.258972][T13039] EXT4-fs error (device loop1): __ext4_get_inode_loc:4710: comm syz.1.4344: Invalid inode table block 0 in block_group 0 [ 374.271615][T13039] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 374.281056][T13039] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:455: comm syz.1.4344: Invalid block bitmap block 0 in block_group 0 [ 374.281577][T13047] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.4344: path /root/syzkaller.rqDaIr/15/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 374.294476][T13039] EXT4-fs error (device loop1): __ext4_get_inode_loc:4710: comm syz.1.4344: Invalid inode table block 0 in block_group 0 [ 374.317212][T13047] EXT4-fs error (device loop1): __ext4_get_inode_loc:4710: comm syz.1.4344: Invalid inode table block 0 in block_group 0 [ 374.343850][T13039] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 374.513716][T13051] input: syz0 as /devices/virtual/input/input45 [ 374.621463][T13055] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.628742][T13055] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.636072][T13055] device bridge_slave_0 entered promiscuous mode [ 374.644227][T13055] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.651156][T13055] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.658499][T13055] device bridge_slave_1 entered promiscuous mode [ 374.661024][T13051] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 374.677387][T13051] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 374.687182][T13051] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a802c01c, mo2=0002] [ 374.695232][T13051] System zones: 0-2, 18-18, 34-34 [ 374.701256][T13051] EXT4-fs error (device loop3): ext4_orphan_get:1260: comm syz.3.4345: bad orphan inode 15 [ 374.711383][T13051] ext4_test_bit(bit=14, block=18) = 1 [ 374.716583][T13051] is_bad_inode(inode)=0 [ 374.720686][T13051] NEXT_ORPHAN(inode)=2264924160 [ 374.725357][T13051] max_ino=32 [ 374.728406][T13051] i_nlink=0 [ 374.731371][T13051] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 374.747038][T13051] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.4345: bg 0: block 80: padding at end of block bitmap is not set [ 374.761227][T13051] EXT4-fs error (device loop3) in ext4_free_blocks:5019: Corrupt filesystem [ 374.770014][T13051] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue [ 374.821501][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 374.830515][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 374.848839][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 374.857913][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 374.865861][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.872709][ T486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.880315][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 374.888754][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 374.896834][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.903665][ T486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.922131][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 374.930065][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 374.938007][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 374.959657][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 374.971520][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4352'. [ 374.989295][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 375.009445][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 375.027076][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 375.035689][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 375.114570][T13074] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 375.145077][T13074] EXT4-fs error (device loop1): ext4_orphan_get:1236: inode #17: comm syz.1.4348: iget: bad i_size value: -6917529027641081756 [ 375.147402][ T557] device bridge_slave_1 left promiscuous mode [ 375.158584][T13074] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.4348: couldn't read orphan inode 17 (err -117) [ 375.174118][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.176072][T13074] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 375.193573][ T557] device bridge_slave_0 left promiscuous mode [ 375.200989][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.212349][T13074] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.4348: bg 0: block 65: padding at end of block bitmap is not set [ 375.226768][T13074] Quota error (device loop1): write_blk: dquota write failed [ 375.234158][T13074] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 375.338111][T13079] EXT4-fs (loop1): Ignoring removed orlov option [ 375.344611][T13079] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 375.359092][T13079] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 375.482593][T13085] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 375.489784][T13085] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 375.499573][T13085] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 375.551204][T13085] System zones: 1-12 [ 375.559130][T13085] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2221: inode #15: comm syz.1.4357: corrupted in-inode xattr [ 375.571919][T13085] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.4357: couldn't read orphan inode 15 (err -117) [ 375.585375][T13085] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 375.911604][T13093] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.918847][T13093] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.926315][T13093] device bridge_slave_0 entered promiscuous mode [ 375.944718][T13093] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.956022][T13093] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.957489][T13085] EXT4-fs error (device loop1): __ext4_get_inode_loc:4710: comm syz.1.4357: Invalid inode table block 0 in block_group 0 [ 375.969039][T13093] device bridge_slave_1 entered promiscuous mode [ 375.976470][T13085] EXT4-fs error (device loop1): __ext4_get_inode_loc:4710: comm syz.1.4357: Invalid inode table block 0 in block_group 0 [ 375.995568][T13085] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 375.998559][T13072] F2FS-fs (loop3): Found nat_bits in checkpoint [ 376.005424][T13085] EXT4-fs error (device loop1): __ext4_get_inode_loc:4710: comm syz.1.4357: Invalid inode table block 0 in block_group 0 [ 376.023869][T13085] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 376.035498][T13085] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:455: comm syz.1.4357: Invalid block bitmap block 0 in block_group 0 [ 376.049094][T13085] EXT4-fs error (device loop1): __ext4_get_inode_loc:4710: comm syz.1.4357: Invalid inode table block 0 in block_group 0 [ 376.049330][T13101] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.4357: path /root/syzkaller.mn5wHb/2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 376.061853][T13085] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 376.090253][T13072] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 376.093220][T13085] EXT4-fs error (device loop1): __ext4_get_inode_loc:4710: comm syz.1.4357: Invalid inode table block 0 in block_group 0 [ 376.108771][T13072] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 376.161840][T13093] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.168720][T13093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.175820][T13093] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.182593][T13093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.205192][T13105] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 376.217315][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.225271][ T4842] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.234053][ T4842] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.278518][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.286600][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.293454][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.301702][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.309693][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.316509][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.323739][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.331652][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.350220][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 