last executing test programs: 6.016874181s ago: executing program 4 (id=2716): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000007480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1ff}, @TCA_TBF_PARMS={0x28}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 5.895519739s ago: executing program 4 (id=2719): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b00000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 5.843590477s ago: executing program 4 (id=2722): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "72e8f79c836cef46"}}, 0x48}}, 0x0) connect$can_bcm(r0, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0aff5e4ed13e4287"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "72e8f79c836cef46"}}, 0x48}}, 0x0) 5.792673095s ago: executing program 4 (id=2725): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x8000001, 0x0, 0x8, 0x0, "dadd1023b1df022dace17a32d21100000000de"}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0xd) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000200)=@abs={0x1}, 0x6e) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000005b00)) r5 = open(&(0x7f0000000000)='./bus\x00', 0x60342, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r5, 0x2007ffd) sendfile(r5, r6, 0x0, 0x1000000201005) 5.727462805s ago: executing program 3 (id=2730): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000007480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1ff}, @TCA_TBF_PARMS={0x28}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 5.681587303s ago: executing program 1 (id=2731): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x100, 0x4) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 5.587817937s ago: executing program 1 (id=2736): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='jbd2_handle_stats\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="b8f92416074d3848"}}) 5.512619729s ago: executing program 3 (id=2738): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002311f335850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '9p\x00'}}]}}) 5.44348448s ago: executing program 1 (id=2740): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000008000c00004e07006c001a8054000001"], 0x94}}, 0x0) 5.426134393s ago: executing program 1 (id=2741): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x10, 0x13, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6ec}, {}, {}, [@btf_id, @initr0]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file0\x00', 0x41, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESOCT, @ANYRES32, @ANYRES64, @ANYRES16], 0x44, 0x2ec, &(0x7f0000000600)="$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") r1 = socket$nl_audit(0x10, 0x3, 0x9) syz_mount_image$fuse(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f0000000140)='$\x00', 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes256, 0x0, @desc4}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)=@v1={0x0, @aes128, 0x0, @desc2}) socket$netlink(0x10, 0x3, 0x15) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000440)=@framed={{}, [@func]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltclass={0x64, 0x29, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_htb={{0x8}, {0x10, 0x2, [@TCA_HTB_RATE64={0xc}]}}]}, 0x64}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x350}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x5b9}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x588}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.417029514s ago: executing program 2 (id=2742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}]}, 0x2c}}, 0x20001000) 5.114779451s ago: executing program 3 (id=2743): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 5.070632768s ago: executing program 2 (id=2744): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)='cgroup2\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x100000530) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/61, 0x3d) close(r0) 5.063464139s ago: executing program 3 (id=2745): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)={@multicast, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0x2, @multicast2}}}}}, 0x0) 5.047380072s ago: executing program 1 (id=2746): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b00000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 5.018779216s ago: executing program 1 (id=2748): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000007480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1ff}, @TCA_TBF_PARMS={0x28}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 4.99497536s ago: executing program 2 (id=2749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x26b}]}) 4.979229093s ago: executing program 3 (id=2750): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='jbd2_handle_stats\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="b8f92416074d3848"}}) 4.839468224s ago: executing program 4 (id=2752): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps\x00') lseek(r0, 0x0, 0x3) 4.836744894s ago: executing program 2 (id=2753): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002311f335850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '9p\x00'}}]}}) 4.835838055s ago: executing program 3 (id=2754): epoll_create(0x5) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x210, 0x140, 0x140, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'pimreg1\x00', 'hsr0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_hsr\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@empty, @private0, [], [], 'veth0\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0xffffffffffffffe5}}}}, 0x43c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x3, 0x106001, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x9, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000001680)=@known='system.advise\x00') 4.783692573s ago: executing program 4 (id=2755): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}]}, 0x2c}}, 0x20001000) 4.67021414s ago: executing program 2 (id=2756): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 4.645456575s ago: executing program 2 (id=2757): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x10, 0x13, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6ec}, {}, {}, [@btf_id, @initr0]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file0\x00', 0x41, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESOCT, @ANYRES32, @ANYRES64, @ANYRES16], 0x44, 0x2ec, &(0x7f0000000600)="$eJzs3E1rE10UwPGTNE3T9GmTxYOgIr3oRjdDG10LQVoQA0ptxBcQps1EQ8YkZEIlIjau3Po1DF12V9D6Abpx58qNuOlGcFPQOpLMxEw0tUk0TUP+Pyj3ZO49mbm9k3IydGb39stH2bSlpfVL/4ko8YtUZF8kWou8fOJzmqDzOuQ0Fbkw9eX9GSUi8URiYUmpxfjyxZhSamb29eOnG2e3S1O3Nme2JmQnen/3c+zjzomdk7vflx9mLJWxVC5fUrpayX8o6SumoVIZK6spdcM0dMtQmZxlFJ3+fMndrRQKZaXnUtPhQtGwLKXnyiprlFUpr0rFstIf6Jmc0jRNTYdldOzN1ptCt3nJ6tKSHu9xp6s95uGf2/5jb7HY+PC8tVt7ktX+HRMAADiumvV/Sfwht/7fa63/fW7r99b/ropUavX/zTt3r3VQ/28FvfW/NOv//KH1f70/beap/3sV+n1TsjrWe/2PIVGcFKluSPMT/fzexlw9oP4HAAAAAAAAAAAAAAAAAAAAAGAY7Nl2xLbtSK31ixPXfibcG0Yarwd9nOgP7/o7ax2orTrrPyI8N+6FRMwXa8m1pNM6/fG0ZMQUQ+YkIt/q54PLiRevJhZ8qi4qb8x1N399LTnWmj8vEYm2z5938lVr/riEvfkxicj/7fNjbfODcv6cJ1+TiLxblbyYkqqf1zLm/goWns0rdeV64pf8SUm1uWMOAAAAAIBhpKmf2n5/17SD+p38Tq4PzLX9fh6QU4HBzh0AAAAAgFFhlZ9kddM0iocGr9yMQwd/cgd2/M5/G4x3MYvuAl/v77xv93XujWcyd5/uXp5ZP6rVGfogUDvpPVvCBw6eafxLSce7mHCfylzbsm87XcHGmMubp78Obu5H/qcIAAAAQJ81i/5BHwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKPrKB4nNug5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMfFjwAAAP//vIkZsw==") r1 = socket$nl_audit(0x10, 0x3, 0x9) syz_mount_image$fuse(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f0000000140)='$\x00', 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes256, 0x0, @desc4}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)=@v1={0x0, @aes128, 0x0, @desc2}) socket$netlink(0x10, 0x3, 0x15) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000440)=@framed={{}, [@func]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltclass={0x64, 0x29, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_htb={{0x8}, {0x10, 0x2, [@TCA_HTB_RATE64={0xc}]}}]}, 0x64}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x350}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x5b9}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x588}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.300948484s ago: executing program 0 (id=2762): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20000400000000000002bd51e51e2e684cc8492c4f8fd56d289f1a787c122cae5031cbc8df49de29d854d6aa57f9fc583bc883a52109d68dde"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) setsockopt(r1, 0xff, 0x0, &(0x7f0000000000), 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 148.333207ms ago: executing program 0 (id=2763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000f20000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000040)='+U\xd6\xcbs\x14\xb3\xb2T\x83\f\x11\xe3\xb1C\xb0Kkd\xf0\xdf\xb7\x1fo\xb7\xe2;;\x04\x97\x93sj&]V.\x9b\xeeWu>P(\x1f\xf4\xa56\xa2\xb5\xca\xc2\x96\x88j\x8d\x7f\x13\x1a\x1f\xa6\x12\xa8\x83\x0f\xb7M\xe8\xb6\xa6_X\xca\x04\x00\x00\x00~\x13pp\x8a\x96\xdd\xf5\xdaj\xec`\xe9\xe1\x98\x11\xb3$\xf0\x10O\xb4Q\x98\a\x9a\fs\xda\x94\xe5\x8c\b2\x96\xa3', 0x0) fstatfs(r2, &(0x7f0000000000)=""/28) 120.497762ms ago: executing program 0 (id=2764): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x26b}]}) 62.152131ms ago: executing program 0 (id=2765): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='jbd2_handle_stats\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="b8f92416074d3848"}}) 8.310519ms ago: executing program 0 (id=2766): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 0s ago: executing program 0 (id=2767): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): pid=3398 comm="syz.1.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.128549][ T351] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 85.146969][ T351] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 85.669370][ T351] EXT4-fs (loop3): pa ffff8881d8847540: logic 1, phys. 41, len 23 [ 85.677308][ T351] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:3899: group 0, free 22, pa_free 23 [ 85.929727][ T23] audit: type=1400 audit(1719402717.765:355): avc: denied { ioctl } for pid=3422 comm="syz.0.1187" path="socket:[26451]" dev="sockfs" ino=26451 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.021283][ T23] audit: type=1400 audit(1719402717.855:356): avc: denied { setopt } for pid=3422 comm="syz.0.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.079378][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.096171][ T3426] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.117153][ T3426] device bridge_slave_0 entered promiscuous mode [ 86.151986][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.169892][ T3426] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.190652][ T3426] device bridge_slave_1 entered promiscuous mode [ 86.204616][ T23] audit: type=1400 audit(1719402718.035:357): avc: denied { mounton } for pid=3424 comm="syz.4.1188" path="/root/syzkaller.UCIU7Y/9/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 86.271021][ T3434] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 86.271021][ T3434] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 86.271021][ T3434] [ 86.339560][ T3434] EXT4-fs error (device loop4): ext4_read_inode_bitmap:134: comm syz.4.1188: Invalid inode bitmap blk 4 in block_group 0 [ 86.407998][ T179] device bridge_slave_1 left promiscuous mode [ 86.411388][ T3434] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,noacl,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 86.414148][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.479604][ T179] device bridge_slave_0 left promiscuous mode [ 86.485543][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.964239][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.985520][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.010422][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.018797][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.045724][ T540] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.052588][ T540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.060541][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.069190][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.081981][ T3471] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 88.094370][ T540] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.101291][ T540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.109267][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.126518][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.134754][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.149642][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.166985][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.196653][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.204871][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.214002][ T509] print_req_error: 48 callbacks suppressed [ 88.214016][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 88.233383][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.241867][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.256541][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.257810][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.271630][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.288400][ T3482] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.306765][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.314760][ T509] buffer_io_error: 19 callbacks suppressed [ 88.314769][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 88.332846][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.341041][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.361365][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.447082][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 88.499330][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.533399][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 88.616644][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 88.639928][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.887960][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 88.936538][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 88.948276][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.960247][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 88.961360][ T3508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1216'. [ 89.070115][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 89.083778][ T3471] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 89.101153][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 89.116799][ T3471] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 89.128387][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 89.424614][ T3527] EXT4-fs (loop3): Mount option "delalloc" incompatible with ext2 [ 89.430381][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 89.444143][ T3471] F2FS-fs (loop4): Found nat_bits in checkpoint [ 89.486066][ T3471] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 89.492937][ T3471] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 89.678934][ T3536] loop3: p1 p2 p4 [ 89.684823][ T3536] loop3: p1 size 241106944 extends beyond EOD, truncated [ 89.693918][ T3536] loop3: p2 size 2130706432 extends beyond EOD, truncated [ 89.703459][ T3536] loop3: p4 start 8323079 is beyond EOD, truncated [ 89.717974][ T3537] attempt to access beyond end of device [ 89.717974][ T3537] loop4: rw=2049, want=40432, limit=40427 [ 89.827132][ T510] udevd[510]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 89.839118][ T509] udevd[509]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 89.900861][ T3546] overlayfs: workdir and upperdir must be separate subtrees [ 89.921089][ T3548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1231'. [ 90.217800][ T3555] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 90.217800][ T3555] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 90.217800][ T3555] [ 90.296697][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 90.308556][ T23] audit: type=1400 audit(1719402722.145:358): avc: denied { create } for pid=3567 comm="syz.0.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.343860][ T3555] EXT4-fs error (device loop3): ext4_read_inode_bitmap:134: comm syz.3.1232: Invalid inode bitmap blk 4 in block_group 0 [ 90.388922][ T3555] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,noacl,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 90.443313][ T3570] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 90.854013][ T3577] F2FS-fs (loop4): invalid crc value [ 90.887878][ T3577] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.894448][ T3587] overlayfs: workdir and upperdir must be separate subtrees [ 90.949244][ T3577] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 90.987095][ T3178] attempt to access beyond end of device [ 90.987095][ T3178] loop4: rw=2049, want=45104, limit=40427 [ 91.032752][ T3608] 9p: Unknown uid 00000000004294967295 [ 91.142653][ T23] audit: type=1326 audit(1719402722.975:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.0.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a899ae9 code=0x7fc00000 [ 91.184981][ T23] audit: type=1326 audit(1719402722.975:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.0.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c7a899ae9 code=0x7fc00000 [ 91.227331][ T23] audit: type=1326 audit(1719402722.975:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.0.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a899ae9 code=0x7fc00000 [ 91.272983][ T23] audit: type=1326 audit(1719402722.975:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.0.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a899ae9 code=0x7fc00000 [ 91.296710][ T23] audit: type=1326 audit(1719402722.975:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.0.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a899ae9 code=0x7fc00000 [ 91.320021][ T23] audit: type=1326 audit(1719402722.975:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.0.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a899ae9 code=0x7fc00000 [ 91.343531][ T23] audit: type=1326 audit(1719402722.975:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.0.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a899ae9 code=0x7fc00000 [ 91.366853][ T23] audit: type=1326 audit(1719402722.975:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.0.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a899ae9 code=0x7fc00000 [ 91.384038][ T3604] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 91.398218][ T23] audit: type=1326 audit(1719402722.975:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.0.