last executing test programs: 1m39.095749944s ago: executing program 3 (id=2702): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000540001000000000000c4000007", @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0x200008a4}, 0x0) 1m38.891019774s ago: executing program 3 (id=2706): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x100, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xe8c4}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0xae}]}}}]}, 0x4c}}, 0x40080) 1m38.804967154s ago: executing program 3 (id=2710): r0 = socket(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x29, 0x49, 0x0, 0x20000000) 1m38.754945964s ago: executing program 3 (id=2712): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20844e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mount$incfs(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 1m38.594465293s ago: executing program 3 (id=2716): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, &(0x7f0000001a80)=[{&(0x7f00000007c0)="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", 0xd03}], 0x1) 1m38.506722953s ago: executing program 3 (id=2717): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) 1m38.472995893s ago: executing program 32 (id=2717): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) 1m35.860140617s ago: executing program 1 (id=2824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x20044090) 1m35.611246256s ago: executing program 1 (id=2829): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m35.541006526s ago: executing program 1 (id=2831): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={[{@noprefix}, {@subsystem='memory'}]}) 1m35.381027476s ago: executing program 1 (id=2836): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 1m34.995055405s ago: executing program 1 (id=2846): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0) 1m34.121574592s ago: executing program 1 (id=2859): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x2000000000000802, 0x3a, '^-\xb1P\x1c\x1f}&u;\xbcA\xfd\x18!*\x7f\x10\xf4h;\xe1/\x9eJ\xdd\xe5\xf2\xf2\xe3\xbe\x04\xe0\xcd\xae\xa0iy\xf6B\"nE \xbc\v!\xc4\xa4-NjP\x1b:\xba\xa8-\x1d\xec\x8b\xff\xe9F{\xa5\x00\xfa_\xf5\xb5\r\xa8O\xc0\x11Z}\xd5p\xaaO\xcc\x1e\xfb\xc8\x05&\xc5\x99k\xdf\x04+:\xc5{@?\xaf\x05', 0x3a, '\xe3L\xf6\x1d\x94\x9f\xcf\f\x9d', 0x3a, './file0'}, 0x95) 1m34.070519862s ago: executing program 33 (id=2859): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x2000000000000802, 0x3a, '^-\xb1P\x1c\x1f}&u;\xbcA\xfd\x18!*\x7f\x10\xf4h;\xe1/\x9eJ\xdd\xe5\xf2\xf2\xe3\xbe\x04\xe0\xcd\xae\xa0iy\xf6B\"nE \xbc\v!\xc4\xa4-NjP\x1b:\xba\xa8-\x1d\xec\x8b\xff\xe9F{\xa5\x00\xfa_\xf5\xb5\r\xa8O\xc0\x11Z}\xd5p\xaaO\xcc\x1e\xfb\xc8\x05&\xc5\x99k\xdf\x04+:\xc5{@?\xaf\x05', 0x3a, '\xe3L\xf6\x1d\x94\x9f\xcf\f\x9d', 0x3a, './file0'}, 0x95) 1m5.575181466s ago: executing program 0 (id=4052): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000200000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m5.497214565s ago: executing program 0 (id=4053): setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00007d7000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00007d7000/0x1000)=nil) 1m5.410506705s ago: executing program 0 (id=4055): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) 1m5.385334245s ago: executing program 0 (id=4056): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000440)={[{@lazytime}, {@user_xattr}, {@norecovery}, {@nodioread_nolock}, {@dioread_nolock}, {@sysvgroups}, {@abort}, {@errors_remount}, {@oldalloc}]}, 0x0, 0x7b8, &(0x7f0000001780)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x3, 0x5, 0x5, 0x1}) 1m5.185694424s ago: executing program 0 (id=4062): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000a00)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0, 0x0, 0x3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x529f, r0, 0x0, 0x0, 0x100000001, 0x0, 0x2}]) 1m5.021565024s ago: executing program 0 (id=4066): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$cgroup_int(r0, 0x0, 0x0) 1m4.994288144s ago: executing program 34 (id=4066): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$cgroup_int(r0, 0x0, 0x0) 14.175490444s ago: executing program 5 (id=5834): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000a6a000/0x4000)=nil, 0x4000) mremap(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 14.034820924s ago: executing program 5 (id=5838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 13.868122633s ago: executing program 5 (id=5844): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) munlockall() 13.804277943s ago: executing program 5 (id=5846): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000440)={[{@lazytime}, {@user_xattr}, {@norecovery}, {@acl}, {@dioread_nolock}, {@sysvgroups}, {@abort}, {@errors_remount}, {@oldalloc}]}, 0x0, 0x7b8, &(0x7f0000001780)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x3, 0x5, 0x5, 0x1}) 13.543204572s ago: executing program 5 (id=5856): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 13.253239092s ago: executing program 5 (id=5868): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 13.247351432s ago: executing program 35 (id=5868): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 4.540136171s ago: executing program 2 (id=6146): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) poll(&(0x7f0000000100)=[{r1, 0x2058}], 0x1, 0xfffffc01) 4.314986821s ago: executing program 2 (id=6152): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) shutdown(r0, 0x0) 4.21949178s ago: executing program 2 (id=6157): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800) 4.1324126s ago: executing program 2 (id=6160): mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.649245499s ago: executing program 6 (id=6177): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) flock(r0, 0x1780f9c373410dea) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) flock(r1, 0x2) 3.613069969s ago: executing program 6 (id=6178): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 3.473653659s ago: executing program 6 (id=6179): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 2.868657167s ago: executing program 2 (id=6190): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x1}], 0x1, 0x0, &(0x7f00000001c0)={[0x9]}, 0x8) 765.854032ms ago: executing program 8 (id=6233): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r1, r0, 0xff, 0x0) vmsplice(r2, &(0x7f0000001700)=[{&(0x7f0000001340)="89", 0x1}], 0x1, 0x0) 593.471552ms ago: executing program 7 (id=6238): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffff}, 0x19) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x229}, 0x14}}, 0x0) 541.914122ms ago: executing program 7 (id=6240): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) symlinkat(0x0, 0xffffffffffffffff, 0x0) 516.830462ms ago: executing program 8 (id=6241): sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbdf2501006a"], 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x4040080) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000004a008d2a00000000000000000a"], 0x1c}}, 0x0) 504.433321ms ago: executing program 4 (id=6242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 455.904391ms ago: executing program 7 (id=6243): r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1], 0x18}, 0x4c0c0) close_range(r0, 0xffffffffffffffff, 0x0) 426.392931ms ago: executing program 8 (id=6244): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 386.532372ms ago: executing program 4 (id=6245): r0 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) read$FUSE(r1, &(0x7f000000b080)={0x2020}, 0x2020) 355.502831ms ago: executing program 4 (id=6246): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f00000018c0), 0x4) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/57, 0x39}, 0x0) 334.083441ms ago: executing program 7 (id=6247): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x800, 0x0) write$binfmt_script(r1, &(0x7f0000001c80)={'#! ', './file0'}, 0xb) 309.416101ms ago: executing program 6 (id=6248): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) prctl$PR_MCE_KILL(0x23, 0xb, 0x7fffffffeffe) 303.405031ms ago: executing program 8 (id=6249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getresuid(&(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000380)) 274.090481ms ago: executing program 4 (id=6250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 261.471101ms ago: executing program 6 (id=6251): prlimit64(0x0, 0xb, &(0x7f0000000080), 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, 0x0, 0x0) 244.682931ms ago: executing program 7 (id=6252): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) 215.771451ms ago: executing program 8 (id=6253): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xbc, 0x65, 0x8, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xba41}, @filter_kind_options=@f_bpf={{0x8}, {0x88, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x1, 0x9, 0xb1, 0x7f}, {0x5, 0x49, 0x10}, {0x800, 0x9, 0xb}]}}, @TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_BPF_POLICE={0x4c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x20000000, 0x87, 0x6, 0x5, {0x83, 0x2, 0x9, 0x7, 0x40, 0xfffffff7}, {0x71, 0x2, 0x4dc9, 0x7, 0x9, 0x3}, 0x10001, 0x4, 0x59}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}]}]}}]}, 0xbc}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 166.233251ms ago: executing program 7 (id=6254): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f00000006c0)={[{@nomblk_io_submit}]}, 0x3e, 0x51b, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 125.06982ms ago: executing program 8 (id=6255): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(0x0, 0x0) 105.99699ms ago: executing program 4 (id=6256): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 76.320691ms ago: executing program 6 (id=6257): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 14.58755ms ago: executing program 4 (id=6258): mlockall(0x7) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000d00)={[{@commit={'commit', 0x3d, 0x52}}], [{@obj_type={'obj_type', 0x3d, 'kmem_cache_free\x00'}}]}, 0x1, 0x577, &(0x7f0000005880)="$eJzs3U9oXNUaAPDv3knatM17aeE9eE+6KCpUKJ0k/aPVVboVC4UuBDc1TKYhZJIJmUltQsB0X8SCotJN3enCpeLChbhx6daN4loQDQpNBYnc+ZO2yUwaazNTM78f3Jlz7pnO952Z+U7nDveSAHrWsewmjfh/RFxMIobuG+uLxuCx+uPWVpcLd1eXC0msr1/6OYkkIu6sLheaj08a94ciYiUi/hcRX/VHnEi3xq0sLk2Pl0rF+UZ/uDozN1xZXDo5NTM+WZwszp5+4cWz586cHT01+tjmeuP7m2/d+Obl2zc//uToSuHd8STGYrAxdv88Hqf6a9IfY5v2n9mNYF2UdDsBHkmuUef9EfHfGIpco+qBvW99f8Q60KOSbep/oHb7Zm2hAPaa5veA7Pi3uXXy+8dP5+sHIFnctcZWH+mr/zYRA7Vjk4O/Jg8cmWTHm4c7mSh70sr1iBjp69v6+U8an79HN/I4EmRXfXm+9v63WP/SjfUnWqw/g83fTv+m5vq3tmX9uxc/12b9u7jDGH+89sMHbeNfj3iqZfxkI37SIn4aEa/vMP6tVz8/t/GPNln/MOJ4tI7flGz/+/DwlalScaR+2zL+F8ePvtQ6s321+R9sE39sm/ln++a2PN+BllE++/rTp1favDZZ/Oee2f79bxU/i/R2m+fc7Midj15pN5bFn2gz/+3iZ/tuN9q5h8R/fuzYdztMFQAAAAAAAAAA+AvS2rlsSZrfaKdpPl+/hvc/cTAtlSvVE1fKC7MT9XPeDkd/2jzTaqjeT7L+aON83Gb/1Kb+6Yg4EhHv5A7U+vlCuTTR7ckDAAAAAAAAAAAAAAAAAADAE+LQpuv/f8vVr/8HeoQ/+Q29a+f1f3VgVxMBOu7B+k+6lgfQeb7/Q+9S/9C71D/0LvUPvWub+t/fyTyAzvP/P/Qu9Q+9S/0DAAAAAAAAAAAAAAAAAAAAAAAAAMCuuHjhQrat311dLmT9iauLC9PlqycnipXp/MxCIV8oz8/lJ8vlyVIxXyjPPOz5SuXy3EjMLlwbrhYr1eHK4tLlmfLCbPXy1Mz4ZPFysb8jswIAAAAAAAAAAAAAAAAAAIB/lsHalqT5iEhr7TTN5yP+FRGHoz+5MlUqjkTEvyPi21z//qz/e7eTBgAAAAAAAAAAAAAAAAAAgD2msrg0PV4qFec1tjYiYuUJSENDoysf/rqBri5QAAAAAAAAAAAAAAAAAADQQ+5d9NvtTAAAAAAAAAAAAAAAAAAAAKCXpT8mEZFtx4eeHdw8ui9Zy9XuI+KNW5feuzZerc6PZvt/2dhffb+x/1Q38gd2qlmnzToGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7qksLk2Pl0rF+V1sdHuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/izwAAAP//HMTVYw==") 0s ago: executing program 2 (id=6259): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ppoll(&(0x7f00000003c0)=[{r0, 0x4000}, {r0, 0x8000}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.2.3812'. [ 185.939088][ T8851] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3812'. [ 186.015657][ T53] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 186.032928][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.066786][ T53] usb 6-1: config 0 descriptor?? [ 186.273539][ T8884] tc_dump_action: action bad kind [ 186.339172][ T581] usb 6-1: USB disconnect, device number 2 [ 186.673047][ T8916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3843'. [ 186.727759][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3843'. [ 186.994726][ T8932] syz.4.3851 (8932): /proc/8931/oom_adj is deprecated, please use /proc/8931/oom_score_adj instead. [ 187.391668][ T328] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 187.422746][ T8971] x_tables: duplicate entry at hook 3 [ 187.483788][ T8973] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3871'. [ 187.762700][ T328] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 187.781647][ T328] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 187.800985][ T328] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 187.819593][ T328] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 188.012073][ T328] usb 6-1: New USB device found, idVendor=04b4, idProduct=009b, bcdDevice=16.89 [ 188.021193][ T328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.045379][ T328] usb 6-1: Product: syz [ 188.049465][ T328] usb 6-1: Manufacturer: syz [ 188.072004][ T328] usb 6-1: SerialNumber: syz [ 188.100769][ T328] usb 6-1: config 0 descriptor?? [ 188.162427][ T328] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 188.204144][ T328] usb 6-1: Detected FT-X [ 188.208229][ T328] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 188.231710][ T328] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 188.383898][ T328] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 188.401698][ T328] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 188.431722][ T328] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 188.440348][ T328] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 188.470678][ T328] usb 6-1: USB disconnect, device number 3 [ 188.486606][ T328] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 188.523900][ T328] ftdi_sio 6-1:0.0: device disconnected [ 188.580885][ T9041] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 188.604589][ T9041] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 188.624429][ T9041] System zones: 0-2, 18-18, 34-35 [ 188.633610][ T9041] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue [ 188.734396][ T9048] bpf: Bad value for 'mode' [ 188.968634][ T1409] print_req_error: 162 callbacks suppressed [ 188.968652][ T1409] blk_update_request: I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 188.990926][ T1409] blk_update_request: I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.000618][ T333] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 189.029686][ T333] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.052122][ T9067] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3914'. [ 189.177295][ T1409] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 189.197715][ T1408] blk_update_request: I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 189.235825][ T1408] blk_update_request: I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.251810][ T1409] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.286478][ T1408] buffer_io_error: 74 callbacks suppressed [ 189.286491][ T1408] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 189.301122][ T1409] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 189.414271][ T9083] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.440900][ T9083] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 189.450534][ T9083] FAT-fs (loop0): Filesystem has been set read-only [ 189.784000][ T1409] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 189.784030][ T1408] blk_update_request: I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.823238][ T1409] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 189.874494][ T24] kauditd_printk_skb: 686 callbacks suppressed [ 189.874510][ T24] audit: type=1400 audit(2000000003.040:6848): avc: denied { read write } for pid=6867 comm="syz-executor" name="loop6" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.911588][ T1408] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 189.955448][ T1409] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 189.969853][ T1408] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 189.979663][ T9121] netlink: 'syz.2.3940': attribute type 1 has an invalid length. [ 190.001347][ T24] audit: type=1400 audit(2000000003.040:6849): avc: denied { read write } for pid=6565 comm="syz-executor" name="loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.071611][ T24] audit: type=1400 audit(2000000003.040:6850): avc: denied { open } for pid=6565 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.115029][ T1409] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 190.115377][ T1408] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 190.200361][ T24] audit: type=1400 audit(2000000003.040:6851): avc: denied { ioctl } for pid=6565 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.244170][ T1408] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 190.256252][ T1409] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 190.300364][ T9136] netlink: 'syz.6.3946': attribute type 5 has an invalid length. [ 190.331694][ T24] audit: type=1400 audit(2000000003.040:6852): avc: denied { read write } for pid=309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.411607][ T24] audit: type=1400 audit(2000000003.040:6853): avc: denied { open } for pid=309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.480385][ T24] audit: type=1400 audit(2000000003.040:6854): avc: denied { ioctl } for pid=309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.560761][ T24] audit: type=1400 audit(2000000003.090:6855): avc: denied { read write open } for pid=6867 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.586097][ T24] audit: type=1400 audit(2000000003.090:6856): avc: denied { ioctl } for pid=6867 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.612090][ T24] audit: type=1400 audit(2000000003.100:6857): avc: denied { create } for pid=9116 comm="syz.5.3939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.634319][ T9146] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,user_xattr,,errors=continue [ 190.638965][ T9157] netlink: 'syz.5.3955': attribute type 10 has an invalid length. [ 190.652186][ T9146] ext4 filesystem being mounted at /768/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.760287][ T9146] EXT4-fs error (device loop4): ext4_empty_dir:3083: inode #12: block 32: comm syz.4.3951: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 190.782755][ T9146] EXT4-fs warning (device loop4): ext4_empty_dir:3085: inode #12: comm syz.4.3951: directory missing '.' [ 191.055656][ T9159] loop2: p1 p2 p3 < p5 p6 p7 > [ 191.082454][ T9177] Zero length message leads to an empty skb [ 191.130462][ T94] loop2: p1 p2 p3 < p5 p6 p7 > [ 191.348960][ T9188] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 191.377695][ T9188] EXT4-fs (loop4): 1 truncate cleaned up [ 191.383371][ T9188] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,bsdgroups,inode_readahead_blks=0x0000000000000200,stripe=0x0000000000004000,nojournal_checksum,max_batch_time=0x0000000000000004,,errors=continue [ 191.450159][ T1409] udevd[1409]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 191.450556][ T9188] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2210: inode #15: comm syz.4.3969: corrupted in-inode xattr [ 191.467124][ T1407] udevd[1407]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 191.475000][ T333] udevd[333]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 191.485458][ T1404] udevd[1404]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 191.494626][ T329] udevd[329]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 191.504804][ T372] udevd[372]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 191.526714][ T9195] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.3973: Failed to acquire dquot type 0 [ 191.527112][ T9195] EXT4-fs error (device loop0): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 191.527162][ T9195] EXT4-fs error (device loop0) in ext4_do_update_inode:5303: error 27 [ 191.527316][ T9195] EXT4-fs error (device loop0): ext4_dirty_inode:6110: inode #13: comm syz.0.3973: mark_inode_dirty error [ 191.527738][ T9195] EXT4-fs error (device loop0) in ext4_do_update_inode:5303: error 27 [ 191.527867][ T9195] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #13: comm syz.0.3973: mark_inode_dirty error [ 191.527994][ T9195] EXT4-fs error (device loop0) in ext4_do_update_inode:5303: error 27 [ 191.528116][ T9195] EXT4-fs error (device loop0) in ext4_orphan_del:3292: error 27 [ 191.528227][ T9195] EXT4-fs error (device loop0) in ext4_do_update_inode:5303: error 27 [ 191.528343][ T9195] EXT4-fs error (device loop0): ext4_truncate:4389: inode #13: comm syz.0.3973: mark_inode_dirty error [ 191.528454][ T9195] EXT4-fs error (device loop0) in ext4_orphan_cleanup:3108: error 27 [ 191.528952][ T9195] EXT4-fs (loop0): 1 truncate cleaned up [ 191.528967][ T9195] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 191.553574][ T9188] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1744: inode #15: comm syz.4.3969: unable to update i_inline_off [ 191.719663][ T9188] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2210: inode #15: comm syz.4.3969: corrupted in-inode xattr [ 191.771397][ T9221] __nla_validate_parse: 1 callbacks suppressed [ 191.771409][ T9221] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3982'. [ 191.791243][ T1409] udevd[1409]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 191.805286][ T333] udevd[333]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 191.818965][ T329] udevd[329]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 191.822691][ T1408] udevd[1408]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 192.250820][ T9224] F2FS-fs (loop5): fault_injection options not supported [ 192.273294][ T9224] F2FS-fs (loop5): invalid crc value [ 192.294389][ T9224] F2FS-fs (loop5): Found nat_bits in checkpoint [ 192.388812][ T9224] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 192.571521][ T6565] attempt to access beyond end of device [ 192.571521][ T6565] loop5: rw=2049, want=45104, limit=40427 [ 192.866951][ T9277] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 192.895431][ T9285] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4002'. [ 193.233508][ T9290] F2FS-fs (loop5): fault_injection options not supported [ 193.241003][ T9290] F2FS-fs (loop5): fault_type options not supported [ 193.252500][ T9290] F2FS-fs (loop5): invalid crc value [ 193.273663][ T9290] F2FS-fs (loop5): Found nat_bits in checkpoint [ 193.346056][ T9290] F2FS-fs (loop5): Start checkpoint disabled! [ 193.360345][ T9290] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 193.553109][ T9338] netlink: 'syz.5.4030': attribute type 2 has an invalid length. [ 193.595428][ T15] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 193.732046][ T9352] device veth1_macvtap left promiscuous mode [ 193.737984][ T9352] device macsec0 entered promiscuous mode [ 193.747214][ T9352] device veth1_macvtap entered promiscuous mode [ 193.753489][ T9352] device macsec0 left promiscuous mode [ 193.841684][ T15] usb 3-1: Using ep0 maxpacket: 32 [ 193.939859][ T9367] xt_hashlimit: size too large, truncated to 1048576 [ 193.962871][ T15] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 193.982628][ T15] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 193.992571][ T15] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 194.002093][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.017990][ T15] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 194.031643][ T15] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 194.049851][ T15] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 194.064259][ T15] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 194.073569][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.083250][ T15] usb 3-1: config 0 descriptor?? [ 194.262058][ T9383] EXT4-fs error (device loop6): ext4_fill_super:4955: inode #2: comm syz.6.4051: casefold flag without casefold feature [ 194.285071][ T9383] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 194.311211][ T9383] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 194.346271][ T443] usb 3-1: USB disconnect, device number 41 [ 194.468253][ T9396] EXT4-fs (loop0): Ignoring removed oldalloc option [ 194.483627][ T9396] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.523227][ T9396] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,user_xattr,norecovery,nodioread_nolock,dioread_nolock,sysvgroups,abort,errors=remount-ro,oldalloc, [ 194.562909][ T9396] incfs: ino conflict with backing FS 2 [ 194.601281][ T304] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 480: padding at end of block bitmap is not set [ 194.642486][ T304] EXT4-fs (loop0): Remounting filesystem read-only [ 194.650824][ T304] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 194.716938][ T9415] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 194.730773][ T9415] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.894137][ T9430] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9430 comm=syz.2.4071 [ 194.903485][ T24] kauditd_printk_skb: 701 callbacks suppressed [ 194.903502][ T24] audit: type=1400 audit(2000000008.070:7557): avc: denied { read write } for pid=6565 comm="syz-executor" name="loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.991226][ T24] audit: type=1400 audit(2000000008.070:7558): avc: denied { read write } for pid=311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 195.027320][ T24] audit: type=1400 audit(2000000008.070:7559): avc: denied { open } for pid=311 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 195.052162][ T24] audit: type=1400 audit(2000000008.070:7560): avc: denied { ioctl } for pid=311 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 195.072118][ T9448] exfat: Deprecated parameter 'utf8' [ 195.078151][ T24] audit: type=1400 audit(2000000008.080:7561): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 195.104415][ T24] audit: type=1400 audit(2000000008.080:7562): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.126102][ T24] audit: type=1400 audit(2000000008.080:7563): avc: denied { append } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.148174][ T24] audit: type=1400 audit(2000000008.080:7564): avc: denied { open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.173515][ T24] audit: type=1400 audit(2000000008.080:7565): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.174388][ T9426] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.196608][ T24] audit: type=1400 audit(2000000008.110:7566): avc: denied { read write open } for pid=6565 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 195.228726][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.236376][ T9426] device bridge_slave_0 entered promiscuous mode [ 195.273241][ T9426] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.280302][ T9426] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.290635][ T9448] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 195.308937][ T9426] device bridge_slave_1 entered promiscuous mode [ 195.453474][ T9426] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.460415][ T9426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.467552][ T9426] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.474322][ T9426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.576243][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.593350][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.609563][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.646700][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.672402][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.679346][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.689597][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.698210][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.705095][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.732201][ T7] device bridge_slave_1 left promiscuous mode [ 195.743692][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.751238][ T7] device bridge_slave_0 left promiscuous mode [ 195.757985][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.766404][ T7] device veth1_macvtap left promiscuous mode [ 195.772393][ T7] device veth0_vlan left promiscuous mode [ 195.883401][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.902042][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.938273][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.952254][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.999396][ T9426] device veth0_vlan entered promiscuous mode [ 196.010172][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4099'. [ 196.042377][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.061955][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.080487][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.107220][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.161381][ T9426] device veth1_macvtap entered promiscuous mode [ 196.168116][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.177593][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.193984][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.212661][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.234722][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.267334][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.296273][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.305381][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.313750][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.335658][ T9518] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.392785][ T9518] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 196.429682][ T9518] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf32de3a7, utbl_chksum : 0xe619d30d) [ 196.512985][ T9510] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 196.521005][ T9510] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 196.541706][ T9510] F2FS-fs (loop4): invalid crc value [ 196.589802][ T9510] F2FS-fs (loop4): Found nat_bits in checkpoint [ 196.709487][ T9510] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 196.722532][ T9510] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 196.949145][ T9553] netlink: 'syz.6.4123': attribute type 2 has an invalid length. [ 197.117394][ T9557] erofs: (device loop6): mounted with root inode @ nid 36. [ 197.210308][ T9557] attempt to access beyond end of device [ 197.210308][ T9557] loop6: rw=0, want=24, limit=16 [ 197.276521][ T9571] attempt to access beyond end of device [ 197.276521][ T9571] loop6: rw=0, want=24, limit=16 [ 197.860428][ T9626] SELinux: duplicate or incompatible mount options [ 197.931043][ T9634] xt_time: unknown flags 0xc [ 198.278647][ T9658] EXT4-fs (loop2): orphan cleanup on readonly fs [ 198.314747][ T9658] EXT4-fs (loop2): 1 orphan inode deleted [ 198.375519][ T9658] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 198.634968][ T9705] netlink: 'syz.7.4190': attribute type 1 has an invalid length. [ 198.724583][ T9698] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 198.874484][ T9722] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 199.091629][ T583] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 199.481714][ T583] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.498238][ T583] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.519588][ T583] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.533084][ T583] usb 5-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 199.551732][ T583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.564186][ T583] usb 5-1: config 0 descriptor?? [ 199.623524][ T9786] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4227'. [ 199.632498][ T9786] netlink: 'syz.2.4227': attribute type 2 has an invalid length. [ 199.706921][ T9778] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 199.721690][ T9778] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 199.747907][ T9778] F2FS-fs (loop6): Found nat_bits in checkpoint [ 199.815438][ T9778] F2FS-fs (loop6): recover fsync data on readonly fs [ 199.826425][ T9778] F2FS-fs (loop6): Try to recover 1th superblock, ret: -30 [ 199.838238][ T9778] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 199.965659][ T24] kauditd_printk_skb: 788 callbacks suppressed [ 199.965674][ T24] audit: type=1400 audit(2000000013.130:8355): avc: denied { read write } for pid=6565 comm="syz-executor" name="loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.055571][ T24] audit: type=1400 audit(2000000013.130:8356): avc: denied { read write open } for pid=6565 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.082800][ T583] betop 0003:11C0:5506.0001: unbalanced delimiter at end of report description [ 200.092482][ T583] betop 0003:11C0:5506.0001: parse failed [ 200.098146][ T583] betop: probe of 0003:11C0:5506.0001 failed with error -22 [ 200.106890][ T24] audit: type=1400 audit(2000000013.130:8357): avc: denied { ioctl } for pid=6565 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.164385][ T24] audit: type=1400 audit(2000000013.170:8358): avc: denied { create } for pid=9795 comm="syz.5.