376.375095][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 376.391903][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 376.444558][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 376.453925][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 376.464015][T13114] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 376.516646][ T23] audit: type=1400 audit(1719585665.219:1056): avc: denied { read } for pid=13118 comm="syz.0.4358" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 376.558583][T13114] EXT4-fs error (device loop2): ext4_orphan_get:1236: inode #17: comm syz.2.4367: iget: bad i_size value: -6917529027641081756 [ 376.586997][T13114] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz.2.4367: couldn't read orphan inode 17 (err -117) [ 376.606787][ T23] audit: type=1400 audit(1719585665.219:1057): avc: denied { open } for pid=13118 comm="syz.0.4358" path="/root/syzkaller.ufEW9x/0/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 376.633938][T13114] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 376.669085][T13114] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.4367: bg 0: block 65: padding at end of block bitmap is not set [ 376.689500][ T557] device bridge_slave_1 left promiscuous mode [ 376.695668][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.696803][ T23] audit: type=1400 audit(1719585665.219:1058): avc: denied { ioctl } for pid=13118 comm="syz.0.4358" path="/root/syzkaller.ufEW9x/0/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 376.730370][ T557] device bridge_slave_0 left promiscuous mode [ 376.736448][T13114] Quota error (device loop2): write_blk: dquota write failed [ 376.736477][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.751067][T13114] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 376.929338][T13121] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.938109][T13121] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.945517][T13121] device bridge_slave_0 entered promiscuous mode [ 376.954050][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4373'. [ 376.966626][T13121] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.989504][T13121] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.997575][T13121] device bridge_slave_1 entered promiscuous mode [ 377.282889][T13121] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.289781][T13121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.297066][T13121] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.303795][T13121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.431061][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.439621][ T486] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.447180][ T486] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.465258][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.473630][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.480670][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.488480][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.496542][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.503440][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.526380][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.537889][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.586259][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 377.598084][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 377.627149][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.656644][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 377.667050][ T372] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 377.683779][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 377.700605][T13126] F2FS-fs (loop0): Found nat_bits in checkpoint [ 377.755573][T13126] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 377.762450][T13126] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 377.916862][ T372] usb 3-1: Using ep0 maxpacket: 16 [ 378.146884][ T4842] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 378.206906][ T372] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 378.215985][ T372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.224314][ T372] usb 3-1: Product: syz [ 378.228646][ T372] usb 3-1: Manufacturer: syz [ 378.233082][ T372] usb 3-1: SerialNumber: syz [ 378.242987][ T372] usb 3-1: config 0 descriptor?? [ 378.277098][ T557] device bridge_slave_1 left promiscuous mode [ 378.283214][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.291207][ T557] device bridge_slave_0 left promiscuous mode [ 378.297320][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.315048][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.323176][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.330783][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.338703][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.345910][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.353551][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.360877][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.368091][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.375268][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.382706][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.389990][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.397127][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.404294][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.411639][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.419161][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.426342][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.433795][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.441024][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.448390][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.455593][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.462840][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.470258][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.477480][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.484646][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.491968][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.499256][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.506393][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.513755][ T4842] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 378.524619][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.532590][ T4842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.543575][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.550951][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.558310][ T4842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.568045][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.575241][ T388] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 378.583182][ T4842] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 378.598145][ T388] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 378.686860][ T4842] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 378.695945][ T4842] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 378.704780][ T4842] usb 2-1: Manufacturer: syz [ 378.714802][ T4842] usb 2-1: config 0 descriptor?? [ 378.826977][ T372] usb 3-1: MIDIStreaming interface descriptor not found [ 378.842865][ T372] usb 3-1: USB disconnect, device number 36 [ 379.198139][ T4842] appleir 0003:05AC:8243.002D: unknown main item tag 0x0 [ 379.205337][ T4842] appleir 0003:05AC:8243.002D: No inputs registered, leaving [ 379.223116][ T4842] appleir 0003:05AC:8243.002D: hiddev96,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 379.634966][T13222] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 379.987572][T13218] F2FS-fs (loop2): Found nat_bits in checkpoint [ 380.012101][T13218] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 380.019124][T13218] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 380.561046][T13256] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 380.568167][T13256] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 380.577128][T13256] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 380.584965][T13256] System zones: 1-12 [ 380.589845][T13256] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #15: comm syz.3.4415: corrupted in-inode xattr [ 