last executing test programs: 2m49.313174634s ago: executing program 2 (id=7836): r0 = socket$inet_udp(0x2, 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 2m49.217357146s ago: executing program 2 (id=7840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x2000000, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m49.096345428s ago: executing program 2 (id=7845): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) rmdir(0x0) 2m49.033041839s ago: executing program 2 (id=7848): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getroute={0x1c, 0x1a, 0x115, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x4, 0x0, 0x2}}, 0x1c}}, 0x0) 2m48.999228959s ago: executing program 2 (id=7849): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 2m48.92205284s ago: executing program 2 (id=7854): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0x7}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0xc03e) 2m34.860077608s ago: executing program 32 (id=7854): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0x7}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0xc03e) 2m11.684008836s ago: executing program 5 (id=8873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x8, 0xe, 0x0, 0x1, [{0x4}]}]}, 0x1c}}, 0x0) 2m11.638149067s ago: executing program 5 (id=8876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x4, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x9}]}, 0x34}}, 0x0) 2m11.565696158s ago: executing program 5 (id=8879): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr/fscreate\x00') preadv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000140)=""/46, 0x2e}], 0x1, 0xfff, 0x0) write$binfmt_elf32(r0, 0x0, 0x133) 2m11.508066218s ago: executing program 5 (id=8880): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200408, &(0x7f0000000280)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,nodots,errors=continue,time_offset=0xfffffffffffffa93,dots,showexec,nodots,dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646f74732c646f74732c6e66732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c646f74732c646f74732c646f74732c636865636b3d72656c617865642c74696d655f6f66667365743d3078303030303030303030303030303437612c646f6e745f686173682c7365636c6162656c2c667373c322e2a50762a3d3fcae283b43ea02757569643d31643067586564382d353166312d62326634"], 0x1, 0x1d3, &(0x7f0000001a00)="$eJzs3cFqE1EUBuAzsTapIHYniOCAG1dBfYKKRBAHRCULXSm0bhoRks3oxvoWPqAPIF11IyNmxsaWZGxjzJj0+zb5yTmTey+ESTY5eX3z3f7u+9Hbr9e/RKeTRGsnduIoie1oxS8HAQCsk6OiiG9FsdH0PgCA5ak+/8dmtHyvu94XBwBYPS9evnryIMt6z9O0E3F4kPfzfvlY1h89znp307HtyVWHed6/dFy/V9bTk/XLcSUitiLr3Z9a34w7t8fXf/5Ze/g0O1Vvx+6/Pz4AAAAAAAAAAAAAAAAAAAAAADSimx6bOt+n251VL9Nv84FOze/ZiBuGAwIAAAAAAAAAAAAAAAAAAMCZjD583H8zGOwNJ6EdESefmS8U12YuMS2kEfH3i543tGJ5a61aSP6PbZwzRDV1oqbn1mLe4c+u/qkn5nvlzYio79mqP+AiwuQe0W7m1gQAAAAAAAAAAAAAAAAAABdO9VvfZDhqeicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Jzy//8He8N5wqeIOENztVTS8FEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYYz8CAAD//x8yIRo=") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x2000000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000640), 0x0, 0x0) 2m11.434583299s ago: executing program 5 (id=8882): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000780)="b869f1", 0x3}], 0x1) read(r0, 0x0, 0x0) 2m11.170065983s ago: executing program 5 (id=8894): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='net/dev\x00') close_range(r0, r0, 0x2) sync_file_range(r0, 0x800, 0x2, 0x0) 2m11.120959924s ago: executing program 33 (id=8894): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='net/dev\x00') close_range(r0, r0, 0x2) sync_file_range(r0, 0x800, 0x2, 0x0) 1m20.010309644s ago: executing program 3 (id=10689): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000540)={[{@usrjquota}, {@nodelalloc}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@dioread_lock}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000}) 1m19.951090275s ago: executing program 3 (id=10692): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040), 0x41, &(0x7f0000000440)={[{@name={'name', 0x3d, '-'}}, {@clone_children}]}) 1m19.905864065s ago: executing program 3 (id=10693): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000080)='./file1\x00', 0xa0c416, &(0x7f0000006840)=ANY=[], 0x7, 0x29b, &(0x7f0000000480)="$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") mkdir(&(0x7f0000000600)='./control\x00', 0x74) rmdir(&(0x7f0000000100)='./control\x00') 1m19.887936476s ago: executing program 3 (id=10694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x840) 1m19.871528566s ago: executing program 3 (id=10696): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m19.843211996s ago: executing program 3 (id=10697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) 1m5.850571142s ago: executing program 34 (id=10697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) 35.690590599s ago: executing program 7 (id=11934): unshare(0x22020400) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) flock(r0, 0x5) 35.57979088s ago: executing program 7 (id=11938): setresuid(0x0, 0xee00, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000000c0)=0xfffffffe, 0x4) 35.57924459s ago: executing program 7 (id=11940): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40045201, 0xffffffffffffffff) 35.526752811s ago: executing program 7 (id=11943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sync() 35.364518123s ago: executing program 7 (id=11950): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') 35.289481275s ago: executing program 7 (id=11951): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000900)="2600000022004701050007008980e8ff02006d20002b1f00c0e9f7094a51f10101033500b088", 0x26) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21.292812921s ago: executing program 35 (id=11951): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000900)="2600000022004701050007008980e8ff02006d20002b1f00c0e9f7094a51f10101033500b088", 0x26) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.421316207s ago: executing program 0 (id=12916): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="009a24a10a00", @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "184dcf", 0x10, 0x21, 0x1, @private1, @private0, {[], {{0x4e27, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x1, "d94aed", 0x8, "a8e81d"}}}}}}}, 0x0) 3.291314269s ago: executing program 0 (id=12922): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffff9, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x17e, 0x4, 0x55f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 3.21830294s ago: executing program 0 (id=12926): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0x41ae, 0x1}) 3.189345611s ago: executing program 0 (id=12927): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000340)=0x1c) 3.167291061s ago: executing program 0 (id=12928): syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000010640)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002afdae3565781009f76e97b48ab97bfb17214266c0e5b7032d7a3d77ba65f6179d1612402e69cc86c8fce5989be545ce26a9c4f5f2165f36561402b40d94de59edbb0507bf01e3ece0fd57e13bef384234e823d81383eac1c0afb4464b4d16006b7691ea638989f6f567a2817567b9c1606c0a15f5a0dbce62f673cd22efb03bcddff402dacf8c1372a5e8ff5bc5b6a5375037cf12362bc429a286bddc094a"], 0x1, 0x105df, &(0x7f00000106c0)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="85", 0x1}], 0x1, 0x7800, 0x0, 0x3) 3.023515833s ago: executing program 4 (id=12932): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x5, 0xfffffffffffffff7, 0x400000000, 0x8, 0x81, 0x101, 0x9}, 0x0, &(0x7f0000000400)={0x7a, 0x7, 0xed, 0x9, 0x36, 0x10001, 0x7, 0x66}, &(0x7f0000000440), 0x0) 2.937883365s ago: executing program 4 (id=12933): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[], 0xc3ff}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1, &(0x7f0000000500)=""/23, 0x17}, 0x81}], 0x1, 0x40002002, 0x0) 2.832875126s ago: executing program 4 (id=12935): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x300, 0xf5f9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 2.60304155s ago: executing program 8 (id=12944): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @private=0xa010102, 0x0, 0xffffffff, 'veth0_to_bond\x00', 'veth0\x00', {}, {}, 0x89}, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x5, 0x0, '\x00', 'syz0\x00', {0x3}}}}, {{@ip={@remote, @multicast1, 0xffffff00, 0xffffffff, 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x73, 0x1, 0x52}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0xffffffff, @local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x20, 0x14, 0x3a, 0xffff, 0x0, 0x0, 0x32]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) 2.53901557s ago: executing program 8 (id=12945): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r1 = dup2(r0, r0) fadvise64(r1, 0x8, 0xb098, 0x1) 2.498437451s ago: executing program 4 (id=12947): io_setup(0x23, &(0x7f0000000280)=0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) 