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 200.196243][ T24] audit: type=1400 audit(2000000013.170:8359): avc: denied { write } for pid=9795 comm="syz.5.4231" path="socket:[44340]" dev="sockfs" ino=44340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 200.238362][ T9805] tipc: Started in network mode [ 200.243321][ T9805] tipc: Own node identity 1007, cluster identity 4711 [ 200.250051][ T9805] tipc: 32-bit node address hash set to 1007 [ 200.271681][ T24] audit: type=1400 audit(2000000013.170:8360): avc: denied { nlmsg_read } for pid=9795 comm="syz.5.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 200.282260][ T15] usb 5-1: USB disconnect, device number 44 [ 200.298115][ T9805] tipc: Cannot configure node identity twice [ 200.305574][ T24] audit: type=1400 audit(2000000013.170:8361): avc: denied { module_request } for pid=9795 comm="syz.5.4231" kmod="net-pf-16-proto-4-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 200.379988][ T24] audit: type=1400 audit(2000000013.190:8362): avc: denied { read write } for pid=6565 comm="syz-executor" name="loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.405909][ T24] audit: type=1400 audit(2000000013.190:8363): avc: denied { open } for pid=6565 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.450131][ T24] audit: type=1400 audit(2000000013.190:8364): avc: denied { ioctl } for pid=6565 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.766708][ T9811] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 200.796603][ T9811] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 200.836829][ T9811] F2FS-fs (loop6): Found nat_bits in checkpoint [ 200.888332][ T9811] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 200.895391][ T9811] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 200.921643][ T328] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 201.003423][ T6867] attempt to access beyond end of device [ 201.003423][ T6867] loop6: rw=2049, want=45104, limit=40427 [ 201.291880][ T328] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 201.314659][ T328] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 201.340128][ T328] usb 8-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 201.350739][ T328] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.382298][ T328] usb 8-1: config 0 descriptor?? [ 201.401969][ T9835] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.520032][ T9899] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 201.539081][ T9899] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.553293][ T9888] F2FS-fs (loop6): Invalid log blocks per segment (4278190089) [ 201.566045][ T9888] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 201.582284][ T9888] F2FS-fs (loop6): invalid crc value [ 201.590691][ T9888] F2FS-fs (loop6): Found nat_bits in checkpoint [ 201.635287][ T9888] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 201.642657][ T9888] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 201.692825][ T6867] attempt to access beyond end of device [ 201.692825][ T6867] loop6: rw=2049, want=45104, limit=40427 [ 201.863719][ T328] logitech-hidpp-device 0003:046D:C088.0002: item fetching failed at offset 3/5 [ 201.873013][ T328] logitech-hidpp-device 0003:046D:C088.0002: hidpp_probe:parse failed [ 201.880407][ T9915] F2FS-fs (loop5): invalid crc value [ 201.888158][ T328] logitech-hidpp-device: probe of 0003:046D:C088.0002 failed with error -22 [ 201.907790][ T9915] F2FS-fs (loop5): Found nat_bits in checkpoint [ 201.967211][ T9915] F2FS-fs (loop5): Start checkpoint disabled! [ 201.978222][ T9915] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 202.049140][ T7] attempt to access beyond end of device [ 202.049140][ T7] loop5: rw=2049, want=40976, limit=40427 [ 202.070684][ T443] usb 8-1: USB disconnect, device number 2 [ 202.766106][ T581] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 202.872038][ T9969] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 202.878216][ T9969] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 202.936647][ T9969] F2FS-fs (loop7): invalid crc value [ 202.972304][ T9969] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 203.033597][ T9969] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 203.040755][ T9969] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 203.092496][ T9426] attempt to access beyond end of device [ 203.092496][ T9426] loop7: rw=2049, want=45104, limit=40427 [ 203.141718][ T581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.153113][ T581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.178753][ T581] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 203.191213][ T581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.210020][ T581] usb 3-1: config 0 descriptor?? [ 203.248297][T10005] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue [ 203.292336][T10005] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.551988][T10028] EXT4-fs (loop4): error: could not find journal device path: error -2 [ 203.723135][ T581] hid-led 0003:1D34:000A.0003: unknown main item tag 0x0 [ 203.736680][ T581] hid-led 0003:1D34:000A.0003: unknown main item tag 0x0 [ 203.931766][ T581] hid-led: probe of 0003:1D34:000A.0003 failed with error -71 [ 203.960426][ T581] usb 3-1: USB disconnect, device number 42 [ 204.210864][T10086] erofs: (device loop7): mounted with root inode @ nid 36. [ 204.247463][T10089] futex_wake_op: syz.6.4354 tries to shift op by 32; fix this program [ 204.424434][T10101] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.446540][T10101] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 204.486019][T10101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002] [ 204.499227][T10101] EXT4-fs (loop5): orphan cleanup on readonly fs [ 204.507079][T10101] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.4360: bg 0: block 361: padding at end of block bitmap is not set [ 204.533166][T10101] EXT4-fs (loop5): Remounting filesystem read-only [ 204.539602][T10101] EXT4-fs error (device loop5) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 204.556069][T10101] EXT4-fs error (device loop5): ext4_free_branches:1026: inode #11: comm syz.5.4360: invalid indirect mapped block 2185560079 (level 1) [ 204.571352][T10101] EXT4-fs (loop5): 1 truncate cleaned up [ 204.577455][T10101] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,dioread_nolock,noblock_validity,errors=remount-ro,nolazytime [ 204.978836][ T24] kauditd_printk_skb: 782 callbacks suppressed [ 204.978852][ T24] audit: type=1400 audit(2000000000.790:9147): avc: denied { read write } for pid=9426 comm="syz-executor" name="loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.049017][ T24] audit: type=1400 audit(2000000000.790:9148): avc: denied { read write open } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.088580][ T24] audit: type=1400 audit(2000000000.790:9149): avc: denied { ioctl } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.115601][ T24] audit: type=1400 audit(2000000000.790:9150): avc: denied { bpf } for pid=10151 comm="syz.5.4382" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 205.138181][ T24] audit: type=1400 audit(2000000000.810:9151): avc: denied { read write } for pid=6565 comm="syz-executor" name="loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.171724][ T24] audit: type=1400 audit(2000000000.810:9152): avc: denied { open } for pid=6565 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.241083][ T24] audit: type=1400 audit(2000000000.810:9153): avc: denied { ioctl } for pid=6565 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.282168][ T24] audit: type=1400 audit(2000000000.830:9154): avc: denied { read write } for pid=9426 comm="syz-executor" name="loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.306914][ T24] audit: type=1400 audit(2000000000.830:9155): avc: denied { open } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.344132][ T24] audit: type=1400 audit(2000000000.830:9156): avc: denied { ioctl } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.980463][T10242] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,data_err=ignore,max_batch_time=0x0000000000000007,sysvgroups,,errors=continue [ 206.011722][T10242] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.645095][T10391] device gre0 entered promiscuous mode [ 207.660788][T10391] device vlan2 entered promiscuous mode [ 207.675566][T10391] device gre0 left promiscuous mode [ 207.825220][T10407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4502'. [ 207.843840][T10407] tipc: Invalid UDP bearer configuration [ 207.843868][T10407] tipc: Enabling of bearer rejected, failed to enable media [ 208.341611][ T442] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 208.567831][T10482] bridge0: port 3(veth0_vlan) entered blocking state [ 208.582042][T10482] bridge0: port 3(veth0_vlan) entered disabled state [ 208.589616][T10482] bridge0: port 3(veth0_vlan) entered blocking state [ 208.596172][T10482] bridge0: port 3(veth0_vlan) entered forwarding state [ 208.603438][ T442] usb 3-1: Using ep0 maxpacket: 32 [ 208.722381][ T442] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.736294][ T442] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.749633][ T442] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 208.766499][ T442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.783237][ T442] usb 3-1: config 0 descriptor?? [ 209.227786][T10534] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.283915][ T442] greenasia 0003:0E8F:0012.0004: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.2-1/input0 [ 209.295358][ T442] greenasia 0003:0E8F:0012.0004: no inputs found [ 209.450193][T10556] exfat: Deprecated parameter 'namecase' [ 209.455901][T10556] exfat: Deprecated parameter 'utf8' [ 209.461091][T10556] exfat: Deprecated parameter 'namecase' [ 209.486100][T10556] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 209.491821][ T442] usb 3-1: USB disconnect, device number 43 [ 209.985798][ T24] kauditd_printk_skb: 896 callbacks suppressed [ 209.985814][ T24] audit: type=1400 audit(2000000460.809:10053): avc: denied { read write } for pid=9426 comm="syz-executor" name="loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.089242][ T24] audit: type=1400 audit(2000000460.809:10054): avc: denied { open } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.123094][ T24] audit: type=1400 audit(2000000460.809:10055): avc: denied { ioctl } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.164954][ T24] audit: type=1400 audit(2000000460.859:10056): avc: denied { read write } for pid=9426 comm="syz-executor" name="loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.208048][ T24] audit: type=1400 audit(2000000460.859:10057): avc: denied { read write open } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.256579][ T24] audit: type=1400 audit(2000000460.859:10058): avc: denied { ioctl } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.320491][ T24] audit: type=1400 audit(2000000460.859:10059): avc: denied { read write } for pid=309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.346211][ T24] audit: type=1400 audit(2000000460.859:10060): avc: denied { open } for pid=309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.379655][ T24] audit: type=1400 audit(2000000460.859:10061): avc: denied { ioctl } for pid=309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.432285][ T24] audit: type=1400 audit(2000000460.879:10062): avc: denied { read write } for pid=9426 comm="syz-executor" name="loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.698931][T10653] syz.6.4615[10653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.698996][T10653] syz.6.4615[10653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.914740][T10651] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 210.934004][T10651] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 210.943973][T10651] F2FS-fs (loop4): invalid crc value [ 210.951221][T10651] F2FS-fs (loop4): Found nat_bits in checkpoint [ 210.997880][T10670] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 211.081030][T10651] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 211.087974][T10651] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 211.672235][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4655'. [ 211.692855][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4655'. [ 211.849960][T10710] F2FS-fs (loop2): invalid crc value [ 211.928368][T10710] F2FS-fs (loop2): Found nat_bits in checkpoint [ 211.987738][T10710] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 212.174159][ T309] attempt to access beyond end of device [ 212.174159][ T309] loop2: rw=2049, want=45104, limit=40427 [ 212.524482][T10800] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 212.597435][T10800] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsv1, [ 212.932429][T10838] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 212.941916][T10838] FAT-fs (loop4): Filesystem has been set read-only [ 212.948406][T10838] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 212.960951][T10838] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 213.088276][T10835] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 213.122002][T10835] FAT-fs (loop5): Filesystem