380.601869][T13256] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.4415: couldn't read orphan inode 15 (err -117) [ 380.613905][T13256] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 380.646906][ T4842] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 380.679975][T13256] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm syz.3.4415: Invalid inode table block 0 in block_group 0 [ 380.692831][T13256] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm syz.3.4415: Invalid inode table block 0 in block_group 0 [ 380.705562][T13256] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 380.715022][T13256] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm syz.3.4415: Invalid inode table block 0 in block_group 0 [ 380.727808][T13256] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 380.731470][T13260] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz.3.4415: path /root/syzkaller.tn1WLj/58/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 380.738113][T13256] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:455: comm syz.3.4415: Invalid block bitmap block 0 in block_group 0 [ 380.772997][T13256] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm syz.3.4415: Invalid inode table block 0 in block_group 0 [ 380.775550][T13260] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm syz.3.4415: Invalid inode table block 0 in block_group 0 [ 380.785791][T13256] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 380.955970][T13263] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.962946][T13263] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.970379][T13263] device bridge_slave_0 entered promiscuous mode [ 380.977442][T13263] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.984269][T13263] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.992264][T13263] device bridge_slave_1 entered promiscuous mode [ 381.006914][ T4842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.017784][ T4842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.027513][ T4842] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 381.036640][ T4842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.046954][ T4842] usb 3-1: config 0 descriptor?? [ 381.058088][T13263] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.064961][T13263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.072081][T13263] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.079114][T13263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.127852][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 381.135777][ T486] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.143938][ T486] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.172313][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 381.181143][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.188198][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.195712][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 381.204563][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.211444][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.229398][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 381.248529][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 381.260714][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 381.279267][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 381.287462][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 381.299823][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 381.551126][ T3457] usb 2-1: USB disconnect, device number 33 [ 381.564300][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 381.635200][T13288] FAT-fs (loop3): Directory bread(block 64) failed [ 381.641809][T13288] FAT-fs (loop3): Directory bread(block 65) failed [ 381.642050][ T9] device bridge_slave_1 left promiscuous mode [ 381.648442][ T4842] usbhid 3-1:0.0: can't add hid device: -71 [ 381.654344][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.660088][T13288] FAT-fs (loop3): Directory bread(block 66) failed [ 381.673103][ T9] device bridge_slave_0 left promiscuous mode [ 381.673119][ T4842] usbhid: probe of 3-1:0.0 failed with error -71 [ 381.679482][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.685249][T13288] FAT-fs (loop3): Directory bread(block 67) failed [ 381.699147][T13288] FAT-fs (loop3): Directory bread(block 68) failed [ 381.703124][ T4842] usb 3-1: USB disconnect, device number 37 [ 381.706051][T13288] FAT-fs (loop3): Directory bread(block 69) failed [ 381.718165][T13288] FAT-fs (loop3): Directory bread(block 70) failed [ 381.724552][T13288] FAT-fs (loop3): Directory bread(block 71) failed [ 381.730953][T13288] FAT-fs (loop3): Directory bread(block 72) failed [ 381.737469][T13288] FAT-fs (loop3): Directory bread(block 73) failed [ 381.838437][ T23] audit: type=1400 audit(1719585670.549:1059): avc: denied { ioctl } for pid=13291 comm="syz.3.4427" path="/dev/usbmon0" dev="devtmpfs" ino=9260 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 382.136803][ T376] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 382.666904][ T376] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 382.678016][ T376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.689068][ T376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.699017][ T376] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 382.786917][ T376] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 382.796031][ T376] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 382.804222][ T376] usb 4-1: Manufacturer: syz [ 382.813634][ T376] usb 4-1: config 0 descriptor?? [ 382.980351][T13314] F2FS-fs (loop2): Invalid log blocks per segment (1) [ 382.987380][T13314] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 382.998199][T13314] F2FS-fs (loop2): invalid crc value [ 383.005284][T13314] F2FS-fs (loop2): Found nat_bits in checkpoint [ 383.047154][T13314] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 383.054144][T13314] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 383.097703][T13321] FAT-fs (loop1): Directory bread(block 64) failed [ 383.104260][T13321] FAT-fs (loop1): Directory bread(block 65) failed [ 383.111166][T13321] FAT-fs (loop1): Directory bread(block 66) failed [ 383.117735][T13321] FAT-fs (loop1): Directory bread(block 67) failed [ 383.124236][T13321] FAT-fs (loop1): Directory bread(block 68) failed [ 383.132710][T13321] FAT-fs (loop1): Directory bread(block 69) failed [ 383.144759][T13321] FAT-fs (loop1): Directory bread(block 70) failed [ 383.151385][T13321] FAT-fs (loop1): Directory bread(block 71) failed [ 383.158209][T13321] FAT-fs (loop1): Directory bread(block 72) failed [ 383.164571][T13321] FAT-fs (loop1): Directory bread(block 73) failed [ 383.283649][T13324] FAT-fs (loop4): Directory bread(block 64) failed [ 383.290151][T13324] FAT-fs (loop4): Directory bread(block 65) failed [ 383.296447][T13324] FAT-fs (loop4): Directory bread(block 66) failed [ 383.303172][T13324] FAT-fs (loop4): Directory bread(block 67) failed [ 383.309575][T13324] FAT-fs (loop4): Directory bread(block 68) failed [ 383.316787][T13324] FAT-fs (loop4): Directory bread(block 69) failed [ 383.323126][T13324] FAT-fs (loop4): Directory bread(block 70) failed [ 383.329845][T13324] FAT-fs (loop4): Directory bread(block 71) failed [ 383.336216][T13324] FAT-fs (loop4): Directory bread(block 72) failed [ 383.342554][T13324] FAT-fs (loop4): Directory bread(block 73) failed [ 383.356410][ T376] appleir 0003:05AC:8243.002E: unknown main item tag 0x0 [ 383.419314][ T376] appleir 0003:05AC:8243.002E: No inputs registered, leaving [ 383.429294][ T376] appleir 0003:05AC:8243.002E: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 383.561145][T13333] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4439'. [ 383.878383][T13348] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 383.887428][T13348] ext4 filesystem being mounted at /root/syzkaller.TD4pA7/173/file0 supports timestamps until 2038 (0x7fffffff) [ 383.905334][T13348] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 383.913747][T13348] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 383.934622][ T23] audit: type=1400 audit(1719585672.639:1060): avc: denied { rename } for pid=13347 comm="syz.2.4446" name="file0" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 383.934786][T13348] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 