2.485627241s ago: executing program 8 (id=12948): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x178, 0xc, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x8}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) syz_usb_connect(0x2, 0x63, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe, 0x24, 0xb4, 0x20, 0x20df, 0x1, 0x976d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x7b, 0x0, 0x0, 0x76, 0xa9, 0x87, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7c21, 0x10, 0x1}, {0x6, 0x24, 0x1a, 0x40}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6, 0x79c, 0x2}, {0x6, 0x24, 0x1a, 0x800, 0x32}}]}}]}}]}}, 0x0) 2.278318674s ago: executing program 4 (id=12950): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 2.233526345s ago: executing program 4 (id=12952): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000), 0x0) 1.759706152s ago: executing program 1 (id=12959): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4004084, 0x0, 0x0) 1.712582073s ago: executing program 0 (id=12960): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00222200000096231306e53f93b2938f8d2990070b00be008300"], 0x0}, 0x0) 1.681732924s ago: executing program 1 (id=12961): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f000021c000/0x4000)=nil, 0x4000) munlockall() 1.468579557s ago: executing program 1 (id=12965): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 996.015954ms ago: executing program 8 (id=12967): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) write$cgroup_freezer_state(r1, 0x0, 0x0) 934.798655ms ago: executing program 8 (id=12968): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc00, &(0x7f00000005c0)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}, {@umask={'umask', 0x3d, 0x2}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x1}}, {}, {@namecase}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x9}}, {@fmask={'fmask', 0x3d, 0x6}}, {@fmask={'fmask', 0x3d, 0x3}}], [{@seclabel}]}, 0x1, 0x1524, &(0x7f00000037c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x2, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 780.423187ms ago: executing program 8 (id=12970): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 560.970761ms ago: executing program 1 (id=12973): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x80) 477.977972ms ago: executing program 6 (id=12976): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {}, {0x9}}}, 0x24}}, 0x8000) 450.345883ms ago: executing program 6 (id=12977): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000180)={{0x0, 0x0, 0x80, {0xd000, 0x8080000, 0x2}}, "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", "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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040000000000090000002400048013000100"], 0x38}}, 0x0) 403.193963ms ago: executing program 6 (id=12978): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000580)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)="85c5a6949e89ebfb99e8545680268f", 0xf, 0x1690bc6) 263.808205ms ago: executing program 6 (id=12979): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@random="bf1037eb4bd0", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "061000", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "23926e0bf267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72380641e5fff9620995b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 200.872797ms ago: executing program 6 (id=12980): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x8a, &(0x7f0000000040)={0x43, 0x1}, 0x10) 181.249927ms ago: executing program 1 (id=12981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000140)={0x1, 0x1, 0x81}) 144.552138ms ago: executing program 6 (id=12982): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_btf_id_by_name$bpf_lsm(0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 0s ago: executing program 1 (id=12983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) kernel console output (not intermixed with test programs): 56][ T28] audit: type=1400 audit(366.105:45242): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 348.255161][ T28] audit: type=1400 audit(366.105:45243): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.277795][ T28] audit: type=1400 audit(366.105:45244): avc: denied { append } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 348.303030][ T28] audit: type=1400 audit(366.105:45245): avc: denied { open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 348.327586][ T28] audit: type=1400 audit(366.105:45246): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 348.350093][ T28] audit: type=1400 audit(366.105:45247): avc: denied { read write } for pid=313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.374064][ T28] audit: type=1400 audit(366.105:45248): avc: denied { open } for pid=313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.398846][ T28] audit: type=1400 audit(366.105:45249): avc: denied { ioctl } for pid=313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.402825][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.424404][ T28] audit: type=1400 audit(366.159:45250): avc: denied { read write } for pid=313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.455889][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.464827][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.471712][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.479595][ T28] audit: type=1400 audit(366.159:45251): avc: denied { read write open } for pid=313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.635643][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.645529][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.653472][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.661908][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.706612][ T1345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 348.715106][ T1345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.725245][T23998] loop1: detected capacity change from 0 to 4096 [ 348.726815][T23725] device veth0_vlan entered promiscuous mode [ 348.760573][T23998] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 348.769350][ T1345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.777143][ T1345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.787068][T15153] udevd[15153]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 348.800551][T23998] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 348.824155][ T1345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.833555][ T1345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.859848][ T313] EXT4-fs (loop1): unmounting filesystem. [ 349.231036][ T304] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 349.373720][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.382088][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.391738][ T43] tipc: Left network mode [ 349.393279][T23976] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.402995][T23976] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.409878][ T304] usb 2-1: Using ep0 maxpacket: 32 [ 349.410899][T23976] device bridge_slave_0 entered promiscuous mode [ 349.416708][ T304] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.423003][T23976] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.438544][ T304] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.438790][T23976] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.449915][ T304] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 349.455436][T23976] device bridge_slave_1 entered promiscuous mode [ 349.464283][ T304] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 349.478155][ T304] usb 2-1: Product: syz [ 349.480850][T23725] device veth1_macvtap entered promiscuous mode [ 349.482066][ T304] usb 2-1: Manufacturer: syz [ 349.505638][ T304] hub 2-1:4.0: USB hub found [ 349.690224][ T304] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 349.846314][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 349.853941][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.862162][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.870414][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.878634][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.968307][T24057] loop6: detected capacity change from 0 to 16 [ 349.985859][T24057] erofs: dax options not supported [ 349.989768][T15153] udevd[15153]: symlink '../../loop6' '/dev/disk/by-uuid/2c2d536f-1b9f-400a-b360-ae59441abeed.tmp-b7:6' failed: Read-only file system [ 350.004828][ T304] usb 2-1: USB disconnect, device number 113 [ 350.576339][T24081] loop1: detected capacity change from 0 to 40427 [ 350.595336][T24081] F2FS-fs (loop1): fault_type options not supported [ 350.605734][T15153] udevd[15153]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 350.620770][T24081] F2FS-fs (loop1): invalid crc value [ 350.635530][T24081] F2FS-fs (loop1): Found nat_bits in checkpoint [ 350.682124][T24081] F2FS-fs (loop1): Start