has been set read-only [ 213.133189][T10835] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 213.344511][ T328] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 213.388911][T10883] syz.6.4716[10883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.389088][T10883] syz.6.4716[10883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.491590][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 213.721945][ T328] usb 5-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 213.730900][ T328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.740369][ T328] usb 5-1: config 0 descriptor?? [ 213.771647][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 213.931727][ T25] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 213.940335][ T25] usb 8-1: config 179 has no interface number 0 [ 213.946506][ T25] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 213.957441][ T25] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 213.968455][ T25] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 213.979377][ T25] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 213.990861][ T25] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 214.004101][ T25] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 214.016448][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.051924][T10864] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 214.223362][ T328] wacom 0003:056A:0028.0005: unknown main item tag 0x0 [ 214.230078][ T328] wacom 0003:056A:0028.0005: item fetching failed at offset 3/5 [ 214.239344][ T328] wacom 0003:056A:0028.0005: parse failed [ 214.260523][ T328] wacom: probe of 0003:056A:0028.0005 failed with error -22 [ 214.426897][ T414] usb 5-1: USB disconnect, device number 45 [ 214.487121][ T20] usb 8-1: USB disconnect, device number 3 [ 214.501604][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 214.636535][T10950] rtc_cmos 00:00: Alarms can be up to one day in the future [ 214.718057][T10954] EXT4-fs (loop6): Test dummy encryption mode enabled [ 214.748013][T10954] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 214.968029][T10974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.991585][ T24] kauditd_printk_skb: 723 callbacks suppressed [ 214.991601][ T24] audit: type=1400 audit(2000000465.809:10786): avc: denied { read write } for pid=10953 comm="syz.6.4749" name="loop6" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.110250][ T24] audit: type=1400 audit(2000000465.809:10787): avc: denied { read write open } for pid=10953 comm="syz.6.4749" path="/dev/loop6" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.181839][ T24] audit: type=1400 audit(2000000465.809:10788): avc: denied { ioctl } for pid=10953 comm="syz.6.4749" path="/dev/loop6" dev="devtmpfs" ino=117 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.240192][ T24] audit: type=1400 audit(2000000465.849:10789): avc: denied { read write } for pid=309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.319810][ T24] audit: type=1400 audit(2000000465.849:10790): avc: denied { read write open } for pid=309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.401093][ T24] audit: type=1400 audit(2000000465.849:10791): avc: denied { ioctl } for pid=309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.464403][ T24] audit: type=1400 audit(2000000465.849:10792): avc: denied { read write } for pid=9426 comm="syz-executor" name="loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.525039][ T24] audit: type=1400 audit(2000000465.849:10793): avc: denied { open } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.600077][T11009] audit: audit_backlog=65 > audit_backlog_limit=64 [ 215.612015][ T24] audit: type=1400 audit(2000000465.849:10794): avc: denied { ioctl } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.743539][T11013] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4775'. [ 215.899566][T10995] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 215.919292][T10995] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 215.983271][T10995] F2FS-fs (loop4): Found nat_bits in checkpoint [ 216.128587][T10995] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 216.141386][T10995] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 216.153759][T11032] SELinux: security_context_str_to_sid(Eá…) failed for (dev sysfs, type sysfs) errno=-22 [ 216.497173][T11055] exfat: Deprecated parameter 'namecase' [ 216.535787][T11062] syz.5.4796[11062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.535853][T11062] syz.5.4796[11062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.555195][T11055] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 216.588031][T11055] attempt to access beyond end of device [ 216.588031][T11055] loop7: rw=34817, want=34359738496, limit=256 [ 217.244929][T11126] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4824'. [ 217.264127][ T414] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 217.271655][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4824'. [ 217.447525][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4835'. [ 217.511642][ T414] usb 3-1: Using ep0 maxpacket: 16 [ 217.563599][T11159] devtmpfs: Too few inodes for current use [ 217.791901][ T414] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 217.800861][ T414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.829556][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4855'. [ 217.840402][ T414] usb 3-1: Product: syz [ 217.848354][ T414] usb 3-1: Manufacturer: syz [ 217.854416][T11195] overlayfs: failed to resolve './file2': -2 [ 217.860490][ T414] usb 3-1: SerialNumber: syz [ 217.867220][ T414] usb 3-1: config 0 descriptor?? [ 217.901691][T11191] EXT4-fs (loop6): Ignoring removed oldalloc option [ 217.908137][T11191] EXT4-fs (loop6): Ignoring removed oldalloc option [ 217.912241][ T414] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 217.929146][T11191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c028, mo2=0002] [ 217.942809][T11191] System zones: 1-12 [ 217.947084][T11191] EXT4-fs (loop6): orphan cleanup on readonly fs [ 217.954237][T11191] EXT4-fs error (device loop6): ext4_xattr_inode_iget:400: comm syz.6.4854: Parent and EA inode have the same ino 15 [ 217.967541][T11191] EXT4-fs (loop6): Remounting filesystem read-only [ 217.979858][T11191] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.4854: inode #261888: comm syz.6.4854: iget: illegal inode # [ 217.994794][T11191] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.4854: error while reading EA inode 261888 err=-117 [ 218.027452][T11191] EXT4-fs (loop6): 1 orphan inode deleted [ 218.034098][T11191] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,oldalloc,noauto_da_alloc,debug,oldalloc,nogrpid, [ 218.073641][T11191] EXT4-fs error (device loop6): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz.6.4854: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 218.144622][ T53] usb 3-1: USB disconnect, device number 44 [ 218.251634][ T1668] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 218.451851][T11238] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 218.469184][T11238] ext4 filesystem being mounted at /406/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 218.612065][ T1668] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 218.626104][T11269] netlink: 'syz.4.4890': attribute type 1 has an invalid length. [ 218.646090][ T1668] usb 6-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 218.684887][ T1668] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.707362][ T1668] usb 6-1: config 0 descriptor?? [ 218.761255][T11281] bridge0: port 4(veth1_macvtap) entered blocking state [ 218.778765][T11281] bridge0: port 4(veth1_macvtap) entered disabled state [ 219.002699][T11314] netlink: 'syz.6.4911': attribute type 16 has an invalid length. [ 219.020435][T11314] netlink: 'syz.6.4911': attribute type 3 has an invalid length. [ 219.058807][T11314] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.4911'. [ 219.085895][T11322] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 219.202622][ T1668] elecom 0003:056E:00FB.0006: item fetching failed at offset 2/5 [ 219.227179][ T1668] elecom: probe of 0003:056E:00FB.0006 failed with error -22 [ 219.408194][ T1667] usb 6-1: USB disconnect, device number 4 [ 219.542745][T11360] FAT-fs (loop7): Directory bread(block 64) failed [ 219.550242][T11360] FAT-fs (loop7): Directory bread(block 65) failed [ 219.557658][T11360] FAT-fs (loop7): Directory bread(block 66) failed [ 219.564604][T11360] FAT-fs (loop7): Directory bread(block 67) failed [ 219.571157][T11360] FAT-fs (loop7): Directory bread(block 68) failed [ 219.578814][T11360] FAT-fs (loop7): Directory bread(block 69) failed [ 219.594721][T11360] FAT-fs (loop7): Directory bread(block 70) failed [ 219.610342][T11360] FAT-fs (loop7): Directory bread(block 71) failed [ 219.619814][T11360] FAT-fs (loop7): Directory bread(block 72) failed [ 219.628608][T11360] FAT-fs (loop7): Directory bread(block 73) failed [ 219.964838][T11328] F2FS-fs (loop4): invalid crc value [ 219.989897][T11328] F2FS-fs (loop4): Found nat_bits in checkpoint [ 220.021046][ T24] kauditd_printk_skb: 843 callbacks suppressed [ 220.021062][ T24] audit: type=1400 audit(2000000470.839:11621): avc: denied { read write } for pid=9426 comm="syz-executor" name="loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.078794][ T24] audit: type=1400 audit(2000000470.849:11622): avc: denied { read write } for pid=6565 comm="syz-executor" name="loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.103803][T11328] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 220.169337][ T24] audit: type=1400 audit(2000000470.849:11623): avc: denied { open } for pid=6565 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.271439][ T24] audit: type=1400 audit(2000000470.849:11624): avc: denied { ioctl } for pid=6565 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.314529][ T24] audit: type=1400 audit(2000000470.879:11625): avc: denied { read write open } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.354831][ T24] audit: type=1400 audit(2000000470.879:11626): avc: denied { ioctl } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.382016][ T24] audit: type=1400 audit(2000000470.919:11627): avc: denied { prog_load } for pid=11385 comm="syz.7.4941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 220.401163][ T24] audit: type=1400 audit(2000000470.929:11628): avc: denied { mount } for pid=11325 comm="syz.4.4917" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 220.414481][T11384] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 220.429735][T11384] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 220.446161][T11384] F2FS-fs (loop5): invalid crc value [ 220.453765][T11401] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4950'. [ 220.453778][ T24] audit: type=1400 audit(2000000470.939:11629): avc: denied { read write } for pid=11325 comm="syz.4.4917" name="loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.453801][ T24] audit: type=1400 audit(2000000470.939:11630): avc: denied { open } for pid=11325 comm="syz.4.4917" path="/dev/loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.473802][T11401] device veth2 entered promiscuous mode [ 220.495383][T11384] F2FS-fs (loop5): Found nat_bits in checkpoint [ 220.573054][T11384] F2FS-fs (loop5): Start checkpoint disabled! [ 220.612179][T11384] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 220.625325][T11384] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 220.830900][ T326] attempt to access beyond end of device [ 220.830900][ T326] loop5: rw=2049, want=40992, limit=40427 [ 221.027725][T11435] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 221.061955][T11435] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 221.314469][T11462] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 221.360700][T11433] F2FS-fs (loop6): fault_injection options not supported [ 221.375666][T11433] F2FS-fs (loop6): invalid crc value [ 221.403639][T11433] F2FS-fs (loop6): Found nat_bits in checkpoint [ 221.525362][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4982'. [ 221.580608][T11433] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 221.679405][T11484] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 221.722709][T11484] ext4 filesystem being mounted at /467/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 222.538249][T11515] F2FS-fs (loop6): Invalid log blocks per segment (4278190089) [ 222.574166][T11515] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 222.583648][T11515] F2FS-fs (loop6): invalid crc value [ 222.591755][T11515] F2FS-fs (loop6): Found nat_bits in checkpoint [ 222.631367][T11515] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 222.638286][T11515] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 223.119193][T11608] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 223.132568][T11608] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.410737][T11649] usb usb1: usbfs: process 11649 (syz.5.5056) did not claim interface 0 before use [ 223.720326][T11677] FAT-fs (loop2): error, invalid access to FAT (entry 0x0f000000) [ 223.751467][T11677] FAT-fs (loop2): Filesystem has been set read-only [ 223.759262][T11677] FAT-fs (loop2): error, invalid access to FAT (entry 0x0f000000) [ 223.901117][T11709] netlink: 'syz.6.5085': attribute type 5 has an invalid length. [ 223.921935][T11706] EXT4-fs (loop7): Ignoring removed bh option [ 223.925899][ T15] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 223.928379][T11706] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 223.952392][T11706] EXT4-fs (loop7): 1 truncate cleaned up [ 223.958225][T11706] EXT4-fs (loop7): mounted filesystem without journal. Opts: bh,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,min_batch_time=0x0000000000000006,,errors=continue [ 224.073987][T11724] SELinux: Context Ü is not valid (left unmapped). [ 224.241595][ T15] usb 6-1: Using ep0 maxpacket: 16 [ 224.361722][ T15] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 224.369778][ T414] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 224.387421][ T15] usb 6-1: config 0 has no interface number 0 [ 224.400550][ T15] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 224.421004][ T15] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 224.445552][ T15] usb 6-1: config 0 interface 41 has no altsetting 0 [ 224.611676][ T15] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 224.624350][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.633075][ T414] usb 5-1: Using ep0 maxpacket: 16 [ 224.640281][ T15] usb 6-1: Product: syz [ 224.647405][ T15] usb 6-1: Manufacturer: syz [ 224.686205][ T15] usb 6-1: SerialNumber: syz [ 224.709429][ T15] usb 6-1: config 0 descriptor?? [ 224.742249][T11679] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 224.751681][ T414] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 224.752771][T11679] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 224.764434][ T414] usb 5-1: config 0 has no interface number 0 [ 224.780706][ T414] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 224.800654][ T414] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 224.916277][T11769] F2FS-fs (loop7): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 224.951149][T11769] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 224.963437][T11769] F2FS-fs (loop7): invalid crc value [ 224.971721][ T414] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 224.984821][ T414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.001615][ T414] usb 5-1: Product: syz [ 225.006052][ T414] usb 5-1: Manufacturer: syz [ 225.010521][T11769] F2FS-fs (loop7): Found nat_bits in checkpoint [ 225.010527][ T414] usb 5-1: SerialNumber: syz [ 225.013614][ T414] usb 5-1: config 0 descriptor?? [ 225.035236][ T24] kauditd_printk_skb: 880 callbacks suppressed [ 225.035251][ T24] audit: type=1400 audit(2000000475.859:12511): avc: denied { ioctl } for pid=11678 comm="syz.5.5073" path="/dev/raw-gadget" dev="devtmpfs" ino=249 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.035260][T11679] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 225.035279][T11679] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 225.080105][T11727] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 225.087276][ T24] audit: type=1400 audit(2000000475.909:12512): avc: denied { ioctl } for pid=11678 comm="syz.5.5073" path="/dev/raw-gadget" dev="devtmpfs" ino=249 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.101183][T11769] F2FS-fs (loop7): recover fsync data on readonly fs [ 225.116150][T11727] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 225.119496][T11769] F2FS-fs (loop7): Try to recover 1th superblock, ret: -30 [ 225.132636][T11769] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 225.142866][ T24] audit: type=1400 audit(2000000475.939:12513): avc: denied { ioctl } for pid=11726 comm="syz.4.5094" path="/dev/raw-gadget" dev="devtmpfs" ino=249 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.174229][ T24] audit: type=1400 audit(2000000475.959:12514): avc: denied { read write } for pid=6867 comm="syz-executor" name="loop6" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.202795][ T24] audit: type=1400 audit(2000000475.959:12515): avc: denied { open } for pid=6867 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.230216][ T24] audit: type=1400 audit(2000000475.959:12516): avc: denied { ioctl } for pid=6867 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.256962][ T24] audit: type=1400 audit(2000000475.959:12517): avc: denied { mount } for pid=11768 comm="syz.7.5115" name="/" dev="loop7" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 225.257605][T11769] overlayfs: upper fs is r/o, try multi-lower layers mount [ 225.288030][ T24] audit: type=1400 audit(2000000475.969:12518): avc: denied { read write } for pid=11768 comm="syz.7.5115" name="loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.366976][ T24] audit: type=1400 audit(2000000475.969:12519): avc: denied { read write open } for pid=11768 comm="syz.7.5115" path="/dev/loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.387217][T11727] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 225.398550][ T24] audit: type=1400 audit(2000000475.969:12520): avc: denied { ioctl } for pid=11768 comm="syz.7.5115" path="/dev/loop7" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.402305][T11727] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 225.541719][ T15] CoreChips: probe of 6-1:0.41 failed with error -71 [ 225.549884][ T15] usb 6-1: USB disconnect, device number 5 [ 225.851061][T11809] EXT4-fs (loop2): Ignoring removed bh option [ 225.898465][T11809] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,nolazytime,,errors=continue [ 225.912326][ T414] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 225.923873][T11809] ext4 filesystem being mounted at /1113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.927035][ T414] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 225.947368][ T414] asix: probe of 5-1:0.251 failed with error -71 [ 225.958496][T11805] F2FS-fs (loop7): fault_injection options not supported [ 225.964349][ T414] usb 5-1: USB disconnect, device number 46 [ 225.977070][T11805] F2FS-fs (loop7): fault_type options not supported [ 225.985487][T11805] F2FS-fs (loop7): invalid crc value [ 226.026555][T11805] F2FS-fs (loop7): Found nat_bits in checkpoint [ 226.160551][T11805] F2FS-fs (loop7): Start checkpoint disabled! [ 226.179451][T11805] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 226.289937][ T7] attempt to access beyond end of device [ 226.289937][ T7] loop7: rw=2049, want=40976, limit=40427 [ 226.576140][T11864] cgroup: syz.2.5155 (11864) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 226.601683][T11864] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 226.838973][T11889] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 226.899634][T11889] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a000c018, mo2=0002] [ 226.914045][T11889] System zones: 0-2, 18-18, 34-35 [ 226.937834][T11889] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,block_validity,debug,jqfmt=vfsv1,,errors=continue [ 226.971047][T11889] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.222814][T11934] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5185'. [ 227.243565][T11934] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5185'. [ 227.318210][T11938] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.5188: casefold flag without casefold feature [ 227.340707][T11938] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.5188: missing EA_INODE flag [ 227.353354][T11938] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.5188: error while reading EA inode 12 err=-117 [ 227.378176][T11938] EXT4-fs (loop4): 1 orphan inode deleted [ 227.384120][T11938] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 227.500653][T11951] xt_hashlimit: size too large, truncated to 1048576 [ 228.283593][T11980] F2FS-fs (loop4): fault_injection options not supported [ 228.313302][T11980] F2FS-fs (loop4): invalid crc value [ 228.332737][T11980] F2FS-fs (loop4): Found nat_bits in checkpoint [ 228.405556][T11980] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 228.492177][ T311] attempt to access beyond end of device [ 228.492177][ T311] loop4: rw=2049, want=45104, limit=40427 [ 228.518222][T12036] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 228.563431][T12036] EXT4-fs (loop7): 1 truncate cleaned up [ 228.579099][T12036] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 228.613092][T12036] EXT4-fs error (device loop7): ext4_search_dir:1521: inode #12: block 7: comm syz.7.5229: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 228.737646][T12052] x_tables: duplicate underflow at hook 4 [ 229.061152][T12084] netlink: 'syz.7.5251': attribute type 2 has an invalid length. [ 229.497454][T12141] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5277'. [ 229.919847][T12173] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 229.960825][T12178] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 229.971684][T12178] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.993529][T12178] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,dioread_nolock,errors=remount-ro,abort,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf,bsddf,usrjquota=, [ 230.020451][T12178] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.5295: bg 0: block 234: padding at end of block bitmap is not set [ 230.039993][T12178] EXT4-fs (loop6): Remounting filesystem read-only [ 230.046614][T12178] EXT4-fs error (device loop6) in ext4_evict_inode:258: Readonly filesystem [ 230.059736][T12178] EXT4-fs error (device loop6) in ext4_evict_inode:258: Readonly filesystem [ 230.069150][ T24] kauditd_printk_skb: 852 callbacks suppressed [ 230.069167][ T24] audit: type=1400 audit(2000000480.890:13373): avc: denied { read write } for pid=311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.099718][ T24] audit: type=1400 audit(2000000480.890:13374): avc: denied { create } for pid=12188 comm="syz.7.5300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 230.120074][ T24] audit: type=1400 audit(2000000480.900:13375): avc: denied { write } for pid=12188 comm="syz.7.5300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 230.143639][ T24] audit: type=1400 audit(2000000480.900:13376): avc: denied { nlmsg_write } for pid=12188 comm="syz.7.5300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 230.174931][ T24] audit: type=1400 audit(2000000480.920:13377): avc: denied { read write open } for pid=311 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.200158][ T24] audit: type=1400 audit(2000000480.920:13378): avc: denied { ioctl } for pid=311 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.230773][ T24] audit: type=1400 audit(2000000480.960:13379): avc: denied { read write } for pid=309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.258069][ T24] audit: type=1400 audit(2000000480.960:13380): avc: denied { open } for pid=309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.285148][ T24] audit: type=1400 audit(2000000480.960:13381): avc: denied { ioctl } for pid=309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.317281][ T24] audit: type=1400 audit(2000000480.990:13382): avc: denied { read write } for pid=9426 comm="syz-executor" name="loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.399368][T12195] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000001,bsddf,nojournal_checksum,norecovery,nombcache,i_version,nodelalloc,journal_ioprio=0x0000000000000003,auto_da_alloc=0x0000000000800343,,errors=continue [ 230.437478][T12219] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5310'. [ 230.994340][T12278] EXT4-fs error (device loop7): ext4_orphan_get:1395: inode #15: comm syz.7.5340: casefold flag without casefold feature [ 231.109172][T12278] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: inode #12: comm syz.7.5340: missing EA_INODE flag [ 231.181473][T12278] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.5340: error while reading EA inode 12 err=-117 [ 231.217465][T12307] futex_wake_op: syz.2.5349 tries to shift op by 32; fix this program [ 231.225289][T12278] EXT4-fs (loop7): 1 orphan inode deleted [ 231.252029][T12278] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 231.335951][T12316] tmpfs: Bad value for 'nr_inodes' [ 231.653154][T12356] netlink: 87 bytes leftover after parsing attributes in process `syz.2.5375'. [ 231.960832][T12391] netlink: 'syz.5.5392': attribute type 1 has an invalid length. [ 232.091662][T12345] F2FS-fs (loop6): Invalid log blocks per segment (4278190089) [ 232.123107][T12345] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 232.139765][T12345] F2FS-fs (loop6): invalid crc value [ 232.180303][T12345] F2FS-fs (loop6): Found nat_bits in checkpoint [ 232.260297][T12415] SELinux: Context system_u:object_r:devicekit_power_exec_t:s0 is not valid (left unmapped). [ 232.273730][T12345] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 232.280780][T12345] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 232.356265][T12420] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue [ 232.371858][T12420] ext4 filesystem being mounted at /1010/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.419010][ T6867] attempt to access beyond end of device [ 232.419010][ T6867] loop6: rw=2049, want=45104, limit=40427 [ 232.439078][T12420] EXT4-fs error (device loop4): ext4_ext_check_inode:500: inode #12: comm syz.4.5404: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 232.698968][T12439] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.5411: inode #1: comm syz.4.5411: iget: illegal inode # [ 232.714012][T12439] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.5411: error while reading EA inode 1 err=-117 [ 232.727789][T12439] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.5411: inode #1: comm syz.4.5411: iget: illegal inode # [ 232.752967][T12439] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.5411: error while reading EA inode 1 err=-117 [ 232.765583][T12446] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 232.792958][T12446] ext4 filesystem being mounted at /522/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 232.803845][T12439] EXT4-fs (loop4): 1 orphan inode deleted [ 232.809438][T12439] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue [ 232.815924][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5415'. [ 233.197330][T12474] EXT4-fs (loop6): Ignoring removed bh option [ 233.237375][T12474] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,grpquota,noload,abort,lazytime,usrquota,resgid=0x0000000000000000,bh,,errors=continue [ 233.262266][T12474] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.310872][T12486] EXT4-fs error (device loop7): ext4_orphan_get:1395: inode #15: comm syz.7.5429: casefold flag without casefold feature [ 233.353940][T12486] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: inode #12: comm syz.7.5429: casefold flag without casefold feature [ 233.354729][T12486] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: inode #12: comm syz.7.5429: ea_inode with extended attributes [ 233.355153][T12486] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.5429: error while reading EA inode 12 err=-117 [ 233.355354][T12486] EXT4-fs (loop7): 1 orphan inode deleted [ 233.355370][T12486] EXT4-fs (loop7): mounted filesystem without journal. Opts: nojournal_checksum,delalloc,,errors=continue [ 233.533800][T12506] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 233.553418][T12506] EXT4-fs (loop4): 1 truncate cleaned up [ 233.553438][T12506] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,minixdf,,errors=continue [ 233.682127][T12517] syz.7.5443[12517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.682194][T12517] syz.7.5443[12517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.685200][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5442'. [ 233.782381][T12520] loop5: p3 < > p4 < > [ 233.786384][T12520] loop5: partition table partially beyond EOD, truncated [ 233.793414][T12520] loop5: p3 start 4284289 is beyond EOD, truncated [ 233.849213][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5449'. [ 234.002828][ T1408] udevd[1408]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 234.368781][T12591] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 234.383721][T12608] netlink: 'syz.4.5482': attribute type 2 has an invalid length. [ 234.402295][T12591] ext4 filesystem being mounted at /538/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.078288][ T24] kauditd_printk_skb: 938 callbacks suppressed [ 235.078304][ T24] audit: type=1400 audit(2000000485.900:14321): avc: denied { read write } for pid=6565 comm="syz-executor" name="loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.133347][T12659] syz.5.5507[12659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.133410][T12659] syz.5.5507[12659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.199583][ T24] audit: type=1400 audit(2000000485.940:14322): avc: denied { read write open } for pid=6565 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.199606][ T24] audit: type=1400 audit(2000000485.940:14323): avc: denied { ioctl } for pid=6565 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.199626][ T24] audit: type=1400 audit(2000000485.950:14324): avc: denied { read write } for pid=9426 comm="syz-executor" name="loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.199646][ T24] audit: type=1400 audit(2000000485.950:14325): avc: denied { open } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.199667][ T24] audit: type=1400 audit(2000000485.950:14326): avc: denied { ioctl } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.199684][ T24] audit: type=1400 audit(2000000485.960:14327): avc: denied { prog_load } for pid=12658 comm="syz.5.5507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 235.199702][ T24] audit: type=1400 