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a899ae9 code=0x7fc00000 [ 91.421342][ T3604] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 91.461684][ T3604] F2FS-fs (loop3): Found nat_bits in checkpoint [ 91.518483][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 91.529942][ T3604] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 91.553303][ T3604] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 91.662992][ T3637] 9p: Unknown uid 00000000004294967295 [ 91.697795][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.705625][ T3631] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.714265][ T3631] device bridge_slave_0 entered promiscuous mode [ 91.726843][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.733666][ T3631] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.743034][ T3631] device bridge_slave_1 entered promiscuous mode [ 91.847064][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.853920][ T3631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.861061][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.867808][ T3631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.882064][ T3628] F2FS-fs (loop0): invalid crc value [ 91.919566][ T3628] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.965339][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.980481][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.992135][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.008086][ T3628] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 92.017221][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.025257][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.032571][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.058319][ T3668] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 92.068253][ T3668] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 92.077154][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.091685][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.098557][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.106133][ T2880] attempt to access beyond end of device [ 92.106133][ T2880] loop0: rw=2049, want=45104, limit=40427 [ 92.117868][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.125699][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.153067][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.176767][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.184508][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.192810][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.428022][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.449482][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.459782][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.485908][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 92.497983][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.512927][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.522822][ T3683] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 92.532389][ T3683] ext4 filesystem being mounted at /root/syzkaller.itgTmf/63/file0 supports timestamps until 2038 (0x7fffffff) [ 92.570941][ T3691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1283'. [ 92.624962][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 92.636656][ T3704] netlink: 'syz.0.1289': attribute type 4 has an invalid length. [ 92.689773][ T3704] netlink: 'syz.0.1289': attribute type 4 has an invalid length. [ 93.188121][ T3721] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 93.195786][ T3721] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 93.208643][ T3721] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.233444][ T3721] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 93.240468][ T3721] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 93.449008][ T3746] netlink: 'syz.4.1305': attribute type 4 has an invalid length. [ 93.462210][ T3746] netlink: 'syz.4.1305': attribute type 4 has an invalid length. [ 93.941118][ T509] print_req_error: 14 callbacks suppressed [ 93.941132][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 93.963671][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.974693][ T509] buffer_io_error: 2 callbacks suppressed [ 93.974701][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 94.058370][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 94.070545][ T3763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'. [ 94.077579][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.091829][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 94.120054][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 94.135893][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.148653][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 94.182171][ T3777] netlink: 'syz.3.1316': attribute type 4 has an invalid length. [ 94.193142][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 94.207123][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.218789][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 94.231253][ T3777] netlink: 'syz.3.1316': attribute type 4 has an invalid length. [ 94.245390][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 94.275027][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.288307][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 94.327351][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 94.372828][ T3789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1323'. [ 94.403263][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 94.437377][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 94.531698][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 94.572529][ T3812] fuse: Bad value for 'fd' [ 94.582639][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 94.829569][ T3831] fuse: Bad value for 'fd' [ 95.123728][ T3845] fuse: Bad value for 'fd' [ 95.139858][ T3849] fuse: Bad value for 'fd' [ 95.303140][ T3872] fuse: Bad value for 'fd' [ 95.313898][ T3874] 9pnet: Insufficient options for proto=fd [ 95.341602][ T3877] fuse: Bad value for 'fd' [ 96.213692][ T3913] fuse: Bad value for 'fd' [ 97.099939][ T3889] F2FS-fs (loop3): invalid crc value [ 97.168115][ T3889] F2FS-fs (loop3): Found nat_bits in checkpoint [ 97.265137][ T3889] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 97.294608][ T3946] fuse: Bad value for 'fd' [ 97.358843][ T23] kauditd_printk_skb: 109 callbacks suppressed [ 97.358851][ T23] audit: type=1400 audit(1719402729.195:477): avc: denied { getopt } for pid=3947 comm="syz.1.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.432646][ T23] audit: type=1326 audit(1719402729.265:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796caa8ae9 code=0x7ffc0000 [ 97.458227][ T23] audit: type=1326 audit(1719402729.265:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796caa8ae9 code=0x7ffc0000 [ 97.482361][ T23] audit: type=1326 audit(1719402729.295:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f796caa8ae9 code=0x7ffc0000 [ 97.490754][ T3900] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 97.514689][ T18] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.522353][ T23] audit: type=1326 audit(1719402729.295:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796caa8ae9 code=0x7ffc0000 [ 97.538245][ T3900] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 97.636329][ T3900] F2FS-fs (loop4): invalid crc value [ 97.649181][ T3900] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.741232][ T23] audit: type=1326 audit(1719402729.295:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f796caa8ae9 code=0x7ffc0000 [ 97.771006][ T3900] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 97.780559][ T3900] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 97.788471][ T23] audit: type=1326 audit(1719402729.295:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796caa8ae9 code=0x7ffc0000 [ 97.811809][ T23] audit: type=1326 audit(1719402729.295:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f796caa8ae9 code=0x7ffc0000 [ 97.841964][ T23] audit: type=1326 audit(1719402729.295:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796caa8ae9 code=0x7ffc0000 [ 98.236329][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.258255][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.289315][ T18] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 98.307516][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.318664][ T18] usb 1-1: config 0 descriptor?? [ 98.501982][ T23] audit: type=1400 audit(1719402730.335:486): avc: denied { connect } for pid=3982 comm="syz.3.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.647287][ T3985] device syzkaller0 entered promiscuous mode [ 98.945826][ T18] hid-multitouch 0003:0EEF:72D0.0009: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.0-1/input0 [ 98.979787][ T4002] xt_bpf: check failed: parse error [ 99.153573][ T356] usb 1-1: USB disconnect, device number 4 [ 99.195415][ T4008] fuse: Bad value for 'fd' [ 99.847459][ T4023] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 99.967583][ T509] print_req_error: 50 callbacks suppressed [ 99.967595][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 99.967751][ T4005] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 99.974351][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.993816][ T4005] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 100.012310][ T509] buffer_io_error: 20 callbacks suppressed [ 100.012318][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 100.027233][ T4005] F2FS-fs (loop3): invalid crc value [ 100.034080][ T4005] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.081871][ T4037] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,nobarrier,nolazytime,,errors=continue [ 100.111158][ T4037] ext4 filesystem being mounted at /root/syzkaller.hV1Pav/13/file0 supports timestamps until 2038 (0x7fffffff) [ 100.125988][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 100.137397][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.139165][ T4005] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 100.148193][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 100.166059][ T4005] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 100.289462][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 100.300876][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.336042][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 100.346592][ T4053] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 100.355333][ T4053] ext4 filesystem being mounted at /root/syzkaller.hV1Pav/14/file0 supports timestamps until 2038 (0x7fffffff) [ 100.372445][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 100.446206][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.468553][ T4059] device syzkaller0 entered promiscuous mode [ 100.486344][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 100.531916][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 100.558146][ T3631] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /root/syzkaller.hV1Pav/14/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 100.561039][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.589432][ T3631] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /root/syzkaller.hV1Pav/14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 100.636059][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 100.657928][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 100.665051][ T3631] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /root/syzkaller.hV1Pav/14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 100.694120][ T3631] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /root/syzkaller.hV1Pav/14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 100.720578][ T3631] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /root/syzkaller.hV1Pav/14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 100.749806][ T3631] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.hV1Pav/14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 100.797899][ T3631] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /root/syzkaller.hV1Pav/14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 100.825050][ T3631] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 100.858029][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 100.882829][ T3631] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /root/syzkaller.hV1Pav/14/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1 [ 100.897762][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 100.948473][ T3631] EXT4-fs error (device loop4): ext4_empty_dir:3002: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1 [ 100.995466][ T3631] EXT4-fs warning (device loop4): ext4_empty_dir:3004: inode #12: comm syz-executor: directory missing '.' [ 101.056268][ T4085] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 101.115268][ T510] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 101.151968][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 101.169984][ T3202] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 101.336320][ T4104] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 101.350298][ T4104] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 101.451416][ T4109] device syzkaller0 entered promiscuous mode [ 101.525181][ T4120] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 102.005986][ T3202] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 102.217267][ T4139] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 102.898694][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.905532][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.149073][ T4171] device bridge_slave_0 entered promiscuous mode [ 103.156245][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.163170][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.170785][ T4171] device bridge_slave_1 entered promiscuous mode [ 103.313070][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.323100][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.347549][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.361807][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.370615][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.370622][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.370767][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.371097][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.371313][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.371319][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.396387][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.404593][ T23] kauditd_printk_skb: 5 callbacks suppressed [ 103.404601][ T23] audit: type=1400 audit(1719402735.235:492): avc: denied { ioctl } for pid=4194 comm="syz.0.1484" path="/dev/rtc0" dev="devtmpfs" ino=845 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.457522][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.474119][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.499369][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.514798][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.532366][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.547914][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.567761][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.601767][ T4135] F2FS-fs (loop4): invalid crc value [ 103.616161][ T4202] netlink: 'syz.0.1486': attribute type 1 has an invalid length. [ 103.630206][ T4202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1486'. [ 103.672546][ T4210] netlink: 'syz.3.1489': attribute type 30 has an invalid length. [ 103.681097][ T4135] F2FS-fs (loop4): Found nat_bits in checkpoint [ 103.784259][ T4231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.791795][ T4135] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 103.821124][ T23] audit: type=1400 audit(1719402735.655:493): avc: denied { read } for pid=4226 comm="syz.1.1497" path="socket:[30718]" dev="sockfs" ino=30718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.917159][ T4237] netlink: 'syz.0.1502': attribute type 30 has an invalid length. [ 103.941273][ T4240] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 104.312344][ T4260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.515989][ T4263] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 104.770115][ T4268] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 105.115206][ T4282] netlink: 'syz.4.1520': attribute type 30 has an invalid length. [ 105.188081][ T4294] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 105.316072][ T121] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.527294][ T4258] F2FS-fs (loop0): invalid crc value [ 105.537044][ T4258] F2FS-fs (loop0): Found nat_bits in checkpoint [ 105.582833][ T4258] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 105.636092][ T121] usb 2-1: Using ep0 maxpacket: 16 [ 105.767104][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.777950][ T121] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.790825][ T121] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.801177][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.819597][ T121] usb 2-1: config 0 descriptor?? [ 106.156587][ T509] print_req_error: 62 callbacks suppressed [ 106.156600][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 106.174110][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.286296][ T509] buffer_io_error: 26 callbacks suppressed [ 106.286314][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 106.300426][ T18] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 106.366669][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 106.378067][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.388855][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 106.422959][ T121] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input7 [ 106.497229][ T23] audit: type=1400 audit(1719402738.335:494): avc: denied { read } for pid=147 comm="acpid" name="event3" dev="devtmpfs" ino=31235 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.523179][ T23] audit: type=1400 audit(1719402738.335:495): avc: denied { open } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=31235 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.523654][ T121] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 106.547312][ T23] audit: type=1400 audit(1719402738.335:496): avc: denied { ioctl } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=31235 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.722596][ T23] audit: type=1400 audit(1719402738.555:497): avc: denied { write } for pid=4372 comm="syz.2.1557" path="socket:[31280]" dev="sockfs" ino=31280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.734431][ T18] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.757674][ T18] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.767699][ T18] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 106.776576][ T18] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.785029][ T18] usb 4-1: config 0 descriptor?? [ 106.933440][ T356] usb 2-1: USB disconnect, device number 3 [ 107.028019][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 107.039631][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.050785][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 107.070792][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 107.083306][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.094741][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 107.119643][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 107.134889][ T4397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1568'. [ 107.139066][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.155033][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 107.155262][ T4397] tipc: Started in network mode [ 107.167893][ T4397] tipc: Own node identity @emory.en, cluster identity 8 [ 107.173602][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 107.188721][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 107.212011][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 107.244467][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 107.283407][ T18] hid (null): bogus close delimiter [ 107.442409][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 107.496124][ T18] usb 4-1: language id specifier not provided by device, defaulting to English [ 107.698822][ T4411] device syzkaller0 entered promiscuous mode [ 107.906419][ T23] audit: type=1400 audit(1719402739.745:498): avc: denied { write } for pid=4419 comm="syz.1.1577" name="rtc0" dev="devtmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.929780][ T23] audit: type=1326 audit(1719402739.765:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298bee3ae9 code=0x7ffc0000 [ 107.944775][ T18] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000B/input/input8 [ 107.952955][ T23] audit: type=1326 audit(1719402739.765:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298bee3ae9 code=0x7ffc0000 [ 108.004862][ T18] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000B/input/input9 [ 108.019873][ T18] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 108.139857][ T540] usb 4-1: USB disconnect, device number 7 [ 108.328034][ T23] audit: type=1400 audit(1719402740.165:501): avc: denied { execmem } for pid=4438 comm="syz.0.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 108.998301][ T4468] kvm: emulating exchange as write [ 109.124039][ T23] audit: type=1400 audit(1719402740.955:502): avc: denied { read } for pid=4473 comm="syz.1.1597" path="socket:[31584]" dev="sockfs" ino=31584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.247286][ T23] audit: type=1326 audit(1719402741.085:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4480 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82ed6ae9 code=0x7ffc0000 [ 109.270690][ T23] audit: type=1326 audit(1719402741.085:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4480 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82ed6ae9 code=0x7ffc0000 [ 109.365688][ T4497] netlink: 'syz.0.1606': attribute type 3 has an invalid length. [ 109.479086][ T4474] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 109.496221][ T4474] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 109.504885][ T4474] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 109.545012][ T4474] EXT4-fs error (device loop1): __ext4_get_inode_loc:4710: comm syz.1.1597: Invalid inode table block 0 in block_group 0 [ 109.557708][ T4474] EXT4-fs (loop1): get root inode failed [ 109.563155][ T4474] EXT4-fs (loop1): mount failed [ 109.601154][ T4504] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.818947][ T4528] netlink: 'syz.0.1617': attribute type 3 has an invalid length. [ 109.851709][ T4522] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 110.239984][ T4540] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 110.239984][ T4540] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 110.239984][ T4540] [ 110.276215][ T4540] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,noacl,inode_readahead_blks=0x0000000000000001,nojournal_checksum,,errors=continue [ 110.292784][ T4540] ext4 filesystem being mounted at /root/syzkaller.hV1Pav/45/file0 supports timestamps until 2038 (0x7fffffff) [ 110.310477][ T23] audit: type=1400 audit(1719402742.145:505): avc: denied { write } for pid=4539 comm="syz.4.1621" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.336114][ T4540] fs-verity: sha512 using implementation "sha512-generic" [ 110.809511][ T4578] FAT-fs (loop3): Directory bread(block 64) failed [ 110.815984][ T4578] FAT-fs (loop3): Directory bread(block 65) failed [ 110.824316][ T4578] FAT-fs (loop3): Directory bread(block 66) failed [ 110.830956][ T4578] FAT-fs (loop3): Directory bread(block 67) failed [ 110.837514][ T4578] FAT-fs (loop3): Directory bread(block 68) failed [ 110.843951][ T4578] FAT-fs (loop3): Directory bread(block 69) failed [ 110.850681][ T4578] FAT-fs (loop3): Directory bread(block 70) failed [ 110.857305][ T4578] FAT-fs (loop3): Directory bread(block 71) failed [ 110.870046][ T4578] FAT-fs (loop3): Directory bread(block 72) failed [ 110.877774][ T4578] FAT-fs (loop3): Directory bread(block 73) failed [ 110.884447][ T23] audit: type=1326 audit(1719402742.715:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4575 comm="syz.1.