checkpoint disabled! [ 350.689025][T24081] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 350.719837][T15153] udevd[15153]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 350.729490][T24085] loop7: detected capacity change from 0 to 1024 [ 350.750907][T24085] EXT4-fs: Ignoring removed bh option [ 350.768429][T24085] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 350.780859][T24085] EXT4-fs error (device loop7): ext4_map_blocks:634: inode #3: block 2: comm syz.7.11048: lblock 2 mapped to illegal pblock 2 (length 1) [ 350.805120][T24085] EXT4-fs error (device loop7): ext4_map_blocks:634: inode #3: block 48: comm syz.7.11048: lblock 0 mapped to illegal pblock 48 (length 1) [ 350.822319][T24085] EXT4-fs error (device loop7): ext4_acquire_dquot:6782: comm syz.7.11048: Failed to acquire dquot type 0 [ 350.835494][T24085] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 350.845323][T24085] EXT4-fs error (device loop7): ext4_evict_inode:279: inode #11: comm syz.7.11048: mark_inode_dirty error [ 350.857594][T24085] EXT4-fs warning (device loop7): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 350.874540][ T1345] kworker/u4:5: attempt to access beyond end of device [ 350.874540][ T1345] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 350.889222][T24085] EXT4-fs (loop7): 1 orphan inode deleted [ 350.894820][T24085] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 350.944690][T17590] EXT4-fs error (device loop7): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 350.966371][T17590] EXT4-fs error (device loop7): ext4_release_dquot:6805: comm kworker/u4:7: Failed to release dquot type 0 [ 351.037725][T17590] EXT4-fs error (device loop7): ext4_map_blocks:634: inode #3: block 2: comm kworker/u4:7: lblock 2 mapped to illegal pblock 2 (length 1) [ 351.060782][T17590] EXT4-fs error (device loop7): ext4_write_dquot:6762: comm kworker/u4:7: Failed to commit dquot type 0 [ 351.086994][T23725] EXT4-fs (loop7): unmounting filesystem. [ 351.092642][T23725] EXT4-fs error (device loop7): __ext4_get_inode_loc:4508: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 351.121204][T23725] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 351.131348][T23725] EXT4-fs error (device loop7): ext4_quota_off:7071: inode #3: comm syz-executor: mark_inode_dirty error [ 351.229436][T24104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11229'. [ 351.689747][ T304] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 351.736397][T24152] netlink: 'syz.6.11252': attribute type 298 has an invalid length. [ 351.896583][ T304] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 351.913696][ T304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.934882][ T304] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 351.961898][ T304] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 351.980519][ T304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.004319][ T304] usb 1-1: config 0 descriptor?? [ 352.091551][ T1345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.114743][ T1345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.164881][ T43] device bridge_slave_1 left promiscuous mode [ 352.170853][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.248576][ T43] device bridge_slave_0 left promiscuous mode [ 352.254538][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.272573][T24161] loop1: detected capacity change from 0 to 40427 [ 352.281081][T24161] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 352.289064][T24161] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 352.301843][T15163] udevd[15163]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 352.314652][T24161] F2FS-fs (loop1): invalid crc value [ 352.329477][T24161] F2FS-fs (loop1): Found nat_bits in checkpoint [ 352.351934][ T43] device veth1_macvtap left promiscuous mode [ 352.357936][ T43] device veth0_vlan left promiscuous mode [ 352.396116][ T304] holtek_kbd 0003:04D9:A055.002C: bogus close delimiter [ 352.416044][ T304] holtek_kbd 0003:04D9:A055.002C: item 0 4 2 10 parsing failed [ 352.424508][T24161] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 352.434924][T24161] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 352.442609][ T304] holtek_kbd: probe of 0003:04D9:A055.002C failed with error -22 [ 352.466201][T15163] udevd[15163]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 352.545374][T15153] udevd[15153]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 352.586692][ T304] usb 1-1: USB disconnect, device number 118 [ 352.873117][T24201] loop1: detected capacity change from 0 to 256 [ 352.881482][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.885420][T24201] exfat: Deprecated parameter 'utf8' [ 352.893564][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.896029][T24201] exfat: Deprecated parameter 'namecase' [ 352.907355][T17590] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.914743][T17590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.915355][T24201] exfat: Deprecated parameter 'namecase' [ 352.929398][ T28] kauditd_printk_skb: 649 callbacks suppressed [ 352.929413][ T28] audit: type=1400 audit(371.152:45896): avc: denied { read write } for pid=23725 comm="syz-executor" name="loop7" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.962320][T24201] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 352.966386][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.982581][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.991096][ T28] audit: type=1400 audit(371.152:45897): avc: denied { open } for pid=23725 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.022549][T17590] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.029402][T17590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.033223][ T28] audit: type=1400 audit(371.152:45898): avc: denied { ioctl } for pid=23725 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.038419][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 353.062064][ T28] audit: type=1400 audit(371.205:45899): avc: denied { bpf } for pid=24202 comm="syz.7.11272" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 353.070208][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.089234][ T28] audit: type=1400 audit(371.205:45900): avc: denied { prog_load } for pid=24202 comm="syz.7.11272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 353.113007][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.123309][ T28] audit: type=1400 audit(371.205:45901): avc: denied { perfmon } for pid=24202 comm="syz.7.11272" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 353.152320][ T28] audit: type=1400 audit(371.205:45902): avc: denied { prog_run } for pid=24202 comm="syz.7.11272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 353.173697][ T1345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 353.185204][ T1345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.207924][ T28] audit: type=1400 audit(371.216:45903): avc: denied { mount } for pid=24200 comm="syz.1.11271" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 353.210916][T24207] loop1: detected capacity change from 0 to 256 [ 353.257522][ T28] audit: type=1400 audit(371.216:45904): avc: denied { read write } for pid=24200 comm="syz.1.11271" name="loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.281150][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.284927][ T28] audit: type=1400 audit(371.216:45905): avc: denied { open } for pid=24200 comm="syz.1.11271" path="/dev/loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.301706][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.356470][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 353.374905][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.415122][T23976] device veth0_vlan entered promiscuous mode [ 353.423273][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.434447][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.483984][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 353.502414][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.510073][T24231] loop1: detected capacity change from 0 to 256 [ 353.527339][T23976] device veth1_macvtap entered promiscuous mode [ 353.544426][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 353.557554][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 353.562475][T24231] FAT-fs (loop1): Directory bread(block 64) failed [ 353.575538][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.584711][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.592963][T24231] FAT-fs (loop1): Directory bread(block 65) failed [ 353.599404][T24231] FAT-fs (loop1): Directory bread(block 66) failed [ 353.613212][T24231] FAT-fs (loop1): Directory bread(block 67) failed [ 353.619944][T24231] FAT-fs (loop1): Directory bread(block 68) failed [ 353.629659][T24231] FAT-fs (loop1): Directory bread(block 69) failed [ 353.638934][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 353.646850][T24231] FAT-fs (loop1): Directory