22: comm syz.2.4446: lblock 0 mapped to illegal pblock 22 (length 1) [ 383.987907][T11476] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 22: comm syz-executor: lblock 0 mapped to illegal pblock 22 (length 1) [ 384.009521][T11476] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 3: comm syz-executor: lblock 8 mapped to illegal pblock 3 (length 1) [ 384.025899][T11476] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 4: comm syz-executor: lblock 9 mapped to illegal pblock 4 (length 1) [ 384.040135][T11476] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 5: comm syz-executor: lblock 10 mapped to illegal pblock 5 (length 1) [ 384.054405][T11476] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 6: comm syz-executor: lblock 11 mapped to illegal pblock 6 (length 1) [ 384.071662][T11476] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 7: comm syz-executor: lblock 12 mapped to illegal pblock 7 (length 1) [ 384.085931][T11476] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 8: comm syz-executor: lblock 13 mapped to illegal pblock 8 (length 1) [ 384.665151][T13359] FAT-fs (loop1): Directory bread(block 64) failed [ 384.672152][T13359] FAT-fs (loop1): Directory bread(block 65) failed [ 384.678762][T13359] FAT-fs (loop1): Directory bread(block 66) failed [ 384.685480][T13359] FAT-fs (loop1): Directory bread(block 67) failed [ 384.693431][T13359] FAT-fs (loop1): Directory bread(block 68) failed [ 384.699954][T13359] FAT-fs (loop1): Directory bread(block 69) failed [ 384.706386][T13359] FAT-fs (loop1): Directory bread(block 70) failed [ 384.713264][T13359] FAT-fs (loop1): Directory bread(block 71) failed [ 384.719778][T13359] FAT-fs (loop1): Directory bread(block 72) failed [ 384.726216][T13359] FAT-fs (loop1): Directory bread(block 73) failed [ 385.186174][ T9] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 385.337618][T13370] EXT4-fs (loop4): orphan cleanup on readonly fs [ 385.354259][T13370] EXT4-fs error (device loop4): ext4_quota_enable:6056: inode #4: comm syz.4.4453: iget: bogus i_mode (3600) [ 385.409238][T13370] EXT4-fs error (device loop4): ext4_quota_enable:6059: comm syz.4.4453: Bad quota inode: 4, type: 1 [ 385.437530][T13370] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 385.452622][T13370] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 385.462204][T13370] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 385.597255][ T372] usb 4-1: USB disconnect, device number 38 [ 385.619774][T13377] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.620797][T13382] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 385.646877][T13382] ext4 filesystem being mounted at /root/syzkaller.tfzNyH/17/file0 supports timestamps until 2038 (0x7fffffff) [ 385.651611][T13377] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.698170][T13382] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 385.706436][T13382] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 385.720599][T13377] device bridge_slave_0 entered promiscuous mode [ 385.729728][T13377] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.736831][T13377] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.744422][T13377] device bridge_slave_1 entered promiscuous mode [ 385.781898][T13364] F2FS-fs (loop1): Invalid log blocks per segment (1) [ 385.789632][T13364] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 385.799205][T12996] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /root/syzkaller.tfzNyH/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 385.812158][T13377] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.825480][T13364] F2FS-fs (loop1): invalid crc value [ 385.828510][T13377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.828627][T13377] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.828634][T13377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.934718][T12996] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /root/syzkaller.tfzNyH/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 385.997532][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 386.002119][T13364] F2FS-fs (loop1): Found nat_bits in checkpoint [ 386.004675][T12996] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /root/syzkaller.tfzNyH/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 386.035679][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.037647][T12996] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /root/syzkaller.tfzNyH/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 386.049127][T13364] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 386.064808][T12996] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /root/syzkaller.tfzNyH/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 386.072192][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.094058][T12996] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.tfzNyH/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 386.101360][T13364] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 386.127794][T12996] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /root/syzkaller.tfzNyH/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 386.153210][T13395] netlink: 'syz.3.4459': attribute type 4 has an invalid length. [ 386.165839][T13397] netlink: 'syz.3.4459': attribute type 4 has an invalid length. [ 386.185309][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 386.193438][T12996] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 386.194154][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.214415][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.222452][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 386.247087][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.254030][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.278711][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 386.287091][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 386.301887][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 386.310245][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 386.332448][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 386.341015][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 386.357664][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 386.365533][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 386.397282][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 386.405362][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 386.424557][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 386.433667][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.442275][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.450613][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.688154][T13407] FAT-fs (loop2): Directory bread(block 64) failed [ 386.694493][T13407] FAT-fs (loop2): Directory bread(block 65) failed [ 386.701064][T13407] FAT-fs (loop2): Directory bread(block 66) failed [ 386.707548][T13407] FAT-fs (loop2): Directory bread(block 67) failed [ 386.713855][T13407] FAT-fs (loop2): Directory bread(block 68) failed [ 386.720168][T13407] FAT-fs (loop2): Directory bread(block 69) failed [ 386.726515][T13407] FAT-fs (loop2): Directory bread(block 70) failed [ 386.732826][T13407] FAT-fs (loop2): Directory bread(block 71) failed [ 386.739909][T13407] FAT-fs (loop2): Directory bread(block 72) failed [ 386.746223][T13407] FAT-fs (loop2): Directory bread(block 73) failed [ 387.533250][T13411] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4464'. [ 387.841043][T13426] EXT4-fs (loop3): orphan cleanup on readonly fs [ 387.848555][T13426] EXT4-fs error (device loop3): ext4_quota_enable:6056: inode #4: comm syz.3.4468: iget: bogus i_mode (3600) [ 388.068460][T13426] EXT4-fs error (device loop3): ext4_quota_enable:6059: comm syz.3.4468: Bad quota inode: 4, type: 1 [ 388.088065][T13426] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 388.103524][T13426] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 388.114792][T13426] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 389.066999][T13468] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.073996][T13468] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.082543][T13468] device bridge_slave_0 entered promiscuous mode [ 389.091666][T13468] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.098731][T13468] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.106111][T13468] device