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298bee3ae9 code=0x7ffc0000 [ 110.915626][ T23] audit: type=1326 audit(1719402742.715:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4575 comm="syz.1.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298bee3ae9 code=0x7ffc0000 [ 111.229256][ T4594] FAT-fs (loop3): Directory bread(block 160) failed [ 111.235843][ T4594] FAT-fs (loop3): Directory bread(block 161) failed [ 111.242322][ T4594] FAT-fs (loop3): Directory bread(block 162) failed [ 111.248883][ T4594] FAT-fs (loop3): Directory bread(block 163) failed [ 111.255342][ T4594] FAT-fs (loop3): Directory bread(block 164) failed [ 111.270290][ T4594] FAT-fs (loop3): Directory bread(block 165) failed [ 111.280826][ T4594] FAT-fs (loop3): Directory bread(block 166) failed [ 111.287615][ T4594] FAT-fs (loop3): Directory bread(block 167) failed [ 111.309488][ T4594] FAT-fs (loop3): Directory bread(block 160) failed [ 111.335655][ T4594] FAT-fs (loop3): Directory bread(block 161) failed [ 111.640080][ T4602] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 111.773226][ T509] print_req_error: 40 callbacks suppressed [ 111.773239][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 111.790151][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.836547][ T509] buffer_io_error: 15 callbacks suppressed [ 111.836563][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 112.017335][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 112.028780][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.039980][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 112.082140][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 112.096335][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.107449][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 112.126216][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 112.138245][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.149962][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 112.171922][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 112.183297][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.190228][ T23] audit: type=1400 audit(1719402744.025:508): avc: denied { create } for pid=4639 comm="syz.2.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.194699][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 112.231120][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 112.240670][ T23] audit: type=1400 audit(1719402744.055:509): avc: denied { write } for pid=4639 comm="syz.2.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.260960][ T23] audit: type=1400 audit(1719402744.055:510): avc: denied { nlmsg_write } for pid=4639 comm="syz.2.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.281676][ T23] audit: type=1326 audit(1719402744.065:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7a899ae9 code=0x7ffc0000 [ 112.356067][ T121] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.731757][ T121] usb 4-1: Using ep0 maxpacket: 16 [ 112.856204][ T121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.867552][ T121] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.880405][ T121] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 112.892885][ T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.900975][ T4663] FAT-fs (loop4): Directory bread(block 160) failed [ 112.907855][ T121] usb 4-1: config 0 descriptor?? [ 112.911360][ T4663] FAT-fs (loop4): Directory bread(block 161) failed [ 112.919082][ T4663] FAT-fs (loop4): Directory bread(block 162) failed [ 112.925478][ T4663] FAT-fs (loop4): Directory bread(block 163) failed [ 112.932043][ T4663] FAT-fs (loop4): Directory bread(block 164) failed [ 112.938481][ T4663] FAT-fs (loop4): Directory bread(block 165) failed [ 112.944901][ T4663] FAT-fs (loop4): Directory bread(block 166) failed [ 112.952093][ T4663] FAT-fs (loop4): Directory bread(block 167) failed [ 112.962365][ T4663] FAT-fs (loop4): Directory bread(block 160) failed [ 112.968827][ T4663] FAT-fs (loop4): Directory bread(block 161) failed [ 113.024441][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 113.047028][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 113.126970][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 113.137444][ T4681] fuse: Bad value for 'fd' [ 113.149796][ T4675] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 113.439466][ T121] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000C/input/input10 [ 113.509701][ T4678] F2FS-fs (loop0): invalid crc value [ 113.518573][ T121] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 113.573288][ T4688] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 113.579564][ T4678] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 113.581744][ T4688] EXT4-fs (loop1): orphan cleanup on readonly fs [ 113.599640][ T4688] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 113.614280][ T4688] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 113.621745][ T4688] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.1671: bg 0: block 40: padding at end of block bitmap is not set [ 113.635937][ T4688] EXT4-fs error (device loop1) in ext4_free_blocks:5019: Corrupt filesystem [ 113.656116][ T4688] EXT4-fs (loop1): 1 truncate cleaned up [ 113.661691][ T4688] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 113.680327][ T4688] EXT4-fs error (device loop1): ext4_xattr_block_get:544: inode #16: comm syz.1.1671: corrupted xattr block 31 [ 113.692109][ T4688] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 113.702268][ T4688] EXT4-fs error (device loop1): ext4_xattr_block_get:544: inode #16: comm syz.1.1671: corrupted xattr block 31 [ 113.714058][ T4688] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 113.726544][ T4688] EXT4-fs error (device loop1): ext4_xattr_block_get:544: inode #16: comm syz.1.1671: corrupted xattr block 31 [ 113.738381][ T4688] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 113.948642][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 113.958997][ T4700] FAT-fs (loop4): Directory bread(block 160) failed [ 113.965422][ T4700] FAT-fs (loop4): Directory bread(block 161) failed [ 113.976180][ T4700] FAT-fs (loop4): Directory bread(block 162) failed [ 113.995693][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1676'. [ 114.003879][ T4700] FAT-fs (loop4): Directory bread(block 163) failed [ 114.005598][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1676'. [ 114.011291][ T4700] FAT-fs (loop4): Directory bread(block 164) failed [ 114.027059][ T4700] FAT-fs (loop4): Directory bread(block 165) failed [ 114.028480][ T4707] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 114.033523][ T4700] FAT-fs (loop4): Directory bread(block 166) failed [ 114.054988][ T4700] FAT-fs (loop4): Directory bread(block 167) failed [ 114.089752][ T4700] FAT-fs (loop4): Directory bread(block 160) failed [ 114.097283][ T121] usb 4-1: USB disconnect, device number 8 [ 114.116073][ T4700] FAT-fs (loop4): Directory bread(block 161) failed [ 114.274399][ T4721] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 114.351548][ T23] kauditd_printk_skb: 4 callbacks suppressed [ 114.351557][ T23] audit: type=1400 audit(1719402746.185:516): avc: denied { read } for pid=4730 comm="syz.4.1687" path="socket:[34294]" dev="sockfs" ino=34294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.396467][ T4731] capability: warning: `syz.4.1687' uses deprecated v2 capabilities in a way that may be insecure [ 114.512900][ T4731] EXT4-fs (loop4): orphan cleanup on readonly fs [ 114.518623][ T4738] FAT-fs (loop0): Directory bread(block 160) failed [ 114.528778][ T4738] FAT-fs (loop0): Directory bread(block 161) failed [ 114.530202][ T4731] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.1687: bg 0: block 248: padding at end of block bitmap is not set [ 114.535488][ T4738] FAT-fs (loop0): Directory bread(block 162) failed [ 114.557489][ T4738] FAT-fs (loop0): Directory bread(block 163) failed [ 114.563978][ T4738] FAT-fs (loop0): Directory bread(block 164) failed [ 114.570602][ T4731] Quota error (device loop4): write_blk: dquota write failed [ 114.574844][ T4738] FAT-fs (loop0): Directory bread(block 165) failed [ 114.578018][ T4731] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 114.584379][ T4738] FAT-fs (loop0): Directory bread(block 166) failed [ 114.594740][ T4731] EXT4-fs (loop4): 1 truncate cleaned up [ 114.600658][ T4738] FAT-fs (loop0): Directory bread(block 167) failed [ 114.606458][ T4731] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 114.647510][ T4738] FAT-fs (loop0): Directory bread(block 160) failed [ 114.653931][ T4738] FAT-fs (loop0): Directory bread(block 161) failed [ 114.814676][ T4744] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 114.824035][ T4767] cgroup1: Unknown subsys name 'no' [ 114.825161][ T4744] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 114.847045][ T4744] EXT4-fs error (device loop1): ext4_orphan_get:1260: comm syz.1.1692: bad orphan inode 13 [ 114.866337][ T4744] EXT4-fs (loop1): Remounting filesystem read-only [ 114.872671][ T4744] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="nobarrier,errors=remount-ro,noblock_validity, [ 114.904282][ T23] audit: type=1400 audit(1719402746.735:517): avc: denied { create } for pid=4743 comm="syz.1.1692" name="file6" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 115.026840][ T4775] EXT4-fs (loop3): orphan cleanup on readonly fs [ 115.033999][ T4775] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.1704: bg 0: block 248: padding at end of block bitmap is not set [ 115.048900][ T4775] Quota error (device loop3): write_blk: dquota write failed [ 115.056554][ T4775] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 115.067954][ T4775] EXT4-fs (loop3): 1 truncate cleaned up [ 115.073634][ T4775] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 115.082405][ T356] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.181524][ T4796] cgroup1: Unknown subsys name 'no' [ 115.247331][ T4798] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 115.262949][ T4798] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.277728][ T4798] EXT4-fs (loop3): Remounting filesystem read-only [ 115.366472][ T371] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.446144][ T356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 41811, setting to 64 [ 115.456965][ T356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 115.527652][ T4807] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 115.535211][ T4807] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.549774][ T4807] F2FS-fs (loop3): invalid crc value [ 115.557844][ T4807] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.570175][ T4825] cgroup1: Unknown subsys name 'no' [ 115.597228][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1726'. [ 115.627560][ T356] usb 1-1: New USB device found, idVendor=1b3d, idProduct=9310, bcdDevice= 0.c8 [ 115.640824][ T356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.656709][ T356] usb 1-1: Product: syz [ 115.660682][ T356] usb 1-1: Manufacturer: syz [ 115.665361][ T4807] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 115.672377][ T4807] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.679515][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1732'. [ 115.680240][ T356] usb 1-1: SerialNumber: syz [ 115.688771][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1732'. [ 115.694095][ T356] usb 1-1: config 0 descriptor?? [ 115.716304][ T4842] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 115.746923][ T356] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 115.755730][ T179] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 115.759440][ T356] usb 1-1: Detected SIO [ 115.767286][ T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 115.772779][ T4848] cgroup1: Unknown subsys name 'no' [ 115.784386][ T356] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 11 [ 115.788342][ T179] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 115.794970][ T356] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 115.800880][ T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 115.849822][ T4854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1738'. [ 115.863684][ T371] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.881087][ T371] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.901461][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.912999][ T371] usb 2-1: config 0 descriptor?? [ 115.936182][ T4784] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 115.977025][ T4861] SELinux: duplicate or incompatible mount options [ 117.396591][ T371] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 117.459578][ T371] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 117.478525][ T510] print_req_error: 18 callbacks suppressed [ 117.478539][ T510] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 117.508987][ T510] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.516256][ T371] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 117.522452][ T510] buffer_io_error: 4 callbacks suppressed [ 117.522460][ T510] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 117.558249][ T4883] usb 1-1: USB disconnect, device number 5 [ 117.565231][ T4883] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 117.574903][ T4883] ftdi_sio 1-1:0.0: device disconnected [ 117.586944][ T13] usb 2-1: USB disconnect, device number 4 [ 117.625944][ T4895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1751'. [ 117.710259][ T4893] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 117.721768][ T4893] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 117.731859][ T4877] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.737783][ T4893] EXT4-fs error (device loop0): ext4_orphan_get:1260: comm syz.0.1750: bad orphan inode 13 [ 117.756919][ T4893] EXT4-fs (loop0): Remounting filesystem read-only [ 117.763261][ T4893] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="nobarrier,errors=remount-ro,noblock_validity, [ 117.770748][ T4877] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.828233][ T3426] attempt to access beyond end of device [ 117.828233][ T3426] loop3: rw=2049, want=45104, limit=40427 [ 117.931583][ T4928] FAT-fs (loop4): bogus number of FAT sectors [ 117.938732][ T4928] FAT-fs (loop4): Can't find a valid FAT filesystem [ 118.136762][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 118.150944][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.162328][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 118.188611][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 118.201701][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.233631][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 118.256912][ T23] audit: type=1400 audit(1719402750.095:518): avc: denied { read } for pid=4948 comm="syz.1.1774" name="/" dev="configfs" ino=9262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.356780][ T23] audit: type=1400 audit(1719402750.095:519): avc: denied { open } for pid=4948 comm="syz.1.1774" path="/sys/kernel/config" dev="configfs" ino=9262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.384162][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 118.396456][ T4957] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.403458][ T4957] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.411317][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.480069][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 118.521328][ T23] audit: type=1400 audit(1719402750.355:520): avc: denied { setattr } for pid=4948 comm="syz.1.1774" name="/" dev="configfs" ino=9262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.628069][ T4957] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.634933][ T4957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.642106][ T4957] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.649018][ T4957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.656440][ T4957] device bridge0 entered promiscuous mode [ 118.689111][ T4961] FAT-fs (loop3): bogus number of FAT sectors [ 118.701919][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 118.702623][ T4961] FAT-fs (loop3): Can't find a valid FAT filesystem [ 118.716917][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.737479][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 118.803744][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 118.820755][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 118.825652][ T23] audit: type=1400 audit(1719402750.655:521): avc: denied { read } for pid=4980 comm="syz.0.1787" name="usbmon0" dev="devtmpfs" ino=9261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 118.863552][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 118.883266][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 118.899499][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 118.987203][ T4993] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 119.007950][ T4993] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.036160][ T4993] EXT4-fs (loop0): Remounting filesystem read-only [ 119.143257][ T4999] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.150291][ T4999] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.157607][ T356] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 119.189223][ T4999] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.196083][ T4999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.203199][ T4999] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.209973][ T4999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.217837][ T4999] device bridge0 entered promiscuous mode [ 119.536328][ T356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 119.548414][ T356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 119.552327][ T5018] overlayfs: empty lowerdir [ 119.559491][ T356] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.563966][ T23] kauditd_printk_skb: 3 callbacks suppressed [ 119.563974][ T23] audit: type=1400 audit(1719402751.385:525): avc: denied { mounton } for pid=5017 comm="syz.2.1799" path="/root/syzkaller.F8OIFZ/445/file0" dev="tmpfs" ino=35150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.577511][ T356] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.616237][ T356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.624839][ T356] usb 4-1: config 0 descriptor?? [ 119.630018][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.646158][ T4984] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 119.658085][ T23] audit: type=1326 audit(1719402751.495:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5024 comm="syz.2.1802" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ddc54ae9 code=0x0 [ 119.830085][ T23] audit: type=1400 audit(1719402751.665:527): avc: denied { listen } for pid=5031 comm="syz.4.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.887400][ T23] audit: type=1400 audit(1719402751.725:528): avc: denied { accept } for pid=5031 comm="syz.4.