bread(block 70) failed [ 353.653177][T24231] FAT-fs (loop1): Directory bread(block 71) failed [ 353.660144][T17590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 353.669873][T24231] FAT-fs (loop1): Directory bread(block 72) failed [ 353.676386][T24231] FAT-fs (loop1): Directory bread(block 73) failed [ 354.409572][T24315] loop4: detected capacity change from 0 to 128 [ 354.442656][T24315] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11321'. [ 354.521776][T24328] loop4: detected capacity change from 0 to 256 [ 354.555529][T24328] exfat: Deprecated parameter 'utf8' [ 354.565588][T24328] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 354.865203][T24342] netlink: 92 bytes leftover after parsing attributes in process `syz.4.11335'. [ 355.191902][T24389] loop4: detected capacity change from 0 to 256 [ 355.202532][T24389] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 355.434564][T24417] netlink: 'syz.1.11369': attribute type 3 has an invalid length. [ 355.464208][T24422] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11373'. [ 355.703359][T24428] netlink: 'syz.4.11377': attribute type 3 has an invalid length. [ 355.773939][T24437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11379'. [ 355.787906][T24437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11379'. [ 355.839040][T24443] loop4: detected capacity change from 0 to 256 [ 355.874537][T24443] FAT-fs (loop4): Directory bread(block 64) failed [ 355.884208][T24443] FAT-fs (loop4): Directory bread(block 65) failed [ 355.890844][T24443] FAT-fs (loop4): Directory bread(block 66) failed [ 355.897885][T24443] FAT-fs (loop4): Directory bread(block 67) failed [ 355.904646][T24443] FAT-fs (loop4): Directory bread(block 68) failed [ 355.911180][T24443] FAT-fs (loop4): Directory bread(block 69) failed [ 355.917725][T24443] FAT-fs (loop4): Directory bread(block 70) failed [ 355.924148][T24443] FAT-fs (loop4): Directory bread(block 71) failed [ 355.930668][T24443] FAT-fs (loop4): Directory bread(block 72) failed [ 355.937530][T24443] FAT-fs (loop4): Directory bread(block 73) failed [ 355.974026][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 356.029804][T24454] devpts: called with bogus options [ 356.130146][T24469] loop6: detected capacity change from 0 to 512 [ 356.169135][T15153] udevd[15153]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 356.190231][T24469] EXT4-fs (loop6): orphan cleanup on readonly fs [ 356.210228][T24469] EXT4-fs error (device loop6): ext4_quota_enable:6969: comm syz.6.11398: Bad quota inum: 11, type: 1 [ 356.279278][T24469] EXT4-fs warning (device loop6): ext4_enable_quotas:7017: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 356.322548][T15153] udevd[15153]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 356.327201][T24469] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 356.340968][T24469] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 356.412179][T18983] EXT4-fs (loop6): unmounting filesystem. [ 356.847416][T24519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11419'. [ 356.856468][ T6] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 357.015678][T24538] netlink: 164 bytes leftover after parsing attributes in process `syz.4.11429'. [ 357.027172][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.045928][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.075375][ T6] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 357.096500][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 357.109937][T24549] loop6: detected capacity change from 0 to 1024 [ 357.122824][ T6] usb 2-1: SerialNumber: syz [ 357.181700][T15163] udevd[15163]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 357.214308][T24560] loop4: detected capacity change from 0 to 256 [ 357.223615][T24549] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 357.228148][T24560] FAT-fs (loop4): Directory bread(block 64) failed [ 357.238792][T24560] FAT-fs (loop4): Directory bread(block 65) failed [ 357.246600][T24560] FAT-fs (loop4): Directory bread(block 66) failed [ 357.253966][T24560] FAT-fs (loop4): Directory bread(block 67) failed [ 357.260508][T24560] FAT-fs (loop4): Directory bread(block 68) failed [ 357.266950][T24560] FAT-fs (loop4): Directory bread(block 69) failed [ 357.273484][T24560] FAT-fs (loop4): Directory bread(block 70) failed [ 357.273513][T24560] FAT-fs (loop4): Directory bread(block 71) failed [ 357.273551][T24560] FAT-fs (loop4): Directory bread(block 72) failed [ 357.273571][T24560] FAT-fs (loop4): Directory bread(block 73) failed [ 357.283300][T15163] udevd[15163]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 357.294468][T24549] EXT4-fs error (device loop6): ext4_lookup:1850: inode #2: comm syz.6.11435: bad inode number: 12 [ 357.296453][T24549] EXT4-fs (loop6): Remounting filesystem read-only [ 357.296947][T24549] EXT4-fs error (device loop6): ext4_lookup:1850: inode #2: comm syz.6.11435: bad inode number: 12 [ 357.302691][T24549] EXT4-fs (loop6): Remounting filesystem read-only [ 357.358870][ T6] usb 2-1: 0:2 : does not exist [ 357.359993][T18983] EXT4-fs (loop6): unmounting filesystem. [ 357.367412][ T6] usb 2-1: USB disconnect, device number 114 [ 357.566790][T15153] udevd[15153]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 357.588455][T24587] loop4: detected capacity change from 0 to 128 [ 357.596370][ T28] kauditd_printk_skb: 1136 callbacks suppressed [ 357.596385][ T28] audit: type=1400 audit(376.166:47042): avc: denied { read write } for pid=23725 comm="syz-executor" name="loop7" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.653427][T24587] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 357.672559][ T28] audit: type=1400 audit(376.166:47043): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 357.679487][T15153] udevd[15153]: symlink '../../loop4' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:4' failed: Read-only file system [ 357.704658][T24587] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 357.713562][ T28] audit: type=1400 audit(376.166:47044): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.734820][ T28] audit: type=1400 audit(376.166:47045): avc: denied { append } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 357.756833][ T28] audit: type=1400 audit(376.166:47046): avc: denied { open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 357.779111][ T28] audit: type=1400 audit(376.166:47047): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 357.802123][ T28] audit: type=1400 audit(376.166:47048): avc: denied { create } for pid=24588 comm="syz.6.11452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 357.822472][ T28] audit: type=1400 audit(376.199:47049): avc: denied { setopt } for pid=24588 comm="syz.6.11452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 357.845949][ T28] audit: type=1400 audit(376.199:47050): avc: denied { read write open } for pid=23725 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.874998][T23976] EXT4-fs (loop4): unmounting filesystem. [ 357.932414][ T28] audit: type=1400 audit(376.199:47051): avc: denied { ioctl } for pid=23725 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 358.060904][T24617] loop1: detected capacity change from 0 to 1024 [ 358.097956][T24617] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 358.103624][T15153] udevd[15153]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 358.138946][T24617] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 358.166042][T24617] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 358.200309][ T313] EXT4-fs (loop1): unmounting filesystem. [ 358.256656][T24633] loop1: detected capacity change from 0 to 512 [ 358.281239][T24633] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 358.289807][T15153] udevd[15153]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:1' failed: Read-only file system [ 358.298137][T24633] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 358.313079][T24632] loop6: detected capacity change from 0 to 2048 [ 358.350258][T24632] Alternate GPT is invalid, using primary GPT. [ 358.357481][T24632] loop6: p1 p2 p3 [ 358.380636][T14159] udevd[14159]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 358.383892][T15163] udevd[15163]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 358.699667][T24665] loop1: detected capacity change from 0 to 256 [ 358.745140][T24665] exfat: Deprecated parameter 'namecase' [ 358.781735][T24665] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 358.915972][T24688] xt_hashlimit: size too large, truncated to 1048576 [ 358.962802][ T60] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 359.067206][T24701] loop7: detected capacity change from 0 to 256 [ 359.099461][T24701] exFAT-fs (loop7): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x461aabd1) [ 359.112348][T24701] exFAT-fs (loop7): invalid boot region [ 359.117717][T24701] exFAT-fs (loop7): failed to recognize exfat type [ 359.143410][ T60] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.158993][ T304] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 359.164109][ T60] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.187417][T24701] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11501'. [ 359.197921][ T60] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 359.225950][ T60] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 359.250954][ T60] usb 5-1: Product: syz [ 359.266216][ T60] usb 5-1: Manufacturer: syz [ 359.289197][ T60] hub 5-1:4.0: USB hub found [ 359.336265][ T304] usb 2-1: Using ep0 maxpacket: 32 [ 359.345843][ T304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 359.391113][ T304] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 359.414873][ T304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.452658][ T304] usb 2-1: Product: syz [ 359.470510][ T304] usb 2-1: Manufacturer: syz [ 359.477573][ T304] usb 2-1: SerialNumber: syz [ 359.488671][ T60] hub 5-1:4.0: 2 ports detected [ 359.490045][ T304] usb 2-1: config 0 descriptor?? [ 359.531865][ T304] hub 2-1:0.0: bad descriptor, ignoring hub [ 359.537593][ T304] hub: probe of 2-1:0.0 failed with error -5 [ 359.538680][T24731] loop7: detected capacity change from 0 to 2048 [ 359.570940][T24731] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 359.621930][T24735] netlink: 'syz.0.11518': attribute type 2 has an invalid length. [ 359.630683][T23725] EXT4-fs (loop7): unmounting filesystem. [ 359.716725][T24746] netlink: 'syz.0.11522': attribute type 1 has an invalid length. [ 359.768891][T24752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11525'. [ 359.810367][ T342] usb 2-1: USB disconnect, device number 115 [ 359.873917][ T60] hub 5-1:4.0: set hub depth failed [ 359.882467][ T60] usb 5-1: USB disconnect, device number 109 [ 360.300065][T24818] loop7: detected capacity change from 0 to 128 [ 360.328724][T24818] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 360.436520][T23725] EXT4-fs (loop7): unmounting filesystem. [ 360.602686][T24852] netlink: 'syz.0.11572': attribute type 1 has an invalid length. [ 360.696261][T24862] netlink: 'syz.0.11578': attribute type 8 has an invalid length. [ 360.706443][T24864] netlink: 'syz.7.11580': attribute type 27 has an invalid length. [ 361.088167][T24888] loop7: detected capacity change from 0 to 40427 [ 361.100133][T24888] F2FS-fs (loop7): Found nat_bits in checkpoint [ 361.112500][T15153] udevd[15153]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system [ 361.155048][T24888] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 361.176189][T15153] udevd[15153]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system [ 361.217378][T23725] syz-executor: attempt to access beyond end of device [ 361.217378][T23725] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 361.490152][T24904] loop4: detected capacity change from 0 to 512 [ 361.511700][T15153] udevd[15153]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 361.532958][T15153] udevd[15153]: symlink '../../loop4' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:4' failed: Read-only file system [ 361.553710][T24907] loop1: detected capacity change from 0 to 256 [ 361.571594][T24904] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 361.598389][T15163] udevd[15163]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 361.609806][T24904] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 361.626516][T15163] udevd[15163]: symlink '../../loop4' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:4' failed: Read-only file system [ 361.652872][T24904] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 361.701420][T23976] EXT4-fs (loop4): unmounting filesystem. [ 361.828790][T24929] usb usb1: usbfs: process 24929 (syz.4.11604) did not claim interface 63 before use [ 362.253026][ T313] block device autoloading is deprecated and will be removed. [ 362.257793][T15163] udevd[15163]: setting mode of /dev/loop1 to 060660 failed: Read-only file system [ 362.261066][ T28] kauditd_printk_skb: 992 callbacks suppressed [ 362.261083][ T28] audit: type=1400 audit(381.170:48044): avc: denied { ioctl } for pid=24977 comm="syz.0.11628" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.276155][T15163] udevd[15163]: setting owner of /dev/loop1 to uid=0, gid=6 failed: Read-only file system [ 362.306833][ T28] audit: type=1400 audit(381.213:48045): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 362.336966][ T28] audit: type=1400 audit(381.213:48046): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.365488][ T28] audit: type=1400 audit(381.213:48047): avc: denied { append } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 362.394319][T24983] loop4: detected capacity change from 0 to 512 [ 362.404625][T24985] netlink: 'syz.1.11630': attribute type 1 has an invalid length. [ 362.427826][ T28] audit: type=1400 audit(381.213:48048): avc: denied { open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 362.457961][ T28] audit: type=1400 audit(381.213:48049): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 362.482761][ T28] audit: type=1400 audit(381.213:48050): avc: denied { ioctl } for pid=24977 comm="syz.0.11628" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.489956][T15153] udevd[15153]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 362.518462][ T60] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 362.541702][ T28] audit: type=1400 audit(381.213:48051): avc: denied { ioctl } for pid=313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.574376][ T28] audit: type=1400 audit(381.256:48052): avc: denied { read write } for pid=313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.598008][T24983] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 362.640056][ T28] audit: type=1400 audit(381.256:48053): avc: denied { open } for pid=313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.656236][T15153] udevd[15153]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 362.708292][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.734273][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.754434][T23976] EXT4-fs (loop4): unmounting filesystem. [ 362.777582][ T60] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.809401][ T60] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 362.820352][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.832643][ T60] usb 1-1: config 0 descriptor?? [ 363.035761][T25031] loop1: detected capacity change from 0 to 512 [ 363.057123][T25031] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 363.069187][T25031] EXT4-fs (loop1): 1 truncate cleaned up [ 363.074794][T25031] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 363.083574][ T6] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 363.136346][ T313] EXT4-fs (loop1): unmounting filesystem. [ 363.156941][T25034] loop1: detected capacity change from 0 to 128 [ 363.238513][ T60] dragonrise 0003:0079:0011.002D: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.0-1/input0 [ 363.257941][ T6] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 363.269500][ T6] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 363.279308][ T6] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 363.288182][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.425965][ T39] usb 1-1: USB disconnect, device number 119 [ 364.057991][ T6] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 364.065595][ T6] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input37 [ 364.161001][ T6] input: failed to attach handler kbd to device input37, error: -5 [ 364.181739][ T6] usb 5-1: USB disconnect, device number 110 [ 364.367241][T25080] netlink: 'syz.4.11673': attribute type 4 has an invalid length. [ 364.489491][T17403] Bluetooth: hci0: Frame reassembly failed (-84) [ 364.862496][T25100] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11682'. [ 365.096529][T25106] loop7: detected capacity change from 0 to 512 [ 365.131947][T25106] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 365.231069][T23725] EXT4-fs (loop7): unmounting filesystem. [ 365.472748][ T60] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 365.640329][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 365.654713][ T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.665093][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 365.675193][ T60] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 365.689403][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.719198][ T60] hub 5-1:1.0: bad descriptor, ignoring hub [ 365.730519][ T60] hub: probe of 5-1:1.0 failed with error -5 [ 365.898082][T25157] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11708'. [ 365.912646][T25157] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11708'. [ 366.189874][ T60] usb 5-1: reset high-speed USB device number 111 using dummy_hcd [ 366.367261][ T304] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 366.404131][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 