bridge_slave_1 entered promiscuous mode [ 389.184671][T13468] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.191683][T13468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.198765][T13468] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.205590][T13468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.229565][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 389.238255][T13439] F2FS-fs (loop0): Invalid log blocks per segment (1) [ 389.245527][T13439] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 389.253637][ T486] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.258124][T13439] F2FS-fs (loop0): invalid crc value [ 389.274538][ T486] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.337413][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 389.346823][T13439] F2FS-fs (loop0): Found nat_bits in checkpoint [ 389.357541][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.364378][ T486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.389997][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 389.398949][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.405804][ T486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.411238][T13439] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 389.420813][T13439] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 389.422563][T13497] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 389.443623][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 389.478499][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 389.486799][T13499] EXT4-fs (loop1): orphan cleanup on readonly fs [ 389.494130][T13499] EXT4-fs error (device loop1): ext4_quota_enable:6056: inode #4: comm syz.1.4493: iget: bogus i_mode (3600) [ 389.496930][ T557] device bridge_slave_1 left promiscuous mode [ 389.512021][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.513909][T13499] EXT4-fs error (device loop1): ext4_quota_enable:6059: comm syz.1.4493: Bad quota inode: 4, type: 1 [ 389.530042][ T557] device bridge_slave_0 left promiscuous mode [ 389.530398][T13499] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 389.550595][T13499] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 389.553735][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.557545][T13499] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 389.707937][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 389.716293][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 389.758935][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.769293][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.777137][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 389.785383][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 389.802671][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 389.811286][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 389.823333][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 389.842547][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 390.320665][T13519] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 390.329807][T13519] ext4 filesystem being mounted at /root/syzkaller.nVhXb4/0/file0 supports timestamps until 2038 (0x7fffffff) [ 390.374495][T13519] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 390.387859][T13519] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 390.397347][T13541] EXT4-fs (loop0): orphan cleanup on readonly fs [ 390.403599][T13541] EXT4-fs error (device loop0): ext4_quota_enable:6056: inode #4: comm syz.0.4505: iget: bogus i_mode (3600) [ 390.436269][T13519] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 22: comm syz.4.4484: lblock 0 mapped to illegal pblock 22 (length 1) [ 390.436825][ T13] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 390.450782][T13541] EXT4-fs error (device loop0): ext4_quota_enable:6059: comm syz.0.4505: Bad quota inode: 4, type: 1 [ 390.472216][T13541] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 390.475401][T13468] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 22: comm syz-executor: lblock 0 mapped to illegal pblock 22 (length 1) [ 390.503763][T13541] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 390.510330][T13468] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 3: comm syz-executor: lblock 8 mapped to illegal pblock 3 (length 1) [ 390.524381][T13541] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 390.533701][T13468] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 4: comm syz-executor: lblock 9 mapped to illegal pblock 4 (length 1) [ 390.556978][T13468] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 5: comm syz-executor: lblock 10 mapped to illegal pblock 5 (length 1) [ 390.580440][T13468] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 6: comm syz-executor: lblock 11 mapped to illegal pblock 6 (length 1) [ 390.595295][T13468] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 7: comm syz-executor: lblock 12 mapped to illegal pblock 7 (length 1) [ 390.609659][T13468] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 8: comm syz-executor: lblock 13 mapped to illegal pblock 8 (length 1) [ 390.866944][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 390.887105][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 390.916788][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.936794][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.953694][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.989081][ T13] usb 2-1: config 0 descriptor?? [ 391.006841][T13532] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 391.143705][T13538] F2FS-fs (loop2): Invalid log blocks per segment (1) [ 391.163915][T13538] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 391.175225][T13538] F2FS-fs (loop2): invalid crc value [ 391.182570][T13538] F2FS-fs (loop2): Found nat_bits in checkpoint [ 391.225436][T13538] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 391.237691][T13538] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 391.390996][T13565] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 391.420237][T13532] erofs: (device loop1): fill_inode_lazy: unsupported physical clusterbits 16 for nid 36, please upgrade kernel [ 391.433053][T13532] erofs: (device loop1): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 391.442479][T13532] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 391.668378][ T13] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 391.676125][ T13] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 391.693442][ T381] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 391.712668][ T23] audit: type=1400 audit(1719585680.419:1061): avc: denied { create } for pid=13574 comm="syz.3.4516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.720066][ T13] plantronics 0003:047F:FFFF.002F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 392.084206][T13578] F2FS-fs (loop3): Invalid segment/section count (24 != 24 * 3) [ 392.099314][T13578] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 392.119239][T13578] F2FS-fs (loop3): invalid crc value [ 392.149113][T13578] F2FS-fs (loop3): Found nat_bits in checkpoint [ 392.234725][ T13] usb 2-1: USB disconnect, device number 34 [ 392.244921][T13578] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 392.253014][T13578] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 392.376966][ T23] audit: type=1400 audit(1719585681.039:1062): avc: denied { shutdown } for pid=13593 comm="syz.0.4522" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 392.454530][T13585] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.461515][T13585] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.469270][T13585] device bridge_slave_0 entered promiscuous mode [ 392.476281][T13604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4525'. [ 392.485636][T13585] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.492919][T13585] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.502213][T13585] device bridge_slave_1 entered promiscuous mode [ 392.593171][T13585] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.600045][T13585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.607179][T13585] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.613900][T13585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.627412][ T557] device bridge_slave_1 left promiscuous mode [ 392.633437][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.644216][ T557] device bridge_slave_0 left promiscuous mode [ 392.650806][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.862024][ T23] audit: type=1326 audit(1719585681.559:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13610 comm="syz.2.4528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5a1281b99 code=0x0 [ 393.105187][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 393.252861][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 393.261233][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 393.275733][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 393.285506][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 393.293457][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 393.303738][T13625] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4530'. [ 393.317878][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 393.327811][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 393.352774][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 393.365617][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 393.386107][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 393.394700][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 393.403472][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 393.411926][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 393.797358][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4537'. [ 393.818569][T13644] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 393.923523][T13652] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4542'. [ 393.937271][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4541'. [ 393.951419][T13653] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4541'. [ 394.061822][T13659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4544'. [ 394.080395][T13659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4544'. [ 394.130519][T13635] F2FS-fs (loop1): Invalid segment/section count (24 != 24 * 3) [ 394.138165][T13635] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 394.165348][T13635] F2FS-fs (loop1): invalid crc value [ 394.173245][T13635] F2FS-fs (loop1): Found nat_bits in checkpoint [ 394.296813][T13635] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 394.304131][T13635] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 394.538178][T13679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4552'. [ 394.785449][T13695] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4553'. [ 395.139340][T13706] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 395.148342][T13706] ext4 filesystem being mounted at /root/syzkaller.ufEW9x/26/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 395.240448][T13701] F2FS-fs (loop4): Invalid segment/section count (24 != 24 * 3) [ 395.254610][T13718] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 395.255504][T13701] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 395.271611][T13718] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 395.273173][T13701] F2FS-fs (loop4): invalid crc value [ 395.291098][T13701] F2FS-fs (loop4): Found nat_bits in checkpoint [ 395.325657][T13701] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 395.332714][T13701] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 395.552536][T13728] binder: 13725:13728 ioctl c0306201 0 returned -14 [ 395.562424][T13728] binder: 13725:13728 ioctl c0046209 0 returned -22 [ 396.200374][T13740] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 396.497550][T13740] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 396.524705][ T23] audit: type=1326 audit(1719585685.229:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13749 comm="syz.0.4579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effe2712b99 code=0x0 [ 396.690533][T13740] F2FS-fs (loop4): invalid crc value [ 396.706222][T13740] F2FS-fs (loop4): Found nat_bits in checkpoint [ 396.754707][T13740] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 396.761614][T13740] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 396.861119][ T23] audit: type=1400 audit(1719585685.569:1065): avc: denied { getopt } for pid=13775 comm="syz.2.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 396.913006][T13585] attempt to access beyond end of device [ 396.913006][T13585] loop4: rw=2049, want=40968, limit=40427 [ 397.048588][T13787] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 397.057827][T13787] ext4 filesystem being mounted at /root/syzkaller.ufEW9x/30/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 397.103192][T13786] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 397.167823][T13801] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 397.191381][T13802] binder: 13791:13802 ioctl c0306201 0 returned -14 [ 397.200962][T13802] binder: 13791:13802 ioctl c0046209 0 returned -22 [ 397.230578][T13801] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 397.706709][ T23] audit: type=1326 audit(1719585686.409:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13811 comm="syz.4.4597" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3c7b2bb99 code=0x0 [ 398.516480][T13820] FAT-fs (loop2): Directory bread(block 64) failed [ 398.525024][T13820] FAT-fs (loop2): Directory bread(block 65) failed [ 398.532866][T13820] FAT-fs (loop2): Directory bread(block 66) failed [ 398.540143][T13820] FAT-fs (loop2): Directory bread(block 67) failed [ 398.546642][T13820] FAT-fs (loop2): Directory bread(block 68) failed [ 398.554527][T13820] FAT-fs (loop2): Directory bread(block 69) failed [ 398.564224][T13820] FAT-fs (loop2): Directory bread(block 70) failed [ 398.589256][T13820] FAT-fs (loop2): Directory bread(block 71) failed [ 398.601905][T13820] FAT-fs (loop2): Directory bread(block 72) failed [ 398.609040][T13820] FAT-fs (loop2): Directory bread(block 73) failed [ 398.969097][T13820] attempt to access beyond end of device [ 398.969097][T13820] loop2: rw=2049, want=1320, limit=256 [ 399.160378][T13829] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 399.174893][T13829] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 399.185946][T13829] F2FS-fs (loop0): invalid crc value [ 399.193542][T13829] F2FS-fs (loop0): Found nat_bits in checkpoint [ 399.277569][T13856] binder: 13849:13856 ioctl c0306201 0 returned -14 [ 399.287658][T13856] binder: 13849:13856 ioctl c0046209 0 returned -22 [ 399.378050][T13848] loop2: p1 < > p2 [ 399.382588][T13848] loop2: partition table partially beyond EOD, truncated [ 399.383359][T13829] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 399.396337][T13829] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 399.404090][T13848] loop2: p1 start 4177526784 is beyond EOD, truncated [ 399.410716][T13848] loop2: p2 start 163840 is beyond EOD, truncated [ 399.453381][T13840] F2FS-fs (loop1): Invalid segment/section count (24 != 24 * 3) [ 399.479338][T13840] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 399.488321][T13093] attempt to access beyond end of device [ 399.488321][T13093] loop0: rw=2049, want=40968, limit=40427 [ 399.497262][T13840] F2FS-fs (loop1): invalid crc value [ 399.508098][T13840] F2FS-fs (loop1): Found nat_bits in checkpoint [ 399.567728][T13840] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 399.574915][T13840] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 399.822945][ T23] audit: type=1326 audit(1719585688.529:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13864 comm="syz.2.4612" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5a1281b99 code=0x0 [ 400.135434][T13884] FAT-fs (loop3): Directory bread(block 64) failed [ 400.142017][T13884] FAT-fs (loop3): Directory bread(block 65) failed [ 400.148462][T13884] FAT-fs (loop3): Directory bread(block 66) failed [ 400.154834][T13884] FAT-fs (loop3): Directory bread(block 67) failed [ 400.161452][T13884] FAT-fs (loop3): Directory bread(block 68) failed [ 400.168202][T13884] FAT-fs (loop3): Directory bread(block 69) failed [ 400.174867][T13884] FAT-fs (loop3): Directory bread(block 70) failed [ 400.181738][T13884] FAT-fs (loop3): Directory bread(block 71) failed [ 400.188382][T13884] FAT-fs (loop3): Directory bread(block 72) failed [ 400.194762][T13884] FAT-fs (loop3): Directory bread(block 73) failed [ 400.306608][T13889] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 400.315757][T13889] ext4 filesystem being mounted at /root/syzkaller.SLTGHS/50/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 400.328692][T13884] attempt to access beyond end of device [ 400.328692][T13884] loop3: rw=2049, want=1320, limit=256 [ 400.422628][ T23] audit: type=1326 audit(1719585689.119:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13899 comm="syz.3.