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.107016][ T5035] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 120.113408][ T356] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 120.132350][ T356] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 120.154656][ T356] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 120.212779][ T5047] overlayfs: empty lowerdir [ 120.213246][ T5035] EXT4-fs error (device loop0): ext4_xattr_ibody_get:601: inode #15: comm syz.0.1806: corrupted in-inode xattr [ 120.229141][ T5035] EXT4-fs error (device loop0): get_max_inline_xattr_value_size:68: inode #15: comm syz.0.1806: corrupt xattr in inline inode [ 120.242927][ T5035] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2221: inode #15: comm syz.0.1806: corrupted in-inode xattr [ 120.254961][ T5035] attempt to access beyond end of device [ 120.254961][ T5035] loop0: rw=2049, want=3606377192, limit=1024 [ 120.266579][ T5035] EXT4-fs warning (device loop0): ext4_end_bio:317: I/O error 10 writing to inode 15 (offset 0 size 0 starting block 1803188595) [ 120.279790][ T5035] Buffer I/O error on device loop0, logical block 1803188595 [ 120.300036][ T2880] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.itgTmf/188/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 120.324256][ T2880] EXT4-fs (loop0): Inode 15 (ffff8881d8836940): i_reserved_data_blocks (1) not cleared! [ 120.399592][ T371] usb 4-1: USB disconnect, device number 9 [ 120.427136][ T7] tipc: Left network mode [ 120.510857][ T5052] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.527047][ T5052] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.534600][ T5052] device bridge_slave_0 entered promiscuous mode [ 120.541890][ T5052] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.548894][ T5052] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.556857][ T5052] device bridge_slave_1 entered promiscuous mode [ 120.628355][ T5052] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.635198][ T5052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.642356][ T5052] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.649114][ T5052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.661881][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.673819][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.882072][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.894872][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.903917][ T5064] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1817'. [ 120.914593][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.922818][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.931158][ T4883] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.937994][ T4883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.949319][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.960324][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.968533][ T540] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.975401][ T540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.992573][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.000851][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.015740][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.024748][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.056185][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.064510][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.074361][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.086111][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.320829][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.333116][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.351048][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.362607][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.379186][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.387921][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.449876][ T23] audit: type=1326 audit(1719402753.285:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.3.1824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effd9895ae9 code=0x0 [ 121.592465][ T23] audit: type=1326 audit(1719402753.315:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedfc5d8ae9 code=0x7ffc0000 [ 121.847069][ T7] device bridge_slave_1 left promiscuous mode [ 121.853381][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.952472][ T7] device bridge_slave_0 left promiscuous mode [ 122.088436][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.331090][ T23] audit: type=1326 audit(1719402753.315:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedfc5d8ae9 code=0x7ffc0000 [ 122.404596][ T5107] syz.2.1833 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 122.979032][ T23] audit: type=1326 audit(1719402753.315:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fedfc5d8ae9 code=0x7ffc0000 [ 123.033854][ T23] audit: type=1326 audit(1719402753.315:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedfc5d8ae9 code=0x7ffc0000 [ 123.058650][ T23] audit: type=1326 audit(1719402753.315:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedfc5d8ae9 code=0x7ffc0000 [ 123.099349][ T509] print_req_error: 22 callbacks suppressed [ 123.099362][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 123.127731][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.138515][ T509] buffer_io_error: 6 callbacks suppressed [ 123.138533][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 123.168218][ T5105] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.178908][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.185910][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.192754][ T5113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.282465][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 123.324412][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.360540][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 123.392778][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 123.404324][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.436318][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 123.795692][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 125.374675][ T23] kauditd_printk_skb: 62 callbacks suppressed [ 125.424987][ T23] audit: type=1326 audit(1719402755.665:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298bee3ae9 code=0x7ffc0000 [ 125.709435][ T5143] EXT4-fs (loop4): Test dummy encryption mode enabled [ 125.716914][ T5143] EXT4-fs (loop4): Ignoring removed orlov option [ 125.729281][ T23] audit: type=1326 audit(1719402755.665:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298bee3ae9 code=0x7ffc0000 [ 125.756415][ T5143] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 125.843301][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.026999][ T23] audit: type=1326 audit(1719402755.675:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f298bee3ae9 code=0x7ffc0000 [ 126.112238][ T23] audit: type=1326 audit(1719402755.675:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298bee3ae9 code=0x7ffc0000 [ 126.199188][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 126.279716][ T23] audit: type=1326 audit(1719402755.675:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298bee3ae9 code=0x7ffc0000 [ 126.311951][ T23] audit: type=1326 audit(1719402755.675:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f298bee3ae9 code=0x7ffc0000 [ 126.338532][ T23] audit: type=1326 audit(1719402755.675:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298bee3ae9 code=0x7ffc0000 [ 126.338624][ T5157] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.363508][ T23] audit: type=1326 audit(1719402755.675:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298bee3ae9 code=0x7ffc0000 [ 126.395167][ T23] audit: type=1326 audit(1719402755.675:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f298bee3ae9 code=0x7ffc0000 [ 126.423238][ T23] audit: type=1326 audit(1719402755.675:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298bee3ae9 code=0x7ffc0000 [ 126.446186][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.454734][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.477250][ T5143] EXT4-fs (loop4): Ignoring removed oldalloc option [ 126.483745][ T5143] EXT4-fs (loop4): can't mount with dioread_nolock if block size != PAGE_SIZE [ 126.539683][ T510] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 126.559368][ T510] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.594371][ T5168] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sda1, type ext4) errno=-22 [ 126.608024][ T510] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 126.949411][ T5195] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.970738][ T5196] 9pnet: Insufficient options for proto=fd [ 126.975996][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.983229][ T5195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.189559][ T5216] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sda1, type ext4) errno=-22 [ 127.346088][ T385] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.351495][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 127.373545][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 127.400105][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 127.410908][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.418040][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.424856][ T5222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.443292][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 127.495586][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 127.776150][ T385] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 127.801517][ T385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.826051][ T385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.836161][ T385] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 127.936236][ T385] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 127.950857][ T385] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 127.966059][ T385] usb 2-1: Manufacturer: syz [ 127.977091][ T385] usb 2-1: config 0 descriptor?? [ 128.350161][ T5271] 9pnet: Insufficient options for proto=fd [ 128.523165][ T510] print_req_error: 14 callbacks suppressed [ 128.523178][ T510] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 128.544623][ T510] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.557700][ T510] buffer_io_error: 2 callbacks suppressed [ 128.557708][ T510] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 128.589737][ T510] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 128.608283][ T385] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 128.618375][ T510] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.619659][ T385] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 128.636057][ T510] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 128.642067][ T385] appleir 0003:05AC:8243.000F: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 128.847149][ T5275] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 128.853640][ T5275] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 128.897629][ T5292] x_tables: duplicate underflow at hook 3 [ 128.898742][ T5275] F2FS-fs (loop0): Found nat_bits in checkpoint [ 128.904188][ T5292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5292 comm=syz.2.1900 [ 128.946130][ T5275] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 128.953665][ T5275] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 128.980787][ T5284] attempt to access beyond end of device [ 128.980787][ T5284] loop0: rw=2049, want=45112, limit=40427 [ 129.261247][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 129.291616][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.319708][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 129.443802][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 129.465144][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.486043][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 129.617759][ T5307] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 129.633010][ T5307] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 129.642870][ T5307] F2FS-fs (loop0): invalid crc_offset: 5705724 [ 129.662616][ T5307] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.734396][ T5307] F2FS-fs (loop0): recover fsync data on readonly fs [ 129.757339][ T5307] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 129.764446][ T5307] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.291846][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 130.315953][ T5321] 9pnet: Insufficient options for proto=fd [ 130.321988][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.334723][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 130.343957][ T5323] x_tables: duplicate underflow at hook 3 [ 130.350780][ T5323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5323 comm=syz.0.1912 [ 130.377958][ T5325] EXT4-fs (loop3): quotafile must be on filesystem root [ 130.437320][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 130.453660][ T5325] 9pnet: Insufficient options for proto=fd [ 130.469566][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 130.508420][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 130.542220][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 130.602476][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 130.629935][ T5359] x_tables: duplicate underflow at hook 3 [ 130.651283][ T5359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5359 comm=syz.2.1929 [ 130.774095][ T23] kauditd_printk_skb: 62 callbacks suppressed [ 130.774104][ T23] audit: type=1400 audit(1719402762.605:669): avc: denied { map } for pid=5365 comm="syz.2.1932" path="socket:[37319]" dev="sockfs" ino=37319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 130.908297][ T5376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58138 sclass=netlink_route_socket pid=5376 comm=syz.4.1930 [ 130.947216][ T5368] EXT4-fs (loop0): quotafile must be on filesystem root [ 131.023918][ T74] usb 2-1: USB disconnect, device number 5 [ 131.043641][ T5346] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 131.050437][ T5346] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 131.061050][ T5346] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.085750][ T5346] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 131.092705][ T5346] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 131.121779][ T5379] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.124717][ T5368] 9pnet: Insufficient options for proto=fd [ 131.131726][ T5379] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 131.186855][ T5380] attempt to access beyond end of device [ 131.186855][ T5380] loop3: rw=2049, want=45112, limit=40427 [ 131.296878][ T5393] x_tables: duplicate underflow at hook 3 [ 131.303812][ T5393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5393 comm=syz.1.1943 [ 131.417482][ T5395] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 131.436245][ T385] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.444409][ T5395] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.1944: bg 0: block 234: padding at end of block bitmap is not set [ 131.565512][ T23] audit: type=1400 audit(1719402763.395:670): avc: denied { setopt } for pid=5409 comm="syz.1.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 131.734259][ T5420] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.764816][ T5420] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 131.826123][ T385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 131.837375][ T385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 131.857648][ T385] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.870538][ T385] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.879506][ T385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.889007][ T385] usb 1-1: config 0 descriptor?? [ 131.905631][ T5414] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 131.912116][ T5385] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 131.937116][ T5414] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 131.971610][ T5414] F2FS-fs (loop1): Found nat_bits in checkpoint [ 132.041326][ T5414] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 132.057452][ T5414] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 132.092193][ T5461] cgroup1: name respecified [ 132.101979][ T5441] attempt to access beyond end of device [ 132.101979][ T5441] loop1: rw=2049, want=45112, limit=40427 [ 132.372844][ T5489] cgroup1: name respecified [ 132.387392][ T385] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 132.637458][ T385] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 132.648052][ T385] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 132.718014][ T385] usb 1-1: USB disconnect, device number 6 [ 132.796201][ T23] audit: type=1400 audit(1719402764.595:671): avc: denied { ioctl } for pid=5499 comm="syz.1.1987" path="socket:[38529]" dev="sockfs" ino=38529 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.839090][ T5504] tipc: Failed to remove local publication {66,1,1}/765275950 [ 132.868971][ T5504] tipc: Failed to remove local publication {66,1,1}/765275950 [ 132.898897][ T5504] tipc: Failed to remove local publication {66,4,4}/765275949 [ 132.910034][ T5509] 9pnet: Insufficient options for proto=fd [ 133.268860][ T5524] fuse: Bad value for 'user_id' [ 133.299716][ T5526] input: syz1 as /devices/virtual/input/input18 [ 133.464694][ T5538] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 133.509514][ T5538] fs-verity: sha256 using implementation "sha256-avx2" [ 133.548521][ T5538] fs-verity (loop4, inode 13): Error -27 writing Merkle tree block 2160165643 [ 133.569047][ T5538] fs-verity (loop4, inode 13): Error -27 building Merkle tree [ 133.596005][ T5469] F2FS-fs (loop3): Found nat_bits in checkpoint [ 133.715692][ T5469] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 133.762073][ T5536] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 133.776172][ T5536] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 134.074044][ T5536] F2FS-fs (loop0): invalid crc value [ 134.081723][ T5536] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.210033][ T5536] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 134.217007][ T5536] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 134.421167][ T23] audit: type=1400 audit(1719402766.255:672): avc: denied { setattr } for pid=5535 comm="syz.0.2004" name="cgroup.controllers" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.582038][ T5052] attempt to access beyond end of device [ 134.582038][ T5052] loop0: rw=2049, want=32800, limit=11 [ 134.616590][ T23] audit: type=1400 audit(1719402766.455:673): avc: denied { bind } for pid=5599 comm="syz.4.