366.545453][ T304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.556440][ T304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.566073][ T304] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 366.574862][ T304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.583337][ T304] usb 1-1: config 0 descriptor?? [ 366.655849][ T6] usb 5-1: USB disconnect, device number 111 [ 366.693557][ T60] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 366.862276][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 366.873044][ T60] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 366.881861][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.892008][ T60] usb 2-1: config 0 descriptor?? [ 366.897288][T25184] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 366.952550][ T28] kauditd_printk_skb: 551 callbacks suppressed [ 366.952567][ T28] audit: type=1400 audit(387.207:48605): avc: denied { read write } for pid=23725 comm="syz-executor" name="loop7" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 366.982218][ T28] audit: type=1400 audit(387.207:48606): avc: denied { open } for pid=23725 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 366.985222][ T304] lenovo 0003:17EF:6047.002E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 367.005831][ T28] audit: type=1400 audit(387.207:48607): avc: denied { ioctl } for pid=23725 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.071848][T25195] loop4: detected capacity change from 0 to 512 [ 367.080023][ T28] audit: type=1400 audit(387.240:48608): avc: denied { ioctl } for pid=25179 comm="syz.0.11718" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.080055][ T28] audit: type=1400 audit(387.240:48609): avc: denied { ioctl } for pid=25179 comm="syz.0.11718" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.080079][ T28] audit: type=1400 audit(387.315:48610): avc: denied { read write } for pid=23976 comm="syz-executor" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.080103][ T28] audit: type=1400 audit(387.315:48611): avc: denied { read write open } for pid=23976 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.080128][ T28] audit: type=1400 audit(387.315:48612): avc: denied { ioctl } for pid=23976 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.080166][ T28] audit: type=1400 audit(387.336:48613): avc: denied { read write } for pid=25194 comm="syz.4.11724" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.080188][ T28] audit: type=1400 audit(387.336:48614): avc: denied { read write open } for pid=25194 comm="syz.4.11724" path="/dev/loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.100337][T25195] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 367.140457][T15154] udevd[15154]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 367.216616][ T6] usb 1-1: USB disconnect, device number 120 [ 367.255992][T15153] udevd[15153]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 367.283579][ T60] a4tech 0003:09DA:022B.002F: unknown main item tag 0x5 [ 367.331968][ T60] a4tech 0003:09DA:022B.002F: hidraw0: USB HID vd0.17 Device [HID 09da:022b] on usb-dummy_hcd.1-1/input0 [ 367.344248][T23976] EXT4-fs (loop4): unmounting filesystem. [ 367.433101][T25205] loop4: detected capacity change from 0 to 256 [ 367.440360][T25205] exfat: Deprecated parameter 'utf8' [ 367.445536][T25205] exfat: Deprecated parameter 'namecase' [ 367.458348][T25205] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 367.476691][ T6] usb 2-1: USB disconnect, device number 116 [ 367.511155][T25209] loop7: detected capacity change from 0 to 1024 [ 367.526923][T25209] EXT4-fs: Ignoring removed orlov option [ 367.551006][T15153] udevd[15153]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 367.572543][T25209] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 367.591112][T25209] EXT4-fs error (device loop7): ext4_check_all_de:663: inode #12: block 7: comm syz.7.11730: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 367.597619][T15153] udevd[15153]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 367.611309][T25209] EXT4-fs (loop7): Remounting filesystem read-only [ 367.701100][T23725] EXT4-fs (loop7): unmounting filesystem. [ 367.725130][T25217] loop7: detected capacity change from 0 to 512 [ 367.764975][T15153] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 367.844175][T25229] loop4: detected capacity change from 0 to 512 [ 367.862422][T25231] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11741'. [ 367.882503][T15163] udevd[15163]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 367.905773][T25229] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 367.933416][T25238] loop7: detected capacity change from 0 to 256 [ 367.948168][T25238] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 367.956072][T15153] udevd[15153]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 367.978728][ T313] block device autoloading is deprecated and will be removed. [ 367.984716][T23976] EXT4-fs (loop4): unmounting filesystem. [ 368.010140][T14159] udevd[14159]: setting mode of /dev/loop1 to 060660 failed: Read-only file system [ 368.028371][T14159] udevd[14159]: setting owner of /dev/loop1 to uid=0, gid=6 failed: Read-only file system [ 368.356697][T25278] usb usb7: usbfs: process 25278 (syz.7.11763) did not claim interface 0 before use [ 368.413012][T25283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11764'. [ 368.491646][T25294] syz.7.11770[25294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.492133][T25294] syz.7.11770[25294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.535430][T25297] loop1: detected capacity change from 0 to 512 [ 368.586000][T15153] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 368.646209][T25302] syz.1.11774[25302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.646292][T25302] syz.1.11774[25302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.670265][T25302] futex_wake_op: syz.1.11774 tries to shift op by -1; fix this program [ 368.752995][ T6] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 368.838327][T25310] loop1: detected capacity change from 0 to 40427 [ 368.846070][T25310] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 368.853676][T25310] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 368.864904][T25310] F2FS-fs (loop1): Found nat_bits in checkpoint [ 368.866958][T15153] udevd[15153]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 368.906554][T25310] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 368.914035][T25310] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 368.930461][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 368.938306][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 368.956098][ T6] usb 5-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 368.971503][T15153] udevd[15153]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 368.985448][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.000070][T25322] loop6: detected capacity change from 0 to 1024 [ 369.012356][T25322] EXT4-fs: Ignoring removed orlov option [ 369.019001][ T6] usb 5-1: config 0 descriptor?? [ 369.044404][T25322] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 369.077833][T25322] EXT4-fs error (device loop6): ext4_check_all_de:663: inode #12: block 7: comm syz.6.11782: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 369.098958][T25322] EXT4-fs (loop6): Remounting filesystem read-only [ 369.174071][T18983] EXT4-fs (loop6): unmounting filesystem. [ 369.361857][T25330] loop6: detected capacity change from 0 to 40427 [ 369.383644][T25330] F2FS-fs (loop6): invalid crc value [ 369.401470][T25330] F2FS-fs (loop6): Found nat_bits in checkpoint [ 369.418720][ T6] wacom 0003:056A:037A.0030: ignoring exceeding usage max [ 369.432693][ T6] wacom 0003:056A:037A.0030: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 369.444198][T25343] syz.0.11789[25343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.444271][T25343] syz.0.11789[25343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.454063][T25330] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 369.457096][ T6] wacom 0003:056A:037A.0030: hidraw0: USB HID v0.07 Device [HID 056a:037a] on usb-dummy_hcd.4-1/input0 [ 369.485770][T25330] SELinux: (dev loop6, type f2fs) getxattr errno 2 [ 369.487103][ T6] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:037A.0030/input/input38 [ 369.494575][T25345] futex_wake_op: syz.0.11789 tries to shift op by -1; fix this program [ 369.653735][ T60] usb 5-1: USB disconnect, device number 112 [ 369.655406][T25330] overlayfs: overlapping lowerdir path [ 369.701419][T25330] overlayfs: overlapping lowerdir path [ 369.806138][T25354] tipc: Enabling of bearer rejected, failed to enable media [ 369.941202][T25364] loop6: detected capacity change from 0 to 40427 [ 369.949261][T25364] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 369.957392][T25364] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 