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffd377b99 code=0x7ffc0000 [ 400.486662][ T23] audit: type=1326 audit(1719585689.119:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13899 comm="syz.3.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7faffd377b99 code=0x7ffc0000 [ 400.511880][ T23] audit: type=1326 audit(1719585689.119:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13899 comm="syz.3.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffd377b99 code=0x7ffc0000 [ 400.541990][T13905] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 400.550294][T13905] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 400.705451][T13896] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 400.806843][T13896] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 400.838082][T13896] F2FS-fs (loop4): invalid crc value [ 400.962784][T13896] F2FS-fs (loop4): Found nat_bits in checkpoint [ 401.004944][T13896] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 401.012321][T13896] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 401.092212][T13585] attempt to access beyond end of device [ 401.092212][T13585] loop4: rw=2049, want=40968, limit=40427 [ 401.092896][T13927] binder: 13926:13927 ioctl c018620c 20000580 returned -22 [ 401.139392][ T23] audit: type=1326 audit(1719585689.849:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13928 comm="syz.1.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb8429b99 code=0x7ffc0000 [ 401.163900][ T23] audit: type=1326 audit(1719585689.849:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13928 comm="syz.1.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fddb8429b99 code=0x7ffc0000 [ 401.188098][ T23] audit: type=1326 audit(1719585689.849:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13928 comm="syz.1.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb8429b99 code=0x7ffc0000 [ 401.251235][T13917] F2FS-fs (loop3): invalid crc value [ 401.268731][T13917] F2FS-fs (loop3): Found nat_bits in checkpoint [ 401.300532][T13917] F2FS-fs (loop3): recover fsync data on readonly fs [ 401.307544][T13917] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 401.313961][T13917] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 401.649263][ T23] audit: type=1326 audit(1719585690.209:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13938 comm="syz.1.4639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddb8429b99 code=0x0 [ 401.700533][T13949] netlink: 'syz.2.4643': attribute type 4 has an invalid length. [ 401.730346][T13949] netlink: 'syz.2.4643': attribute type 4 has an invalid length. [ 401.764753][T13955] binder: 13954:13955 ioctl c018620c 20000580 returned -22 [ 401.818851][T13953] loop4: p1 < > p2 [ 401.822499][T13953] loop4: partition table partially beyond EOD, truncated [ 401.832605][T13953] loop4: p1 start 4177526784 is beyond EOD, truncated [ 401.841738][T13953] loop4: p2 start 163840 is beyond EOD, truncated [ 401.988596][ T376] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 402.096414][T13970] F2FS-fs (loop3): invalid crc value [ 402.109278][T13970] F2FS-fs (loop3): Found nat_bits in checkpoint [ 402.159974][T13970] F2FS-fs (loop3): recover fsync data on readonly fs [ 402.166549][T13970] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 402.175045][T13970] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 402.286913][ T23] audit: type=1326 audit(1719585690.979:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13975 comm="syz.4.4653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3c7b2bb99 code=0x0 [ 402.406901][ T376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 402.418128][ T376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 402.429214][ T376] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.444750][ T376] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.453650][ T376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.462806][ T376] usb 2-1: config 0 descriptor?? [ 402.486903][T13951] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 402.681625][T13989] binder: 13988:13989 ioctl c018620c 20000580 returned -22 [ 402.962630][T13992] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 402.971710][T13992] erofs: (device loop1): fill_inode_lazy: unsupported physical clusterbits 16 for nid 36, please upgrade kernel [ 402.983619][T13992] erofs: (device loop1): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 403.003690][T13992] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 403.110821][T14018] binder: 14017:14018 ioctl c018620c 20000580 returned -22 [ 403.134528][T14020] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 403.248595][T14043] binder: 14042:14043 ioctl c018620c 20000580 returned -22 [ 403.268119][ T376] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 403.289934][ T376] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 403.301803][ T376] plantronics 0003:047F:FFFF.0030: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 403.400344][T14052] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 403.410140][T14052] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #15: comm syz.0.4682: iget: bad i_size value: -67835469387268086 [ 403.427026][T14052] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.4682: couldn't read orphan inode 15 (err -117) [ 403.447021][T14052] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 403.456056][T14052] ext2 filesystem being mounted at /root/syzkaller.ufEW9x/42/file0 supports timestamps until 2038 (0x7fffffff) [ 403.509992][T14051] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 403.572061][T14051] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 403.597033][T14051] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 403.620578][T14051] EXT4-fs (loop4): This should not happen!! Data will be lost [ 403.620578][T14051] [ 403.653551][T14051] EXT4-fs (loop4): Total free blocks count 0 [ 403.665139][T14051] EXT4-fs (loop4): Free/Dirty block details [ 403.673396][T14051] EXT4-fs (loop4): free_blocks=68451041280 [ 403.687406][T14078] syz.0.4691 uses obsolete (PF_INET,SOCK_PACKET) [ 403.687499][T14051] EXT4-fs (loop4): dirty_blocks=16 [ 403.698627][T14051] EXT4-fs (loop4): Block reservation details [ 403.708854][T14051] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 403.874698][ T342] usb 2-1: USB disconnect, device number 35 [ 403.928157][T14091] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 404.715972][T14110] binder: 14105:14110 ioctl c0306201 0 returned -14 [ 404.753188][T14110] binder: 14105:14110 ioctl c0046209 0 returned -22 [ 405.029030][T14117] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 405.044333][T14117] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 405.059845][T14117] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 405.072047][T14117] EXT4-fs (loop0): This should not happen!! Data will be lost [ 405.072047][T14117] [ 405.081555][T14117] EXT4-fs (loop0): Total free blocks count 0 [ 405.087724][T14117] EXT4-fs (loop0): Free/Dirty block details [ 405.094347][T14117] EXT4-fs (loop0): free_blocks=68451041280 [ 405.100104][T14117] EXT4-fs (loop0): dirty_blocks=16 [ 405.105045][T14117] EXT4-fs (loop0): Block reservation details [ 405.111327][T14117] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 405.531294][T14149] Bluetooth: hci0: Frame reassembly failed (-84) [ 405.589044][ T381] Bluetooth: hci0: Frame reassembly failed (-84) [ 405.608859][T14143] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 406.222910][T14155] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 406.303187][T14155] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 406.318308][T14155] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 406.331126][T14155] EXT4-fs (loop0): This should not happen!! Data will be lost [ 406.331126][T14155] [ 406.351369][T14155] EXT4-fs (loop0): Total