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.650029][ T5597] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 2, please upgrade kernel version [ 135.176434][ T23] audit: type=1400 audit(1719402767.015:674): avc: denied { ioctl } for pid=5617 comm="syz.4.2034" path="/dev/usbmon0" dev="devtmpfs" ino=9261 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 135.413021][ T509] print_req_error: 24 callbacks suppressed [ 135.413034][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 136.057293][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.079843][ T5608] overlayfs: failed to resolve './file0': -2 [ 136.101197][ T5625] FAT-fs (loop0): Directory bread(block 64) failed [ 136.156271][ T509] buffer_io_error: 7 callbacks suppressed [ 136.156279][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 136.172256][ T5625] FAT-fs (loop0): Directory bread(block 65) failed [ 136.194266][ T5625] FAT-fs (loop0): Directory bread(block 66) failed [ 136.213349][ T5625] FAT-fs (loop0): Directory bread(block 67) failed [ 136.237530][ T5625] FAT-fs (loop0): Directory bread(block 68) failed [ 136.256099][ T5625] FAT-fs (loop0): Directory bread(block 69) failed [ 136.264327][ T5625] FAT-fs (loop0): Directory bread(block 70) failed [ 136.271150][ T5625] FAT-fs (loop0): Directory bread(block 71) failed [ 136.278501][ T5625] FAT-fs (loop0): Directory bread(block 72) failed [ 136.285279][ T5625] FAT-fs (loop0): Directory bread(block 73) failed [ 136.301558][ T5625] SELinux: security_context_str_to_sid() failed for (dev loop0, type vfat) errno=-22 [ 136.342079][ T5636] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.417605][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 136.439217][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.456289][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 136.968681][ T5675] fuse: Bad value for 'fd' [ 136.983219][ T5594] F2FS-fs (loop1): Found nat_bits in checkpoint [ 137.033932][ T5657] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,nolazytime,min_batch_time=0x0000000000000005,delalloc,user_xattr,errors=remount-ro, [ 137.058057][ T5594] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 137.254052][ T5699] EXT4-fs error (device loop0): ext4_xattr_ibody_get:601: inode #18: comm syz.0.2048: corrupted in-inode xattr [ 137.376732][ T5699] EXT4-fs (loop0): Remounting filesystem read-only [ 137.385313][ T5699] EXT4-fs error (device loop0): get_max_inline_xattr_value_size:68: inode #18: comm syz.0.2048: corrupt xattr in inline inode [ 137.446517][ T5052] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.Tgnbbv/32/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 137.495893][ T5711] FAT-fs (loop3): Directory bread(block 64) failed [ 137.502873][ T5711] FAT-fs (loop3): Directory bread(block 65) failed [ 137.509973][ T5711] FAT-fs (loop3): Directory bread(block 66) failed [ 137.517065][ T5711] FAT-fs (loop3): Directory bread(block 67) failed [ 137.523536][ T5711] FAT-fs (loop3): Directory bread(block 68) failed [ 137.533143][ T5711] FAT-fs (loop3): Directory bread(block 69) failed [ 137.539662][ T5711] FAT-fs (loop3): Directory bread(block 70) failed [ 137.546365][ T5711] FAT-fs (loop3): Directory bread(block 71) failed [ 137.552794][ T5711] FAT-fs (loop3): Directory bread(block 72) failed [ 137.560061][ T5711] FAT-fs (loop3): Directory bread(block 73) failed [ 137.570093][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 137.584572][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.585172][ T5715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2070'. [ 137.609377][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 137.617456][ T5711] SELinux: security_context_str_to_sid() failed for (dev loop3, type vfat) errno=-22 [ 137.796394][ T5717] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.803257][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.810844][ T5717] device bridge_slave_0 entered promiscuous mode [ 137.834634][ T5717] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.851591][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.859308][ T5717] device bridge_slave_1 entered promiscuous mode [ 138.006841][ T5729] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 138.061831][ T5717] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.068697][ T5717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.075820][ T5717] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.082579][ T5717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.409008][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.417113][ T385] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.430487][ T385] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.446137][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.454225][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.461067][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.468531][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.487234][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.494185][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.513966][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.532521][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.544493][ T5741] netlink: 'syz.4.2080': attribute type 4 has an invalid length. [ 138.574454][ T1204] device bridge_slave_1 left promiscuous mode [ 138.580828][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.588612][ T1204] device bridge_slave_0 left promiscuous mode [ 138.594771][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.679705][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.688224][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.713169][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.730127][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.750121][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.764770][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.787757][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.824409][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.832019][ T5751] FAT-fs (loop1): Directory bread(block 64) failed [ 138.838917][ T5751] FAT-fs (loop1): Directory bread(block 65) failed [ 138.845325][ T5751] FAT-fs (loop1): Directory bread(block 66) failed [ 138.851730][ T5751] FAT-fs (loop1): Directory bread(block 67) failed [ 138.858151][ T5751] FAT-fs (loop1): Directory bread(block 68) failed [ 138.864426][ T5751] FAT-fs (loop1): Directory bread(block 69) failed [ 138.870813][ T5751] FAT-fs (loop1): Directory bread(block 70) failed [ 138.887243][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.895372][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.906134][ T5751] FAT-fs (loop1): Directory bread(block 71) failed [ 138.910193][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.921690][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.936464][ T5751] FAT-fs (loop1): Directory bread(block 72) failed [ 138.942780][ T5751] FAT-fs (loop1): Directory bread(block 73) failed [ 138.943804][ T5722] F2FS-fs (loop3): Found nat_bits in checkpoint [ 138.964649][ T23] audit: type=1400 audit(1719402770.795:675): avc: denied { map } for pid=5761 comm="syz.2.2086" path="socket:[39428]" dev="sockfs" ino=39428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.967780][ T5751] SELinux: security_context_str_to_sid() failed for (dev loop1, type vfat) errno=-22 [ 138.996517][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 139.060828][ T23] audit: type=1400 audit(1719402770.845:676): avc: denied { read } for pid=5761 comm="syz.2.2086" path="socket:[39428]" dev="sockfs" ino=39428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.117679][ T5722] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 139.148596][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 139.166096][ T23] audit: type=1400 audit(1719402770.995:677): avc: denied { read write } for pid=5778 comm="syz.0.2091" name="uhid" dev="devtmpfs" ino=9289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 139.186683][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.220430][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 139.228907][ T23] audit: type=1400 audit(1719402770.995:678): avc: denied { open } for pid=5778 comm="syz.0.2091" path="/dev/uhid" dev="devtmpfs" ino=9289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 139.274815][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 139.287598][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 139.289178][ T5786] EXT4-fs (loop1): 1 orphan inode deleted [ 139.301082][ T5786] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 139.323052][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 139.327120][ T5786] ext4 filesystem being mounted at /root/syzkaller.5S8v80/92/file1 supports timestamps until 2038 (0x7fffffff) [ 139.422859][ T23] audit: type=1400 audit(1719402771.255:679): avc: denied { write } for pid=5778 comm="syz.0.2091" name="net" dev="proc" ino=40343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 139.449975][ T23] audit: type=1400 audit(1719402771.285:680): avc: denied { add_name } for pid=5778 comm="syz.0.2091" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 139.780197][ T5806] futex_wake_op: syz.4.2100 tries to shift op by 144; fix this program [ 139.918950][ T23] audit: type=1400 audit(1719402771.285:681): avc: denied { create } for pid=5778 comm="syz.0.2091" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 139.939894][ T23] audit: type=1400 audit(1719402771.285:682): avc: denied { associate } for pid=5778 comm="syz.0.2091" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 140.169040][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 140.265747][ T5822] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 140.663519][ T5825] FAT-fs (loop1): Directory bread(block 64) failed [ 140.670534][ T5825] FAT-fs (loop1): Directory bread(block 65) failed [ 140.677103][ T5825] FAT-fs (loop1): Directory bread(block 66) failed [ 140.683525][ T5825] FAT-fs (loop1): Directory bread(block 67) failed [ 140.691946][ T5825] FAT-fs (loop1): Directory bread(block 68) failed [ 140.700716][ T5825] FAT-fs (loop1): Directory bread(block 69) failed [ 140.708846][ T5825] FAT-fs (loop1): Directory bread(block 70) failed [ 140.715208][ T5825] FAT-fs (loop1): Directory bread(block 71) failed [ 140.721816][ T5825] FAT-fs (loop1): Directory bread(block 72) failed [ 140.728192][ T5825] FAT-fs (loop1): Directory bread(block 73) failed [ 140.738626][ T5825] SELinux: security_context_str_to_sid() failed for (dev loop1, type vfat) errno=-22 [ 140.816275][ T23] audit: type=1326 audit(1719402772.645:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.4.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82ed6ae9 code=0x7ffc0000 [ 140.840138][ T23] audit: type=1326 audit(1719402772.645:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.4.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82ed6ae9 code=0x7ffc0000 [ 141.541012][ T5849] netlink: 'syz.0.2114': attribute type 4 has an invalid length. [ 141.555199][ T512] print_req_error: 5 callbacks suppressed [ 141.555332][ T512] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 142.224889][ T512] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.246079][ T512] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 142.268440][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 142.298888][ T5855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2117'. [ 142.318795][ T5857] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 142.341197][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.395104][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 142.418993][ T5867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2119'. [ 142.429076][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 142.445535][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.458424][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 142.473205][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 142.484830][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.508096][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 142.551635][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 142.584604][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.612897][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 142.866532][ T5880] netlink: 'syz.4.2127': attribute type 4 has an invalid length. [ 142.963468][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2123'. [ 143.157925][ T5896] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 143.177932][ T5898] fuse: Bad value for 'fd' [ 143.334092][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 143.414621][ T5914] EXT4-fs (loop3): Test dummy encryption mode enabled [ 143.430740][ T510] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 143.431322][ T5914] EXT4-fs (loop3): Ignoring removed orlov option [ 143.477930][ T5914] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 143.946749][ T5929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2147'. [ 144.034166][ T5925] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 144.051864][ T5925] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 144.080714][ T5925] F2FS-fs (loop3): Found nat_bits in checkpoint [ 144.150813][ T5925] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 144.165208][ T5935] tipc: Failed to remove local publication {66,3,3}/3948592142 [ 144.172895][ T5935] tipc: Failed to remove local publication {66,0,0}/3948592140 [ 144.180509][ T5925] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 144.189477][ T5925] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.413353][ T5906] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.490646][ T5906] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 144.558103][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.564943][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.572789][ T5947] device bridge_slave_0 entered promiscuous mode [ 144.581110][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.590313][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.598450][ T5947] device bridge_slave_1 entered promiscuous mode [ 144.666900][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.673755][ T5947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.680878][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.687637][ T5947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.734787][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.748228][ T385] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.755508][ T385] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.982831][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.991943][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.998787][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.007012][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.015014][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.021942][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.029535][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.037500][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.049453][ T5971] tipc: Failed to remove local publication {66,3,3}/3883183736 [ 145.059522][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.067030][ T5971] tipc: Failed to remove local publication {66,0,0}/3883183734 [ 145.071997][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.093893][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.114237][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.138684][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.170184][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 145.246526][ T3202] device bridge_slave_1 left promiscuous mode [ 145.259492][ T3202] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.272263][ T3202] device bridge_slave_0 left promiscuous mode [ 145.281537][ T3202] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.349458][ T5984] EXT4-fs (loop1): dax option not supported [ 145.508956][ T5977] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 145.540106][ T5977] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 145.580333][ T5977] F2FS-fs (loop0): invalid crc value [ 145.587534][ T6001] input: syz1 as /devices/virtual/input/input19 [ 145.598723][ T5977] F2FS-fs (loop0): Found nat_bits in checkpoint [ 145.655487][ T23] kauditd_printk_skb: 782 callbacks suppressed [ 145.655638][ T23] audit: type=1326 audit(1719402777.455:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82ed6ae9 code=0x7ffc0000 [ 146.869015][ T5977] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 146.942176][ T23] audit: type=1326 audit(1719402777.455:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82ed6ae9 code=0x7ffc0000 [ 146.951954][ T5977] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 146.965653][ T23] audit: type=1326 audit(1719402777.465:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4a82ed6ae9 code=0x7ffc0000 [ 146.995963][ T23] audit: type=1326 audit(1719402777.465:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82ed6ae9 code=0x7ffc0000 [ 147.043062][ T23] audit: type=1326 audit(1719402777.465:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82ed6ae9 code=0x7ffc0000 [ 147.077710][ T5977] attempt to access beyond end of device [ 147.077710][ T5977] loop0: rw=2049, want=77944, limit=40427 [ 147.098540][ T23] audit: type=1326 audit(1719402777.465:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4a82ed6ae9 code=0x7ffc0000 [ 147.124731][ T23] audit: type=1326 audit(1719402777.475:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82ed6ae9 code=0x7ffc0000 [ 147.125772][ T5947] attempt to access beyond end of device [ 147.125772][ T5947] loop0: rw=2049, want=45104, limit=40427 [ 147.152551][ T23] audit: type=1326 audit(1719402777.475:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82ed6ae9 code=0x7ffc0000 [ 147.401100][ T23] audit: type=1326 audit(1719402777.475:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4a82ed6ae9 code=0x7ffc0000 [ 147.428470][ T23] audit: type=1326 audit(1719402777.475:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a82ed6ae9 code=0x7ffc0000 [ 147.463015][ T6025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2174'. [ 147.475630][ T6025] netlink: 'syz.1.2174': attribute type 4 has an invalid length. [ 147.507182][ T6029] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue [ 147.929211][ T6040] input: syz1 as /devices/virtual/input/input20 [ 147.993978][ T509] print_req_error: 6 callbacks suppressed [ 147.993991][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 148.031242][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.042292][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 148.057240][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 148.068535][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.082144][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 148.112163][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 148.123816][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.134928][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 148.149583][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 148.160867][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.171864][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 148.553370][ T6042] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 148.579462][ T6051] F2FS-fs (loop0): invalid crc value [ 148.590307][ T6042] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 148.627107][ T6042] F2FS-fs (loop3): Found nat_bits in checkpoint [ 148.638355][ T6051] F2FS-fs (loop0): Found nat_bits in checkpoint [ 148.696269][ T6042] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 148.712458][ T6063] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 148.740035][ T6051] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 148.747450][ T6042] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 148.754278][ T6042] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 148.767233][ T6051] sock: process `syz.0.2184' is using obsolete getsockopt SO_BSDCOMPAT [ 148.790138][ T5947] attempt to access beyond end of device [ 148.790138][ T5947] loop0: rw=2049, want=45104, limit=40427 [ 149.344570][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 149.366678][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.399348][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 149.432534][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 149.438735][ T6113] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 149.455480][ T6113] ext4 filesystem being mounted at /root/syzkaller.5S8v80/114/file1 supports timestamps until 2038 (0x7fffffff) [ 149.472896][ T6112] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 149.491945][ T6113] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 149.823472][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 149.847330][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 149.873991][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 149.959927][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 150.100076][ T6154] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue [ 150.607378][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.614243][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.622126][ T6174] device bridge_slave_0 entered promiscuous mode [ 150.629263][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.636258][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.643722][ T6174] device bridge_slave_1 entered promiscuous mode [ 150.714468][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.721326][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.728459][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.735194][ T6174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.757363][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.764690][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.772078][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.781448][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.789927][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.796768][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.815027][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.823479][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.830326][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.847957][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.855829][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.874255][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.886759][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.956433][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.965370][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.983971][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.067837][ T23] kauditd_printk_skb: 61 callbacks suppressed [ 151.067855][ T23] audit: type=1400 audit(1719402782.905:1538): avc: denied { create } for pid=6229 comm="syz.4.2255" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 151.185136][ T1204] device bridge_slave_1 left promiscuous mode [ 151.192049][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.210648][ T1204] device bridge_slave_0 left promiscuous mode [ 151.220390][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.235491][ T6258] overlayfs: unrecognized mount option "reiser\s\0000000000000000" or missing value [ 151.274413][ T6252] FAT-fs (loop1): bogus sectors per cluster 0 [ 151.289207][ T6252] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 151.327481][ T6252] FAT-fs (loop1): Can't find a valid FAT filesystem [ 151.450646][ T6288] overlayfs: unrecognized mount option "reiser\s\0000000000000000" or missing value [ 151.586057][ T6015] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 151.593624][ T23] audit: type=1326 audit(1719402783.425:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.2.2293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ddc54ae9 code=0x0 [ 151.617884][ T6314] overlayfs: unrecognized mount option "reiser\s\0000000000000000" or missing value [ 