audit(2000000485.960:14328): avc: denied { bpf } for pid=12658 comm="syz.5.5507" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 235.199719][ T24] audit: type=1400 audit(2000000485.960:14329): avc: denied { perfmon } for pid=12658 comm="syz.5.5507" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 235.199738][ T24] audit: type=1400 audit(2000000485.980:14330): avc: denied { prog_load } for pid=12660 comm="syz.7.5508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 235.374598][T12669] FAT-fs (loop7): Directory bread(block 64) failed [ 235.374618][T12669] FAT-fs (loop7): Directory bread(block 65) failed [ 235.374650][T12669] FAT-fs (loop7): Directory bread(block 66) failed [ 235.374666][T12669] FAT-fs (loop7): Directory bread(block 67) failed [ 235.374697][T12669] FAT-fs (loop7): Directory bread(block 68) failed [ 235.374712][T12669] FAT-fs (loop7): Directory bread(block 69) failed [ 235.374742][T12669] FAT-fs (loop7): Directory bread(block 70) failed [ 235.374757][T12669] FAT-fs (loop7): Directory bread(block 71) failed [ 235.374788][T12669] FAT-fs (loop7): Directory bread(block 72) failed [ 235.374804][T12669] FAT-fs (loop7): Directory bread(block 73) failed [ 235.604678][T12641] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 235.604691][T12641] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 235.613338][T12641] F2FS-fs (loop4): invalid crc value [ 235.684215][T12641] F2FS-fs (loop4): Found nat_bits in checkpoint [ 235.776078][T12641] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 235.783204][T12641] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 235.961861][T12698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5523'. [ 236.096246][T12710] binfmt_misc: register: failed to install interpreter file ./file0 [ 236.155541][T12717] exfat: Deprecated parameter 'namecase' [ 236.216111][T12717] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 236.771698][ T583] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 236.814910][T12745] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 236.834086][T12743] F2FS-fs (loop5): fault_injection options not supported [ 236.842783][T12745] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 236.851882][T12743] F2FS-fs (loop5): invalid crc value [ 236.861149][T12745] F2FS-fs (loop4): invalid crc value [ 236.862585][T12743] F2FS-fs (loop5): Found nat_bits in checkpoint [ 236.881372][T12745] F2FS-fs (loop4): Found nat_bits in checkpoint [ 236.926251][T12745] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 236.933208][T12745] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 236.959441][T12764] netlink: 'syz.2.5548': attribute type 28 has an invalid length. [ 236.973274][T12743] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 237.132066][ T583] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.161589][ T583] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.189481][ T583] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 237.208952][ T583] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.228712][ T583] usb 8-1: config 0 descriptor?? [ 237.353930][T12784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5557'. [ 237.448251][T12745] F2FS-fs (loop4): Start checkpoint disabled! [ 237.713065][ T583] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 237.730309][ T583] hid-steam 0003:28DE:1142.0007: item fetching failed at offset 4/5 [ 237.740565][ T583] hid-steam 0003:28DE:1142.0007: steam_probe:parse of hid interface failed [ 237.760631][ T583] hid-steam: probe of 0003:28DE:1142.0007 failed with error -22 [ 237.877807][T12830] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.884905][T12830] IPv6: NLM_F_CREATE should be set when creating new route [ 237.917674][ T442] usb 8-1: USB disconnect, device number 4 [ 237.923442][ T583] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 238.179774][T12849] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,bsddf,sysvgroups,min_batch_time=0x0000000000000005,norecovery,noblock_validity,nogrpid,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,,errors=continue [ 238.301842][ T583] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.312899][ T583] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.322624][ T583] usb 3-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 238.331446][ T583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.340637][ T583] usb 3-1: config 0 descriptor?? [ 238.563968][T12885] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5603'. [ 238.756265][T12908] netlink: 'syz.5.5615': attribute type 2 has an invalid length. [ 238.811817][ T583] hid (null): invalid report_size 17442 [ 238.812981][T12914] EXT4-fs (loop4): Ignoring removed nobh option [ 238.823445][T12914] EXT4-fs (loop4): Ignoring removed bh option [ 238.829034][ T583] wacom 0003:056A:030C.0008: invalid report_size 17442 [ 238.829343][T12914] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 238.862111][ T583] wacom 0003:056A:030C.0008: item 0 2 1 7 parsing failed [ 238.869380][T12914] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 238.883518][T12910] EXT4-fs (loop7): mounted filesystem without journal. Opts: stripe=0x0000000000000003,nodelalloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,nodiscard,jqfmt=vfsv1,,errors=continue [ 238.930893][ T583] wacom 0003:056A:030C.0008: parse failed [ 238.938526][ T583] wacom: probe of 0003:056A:030C.0008 failed with error -22 [ 239.018223][ T414] usb 3-1: USB disconnect, device number 45 [ 239.819749][T12992] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5651'. [ 239.858298][T12992] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5651'. [ 240.102791][ T24] kauditd_printk_skb: 823 callbacks suppressed [ 240.102807][ T24] audit: type=1400 audit(2000000490.926:15154): avc: denied { read write } for pid=309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.199486][ T24] audit: type=1400 audit(2000000490.926:15155): avc: denied { open } for pid=309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.258591][ T24] audit: type=1400 audit(2000000490.926:15156): avc: denied { ioctl } for pid=309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.292590][ T24] audit: type=1400 audit(2000000490.956:15157): avc: denied { read write } for pid=309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.323009][ T24] audit: type=1400 audit(2000000490.956:15158): avc: denied { open } for pid=309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.347677][ T24] audit: type=1400 audit(2000000490.956:15159): avc: denied { ioctl } for pid=309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.380389][ T24] audit: type=1400 audit(2000000490.966:15160): avc: denied { map_create } for pid=13011 comm="syz.7.5660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 240.439079][ T24] audit: type=1400 audit(2000000490.966:15161): avc: denied { bpf } for pid=13011 comm="syz.7.5660" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 240.471169][ T24] audit: type=1400 audit(2000000490.996:15162): avc: denied { read write } for pid=9426 comm="syz-executor" name="loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.496688][ T24] audit: type=1400 audit(2000000490.996:15163): avc: denied { open } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.534162][T13036] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5671'. [ 240.582981][T13033] erofs: (device loop7): mounted with root inode @ nid 36. [ 240.603307][T13033] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 240.612686][T13033] erofs: (device loop7): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 240.622184][T13033] erofs: (device loop7): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 240.631231][T13033] erofs: (device loop7): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 240.641138][T13033] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 240.651141][T13033] erofs: (device loop7): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 240.660151][T13033] erofs: (device loop7): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 240.673085][T13033] erofs: (device loop7): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 240.688772][T13033] erofs: (device loop7): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 240.711063][T13033] erofs: (device loop7): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 240.731273][T13033] erofs: (device loop7): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 240.749970][T13033] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 240.781883][T13033] erofs: (device loop7): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 240.807127][T13033] erofs: (device loop7): z_erofs_readahead: readahead error at page 14 @ nid 36 [ 240.820942][T13033] erofs: (device loop7): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 240.833749][T13033] erofs: (device loop7): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 240.848761][T13033] erofs: (device loop7): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 240.859832][T13054] EXT4-fs (loop4): Test dummy encryption mode enabled [ 240.867228][T13054] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 240.904165][T13033] erofs: (device loop7): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 240.913769][T13054] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 240.914110][T13033] attempt to access beyond end of device [ 240.914110][T13033] loop7: rw=524288, want=790384, limit=16 [ 240.931660][T13054] System zones: [ 240.932919][T13033] attempt to access beyond end of device [ 240.932919][T13033] loop7: rw=524288, want=72, limit=16 [ 240.934366][T13054] 1-12 [ 240.954250][T13054] EXT4-fs (loop4): 1 truncate cleaned up [ 240.959752][T13054] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,test_dummy_encryption,debug,nobarrier,quota,,errors=continue [ 240.975860][T13062] EXT4-fs (loop2): Test dummy encryption mode enabled [ 240.989456][T13062] EXT4-fs (loop2): Ignoring removed orlov option [ 241.004214][T13062] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 241.031933][T13054] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 241.325506][T13069] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 241.342808][T13069] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 241.394309][T13103] netlink: 'syz.7.5699': attribute type 1 has an invalid length. [ 241.407094][T13069] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 241.464417][T13069] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 241.471570][T13069] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 241.638468][ T6565] attempt to access beyond end of device [ 241.638468][ T6565] loop5: rw=2049, want=45104, limit=40427 [ 241.901707][ T15] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 241.942977][T13152] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 241.973100][T13152] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.151600][ T15] usb 3-1: Using ep0 maxpacket: 32 [ 242.282154][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.305037][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.314910][ T15] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 242.374197][ T15] usb 3-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 242.374766][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5740'. [ 242.392123][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.425028][ T15] usb 3-1: config 0 descriptor?? [ 242.432130][T13192] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5740'. [ 242.694849][T13213] FAT-fs (loop4): Directory bread(block 64) failed [ 242.701742][T13213] FAT-fs (loop4): Directory bread(block 65) failed [ 242.728289][T13213] FAT-fs (loop4): Directory bread(block 66) failed [ 242.735331][T13213] FAT-fs (loop4): Directory bread(block 67) failed [ 242.742785][T13213] FAT-fs (loop4): Directory bread(block 68) failed [ 242.749216][T13213] FAT-fs (loop4): Directory bread(block 69) failed [ 242.756245][T13213] FAT-fs (loop4): Directory bread(block 70) failed [ 242.761756][ T15] usbhid 3-1:0.0: can't add hid device: -71 [ 242.763386][T13213] FAT-fs (loop4): Directory bread(block 71) failed [ 242.768766][ T15] usbhid: probe of 3-1:0.0 failed with error -71 [ 242.775127][T13213] FAT-fs (loop4): Directory bread(block 72) failed [ 242.801619][T13213] FAT-fs (loop4): Directory bread(block 73) failed [ 242.811911][ T15] usb 3-1: USB disconnect, device number 46 [ 242.924422][T13226] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5757'. [ 242.976279][T13229] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5758'. [ 243.031364][T13237] netlink: 'syz.4.5761': attribute type 3 has an invalid length. [ 243.235466][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5768'. [ 243.278315][T13245] EXT4-fs (loop7): Ignoring removed oldalloc option [ 243.285444][T13245] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 243.352896][T13245] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.5767: inode #1: comm syz.7.5767: iget: illegal inode # [ 243.372311][T13245] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.5767: error while reading EA inode 1 err=-117 [ 243.439103][T13245] EXT4-fs (loop7): 1 orphan inode deleted [ 243.454245][T13245] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x0000000000000008,oldalloc,resgid=0x0000000000000000,nomblk_io_submit,usrjquota=,,errors=continue [ 243.485237][T13263] EXT4-fs (loop6): Ignoring removed orlov option [ 243.541978][T13263] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 243.627872][T13263] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,nodiscard,nomblk_io_submit,,errors=continue [ 243.672384][T13255] F2FS-fs (loop2): Found nat_bits in checkpoint [ 243.706321][T13255] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 243.768965][T13275] FAT-fs (loop5): Directory bread(block 64) failed [ 243.801635][T13275] FAT-fs (loop5): Directory bread(block 65) failed [ 243.836949][T13275] FAT-fs (loop5): Directory bread(block 66) failed [ 243.852880][T13275] FAT-fs (loop5): Directory bread(block 67) failed [ 243.859841][T13275] FAT-fs (loop5): Directory bread(block 68) failed [ 243.868152][T13275] FAT-fs (loop5): Directory bread(block 69) failed [ 243.911757][T13275] FAT-fs (loop5): Directory bread(block 70) failed [ 243.918199][T13275] FAT-fs (loop5): Directory bread(block 71) failed [ 243.963052][T13275] FAT-fs (loop5): Directory bread(block 72) failed [ 243.989392][T13275] FAT-fs (loop5): Directory bread(block 73) failed [ 244.091327][T13307] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3f486145, utbl_chksum : 0xe619d30d) [ 244.348476][T13328] EXT4-fs (loop4): Test dummy encryption mode enabled [ 244.375200][T13328] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 244.399568][T13328] ext4 filesystem being mounted at /1100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 244.891767][T13381] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 244.933269][T13381] EXT4-fs (loop7): 1 truncate cleaned up [ 244.940978][T13381] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,grpquota,nobarrier,nodiscard,nolazytime,init_itable=0x0000000000002a96,,errors=continue [ 245.021647][ T581] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 245.111844][ T24] kauditd_printk_skb: 823 callbacks suppressed [ 245.111860][ T24] audit: type=1400 audit(2000000495.936:15987): avc: denied { ioctl } for pid=6565 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.241704][ T24] audit: type=1400 audit(2000000495.936:15988): avc: denied { ioctl } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.344469][ T24] audit: type=1400 audit(2000000495.976:15989): avc: denied { read write } for pid=6565 comm="syz-executor" name="loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.402003][ T581] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.406432][ T24] audit: type=1400 audit(2000000495.976:15990): avc: denied { open } for pid=6565 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.412080][ T581] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.450307][ T24] audit: type=1400 audit(2000000495.976:15991): avc: denied { ioctl } for pid=6565 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.476885][ T24] audit: type=1400 audit(2000000495.986:15992): avc: denied { read write } for pid=9426 comm="syz-executor" name="loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.502039][T13407] binfmt_misc: register: failed to install interpreter file ./file0 [ 245.541641][ T581] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 245.550521][ T581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 245.571608][ T581] usb 3-1: SerialNumber: syz [ 245.612327][ T581] usb 3-1: 0:2 : does not exist [ 245.639780][ T311] audit: audit_backlog=65 > audit_backlog_limit=64 [ 245.649810][ T24] audit: type=1400 audit(2000000495.986:15993): avc: denied { open } for pid=9426 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.678353][ T6565] audit: audit_backlog=65 > audit_backlog_limit=64 [ 245.681604][ T311] audit: audit_lost=86 audit_rate_limit=0 audit_backlog_limit=64 [ 245.879525][T13430] bridge0: port 4(erspan0) entered blocking state [ 245.907659][T13430] bridge0: port 4(erspan0) entered disabled state [ 245.918205][T13430] device erspan0 entered promiscuous mode [ 245.928204][T13430] bridge0: port 4(erspan0) entered blocking state [ 245.934605][T13430] bridge0: port 4(erspan0) entered forwarding state [ 246.078399][T13440] EXT4-fs (loop5): Ignoring removed oldalloc option [ 246.096508][T13440] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.122035][T13440] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,user_xattr,norecovery,acl,dioread_nolock,sysvgroups,abort,errors=remount-ro,oldalloc, [ 246.172358][T13440] incfs: ino conflict with backing FS 2 [ 246.223441][T13460] usb usb8: usbfs: process 13460 (syz.6.5855) did not claim interface 0 before use [ 246.237690][ T6565] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 480: padding at end of block bitmap is not set [ 246.279316][ T6565] EXT4-fs (loop5): Remounting filesystem read-only [ 246.295773][ T6565] EXT4-fs error (device loop5) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 246.659876][T13491] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.667244][T13491] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.674832][T13491] device bridge_slave_0 entered promiscuous mode [ 246.686590][T13499] tap0: tun_chr_ioctl cmd 2147767506 [ 246.692311][T13491] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.699521][T13491] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.719418][T13491] device bridge_slave_1 entered promiscuous mode [ 246.732015][T13501] tap0: tun_chr_ioctl cmd 1074025677 [ 246.737146][T13501] tap0: linktype set to 821 [ 246.788418][T13503] overlayfs: workdir and upperdir must reside under the same mount [ 246.824621][T13491] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.831517][T13491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.838622][T13491] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.845491][T13491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.930069][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.938118][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.949393][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.970807][T13511] EXT4-fs (loop7): 1 orphan inode deleted [ 246.976669][T13511] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue [ 247.000698][T13511] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.015896][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.052095][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.058990][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.074666][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.084069][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.090917][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.107706][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.136517][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.174402][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.191214][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.199369][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.207295][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.215877][T13520] loop7: p1 p3 p4 [ 247.217904][T13491] device veth0_vlan entered promiscuous mode [ 247.226168][T13520] loop7: p1 size 3523149824 extends beyond EOD, truncated [ 247.237188][T13520] loop7: p3 start 16777215 is beyond EOD, truncated [ 247.244207][T13520] loop7: p4 size 50331648 extends beyond EOD, truncated [ 247.249249][T13491] device veth1_macvtap entered promiscuous mode [ 247.262322][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.279225][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.289872][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.310435][ T1409] udevd[1409]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 247.313563][ T1408] udevd[1408]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 247.392787][ T326] device bridge_slave_1 left promiscuous mode [ 247.398773][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.421658][ T328] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 247.432532][ T326] device bridge_slave_0 left promiscuous mode [ 247.438503][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.487601][ T326] device veth1_macvtap left promiscuous mode [ 247.498268][ T326] device veth0_vlan left promiscuous mode [ 247.709541][ T583] usb 3-1: USB disconnect, device number 47 [ 247.786637][ T328] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 247.814566][ T328] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.848657][ T328] usb 7-1: config 0 interface 0 has no altsetting 0 [ 247.866296][ T328] usb 7-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 247.881515][ T328] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.893224][T13540] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 247.910262][T13540] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 247.921823][T13540] F2FS-fs (loop4): invalid crc value [ 247.946664][ T328] usb 7-1: config 0 descriptor?? [ 247.962071][T13540] F2FS-fs (loop4): Found nat_bits in checkpoint [ 248.014428][T13540] F2FS-fs (loop4): Start checkpoint disabled! [ 248.023344][T13540] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 248.030210][T13540] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 248.083200][T13554] F2FS-fs (loop7): fault_injection options not supported [ 248.100417][T13554] F2FS-fs (loop7): fault_type options not supported [ 248.108311][T13554] F2FS-fs (loop7): invalid crc value [ 248.125219][T13554] F2FS-fs (loop7): Found nat_bits in checkpoint [ 248.178684][T13554] F2FS-fs (loop7): Start checkpoint disabled! [ 248.185800][T13554] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 248.473099][ T328] logitech-hidpp-device 0003:046D:C088.0009: item fetching failed at offset 5/7 [ 248.484037][ T328] logitech-hidpp-device 0003:046D:C088.0009: hidpp_probe:parse failed [ 248.492715][ T328] logitech-hidpp-device: probe of 0003:046D:C088.0009 failed with error -22 [ 248.681444][ T581] usb 7-1: USB disconnect, device number 3 [ 249.293601][T13670] EXT4-fs (loop6): Unrecognized mount option "=" or missing value [ 249.331602][ T581] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 249.339024][ T20] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 249.601663][ T581] usb 8-1: Using ep0 maxpacket: 16 [ 249.606767][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 249.741998][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.753757][ T581] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.763824][ T581] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 249.773285][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.783581][ T581] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 249.792566][ T20] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 249.801667][ T581] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.810825][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.820789][ T581] usb 8-1: config 0 descriptor?? [ 249.828436][ T20] usb 3-1: config 0 descriptor?? [ 250.079420][T13655] netlink: 196 bytes leftover after parsing attributes in process `syz.7.5938'. [ 250.103086][ T581] usb 8-1: USB disconnect, device number 5 [ 250.127973][ T24] kauditd_printk_skb: 902 callbacks suppressed [ 250.127989][ T24] audit: type=1400 audit(2000000500.946:16893): avc: denied { read write } for pid=311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.196905][ T24] audit: type=1400 audit(2000000500.946:16894): avc: denied { open } for pid=311 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.228262][ T24] audit: type=1400 audit(2000000500.946:16895): avc: denied { ioctl } for pid=311 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.264387][ T24] audit: type=1400 audit(2000000500.956:16896): avc: denied { prog_load } for pid=13695 comm="syz.4.5956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 250.299333][ T24] audit: type=1400 audit(2000000500.956:16897): avc: denied { bpf } for pid=13695 comm="syz.4.5956" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 250.324562][ T20] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.000A/input/input15 [ 250.338791][ T24] audit: type=1400 audit(2000000500.956:16898): avc: denied { perfmon } for pid=13695 comm="syz.4.5956" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 250.362359][ T24] audit: type=1400 audit(2000000500.986:16899): avc: denied { prog_run } for pid=13695 comm="syz.4.5956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 250.381937][ T24] audit: type=1326 audit(2000000500.986:16900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.4.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9a727d29 code=0x7ffc0000 [ 250.408801][ T24] audit: type=1326 audit(2000000500.986:16901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.4.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fae9a727d29 code=0x7ffc0000 [ 250.426595][T13713] syz.8.5964[13713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.435410][T13713] syz.8.5964[13713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.450702][ T20] appleir 0003:05AC:8241.000A: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 250.476965][ T24] audit: type=1326 audit(2000000500.986:16902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.4.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9a727d29 code=0x7ffc0000 [ 250.525354][ T20] usb 3-1: USB disconnect, device number 48 [ 250.692852][T13731] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 250.715560][T13731] syzkaller0: linktype set to 780 [ 251.243001][T13786] xt_hashlimit: size too large, truncated to 1048576 [ 251.351468][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6002'. [ 251.921462][T13829] tap0: tun_chr_ioctl cmd 1074025678 [ 251.927124][T13829] tap0: group set to 0 [ 252.073716][T13845] tun0: tun_chr_ioctl cmd 1074812117 [ 252.379523][T13875] EXT4-fs error (device loop7): ext4_orphan_get:1395: inode #15: comm syz.7.6036: casefold flag without casefold feature [ 252.407111][T13881] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 252.413544][T13875] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: inode #12: comm syz.7.6036: missing EA_INODE flag [ 252.432404][T13875] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.6036: error while reading EA inode 12 err=-117 [ 252.458093][T13881] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,init_itable=0x0000000000000098,user_xattr,nomblk_io_submit,,errors=continue [ 252.481805][T13881] ext4 filesystem being mounted at /1267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.501197][T13875] EXT4-fs (loop7): 1 orphan inode deleted [ 252.516857][T13875] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 252.526479][T13891] sch_tbf: burst 1127 is lower than device lo mtu (65550) ! [ 252.756591][T13908] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 253.202880][T13961] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 253.476328][T13991] device veth1_macvtap left promiscuous mode [ 253.487528][T13991] device veth1_macvtap entered promiscuous mode [ 253.512947][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6089'. [ 253.622069][T14001] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 253.631465][T14001] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.824096][T14027] tap0: tun_chr_ioctl cmd 2147767507 [ 253.934765][T14039] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 254.562697][T14036] F2FS-fs (loop2): invalid crc value [ 254.604349][T14036] F2FS-fs (loop2): Found nat_bits in checkpoint [ 254.623153][T14092] syz.7.6129[14092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.623218][T14092] syz.7.6129[14092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.640470][T14092] print_req_error: 21 callbacks suppressed [ 254.640487][T14092] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 254.667054][T14036] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 254.675775][T14092] FAT-fs (loop15): unable to read boot sector [ 254.799985][T14100] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 254.811615][T14100] FAT-fs (loop9): unable to read boot sector [ 254.931967][T14107] rose0: tun_chr_ioctl cmd 1074025677 [ 254.937333][T14107] rose0: linktype set to 778 [ 255.131677][ T24] kauditd_printk_skb: 1011 callbacks suppressed [ 255.131690][ T24] audit: type=1400 audit(2000000505.956:17914): avc: denied { read write } for pid=13491 comm="syz-executor" name="loop8" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 255.165275][ T583] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 255.211291][ T24] audit: type=1400 audit(2000000505.956:17915): avc: denied { read write open } for pid=13491 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 255.272767][ T24] audit: type=1400 audit(2000000505.956:17916): avc: denied { ioctl } for pid=13491 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 255.303382][ T24] audit: type=1400 audit(2000000505.996:17917): avc: denied { read write } for pid=309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 255.330122][ T24] audit: type=1400 audit(2000000505.996:17918): avc: denied { open } for pid=309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 255.354355][ T24] audit: type=1400 audit(2000000505.996:17919): avc: denied { ioctl } for pid=309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 255.388279][ T24] audit: type=1400 audit(2000000506.006:17920): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 255.411469][ T24] audit: type=1400 audit(2000000506.006:17921): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.421601][ T583] usb 8-1: Using ep0 maxpacket: 32 [ 255.433911][ T24] audit: type=1400 audit(2000000506.006:17922): avc: denied { append } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 255.488340][ T24] audit: type=1400 audit(2000000506.006:17923): avc: denied { open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 255.562034][ T583] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.586897][ T583] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.600394][ T583] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 255.615388][ T583] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.639048][ T583] usb 8-1: config 0 descriptor?? [ 255.682267][ T583] hub 8-1:0.0: USB hub found [ 255.981762][ T583] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 256.031955][T14192] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 256.055823][T14195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6174'. [ 256.065736][T14195] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 256.281667][ T583] usbhid 8-1:0.0: can't add hid device: -71 [ 256.291648][ T583] usbhid: probe of 8-1:0.0 failed with error -71 [ 256.332305][ T583] usb 8-1: USB disconnect, device number 6 [ 256.425177][T14199] F2FS-fs (loop4): fault_injection options not supported [ 256.461057][T14199] F2FS-fs (loop4): invalid crc value [ 256.473709][T14199] F2FS-fs (loop4): Found nat_bits in checkpoint [ 256.620811][T14199] F2FS-fs (loop4): Start checkpoint disabled! [ 256.681635][T14199] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 256.892636][ T111] attempt to access beyond end of device [ 256.892636][ T111] loop4: rw=2049, want=40984, limit=40427 [ 257.256179][T14239] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 257.302622][T14239] EXT4-fs error (device loop7): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 257.322497][T14239] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 257.335603][T14239] EXT4-fs (loop7): This should not happen!! Data will be lost [ 257.335603][T14239] [ 257.346852][T14239] EXT4-fs (loop7): Total free blocks count 0 [ 257.352725][T14239] EXT4-fs (loop7): Free/Dirty block details [ 257.358407][T14239] EXT4-fs (loop7): free_blocks=68451041280 [ 257.364317][T14239] EXT4-fs (loop7): dirty_blocks=80 [ 257.369253][T14239] EXT4-fs (loop7): Block reservation details [ 257.375153][T14239] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 257.381174][T14248] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 257.393308][T14248] EXT4-fs (loop7): This should not happen!! Data will be lost [ 257.393308][T14248] [ 257.588616][T14256] EXT4-fs (loop7): Ignoring removed nobh option [ 257.602127][T14256] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 257.652764][T14256] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,usrquota,dioread_nolock,nobh,usrquota,grpjquota=,lazytime,,errors=continue [ 257.706805][T14261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.036803][T14279] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6207'. [ 258.191243][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6211'. [ 258.274880][T14290] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 258.322131][T14290] EXT4-fs (loop4): 1 truncate cleaned up [ 258.327689][T14290] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,minixdf,noblock_validity,,errors=continue [ 259.739440][T14382] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 259.795932][T14388] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 259.800390][T14382] ================================================================== [ 259.811918][T14382] BUG: KASAN: use-after-free in __ext4_iget+0x3a0/0x41f0 [ 259.818770][T14382] Read of size 8 at addr ffff88811be4b8a8 by task syz.7.6254/14382 [ 259.826483][T14382] [ 259.828665][T14382] CPU: 0 PID: 14382 Comm: syz.7.6254 Tainted: G W 5.10.233-syzkaller-00881-gfbe98d68b6b3 #0 [ 259.832807][T14388] EXT4-fs (loop8): invalid journal inode [ 259.839850][T14382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 259.839879][T14382] Call Trace: [ 259.851457][T14388] EXT4-fs (loop8): can't get journal size [ 259.855310][T14382] dump_stack_lvl+0x1e2/0x24b [ 259.855326][T14382] ? bfq_pos_tree_add_move+0x43b/0x43b [ 259.855337][T14382] ? panic+0x812/0x812 [ 259.855362][T14382] print_address_description+0x81/0x3b0 [ 259.883091][T14382] kasan_report+0x179/0x1c0 [ 259.887427][T14382] ? __ext4_iget+0x3a0/0x41f0 [ 259.891950][T14382] ? __ext4_iget+0x3a0/0x41f0 [ 259.896453][T14382] __asan_report_load8_noabort+0x14/0x20 [ 259.901942][T14382] __ext4_iget+0x3a0/0x41f0 [ 259.906442][T14382] ? ida_alloc_range+0x9c3/0xa30 [ 259.911298][T14382] ? ext4_get_projid+0x140/0x140 [ 259.916071][T14382] ? _raw_write_lock+0xa4/0x170 [ 259.920752][T14382] ? _raw_write_trylock+0x1a0/0x1a0 [ 259.925808][T14382] ? __proc_create+0x65a/0xa00 [ 259.930371][T14382] ext4_enable_quotas+0x56f/0x9f0 [ 259.936290][T14382] ? ext4_fill_flex_info+0x5b0/0x5b0 [ 259.941571][T14382] ? proc_create_single_data+0x1de/0x240 [ 259.947049][T14382] ? proc_create_seq_private+0x280/0x280 [ 259.952507][T14382] ? __kasan_check_write+0x14/0x20 [ 259.957450][T14382] ? ext4_register_sysfs+0x253/0x290 [ 259.962572][T14382] ext4_fill_super+0x86dc/0x9150 [ 259.967354][T14382] ? ext4_mount+0x40/0x40 [ 259.971513][T14382] ? vscnprintf+0x80/0x80 [ 259.975681][T14382] ? sb_set_blocksize+0xa8/0xf0 [ 259.980365][T14382] mount_bdev+0x262/0x370 [ 259.984530][T14382] ? ext4_mount+0x40/0x40 [ 259.988696][T14382] ext4_mount+0x34/0x40 [ 259.992691][T14382] legacy_get_tree+0xf1/0x190 [ 259.997201][T14382] ? ext4_chksum+0x210/0x210 [ 260.001632][T14382] vfs_get_tree+0x88/0x290 [ 260.005884][T14382] do_new_mount+0x2ba/0xb30 [ 260.010231][T14382] ? do_move_mount_old+0x160/0x160 [ 260.015274][T14382] ? security_capable+0x87/0xb0 [ 260.019958][T14382] ? ns_capable+0x89/0xe0 [ 260.024127][T14382] path_mount+0x56f/0xcb0 [ 260.028466][T14382] __se_sys_mount+0x2c4/0x3b0 [ 260.032986][T14382] ? __x64_sys_mount+0xd0/0xd0 [ 260.037579][T14382] ? debug_smp_processor_id+0x17/0x20 [ 260.042787][T14382] ? irqentry_exit_to_user_mode+0x41/0x80 [ 260.048342][T14382] __x64_sys_mount+0xbf/0xd0 [ 260.052794][T14382] do_syscall_64+0x34/0x70 [ 260.057019][T14382] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 260.062746][T14382] RIP: 0033:0x7f65950304ca [ 260.067003][T14382] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.086541][T14382] RSP: 002b:00007f659369fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.094778][T14382] RAX: ffffffffffffffda RBX: 00007f659369fef0 RCX: 00007f65950304ca [ 260.102600][T14382] RDX: 00000000200000c0 RSI: 0000000020000640 RDI: 00007f659369feb0 [ 260.110666][T14382] RBP: 00000000200000c0 R08: 00007f659369fef0 R09: 0000000003000010 [ 260.118464][T14382] R10: 0000000003000010 R11: 0000000000000246 R12: 0000000020000640 [ 260.126274][T14382] R13: 00007f659369feb0 R14: 000000000000051b R15: 00000000200006c0 [ 260.134174][T14382] [ 260.136344][T14382] Allocated by task 14199: [ 260.140602][T14382] __kasan_slab_alloc+0xb1/0xe0 [ 260.145376][T14382] slab_post_alloc_hook+0x61/0x2f0 [ 260.150322][T14382] kmem_cache_alloc+0x168/0x2e0 [ 260.155108][T14382] f2fs_alloc_inode+0x26/0x420 [ 260.159695][T14382] new_inode_pseudo+0x64/0x220 [ 260.164296][T14382] new_inode+0x28/0x1c0 [ 260.168296][T14382] f2fs_new_inode+0x126/0x14d0 [ 260.172976][T14382] f2fs_create+0x1f9/0x19a0 [ 260.177312][T14382] path_openat+0x1377/0x3000 [ 260.181834][T14382] do_filp_open+0x21c/0x460 [ 260.186173][T14382] do_sys_openat2+0x13f/0x710 [ 260.190820][T14382] __x64_sys_openat+0x243/0x290 [ 260.195611][T14382] do_syscall_64+0x34/0x70 [ 260.199862][T14382] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 260.205670][T14382] [ 260.207839][T14382] Freed by task 94: [ 260.211496][T14382] kasan_set_track+0x4b/0x70 [ 260.215919][T14382] kasan_set_free_info+0x23/0x40 [ 260.220688][T14382] ____kasan_slab_free+0x121/0x160 [ 260.225640][T14382] __kasan_slab_free+0x11/0x20 [ 260.230241][T14382] slab_free_freelist_hook+0xc0/0x190 [ 260.235445][T14382] kmem_cache_free+0xa9/0x1e0 [ 260.239962][T14382] f2fs_free_inode+0x24/0x30 [ 260.244384][T14382] i_callback+0x4b/0x70 [ 260.248389][T14382] rcu_do_batch+0x597/0xc40 [ 260.252718][T14382] rcu_core+0x5ad/0xe40 [ 260.256708][T14382] rcu_core_si+0x9/0x10 [ 260.260706][T14382] __do_softirq+0x268/0x5bb [ 260.265035][T14382] [ 260.267204][T14382] Last potentially related work creation: [ 260.272769][T14382] kasan_save_stack+0x3b/0x60 [ 260.277378][T14382] __kasan_record_aux_stack+0xd3/0x100 [ 260.282662][T14382] kasan_record_aux_stack_noalloc+0xb/0x10 [ 260.288475][T14382] call_rcu+0x135/0x11f0 [ 260.292529][T14382] evict+0x8e8/0x9c0 [ 260.296265][T14382] iput+0x632/0x7e0 [ 260.299903][T14382] f2fs_handle_failed_inode+0x25d/0x2c0 [ 260.305284][T14382] f2fs_create+0xd8c/0x19a0 [ 260.309631][T14382] path_openat+0x1377/0x3000 [ 260.314046][T14382] do_filp_open+0x21c/0x460 [ 260.318383][T14382] do_sys_openat2+0x13f/0x710 [ 260.322897][T14382] __x64_sys_openat+0x243/0x290 [ 260.327722][T14382] do_syscall_64+0x34/0x70 [ 260.331959][T14382] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 260.337691][T14382] [ 260.339858][T14382] Second to last potentially related work creation: [ 260.346293][T14382] kasan_save_stack+0x3b/0x60 [ 260.351060][T14382] __kasan_record_aux_stack+0xd3/0x100 [ 260.356439][T14382] kasan_record_aux_stack_noalloc+0xb/0x10 [ 260.362091][T14382] call_rcu+0x135/0x11f0 [ 260.366397][T14382] evict+0x8e8/0x9c0 [ 260.370133][T14382] evict_inodes+0x638/0x6c0 [ 260.374472][T14382] generic_shutdown_super+0x97/0x320 [ 260.379587][T14382] kill_block_super+0x7e/0xe0 [ 260.384102][T14382] kill_f2fs_super+0x2f9/0x3c0 [ 260.388702][T14382] deactivate_locked_super+0xad/0x110 [ 260.394005][T14382] deactivate_super+0xbe/0xf0 [ 260.398536][T14382] cleanup_mnt+0x45c/0x510 [ 260.402856][T14382] __cleanup_mnt+0x19/0x20 [ 260.407107][T14382] task_work_run+0x129/0x190 [ 260.411536][T14382] exit_to_user_mode_loop+0xbf/0xd0 [ 260.416595][T14382] syscall_exit_to_user_mode+0xa2/0x1a0 [ 260.421955][T14382] do_syscall_64+0x40/0x70 [ 260.426206][T14382] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 260.431919][T14382] [ 260.434095][T14382] The buggy address belongs to the object at ffff88811be4b380 [ 260.434095][T14382] which belongs to the cache f2fs_inode_cache of size 1520 [ 260.448510][T14382] The buggy address is located 1320 bytes inside of [ 260.448510][T14382] 1520-byte region [ffff88811be4b380, ffff88811be4b970) [ 260.461780][T14382] The buggy address belongs to the page: [ 260.467271][T14382] page:ffffea00046f9200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11be48 [ 260.477333][T14382] head:ffffea00046f9200 order:3 compound_mapcount:0 compound_pincount:0 [ 260.485828][T14382] flags: 0x4000000000010200(slab|head) [ 260.491134][T14382] raw: 4000000000010200 dead000000000100 dead000000000122 ffff8881029cf980 [ 260.499548][T14382] raw: 0000000000000000 0000000080130013 00000001ffffffff 0000000000000000 [ 260.507962][T14382] page dumped because: kasan: bad access detected [ 260.514216][T14382] page_owner tracks the page as allocated [ 260.519772][T14382] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 391, ts 44187762525, free_ts 0 [ 260.540078][T14382] prep_new_page+0x166/0x180 [ 260.544498][T14382] get_page_from_freelist+0x2d8c/0x2f30 [ 260.549900][T14382] __alloc_pages_nodemask+0x435/0xaf0 [ 260.555095][T14382] new_slab+0x80/0x400 [ 260.559012][T14382] ___slab_alloc+0x302/0x4b0 [ 260.563430][T14382] __slab_alloc+0x63/0xa0 [ 260.567594][T14382] kmem_cache_alloc+0x1b9/0x2e0 [ 260.572280][T14382] f2fs_alloc_inode+0x26/0x420 [ 260.576962][T14382] iget_locked+0x14f/0x870 [ 260.581216][T14382] f2fs_iget+0x55/0x50a0 [ 260.585323][T14382] f2fs_fill_super+0x4c57/0x7d90 [ 260.590178][T14382] mount_bdev+0x262/0x370 [ 260.594354][T14382] f2fs_mount+0x34/0x40 [ 260.598341][T14382] legacy_get_tree+0xf1/0x190 [ 260.602850][T14382] vfs_get_tree+0x88/0x290 [ 260.607104][T14382] do_new_mount+0x2ba/0xb30 [ 260.611438][T14382] page_owner free stack trace missing [ 260.616749][T14382] [ 260.618901][T14382] Memory state around the buggy address: [ 260.624471][T14382] ffff88811be4b780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.632364][T14382] ffff88811be4b800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.640265][T14382] >ffff88811be4b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.648162][T14382] ^ [ 260.653605][T14382] ffff88811be4b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 260.661590][T14382] ffff88811be4b980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc 00 00 [ 260.669475][T14382] ================================================================== [ 260.677376][T14382] Disabling lock debugging due to kernel taint [ 260.685665][ T24] kauditd_printk_skb: 622 callbacks suppressed [ 260.685680][ T24] audit: type=1400 audit(2000000005.110:18546): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 260.722212][T14388] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 260.722384][T14382] EXT4-fs warning (device loop7): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 260.749291][T14382] EXT4-fs (loop7): mount failed [ 260.751751][T14388] System zones: 1-12, 13-13 [ 260.762582][T14388] EXT4-fs (loop8): 1 truncate cleaned up [ 260.763468][ T24] audit: type=1400 audit(2000000005.110:18547): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.768052][T14388] EXT4-fs (loop8): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue [ 260.802906][ T24] audit: type=1400 audit(2000000005.110:18548): avc: denied { append } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.825147][ T24] audit: type=1400 audit(2000000005.110:18549): avc: denied { open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.847541][ T24] audit: type=1400 audit(2000000005.110:18550): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.870165][ T24] audit: type=1400 audit(2000000005.170:18551): avc: denied { read write } for pid=309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.894252][ T24] audit: type=1400 audit(2000000005.170:18552): avc: denied { open } for pid=309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.942274][ T24] audit: type=1400 audit(2000000005.170:18553): avc: denied { ioctl } for pid=309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.968699][ T24] audit: type=1400 audit(2000000005.190:18554): avc: denied { mount } for pid=14387 comm="syz.8.6255" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 260.992326][ T24] audit: type=1400 audit(2000000005.190:18555): avc: denied { read write } for pid=14387 comm="syz.8.6255" name="loop8" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.761377][ T24] kauditd_printk_skb: 38 callbacks suppressed [ 265.761393][ T24] audit: type=1400 audit(2000000010.180:18594): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 265.789075][ T24] audit: type=1400 audit(2000000010.180:18595): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.810426][ T24] audit: type=1400 audit(2000000010.180:18596): avc: denied { append } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.832440][ T24] audit: type=1400 audit(2000000010.180:18597): avc: denied { open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.855257][ T24] audit: type=1400 audit(2000000010.180:18598): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.766158][ T24] audit: type=1400 audit(2000000011.190:18599): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 266.787988][ T24] audit: type=1400 audit(2000000011.190:18600): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.809433][ T24] audit: type=1400 audit(2000000011.190:18601): avc: denied { append } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.831655][ T24] audit: type=1400 audit(2000000011.190:18602): avc: denied { open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.854080][ T24] audit: type=1400 audit(2000000011.190:18603): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1