free blocks count 0 [ 406.357446][T14155] EXT4-fs (loop0): Free/Dirty block details [ 406.363214][T14155] EXT4-fs (loop0): free_blocks=68451041280 [ 406.369025][T14155] EXT4-fs (loop0): dirty_blocks=16 [ 406.373994][T14155] EXT4-fs (loop0): Block reservation details [ 406.380010][T14155] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 406.536146][T14173] binder: 14167:14173 ioctl c0306201 0 returned -14 [ 406.545698][T14173] binder: 14167:14173 ioctl c0046209 0 returned -22 [ 406.566774][ T388] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 406.873331][T14193] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 406.982352][ T388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 406.993547][ T388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 407.004855][ T388] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 407.018032][ T388] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 407.027122][ T388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.274218][ T388] usb 4-1: config 0 descriptor?? [ 407.312969][T14166] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 407.555419][T14217] F2FS-fs (loop2): Found nat_bits in checkpoint [ 407.597771][T14217] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 407.609352][T14233] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 407.617509][ T18] Bluetooth: hci0: command 0x1003 tx timeout [ 407.617783][ T96] Bluetooth: hci0: sending frame failed (-49) [ 407.640222][ T23] audit: type=1400 audit(1719585696.349:1076): avc: denied { execute } for pid=14216 comm="syz.2.4737" path="/root/syzkaller.hj9hdX/54/file1/bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 407.648490][T14166] erofs: (device loop3): fill_inode_lazy: unsupported physical clusterbits 16 for nid 36, please upgrade kernel [ 407.676523][T14166] erofs: (device loop3): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 407.706798][T14166] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 407.730935][T13377] attempt to access beyond end of device [ 407.730935][T13377] loop2: rw=2049, want=45104, limit=40427 [ 407.817328][T14242] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI0x0000000000000005 [ 407.978149][ T388] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 407.985935][ T388] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving [ 407.995892][ T388] plantronics 0003:047F:FFFF.0031: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 408.108605][T14248] binder: 14243:14248 ioctl c0306201 0 returned -14 [ 408.118286][T14248] binder: 14243:14248 ioctl c0046209 0 returned -22 [ 408.356812][ T388] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 408.578666][ T376] usb 4-1: USB disconnect, device number 39 [ 408.716888][ T388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.727613][ T388] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 408.736390][ T388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.745118][ T388] usb 3-1: config 0 descriptor?? [ 408.808362][T14251] EXT4-fs (loop0): Ignoring removed orlov option [ 408.819183][T14251] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,errors=remount-ro, [ 408.938011][T14256] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 408.952751][T14256] EXT4-fs (loop0): Remounting filesystem read-only [ 409.208561][T14262] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 409.225775][T14262] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 409.227898][ T388] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 409.242217][T14262] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 409.252266][ T388] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0032/input/input46 [ 409.262242][T14262] EXT4-fs (loop3): This should not happen!! Data will be lost [ 409.262242][T14262] [ 409.289014][T14262] EXT4-fs (loop3): Total free blocks count 0 [ 409.295367][T14262] EXT4-fs (loop3): Free/Dirty block details [ 409.304767][T14262] EXT4-fs (loop3): free_blocks=68451041280 [ 409.310747][T14262] EXT4-fs (loop3): dirty_blocks=16 [ 409.319343][T14262] EXT4-fs (loop3): Block reservation details [ 409.325275][T14262] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 409.357125][ T388] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 409.551339][T14280] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI0x0000000000000005 [ 409.611536][T14274] F2FS-fs (loop0): Found nat_bits in checkpoint [ 409.634138][ T23] audit: type=1400 audit(1719585698.339:1077): avc: denied { map } for pid=14286 comm="syz.3.4759" path="socket:[111078]" dev="sockfs" ino=111078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 409.663135][ T23] audit: type=1400 audit(1719585698.339:1078): avc: denied { read } for pid=14286 comm="syz.3.4759" path="socket:[111078]" dev="sockfs" ino=111078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 409.692048][T14274] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 409.699617][ T388] Bluetooth: hci0: command 0x1001 tx timeout [ 409.705452][ T96] Bluetooth: hci0: sending frame failed (-49) [ 409.744769][T13093] attempt to access beyond end of device [ 409.744769][T13093] loop0: rw=2049, want=45104, limit=40427 [ 409.886876][T14289] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 409.900489][T14289] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 409.911098][T14289] F2FS-fs (loop3): invalid crc value [ 409.917788][T14289] F2FS-fs (loop3): Found nat_bits in checkpoint [ 409.941878][T14289] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 409.948889][T14289] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 409.975980][T14288] attempt to access beyond end of device [ 409.975980][T14288] loop3: rw=10241, want=53256, limit=40427 [ 409.991136][T13263] attempt to access beyond end of device [ 409.991136][T13263] loop3: rw=2049, want=45104, limit=40427 [ 410.027452][ T107] usb 3-1: USB disconnect, device number 38 [ 410.046800][ C1] keytouch 0003:0926:3333.0032: usb_submit_urb(ctrl) failed: -19 [ 410.297547][ T23] audit: type=1400 audit(1719585699.009:1079): avc: denied { search } for pid=144 comm="syslogd" name="/" dev="tmpfs" ino=863 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.373209][T14317] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI0x0000000000000005 [ 410.838030][T14321] F2FS-fs (loop3): Found nat_bits in checkpoint [ 410.895309][T14321] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 410.933914][T13263] attempt to access beyond end of device [ 410.933914][T13263] loop3: rw=2049, want=45104, limit=40427 [ 411.025142][ T23] audit: type=1400 audit(1719585699.729:1080): avc: denied { ioctl } for pid=14345 comm="syz.2.4781" path="socket:[112000]" dev="sockfs" ino=112000 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 411.696773][ T372] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 411.776755][ T18] Bluetooth: hci0: command 0x1009 tx timeout [ 412.056878][ T372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.067671][ T372] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 412.076489][ T372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.085583][ T372] usb 3-1: config 0 descriptor?? [ 412.389981][T14364] EXT4-fs (loop3): Ignoring removed oldalloc option [ 412.418644][T14364] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,journal_ioprio=0x0000000000000006,oldalloc,sysvgroups,auto_da_alloc,,errors=continue [ 412.567781][ T372] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor [ 412.585410][ T372] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0033/input/input47 [ 412.683555][ T372] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 413.326022][ T5] usb 3-1: USB disconnect, device number 39 [ 413.363050][T14375] F2FS-fs (loop3): Found nat_bits in checkpoint [ 413.404466][T14375] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 413.449620][T13263] attempt to access beyond end of device [ 413.449620][T13263] loop3: rw=2049, want=45104, limit=40427 [ 414.899637][T14395] EXT4-fs (loop2): Test dummy encryption mode enabled [ 414.912152][T14395] EXT4-fs (loop2): Ignoring removed orlov option [ 414.918732][T14395] EXT4-fs (loop2): can't mount with commit=63, fs mounted w/o journal [ 415.363539][ T23] audit: type=1400 audit(1719585704.069:1081): avc: denied { remount } for pid=14407 comm="syz.2.4800" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1