151.841450][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.848544][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.859273][ T6320] device bridge_slave_0 entered promiscuous mode [ 151.933761][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.969780][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.989673][ T6320] device bridge_slave_1 entered promiscuous mode [ 152.069207][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.076066][ T6320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.083164][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.089946][ T6320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.123405][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.131713][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.136153][ T6015] usb 1-1: config 0 has an invalid interface number: 100 but max is 1 [ 152.146561][ T6015] usb 1-1: config 0 has an invalid interface descriptor of length 7, skipping [ 152.147254][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.155197][ T6015] usb 1-1: config 0 has no interface number 1 [ 152.155239][ T6015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 152.178810][ T6015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 152.189418][ T6015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 152.200014][ T6015] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 152.210246][ T6015] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 152.220591][ T6015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 152.231179][ T6015] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 152.233846][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.241396][ T6015] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 152.260769][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.267628][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.283778][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.292409][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.299263][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.317203][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.325148][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.344723][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.361141][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.379736][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.394660][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.402831][ T6015] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01ea, bcdDevice= c.8c [ 152.421858][ T6015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.429995][ T6015] usb 1-1: Product: syz [ 152.433990][ T6015] usb 1-1: Manufacturer: syz [ 152.438428][ T6015] usb 1-1: SerialNumber: syz [ 152.443779][ T6015] usb 1-1: config 0 descriptor?? [ 152.453263][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.487386][ T6015] ftdi_sio 1-1:0.100: FTDI USB Serial Device converter detected [ 152.497700][ T6015] usb 1-1: Detected FT2232C [ 152.530709][ T6340] fuse: Bad value for 'fd' [ 152.566458][ T1204] device bridge_slave_1 left promiscuous mode [ 152.572429][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.605378][ T6310] F2FS-fs (loop3): invalid crc value [ 152.611405][ T1204] device bridge_slave_0 left promiscuous mode [ 152.635595][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.696323][ T6015] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 152.716135][ T6015] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 152.724480][ T6015] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 152.745238][ T6015] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 152.758929][ T6015] usb 1-1: Detected FT2232C [ 152.771768][ T6310] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 152.779342][ T6015] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 152.806093][ T6015] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 152.817239][ T6015] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 152.837733][ T6015] usb 1-1: USB disconnect, device number 7 [ 152.847493][ T6015] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 152.886380][ T6015] ftdi_sio 1-1:0.100: device disconnected [ 152.895395][ T6015] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 152.913500][ T6015] ftdi_sio 1-1:0.0: device disconnected [ 153.031450][ T6346] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 153.038334][ T6346] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 153.146298][ T6346] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 153.153169][ T6346] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 153.272869][ T6373] F2FS-fs (loop1): invalid crc value [ 153.290335][ T510] print_req_error: 28 callbacks suppressed [ 153.290348][ T510] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 153.307497][ T510] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.316567][ T6320] attempt to access beyond end of device [ 153.316567][ T6320] loop4: rw=2049, want=45104, limit=40427 [ 153.318418][ T510] buffer_io_error: 9 callbacks suppressed [ 153.318425][ T510] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 153.346750][ T6373] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.380090][ T6373] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 153.399037][ T6373] sock: process `syz.1.2318' is using obsolete getsockopt SO_BSDCOMPAT [ 153.410796][ T4171] attempt to access beyond end of device [ 153.410796][ T4171] loop1: rw=2049, want=45104, limit=40427 [ 154.360081][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2328'. [ 154.474718][ T6421] overlayfs: statfs failed on '/' [ 154.502160][ T6421] overlayfs: statfs failed on '/' [ 154.676054][ T5154] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 154.926048][ T5154] usb 2-1: Using ep0 maxpacket: 32 [ 155.150583][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2341'. [ 155.186164][ T5154] usb 2-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 155.189507][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 155.196430][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 155.207514][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.214536][ T5154] usb 2-1: Product: syz [ 155.225130][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 155.241836][ T5154] usb 2-1: config 0 descriptor?? [ 155.286674][ T5154] uvcvideo: Found UVC 0.00 device syz (046d:08f6) [ 155.296501][ T5154] uvcvideo: No valid video chain found. [ 155.299262][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 155.330030][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.341261][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 155.369719][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 155.385741][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.396719][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 155.411621][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 155.423155][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.434492][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 155.449225][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 155.464039][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 155.492502][ T18] usb 2-1: USB disconnect, device number 6 [ 155.596117][ T74] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.600525][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 155.722616][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 155.781656][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 155.836153][ T74] usb 5-1: Using ep0 maxpacket: 32 [ 155.886895][ T6496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2364'. [ 155.956145][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.967749][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.977511][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 155.997488][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.007120][ T74] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 156.019916][ T74] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 156.028832][ T74] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.037559][ T74] usb 5-1: config 0 descriptor?? [ 156.137458][ T6502] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 156.143741][ T6502] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 156.201025][ T6502] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 156.207945][ T6502] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 156.236633][ T5947] attempt to access beyond end of device [ 156.236633][ T5947] loop0: rw=2049, want=45104, limit=40427 [ 156.666294][ T74] ntrig 0003:1B96:000A.0011: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 156.866779][ T6463] ntrig 0003:1B96:000A.0011: pid 6463 passed too short report [ 156.909992][ T74] usb 5-1: USB disconnect, device number 8 [ 157.000444][ T6549] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 158.416245][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.423113][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.435091][ T6599] F2FS-fs (loop3): invalid crc value [ 158.436649][ T6609] device bridge_slave_0 entered promiscuous mode [ 158.447240][ T6599] F2FS-fs (loop3): Found nat_bits in checkpoint [ 158.447646][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.460532][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.468305][ T6609] device bridge_slave_1 entered promiscuous mode [ 158.501347][ T6599] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 158.532952][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.539822][ T6609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.546939][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.553786][ T6609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.587130][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.594981][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.602537][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.618040][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.626686][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.633510][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.653230][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.661179][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.668009][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.683513][ T509] print_req_error: 36 callbacks suppressed [ 158.683524][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 158.702227][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.715102][ T509] buffer_io_error: 13 callbacks suppressed [ 158.715118][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 158.896264][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.904146][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.922000][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.936377][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.954589][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.963348][ T6174] attempt to access beyond end of device [ 158.963348][ T6174] loop3: rw=2049, want=45104, limit=40427 [ 158.974784][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.000740][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.031039][ T6623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2413'. [ 159.366250][ T6015] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 159.529840][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 159.547118][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.559172][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 159.585824][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 159.598031][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.608795][ T6015] usb 2-1: Using ep0 maxpacket: 32 [ 159.613941][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 159.641648][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 159.655668][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.666959][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 159.698764][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 159.716924][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.727703][ T6015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.746068][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 159.746077][ T6015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.746094][ T6015] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 159.760887][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 159.776065][ T6015] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 159.776076][ T6015] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.776847][ T6015] usb 2-1: config 0 descriptor?? [ 160.237795][ T6675] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,nombcache,stripe=0x0000000000000002,usrquota,,errors=continue [ 160.254565][ T6675] ext4 filesystem being mounted at /root/syzkaller.yDXoUh/40/bus supports timestamps until 2038 (0x7fffffff) [ 160.277306][ T6015] ntrig 0003:1B96:000A.0012: unknown main item tag 0x0 [ 160.284018][ T6015] ntrig 0003:1B96:000A.0012: unknown main item tag 0x0 [ 160.291279][ T6675] syz.3.2436 (6675) used greatest stack depth: 18456 bytes left [ 160.307929][ T6015] ntrig 0003:1B96:000A.0012: unknown main item tag 0x0 [ 160.315022][ T6015] ntrig 0003:1B96:000A.0012: unknown main item tag 0x0 [ 160.321748][ T6015] ntrig 0003:1B96:000A.0012: unknown main item tag 0x0 [ 160.332327][ T6015] ntrig 0003:1B96:000A.0012: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 160.422206][ T23] audit: type=1400 audit(1719402792.255:1540): avc: denied { mount } for pid=6688 comm="syz.3.2441" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 160.562820][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2441'. [ 160.629176][ T6692] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2415'. [ 160.671833][ T6015] usb 2-1: USB disconnect, device number 7 [ 160.677140][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 160.706789][ T6697] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 160.716905][ T6697] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #15: comm syz.3.2443: corrupted in-inode xattr [ 160.729031][ T6697] EXT4-fs (loop3): Remounting filesystem read-only [ 160.735392][ T6697] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.2443: couldn't read orphan inode 15 (err -117) [ 160.752551][ T6697] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpid,norecovery, [ 161.578191][ T6716] F2FS-fs (loop1): invalid crc value [ 161.586830][ T6716] F2FS-fs (loop1): Found nat_bits in checkpoint [ 161.600649][ T6725] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,nombcache,stripe=0x0000000000000002,usrquota,,errors=continue [ 161.622204][ T6725] ext4 filesystem being mounted at /root/syzkaller.Rg6up5/49/bus supports timestamps until 2038 (0x7fffffff) [ 161.631858][ T6716] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 161.994731][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 162.021241][ T6733] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 162.033259][ T6733] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #15: comm syz.3.2454: corrupted in-inode xattr [ 162.045540][ T6733] EXT4-fs (loop3): Remounting filesystem read-only [ 162.052314][ T6733] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.2454: couldn't read orphan inode 15 (err -117) [ 162.064366][ T6733] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpid,norecovery, [ 162.264668][ T4171] attempt to access beyond end of device [ 162.264668][ T4171] loop1: rw=2049, want=45104, limit=40427 [ 162.268914][ T23] audit: type=1400 audit(1719402794.105:1541): avc: denied { getopt } for pid=6752 comm="syz.2.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 162.508849][ T13] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 162.756069][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 162.820169][ T6764] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 162.827425][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 162.828966][ T6764] ext4 filesystem being mounted at /root/syzkaller.5S8v80/156/bus supports timestamps until 2038 (0x7fffffff) [ 162.876187][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.887087][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.897428][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 162.910185][ T13] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 162.919190][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.932020][ T13] usb 5-1: config 0 descriptor?? [ 162.940875][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 162.948816][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2467'. [ 162.969652][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2468'. [ 163.638455][ T13] ntrig 0003:1B96:000A.0013: unknown main item tag 0x0 [ 163.646692][ T13] ntrig 0003:1B96:000A.0013: unknown main item tag 0x0 [ 163.653417][ T13] ntrig 0003:1B96:000A.0013: unknown main item tag 0x0 [ 163.661193][ T13] ntrig 0003:1B96:000A.0013: unknown main item tag 0x0 [ 163.668206][ T13] ntrig 0003:1B96:000A.0013: unknown main item tag 0x0 [ 163.675686][ T13] ntrig 0003:1B96:000A.0013: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 163.879449][ T6796] F2FS-fs (loop2): invalid crc value [ 163.885986][ T6796] F2FS-fs (loop2): Found nat_bits in checkpoint [ 163.910435][ T6796] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 163.957137][ T6787] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2457'. [ 163.987571][ T13] usb 5-1: USB disconnect, device number 9 [ 163.996278][ T1165] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 164.154890][ T509] print_req_error: 14 callbacks suppressed [ 164.154910][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 164.174079][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.185741][ T509] buffer_io_error: 2 callbacks suppressed [ 164.185757][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 164.217677][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 164.229488][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.240498][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 164.252116][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 164.263405][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.274337][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 164.298730][ T6813] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,nombcache,stripe=0x0000000000000002,usrquota,,errors=continue [ 164.314691][ T6813] ext4 filesystem being mounted at /root/syzkaller.Rg6up5/58/bus supports timestamps until 2038 (0x7fffffff) [ 164.383903][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 164.395098][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.406065][ T1165] usb 2-1: Using ep0 maxpacket: 16 [ 164.411583][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 164.583758][ T6826] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2483'. [ 164.610018][ T6609] attempt to access beyond end of device [ 164.610018][ T6609] loop2: rw=2049, want=45104, limit=40427 [ 164.628520][ T6826] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 164.696172][ T1165] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 164.705687][ T1165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.713590][ T1165] usb 2-1: Product: syz [ 164.717753][ T1165] usb 2-1: Manufacturer: syz [ 164.722174][ T1165] usb 2-1: SerialNumber: syz [ 164.744457][ T23] audit: type=1326 audit(1719402796.575:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.4.2485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86fa8ccae9 code=0x0 [ 164.744808][ T1165] usb 2-1: config 0 descriptor?? [ 165.226845][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 165.238256][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.249459][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 165.261408][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 165.276088][ T370] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 165.287062][ T18] usb 2-1: USB disconnect, device number 8 [ 165.315048][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 165.516073][ T370] usb 4-1: Using ep0 maxpacket: 32 [ 165.636186][ T370] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 165.644799][ T370] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 165.654618][ T370] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.998042][ T370] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.592063][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 166.637826][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 166.667275][ T23] audit: type=1400 audit(1719402798.435:1543): avc: denied { connect } for pid=6890 comm="syz.0.2506" laddr=172.20.20.170 lport=15 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.701758][ T370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.710116][ T370] usb 4-1: Product: syz [ 166.714295][ T370] usb 4-1: SerialNumber: syz [ 166.807578][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 167.066214][ T370] usb 4-1: 0:2 : does not exist [ 167.068288][ T6904] FAT-fs (loop4): Unrecognized mount option "џџџџ0x000000000000ee00" or missing value [ 167.075843][ T370] usb 4-1: USB disconnect, device number 10 [ 167.092658][ T509] udevd[509]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 167.215303][ T6911] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.222755][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.230469][ T6911] device bridge_slave_0 entered promiscuous mode [ 167.260442][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.268162][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.275592][ T6911] device bridge_slave_1 entered promiscuous mode [ 167.426319][ T23] audit: type=1400 audit(1719402799.215:1544): avc: denied { append } for pid=6917 comm="syz.1.2517" name="loop0" dev="devtmpfs" ino=9190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.634313][ T6932] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2523'. [ 167.647124][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.653960][ T6911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.661110][ T6911] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.667860][ T6911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.728485][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.736821][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.744128][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.778684][ T6945] binder: BINDER_SET_CONTEXT_MGR already set [ 167.785261][ T6945] binder: 6944:6945 ioctl 4018620d 200001c0 returned -16 [ 167.793982][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2525'. [ 167.816949][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.032061][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.038927][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.046422][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.054459][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.058296][ T6951] EXT4-fs (loop1): Test dummy encryption mode enabled [ 168.061304][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.106527][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.116310][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.125077][ T6951] EXT4-fs error (device loop1): ext4_quota_enable:6056: comm syz.1.2529: inode #16777216: comm syz.1.2529: iget: illegal inode # [ 168.143747][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.151871][ T6951] EXT4-fs error (device loop1): ext4_quota_enable:6059: comm syz.1.2529: Bad quota inode: 16777216, type: 2 [ 168.163557][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.186394][ T6951] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 168.208241][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.216313][ T6951] EXT4-fs (loop1): mount failed [ 168.222283][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.249225][ T3202] device bridge_slave_1 left promiscuous mode [ 168.256134][ T3202] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.263480][ T3202] device bridge_slave_0 left promiscuous mode [ 168.269752][ T3202] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.298940][ T6947] F2FS-fs (loop3): Found nat_bits in checkpoint [ 168.347500][ T6947] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 168.360194][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.368124][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.613379][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.626652][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.648647][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.657644][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.665890][ T6174] attempt to access beyond end of device [ 168.665890][ T6174] loop3: rw=2049, want=45104, limit=40427 [ 168.684183][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.694939][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.730254][ T6951] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 168.877743][ T6975] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.884645][ T6975] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.892208][ T6975] device bridge_slave_0 entered promiscuous mode [ 168.899364][ T6975] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.981345][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.051248][ T6975] device bridge_slave_1 entered promiscuous mode [ 169.230394][ T509] print_req_error: 16 callbacks suppressed [ 169.230407][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 169.285056][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.300693][ T509] buffer_io_error: 3 callbacks suppressed [ 169.300701][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 169.302373][ T6998] FAT-fs (loop2): Unrecognized mount option "џџџџ0x000000000000ee00" or missing value [ 169.326296][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.339173][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.367018][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.375473][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.398107][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.404948][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.412129][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.420599][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.429233][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.436104][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.651408][ T1165] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 169.798875][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.808001][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.816470][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.832713][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.847500][ T7013] EXT4-fs (loop2): Test dummy encryption mode enabled [ 169.868170][ T7013] EXT4-fs error (device loop2): ext4_quota_enable:6056: comm syz.2.2548: inode #16777216: comm syz.2.2548: iget: illegal inode # [ 169.882093][ T7013] EXT4-fs error (device loop2): ext4_quota_enable:6059: comm syz.2.2548: Bad quota inode: 16777216, type: 2 [ 169.884116][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.893930][ T7013] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 169.916967][ T1165] usb 5-1: Using ep0 maxpacket: 32 [ 169.917824][ T7013] EXT4-fs (loop2): mount failed [ 169.938908][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.950763][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.958898][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.971199][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.980788][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.036198][ T1165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.045213][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 170.059236][ T1165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.067866][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.070081][ T1165] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 170.092473][ T1165] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 170.093932][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 170.105142][ T1165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.112786][ T7013] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 170.118415][ T1165] usb 5-1: config 0 descriptor?? [ 170.140403][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 170.151758][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.215709][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 170.230817][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 170.274841][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.286007][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 170.395663][ T7040] FAT-fs (loop1): Unrecognized mount option "џџџџ0x000000000000ee00" or missing value [ 170.524175][ T510] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 170.535451][ T510] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.546348][ T510] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 170.627252][ T1165] ntrig 0003:1B96:000A.0014: unknown main item tag 0x0 [ 170.633999][ T1165] ntrig 0003:1B96:000A.0014: unknown main item tag 0x0 [ 170.641435][ T1165] ntrig 0003:1B96:000A.0014: unknown main item tag 0x0 [ 170.648223][ T3202] device bridge_slave_1 left promiscuous mode [ 170.654210][ T3202] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.661282][ T1165] ntrig 0003:1B96:000A.0014: unknown main item tag 0x0 [ 170.668325][ T1165] ntrig 0003:1B96:000A.0014: unknown main item tag 0x0 [ 170.676529][ T3202] device bridge_slave_0 left promiscuous mode [ 170.682626][ T3202] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.690049][ T1165] ntrig 0003:1B96:000A.0014: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 170.776049][ T1253] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 170.947152][ T7069] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2539'. [ 170.971355][ T1165] usb 5-1: USB disconnect, device number 10 [ 171.006445][ T6015] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 171.016063][ T1253] usb 1-1: Using ep0 maxpacket: 16 [ 171.120489][ T7071] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 171.136235][ T1253] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 171.151935][ T1253] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 171.161917][ T1253] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.171337][ T1253] usb 1-1: config 0 descriptor?? [ 171.256064][ T6015] usb 3-1: Using ep0 maxpacket: 32 [ 171.376132][ T6015] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 171.385010][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.409689][ T6015] usb 3-1: config 0 descriptor?? [ 171.447009][ T6015] rndis_host: probe of 3-1:0.0 failed with error -22 [ 171.598173][ T7082] EXT4-fs (loop4): Test dummy encryption mode enabled [ 171.618211][ T7082] EXT4-fs error (device loop4): ext4_quota_enable:6056: comm syz.4.2572: inode #16777216: comm syz.4.2572: iget: illegal inode # [ 171.631622][ T7082] EXT4-fs error (device loop4): ext4_quota_enable:6059: comm syz.4.2572: Bad quota inode: 16777216, type: 2 [ 171.643098][ T7046] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 171.643393][ T7082] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 171.670235][ T7082] EXT4-fs (loop4): mount failed [ 171.672493][ T1253] hid (null): report_id 2838798905 is invalid [ 171.675118][ T6015] usb 3-1: USB disconnect, device number 3 [ 171.686062][ T1253] hid (null): unknown global tag 0xc [ 171.692122][ T1253] hid (null): unknown global tag 0xa5 [ 171.702114][ T1253] hid (null): unknown global tag 0xd [ 171.707288][ T1253] hid (null): unknown global tag 0xc [ 171.718179][ T1253] hid-generic 0003:0158:0100.0015: unknown main item tag 0x1 [ 171.725496][ T1253] hid-generic 0003:0158:0100.0015: unexpected long global item [ 171.733396][ T1253] hid-generic: probe of 0003:0158:0100.0015 failed with error -22 [ 171.850636][ T7082] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 171.884845][ T1253] usb 1-1: USB disconnect, device number 8 [ 172.398349][ T23] audit: type=1400 audit(1719402804.185:1545): avc: denied { setopt } for pid=7098 comm="syz.3.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.898609][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 172.960610][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 173.001200][ T7155] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 173.073040][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 173.144020][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 173.227974][ T23] audit: type=1400 audit(1719402805.065:1546): avc: denied { map } for pid=7178 comm="syz.0.2610" path="socket:[48874]" dev="sockfs" ino=48874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.230115][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 173.326185][ T1165] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 173.487852][ T7187] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 173.541216][ T74] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 173.589024][ T7191] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 173.598606][ T7191] ext4 filesystem being mounted at /root/syzkaller.5S8v80/195/bus supports timestamps until 2038 (0x7fffffff) [ 173.656051][ T1165] usb 3-1: Using ep0 maxpacket: 32 [ 173.816102][ T74] usb 4-1: Using ep0 maxpacket: 16 [ 173.946179][ T1165] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 173.955099][ T1165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.956223][ T74] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 173.997483][ T1165] usb 3-1: config 0 descriptor?? [ 174.015102][ T74] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 174.023987][ T74] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.033393][ T74] usb 4-1: config 0 descriptor?? [ 174.046611][ T1165] rndis_host: probe of 3-1:0.0 failed with error -22 [ 174.249179][ T1165] usb 3-1: USB disconnect, device number 4 [ 174.433062][ T23] audit: type=1400 audit(1719402806.265:1547): avc: denied { mount } for pid=7210 comm="syz.1.2620" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 174.496797][ T7169] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 174.509263][ T7211] EXT4-fs (loop1): Ignoring removed orlov option [ 174.518379][ T74] hid (null): report_id 2838798905 is invalid [ 174.524289][ T74] hid (null): unknown global tag 0xc [ 174.529588][ T74] hid (null): unknown global tag 0xa5 [ 174.534762][ T74] hid (null): unknown global tag 0xd [ 174.540019][ T74] hid (null): unknown global tag 0xc [ 174.540803][ T7211] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,data_err=abort,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,orlov,bsdgroups,max_batch_time=0x0000000000000400,user_xattr,quota,,errors=continue [ 174.546763][ T74] hid-generic 0003:0158:0100.0016: unknown main item tag 0x1 [ 174.581931][ T74] hid-generic 0003:0158:0100.0016: unexpected long global item [ 174.589661][ T74] hid-generic: probe of 0003:0158:0100.0016 failed with error -22 [ 174.645628][ T7211] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.2620: bg 0: block 154: padding at end of block bitmap is not set [ 174.662991][ T23] audit: type=1400 audit(1719402806.495:1548): avc: denied { unmount } for pid=4171 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 174.732100][ T1253] usb 4-1: USB disconnect, device number 11 [ 174.780103][ T7223] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 174.828086][ T7226] xt_bpf: check failed: parse error [ 174.887541][ T509] print_req_error: 16 callbacks suppressed [ 174.887553][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 174.909107][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.919982][ T509] buffer_io_error: 3 callbacks suppressed [ 174.919990][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 174.966471][ T7224] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.973521][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.981613][ T7224] device bridge_slave_0 entered promiscuous mode [ 174.988598][ T7224] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.995708][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.003518][ T7224] device bridge_slave_1 entered promiscuous mode [ 175.181059][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 175.218989][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.234252][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 175.308626][ T7256] new mount options do not match the existing superblock, will be ignored [ 175.341156][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 175.366719][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.381742][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 175.382997][ T7224] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.396400][ T7224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.403460][ T7224] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.410282][ T7224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.454232][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.463530][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.472836][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.521490][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.552006][ T1253] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.558864][ T1253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.643018][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.651233][ T74] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 175.659367][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.666226][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.674582][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.682601][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.691493][ T3202] device bridge_slave_1 left promiscuous mode [ 175.697550][ T3202] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.706507][ T3202] device bridge_slave_0 left promiscuous mode [ 175.712438][ T3202] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.895237][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.903319][ T74] usb 1-1: Using ep0 maxpacket: 32 [ 175.909179][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.918418][ T7286] EXT4-fs (loop3): Ignoring removed orlov option [ 175.935489][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.943941][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.946888][ T7286] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,data_err=abort,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,orlov,bsdgroups,max_batch_time=0x0000000000000400,user_xattr,quota,,errors=continue [ 175.992114][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.000271][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.014288][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.022873][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.036428][ T74] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 176.047557][ T74] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.062715][ T74] usb 1-1: config 0 descriptor?? [ 176.072779][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.077668][ T7294] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.2649: bg 0: block 154: padding at end of block bitmap is not set [ 176.081309][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.107546][ T74] rndis_host: probe of 1-1:0.0 failed with error -22 [ 176.206116][ T6015] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 176.309732][ T370] usb 1-1: USB disconnect, device number 9 [ 176.336485][ T7309] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 2048 [ 176.353890][ T7311] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 176.362268][ T7311] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 176.370782][ T7311] Quota error (device loop2): write_blk: dquota write failed [ 176.384548][ T7311] Quota error (device loop2): qtree_write_dquot: Error -27 occurred while creating quota [ 176.395021][ T7311] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 176.404138][ T7311] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 176.412498][ T7311] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 176.422429][ T7311] EXT4-fs error (device loop2) in ext4_orphan_del:3211: error 27 [ 176.432223][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.439207][ T7311] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 176.447549][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.450974][ T7311] EXT4-fs error (device loop2) in ext4_orphan_cleanup:2816: error 27 [ 176.455792][ T7314] device bridge_slave_0 entered promiscuous mode [ 176.462531][ T6015] usb 5-1: Using ep0 maxpacket: 16 [ 176.474060][ T7311] EXT4-fs (loop2): 1 truncate cleaned up [ 176.480023][ T7311] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 176.489259][ T7311] ext4 filesystem being mounted at /root/syzkaller.vL4X36/25/file1 supports timestamps until 2038 (0x7fffffff) [ 176.493345][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.508872][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.517053][ T7314] device bridge_slave_1 entered promiscuous mode [ 176.566706][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.573538][ T7314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.580677][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.587446][ T7314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.594362][ T7330] mmap: syz.2.2661 (7330): VmData 29077504 exceed data ulimit 18504. Update limits or use boot option ignore_rlimit_data. [ 176.607256][ T6015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 176.615166][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.618893][ T6015] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 176.634954][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.638323][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.662306][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.664830][ T6015] usb 5-1: config 0 descriptor?? [ 176.696214][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.704432][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.711278][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.718731][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.727110][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.733930][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.756542][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.764451][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.776071][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.788112][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.885424][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.924042][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.008681][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 177.019070][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.034273][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.038960][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.046125][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 177.072524][ T23] audit: type=1400 audit(1719402808.905:1549): avc: denied { view } for pid=7352 comm="syz.0.2673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 177.077150][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 177.110426][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.118645][ T7355] devpts: called with bogus options [ 177.118799][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.131946][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.132023][ T7224] ------------[ cut here ]------------ [ 177.147899][ T7224] WARNING: CPU: 0 PID: 7224 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 177.149145][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 177.157071][ T7224] Modules linked in: [ 177.157091][ T7224] CPU: 0 PID: 7224 Comm: syz-executor Tainted: G W 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 177.157101][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 177.189722][ T7224] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 177.195176][ T7224] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 5c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 34 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 177.214614][ T7224] RSP: 0018:ffff8881e73cfb48 EFLAGS: 00010293 [ 177.220519][ T7224] RAX: ffffffff81e5e5ec RBX: 0000000000000000 RCX: ffff8881e3a84ec0 [ 177.228329][ T7224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.236139][ T7224] RBP: ffff8881d8951dd0 R08: ffffffff81e5e376 R09: ffffed103a05b23a [ 177.243954][ T7224] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 177.251763][ T7224] R13: ffff8881d02d9128 R14: ffff8881d02d9178 R15: ffff8881d8951e00 [ 177.259575][ T7224] FS: 0000555555fde500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 177.268339][ T7224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.274764][ T7224] CR2: 0000555555ff94a8 CR3: 00000001dfd09000 CR4: 00000000003406b0 [ 177.282575][ T7224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.290386][ T7224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.298194][ T7224] Call Trace: [ 177.301330][ T7224] ? __warn+0x162/0x250 [ 177.305318][ T7224] ? report_bug+0x3a1/0x4e0 [ 177.309655][ T7224] ? ovl_dir_modified+0x45c/0x570 [ 177.314518][ T7224] ? ovl_dir_modified+0x45c/0x570 [ 177.319377][ T7224] ? do_invalid_op+0x6e/0x110 [ 177.323891][ T7224] ? invalid_op+0x1e/0x30 [ 177.328056][ T7224] ? ovl_dir_modified+0x1e6/0x570 [ 177.332916][ T7224] ? ovl_dir_modified+0x45c/0x570 [ 177.337788][ T7224] ? ovl_dir_modified+0x45c/0x570 [ 177.342643][ T7224] ? ovl_dir_modified+0x45c/0x570 [ 177.347505][ T7224] ? ovl_path_type+0x18e/0x2f0 [ 177.352105][ T7224] ovl_do_remove+0x6f0/0xc80 [ 177.356532][ T7224] ? ovl_set_redirect+0x5f0/0x5f0 [ 177.361387][ T7224] ? security_inode_rmdir+0xca/0x110 [ 177.366507][ T7224] vfs_rmdir+0x285/0x3c0 [ 177.370588][ T7224] incfs_kill_sb+0x105/0x200 [ 177.375013][ T7224] deactivate_locked_super+0xa8/0x110 [ 177.380306][ T7224] deactivate_super+0x1e2/0x2a0 [ 177.384993][ T7224] ? deactivate_locked_super+0x110/0x110 [ 177.390462][ T7224] ? fast_dput+0x7a/0x280 [ 177.394628][ T7224] cleanup_mnt+0x44e/0x500 [ 177.398883][ T7224] task_work_run+0x140/0x170 [ 177.403308][ T7224] exit_to_usermode_loop+0x190/0x1a0 [ 177.408428][ T7224] prepare_exit_to_usermode+0x199/0x200 [ 177.413812][ T7224] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 177.419541][ T7224] RIP: 0033:0x7fdc16c90e17 [ 177.423791][ T7224] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 177.443230][ T7224] RSP: 002b:00007fff8fc23028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 177.451484][ T7224] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fdc16c90e17 [ 177.459286][ T7224] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8fc230e0 [ 177.467105][ T7224] RBP: 00007fff8fc230e0 R08: 0000000000000000 R09: 0000000000000000 [ 177.474909][ T7224] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8fc24190 [ 177.482725][ T7224] R13: 00007fdc16cfd64a R14: 000000000002b373 R15: 00007fff8fc241d0 [ 177.490551][ T7224] ---[ end trace a92e3f6a84392da3 ]--- [ 177.497811][ T7291] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 177.500105][ T7224] ------------[ cut here ]------------ [ 177.510375][ T7224] WARNING: CPU: 0 PID: 7224 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 177.519558][ T7224] Modules linked in: [ 177.523296][ T7224] CPU: 0 PID: 7224 Comm: syz-executor Tainted: G W 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 177.534496][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 177.544401][ T7224] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 177.549856][ T7224] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 5c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 34 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 177.569295][ T7224] RSP: 0018:ffff8881e73cfb48 EFLAGS: 00010293 [ 177.575196][ T7224] RAX: ffffffff81e5e5ec RBX: 0000000000000000 RCX: ffff8881e3a84ec0 [ 177.583007][ T7224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.590817][ T7224] RBP: ffff8881d8951dd0 R08: ffffffff81e5e376 R09: ffffed103a05b23a [ 177.598630][ T7224] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 177.606442][ T7224] R13: ffff8881d02d9128 R14: ffff8881d02d9178 R15: ffff8881d8951e00 [ 177.614253][ T7224] FS: 0000555555fde500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 177.623019][ T7224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.629440][ T7224] CR2: 0000555555ff94a8 CR3: 00000001dfd09000 CR4: 00000000003406b0 [ 177.637253][ T7224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.645064][ T7224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.652873][ T7224] Call Trace: [ 177.656008][ T7224] ? __warn+0x162/0x250 [ 177.659997][ T7224] ? report_bug+0x3a1/0x4e0 [ 177.664334][ T7224] ? ovl_dir_modified+0x45c/0x570 [ 177.669197][ T7224] ? ovl_dir_modified+0x45c/0x570 [ 177.674057][ T7224] ? do_invalid_op+0x6e/0x110 [ 177.678568][ T7224] ? invalid_op+0x1e/0x30 [ 177.682736][ T7224] ? ovl_dir_modified+0x1e6/0x570 [ 177.687595][ T7224] ? ovl_dir_modified+0x45c/0x570 [ 177.692455][ T7224] ? ovl_dir_modified+0x45c/0x570 [ 177.697317][ T7224] ? ovl_dir_modified+0x45c/0x570 [ 177.702175][ T7224] ? ovl_path_type+0x18e/0x2f0 [ 177.706775][ T7224] ovl_do_remove+0x6f0/0xc80 [ 177.711205][ T7224] ? ovl_set_redirect+0x5f0/0x5f0 [ 177.716066][ T7224] ? security_inode_rmdir+0xca/0x110 [ 177.721185][ T7224] vfs_rmdir+0x285/0x3c0 [ 177.725264][ T7224] incfs_kill_sb+0x18d/0x200 [ 177.729692][ T7224] deactivate_locked_super+0xa8/0x110 [ 177.734897][ T7224] deactivate_super+0x1e2/0x2a0 [ 177.739588][ T7224] ? deactivate_locked_super+0x110/0x110 [ 177.745403][ T7224] ? fast_dput+0x7a/0x280 [ 177.749568][ T7224] cleanup_mnt+0x44e/0x500 [ 177.753824][ T7224] task_work_run+0x140/0x170 [ 177.758249][ T7224] exit_to_usermode_loop+0x190/0x1a0 [ 177.763453][ T7224] prepare_exit_to_usermode+0x199/0x200 [ 177.768867][ T7224] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 177.774562][ T7224] RIP: 0033:0x7fdc16c90e17 [ 177.778816][ T7224] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 177.798254][ T7224] RSP: 002b:00007fff8fc23028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 177.806499][ T7224] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fdc16c90e17 [ 177.814310][ T7224] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8fc230e0 [ 177.822210][ T7224] RBP: 00007fff8fc230e0 R08: 0000000000000000 R09: 0000000000000000 [ 177.830021][ T7224] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8fc24190 [ 177.837832][ T7224] R13: 00007fdc16cfd64a R14: 000000000002b373 R15: 00007fff8fc241d0 [ 177.845646][ T7224] ---[ end trace a92e3f6a84392da4 ]--- [ 177.868416][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.881713][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.888331][ T6015] hid (null): report_id 2838798905 is invalid [ 177.893907][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.897581][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 177.903696][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.911471][ T6015] hid (null): unknown global tag 0xc [ 177.924428][ T6015] hid (null): unknown global tag 0xa5 [ 177.941188][ T6015] hid (null): unknown global tag 0xd [ 177.946668][ T6015] hid (null): unknown global tag 0xc [ 177.961800][ T6015] hid-generic 0003:0158:0100.0017: unknown main item tag 0x1 [ 177.967672][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 177.974886][ T6015] hid-generic 0003:0158:0100.0017: unexpected long global item [ 177.985113][ T6015] hid-generic: probe of 0003:0158:0100.0017 failed with error -22 [ 177.988220][ T7362] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 2048 [ 178.035043][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 178.120243][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 178.147904][ T6015] usb 5-1: USB disconnect, device number 11 [ 178.219238][ T7379] EXT4-fs (loop2): Ignoring removed orlov option [ 178.225769][ T7379] EXT4-fs (loop2): Test dummy encryption mode enabled [ 178.244656][ T23] audit: type=1400 audit(1719402810.075:1550): avc: denied { relabelfrom } for pid=7393 comm="syz.3.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 178.308375][ T7379] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 178.324940][ T23] audit: type=1400 audit(1719402810.075:1551): avc: denied { relabelto } for pid=7393 comm="syz.3.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 178.339553][ T7379] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 178.408209][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 178.451462][ T7379] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 178.482326][ T23] audit: type=1400 audit(1719402810.145:1552): avc: denied { create } for pid=7397 comm="syz.0.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 178.533545][ T23] audit: type=1400 audit(1719402810.155:1553): avc: denied { write } for pid=7397 comm="syz.0.2692" path="socket:[50801]" dev="sockfs" ino=50801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 178.587428][ T3202] device bridge_slave_1 left promiscuous mode [ 178.627167][ T3202] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.668935][ T7412] FAT-fs (loop3): Directory bread(block 64) failed [ 178.675263][ T7412] FAT-fs (loop3): Directory bread(block 65) failed [ 178.686131][ T23] audit: type=1400 audit(1719402810.235:1554): avc: denied { read } for pid=7397 comm="syz.0.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 178.707004][ T3202] device bridge_slave_0 left promiscuous mode [ 178.716877][ T3202] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.752416][ T23] audit: type=1400 audit(1719402810.545:1555): avc: denied { create } for pid=7409 comm="syz.1.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 178.774224][ T7412] FAT-fs (loop3): Directory bread(block 66) failed [ 178.782881][ T23] audit: type=1400 audit(1719402810.545:1556): avc: denied { create } for pid=7409 comm="syz.1.2697" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=ax25_socket permissive=1 [ 178.787646][ T7412] FAT-fs (loop3): Directory bread(block 67) failed [ 178.809929][ T7412] FAT-fs (loop3): Directory bread(block 68) failed [ 178.816308][ T7412] FAT-fs (loop3): Directory bread(block 69) failed [ 178.822682][ T7412] FAT-fs (loop3): Directory bread(block 70) failed [ 178.830180][ T7412] FAT-fs (loop3): Directory bread(block 71) failed [ 178.837696][ T7412] FAT-fs (loop3): Directory bread(block 72) failed [ 178.840481][ T7420] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 178.845594][ T7412] FAT-fs (loop3): Directory bread(block 73) failed [ 178.944926][ T7420] erofs: (device loop0): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 178.954854][ T7415] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.965535][ T7420] erofs: (device loop0): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 178.977273][ T7420] erofs: (device loop0): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 178.978450][ T7426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2702'. [ 178.986770][ T7420] erofs: (device loop0): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 179.002036][ T7430] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 179.019262][ T7428] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 179.028007][ T7428] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 179.042022][ T7415] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.2697: bg 0: block 64: padding at end of block bitmap is not set [ 179.043100][ T7428] Quota error (device loop4): write_blk: dquota write failed [ 179.056425][ T7415] Quota error (device loop1): write_blk: dquota write failed [ 179.063688][ T7428] Quota error (device loop4): qtree_write_dquot: Error -27 occurred while creating quota [ 179.071239][ T7415] EXT4-fs (loop1): 1 truncate cleaned up [ 179.084774][ T7428] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 179.085880][ T7415] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 179.112704][ T7428] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 179.149107][ T7428] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 179.160604][ T7428] EXT4-fs error (device loop4) in ext4_orphan_del:3211: error 27 [ 179.176132][ T7428] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 179.220659][ T7428] EXT4-fs error (device loop4) in ext4_orphan_cleanup:2816: error 27 [ 179.243056][ T7428] EXT4-fs (loop4): 1 truncate cleaned up [ 179.257634][ T7428] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 179.270632][ T7428] ext4 filesystem being mounted at /root/syzkaller.ZyOx3A/57/file1 supports timestamps until 2038 (0x7fffffff) [ 179.373088][ T7459] FAT-fs (loop0): Directory bread(block 64) failed [ 179.380426][ T7459] FAT-fs (loop0): Directory bread(block 65) failed [ 179.390992][ T7459] FAT-fs (loop0): Directory bread(block 66) failed [ 179.400046][ T7459] FAT-fs (loop0): Directory bread(block 67) failed [ 179.404845][ T7465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2716'. [ 179.408301][ T7459] FAT-fs (loop0): Directory bread(block 68) failed [ 179.427517][ T7459] FAT-fs (loop0): Directory bread(block 69) failed [ 179.447038][ T7459] FAT-fs (loop0): Directory bread(block 70) failed [ 179.451582][ T7465] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 179.453347][ T7459] FAT-fs (loop0): Directory bread(block 71) failed [ 179.473742][ T7459] FAT-fs (loop0): Directory bread(block 72) failed [ 179.474151][ T7469] syz.3.2718[7469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.474195][ T7469] syz.3.2718[7469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.484580][ T7459] FAT-fs (loop0): Directory bread(block 73) failed [ 179.712787][ T7484] EXT4-fs (loop4): 1 orphan inode deleted [ 179.728113][ T7494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2730'. [ 179.735036][ T7484] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 179.755711][ T7494] sch_tbf: burst 511 is lower than device veth0_to_hsr mtu (1514) ! [ 179.789996][ T7509] syz.1.2736[7509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.790047][ T7509] syz.1.2736[7509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.804828][ T7484] ext4 filesystem being mounted at /root/syzkaller.ZyOx3A/61/file1 supports timestamps until 2038 (0x7fffffff) [ 179.817806][ T7508] 9pnet: p9_errstr2errno: server reported unknown error @эЮ‚Э(ссэЋQhQIИЅ017777777777777777777770xffffffffffffffff [ 180.227790][ T7521] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff01777777777777777777777џџџџџџџџџџџџџџ" or missing value [ 180.300840][ T7521] SELinux: Context $ is not valid (left unmapped). [ 180.349409][ T509] print_req_error: 26 callbacks suppressed [ 180.349423][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 180.371991][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.375791][ T7538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2748'. [ 180.383349][ T509] buffer_io_error: 8 callbacks suppressed [ 180.383356][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 180.400194][ T7541] syz.3.2750[7541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.400239][ T7541] syz.3.2750[7541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.430395][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 180.448154][ T7546] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 180.466154][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.486039][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 180.787312][ T7559] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff01777777777777777777777џџџџџџџџџџџџџџ" or missing value [ 181.191465][ T7545] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4099) blocks(512) [ 181.206087][ T7545] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 181.223606][ T7545] F2FS-fs (loop0): Found nat_bits in checkpoint [ 181.266074][ T7545] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 181.272992][ T7545] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 181.313566][ T7545] F2FS-fs (loop0): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:16 [ 181.752792][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 181.778059][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 181.789322][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 181.820558][ T7571] FAT-fs (loop0): Directory bread(block 64) failed [ 181.829911][ T7571] FAT-fs (loop0): Directory bread(block 65) failed [ 181.837012][ T7571] FAT-fs (loop0): Directory bread(block 66) failed [ 181.843356][ T7571] FAT-fs (loop0): Directory bread(block 67) failed [ 181.849877][ T7571] FAT-fs (loop0): Directory bread(block 68) failed [ 181.856239][ T7571] FAT-fs (loop0): Directory bread(block 69) failed [ 181.862621][ T7571] FAT-fs (loop0): Directory bread(block 70) failed [ 181.869083][ T7571] FAT-fs (loop0): Directory bread(block 71) failed [ 181.875494][ T7571] FAT-fs (loop0): Directory bread(block 72) failed [ 181.881852][ T7571] FAT-fs (loop0): Directory bread(block 73) failed [ 181.987840][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 182.001865][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.013867][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 182.037552][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 182.048915][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.061472][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 182.075289][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 182.336063][ T18] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 182.586046][ T18] usb 1-1: Using ep0 maxpacket: 32 [ 182.706131][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 182.717484][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 182.728715][ T18] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 182.737662][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.747622][ T18] usb 1-1: config 0 descriptor?? [ 182.766124][ T7578] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 182.787022][ T18] hub 1-1:0.0: USB hub found [ 183.006108][ T18] hub 1-1:0.0: 2 ports detected [ 184.669065][ T124] usb 1-1: USB disconnect, device number 10 [ 185.222184][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 185.259556][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 185.309402][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 185.331476][ T7589] syz.0.2765[7589] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.331581][ T7589] syz.0.2765[7589] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.363387][ T509] print_req_error: 8 callbacks suppressed [ 185.363400][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 185.396637][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.407619][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 185.441041][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 185.466196][ T509] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.483060][ T509] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 185.492367][ T23] kauditd_printk_skb: 7 callbacks suppressed [ 185.492375][ T23] audit: type=1400 audit(1719402817.325:1561): avc: denied { mounton } for pid=7595 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1