369.966467][T25364] F2FS-fs (loop6): invalid crc value [ 369.973377][T25364] F2FS-fs (loop6): Found nat_bits in checkpoint [ 370.008565][T25371] loop1: detected capacity change from 0 to 256 [ 370.015593][T25371] exfat: Deprecated parameter 'utf8' [ 370.029936][T25371] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 370.079614][T25364] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 370.087236][T25364] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 370.190979][T17403] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 370.220940][T25388] futex_wake_op: syz.4.11808 tries to shift op by 32; fix this program [ 370.240345][T17403] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 370.469660][T25406] xt_hashlimit: max too large, truncated to 1048576 [ 370.595875][T25413] loop7: detected capacity change from 0 to 7 [ 370.605544][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.614668][ C1] buffer_io_error: 3 callbacks suppressed [ 370.614684][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 370.632182][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.641158][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 370.648831][T25413] loop7: unable to read partition table [ 370.660338][T25413] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 370.812646][T25438] netlink: 1021 bytes leftover after parsing attributes in process `syz.1.11831'. [ 371.026694][T25466] can0: slcan on ptm0. [ 371.148612][T25466] can0 (unregistered): slcan off ptm0. [ 371.466938][T25490] loop1: detected capacity change from 0 to 40427 [ 371.495609][T25490] F2FS-fs (loop1): fault_injection options not supported [ 371.524785][T25490] F2FS-fs (loop1): invalid crc value [ 371.554495][T25490] F2FS-fs (loop1): Found nat_bits in checkpoint [ 371.620665][ T28] kauditd_printk_skb: 839 callbacks suppressed [ 371.620681][ T28] audit: type=1400 audit(392.218:49454): avc: denied { bpf } for pid=25516 comm="syz.7.11868" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 371.676967][ T28] audit: type=1400 audit(392.218:49455): avc: denied { map_create } for pid=25516 comm="syz.7.11868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 371.696276][T25490] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 371.733497][ T28] audit: type=1400 audit(392.218:49456): avc: denied { map_read map_write } for pid=25516 comm="syz.7.11868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 371.798214][ T28] audit: type=1400 audit(392.229:49457): avc: denied { create } for pid=25515 comm="syz.0.11869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 371.821794][ T28] audit: type=1400 audit(392.229:49458): avc: denied { write } for pid=25515 comm="syz.0.11869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 371.843279][ T313] syz-executor: attempt to access beyond end of device [ 371.843279][ T313] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 371.877116][ T28] audit: type=1400 audit(392.229:49459): avc: denied { nlmsg_write } for pid=25515 comm="syz.0.11869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 371.902941][ T28] audit: type=1400 audit(392.239:49460): avc: denied { bpf } for pid=25516 comm="syz.7.11868" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 371.952207][ T28] audit: type=1400 audit(392.239:49461): avc: denied { prog_load } for pid=25516 comm="syz.7.11868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 371.971448][ T28] audit: type=1400 audit(392.239:49462): avc: denied { perfmon } for pid=25516 comm="syz.7.11868" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 371.992140][ T28] audit: type=1400 audit(392.239:49463): avc: denied { prog_run } for pid=25516 comm="syz.7.11868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 372.129959][T25553] loop1: detected capacity change from 0 to 256 [ 372.435013][T25594] loop1: detected capacity change from 0 to 128 [ 372.451052][T25594] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 372.490248][T25594] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 372.565694][ T1345] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 372.725159][T25626] loop7: detected capacity change from 0 to 16 [ 372.740316][T15153] udevd[15153]: symlink '../../loop7' '/dev/disk/by-uuid/75500962-132d-43aa-bb98-c3833f701d6f.tmp-b7:7' failed: Read-only file system [ 372.756030][T25626] erofs: (device loop7): mounted with root inode @ nid 36. [ 372.874219][T25637] loop4: detected capacity change from 0 to 512 [ 372.887944][T25637] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.11925: invalid block [ 372.896642][T15153] udevd[15153]: symlink '../../loop4' '/dev/disk/by-label/syzkall\x01\xf8.tmp-b7:4' failed: Read-only file system [ 372.900110][T25637] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.11925: invalid indirect mapped block 10 (level 1) [ 372.929373][T25637] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.11925: invalid indirect mapped block 8 (level 1) [ 372.947320][T25637] EXT4-fs (loop4): 1 truncate cleaned up [ 372.952922][T25637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 372.998593][T15153] udevd[15153]: symlink '../../loop4' '/dev/disk/by-label/syzkall\x01\xf8.tmp-b7:4' failed: Read-only file system [ 373.070872][T23976] EXT4-fs (loop4): unmounting filesystem. [ 373.206298][T25668] syz.4.11937[25668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 373.206419][T25668] syz.4.11937[25668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 373.656081][ T39] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 373.804804][ T60] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 373.861136][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 373.871572][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 373.890726][ T39] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 373.942437][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 373.955861][ T39] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 373.966848][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 373.984401][ T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.009978][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.010124][ T39] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 374.037442][ T60] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 374.058508][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.069564][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 374.071906][T25720] loop7: detected capacity change from 0 to 7 [ 374.093961][ T60] usb 5-1: SerialNumber: syz [ 374.094759][ T39] usb 2-1: config 0 descriptor?? [ 374.103563][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.112538][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 374.122068][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.131042][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 374.138656][T25720] loop7: unable to read partition table [ 374.152483][T25720] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 374.189469][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.198456][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 374.224454][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.233443][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 374.241222][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.250181][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 374.259968][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.268941][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 374.279768][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.288734][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 374.317871][T25729] syz.6.11969[25729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.317969][T25729] syz.6.11969[25729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.333959][ T60] usb 5-1: 0:2 : does not exist [ 374.345876][ T39] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 117 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 374.367103][ T60] usb 5-1: USB disconnect, device number 113 [ 374.420803][T25730] netlink: 'syz.0.11968': attribute type 16 has an invalid length. [ 374.543527][T25736] tipc: Enabling of bearer rejected, failed to enable media [ 374.569790][T15153] udevd[15153]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 375.153991][T25775] devtmpfs: Too few inodes for current use [ 375.223274][T25783] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11994'. [ 375.645806][T25822] loop6: detected capacity change from 0 to 256 [ 375.667566][T25822] FAT-fs (loop6): Directory bread(block 64) failed [ 375.674609][T25822] FAT-fs (loop6): Directory bread(block 65) failed [ 375.681961][T25822] FAT-fs (loop6): Directory bread(block 66) failed [ 375.696380][T25822] FAT-fs (loop6): Directory bread(block 67) failed [ 375.703467][T25822] FAT-fs (loop6): Directory bread(block 68) failed [ 375.710630][T25822] FAT-fs (loop6): Directory bread(block 69) failed [ 375.717473][T25822] FAT-fs (loop6): Directory bread(block 70) failed [ 375.723855][T25822] FAT-fs (loop6): Directory bread(block 71) failed [ 375.730947][T25822] FAT-fs (loop6): Directory bread(block 72) failed [ 375.738139][T25822] FAT-fs (loop6): Directory bread(block 73) failed [ 376.176993][ T60] usb 2-1: USB disconnect, device number 117 [ 376.184228][ T60] usblp0: removed [ 376.299489][ T28] kauditd_printk_skb: 1534 callbacks suppressed [ 376.299508][ T28] audit: type=1400 audit(397.228:50998): avc: denied { read write } for pid=23976 comm="syz-executor" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.351899][ T28] audit: type=1400 audit(397.228:50999): avc: denied { open } for pid=23976 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.406264][ T28] audit: type=1400 audit(397.228:51000): avc: denied { ioctl } for pid=23976 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.462165][ T28] audit: type=1400 audit(397.271:51001): avc: denied { setattr } for pid=23725 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.516106][ T28] audit: type=1400 audit(397.325:51002): avc: denied { setattr } for pid=23725 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.558800][ T28] audit: type=1400 audit(397.346:51003): avc: denied { setattr } for pid=23725 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.601335][ T28] audit: type=1400 audit(397.378:51004): avc: denied { setattr } for pid=23725 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.653578][ T28] audit: type=1400 audit(397.432:51005): avc: denied { setattr } for pid=23725 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.699605][ T28] audit: type=1400 audit(397.432:51006): avc: denied { setattr } for pid=23725 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.761500][ T28] audit: type=1400 audit(397.443:51007): avc: denied { read write } for pid=315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 377.048288][T25874] loop1: detected capacity change from 0 to 512 [ 377.094122][T25874] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806e01c, mo2=0002] [ 377.133696][T25874] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.12035: Directory hole found for htree index block 0 [ 377.179981][T25874] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 377.197975][T25874] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.12035: Directory hole found for htree index block 0 [ 377.239838][T25874] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 377.255374][T25874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 377.300258][T25879] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 377.348677][ T313] EXT4-fs (loop1): unmounting filesystem. [ 377.531666][T25902] loop4: detected capacity change from 0 to 128 [ 377.582123][T25902] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 377.600884][T25902] EXT4-fs warning (device loop4): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 377.633522][T23976] EXT4-fs (loop4): unmounting filesystem. [ 377.644143][T25912] loop1: detected capacity change from 0 to 16 [ 377.671448][T25912] erofs: (device loop1): mounted with root inode @ nid 36. [ 377.716942][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 319 @ nid 36 [ 377.732067][T25921] futex_wake_op: syz.6.12055 tries to shift op by -1; fix this program [ 377.758588][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 318 @ nid 36 [ 377.790724][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 205 @ nid 36 [ 377.790754][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 204 @ nid 36 [ 377.790825][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 197 @ nid 36 [ 377.790846][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 196 @ nid 36 [ 377.790873][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 192 @ nid 36 [ 377.790973][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 180 @ nid 36 [ 377.791085][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 172 @ nid 36 [ 377.791126][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 168 @ nid 36 [ 377.791205][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 160 @ nid 36 [ 377.791258][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 149 @ nid 36 [ 377.791279][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 148 @ nid 36 [ 377.791307][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 144 @ nid 36 [ 377.791350][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 377.791476][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 92 @ nid 36 [ 377.791531][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 377.791551][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 377.791586][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 377.791605][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 377.791642][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 377.791670][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 377.791738][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 377.791758][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 377.791833][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 377.791861][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 377.791888][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 377.791959][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 377.791991][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 377.792011][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 377.792031][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 377.792049][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 377.792086][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 377.809688][T25912] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 377.809782][T25912] syz.1.12051: attempt to access beyond end of device [ 377.809782][T25912] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 377.809837][T25912] syz.1.12051: attempt to access beyond end of device [ 377.809837][T25912] loop1: rw=524288, sector=1049272, nr_sectors = 16 limit=16 [ 377.809882][T25912] syz.1.12051: attempt to access beyond end of device [ 377.809882][T25912] loop1: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 377.809930][T25912] syz.1.12051: attempt to access beyond end of device [ 377.809930][T25912] loop1: rw=524288, sector=384, nr_sectors = 16 limit=16 [ 377.809971][T25912] syz.1.12051: attempt to access beyond end of device [ 377.809971][T25912] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 377.810006][T25912] syz.1.12051: attempt to access beyond end of device [ 377.810006][T25912] loop1: rw=524288, sector=728, nr_sectors = 16 limit=16 [ 377.810044][T25912] syz.1.12051: attempt to access beyond end of device [ 377.810044][T25912] loop1: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 377.810083][T25912] syz.1.12051: attempt to access beyond end of device [ 377.810083][T25912] loop1: rw=524288, sector=525152, nr_sectors = 16 limit=16 [ 377.810125][T25912] syz.1.12051: attempt to access beyond end of device [ 377.810125][T25912] loop1: rw=524288, sector=4422432, nr_sectors = 16 limit=16 [ 377.810176][T25912] syz.1.12051: attempt to access beyond end of device [ 377.810176][T25912] loop1: rw=524288, sector=4422440, nr_sectors = 16 limit=16 [ 378.070477][T25938] loop4: detected capacity change from 0 to 512 [ 378.120056][T25938] EXT4-fs (loop4): 1 orphan inode deleted [ 378.120083][T25938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 378.126638][T25938] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.12064: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=6, size=4096 fake=0 [ 378.519375][T23976] EXT4-fs (loop4): unmounting filesystem. [ 378.568164][ T10] EXT4-fs error (device loop4): ext4_release_dquot:6805: comm kworker/u4:1: Failed to release dquot type 1 [ 378.969946][T25968] loop1: detected capacity change from 0 to 256 [ 379.277281][T25972] loop1: detected capacity change from 0 to 40427 [ 379.303442][T25972] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 379.313232][T25972] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 379.325830][T25972] F2FS-fs (loop1): invalid crc value [ 379.377370][T25972] F2FS-fs (loop1): Found nat_bits in checkpoint [ 379.395376][T25993] loop6: detected capacity change from 0 to 512 [ 379.415453][T25993] EXT4-fs: Ignoring removed bh option [ 379.421952][T25993] ext4: Bad value for 'resuid' [ 379.502661][T25972] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 379.515704][T25972] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 380.007728][T26032] loop4: detected capacity change from 0 to 2048 [ 380.051211][T26032] loop4: p3 p4 < > [ 380.146161][T26040] netlink: 'syz.0.12109': attribute type 1 has an invalid length. [ 380.160812][T15163] udevd[15163]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 380.184282][T15153] udevd[15153]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 380.434445][T26065] loop1: detected capacity change from 0 to 256 [ 380.462002][T26068] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12123'. [ 380.479639][T26065] exfat: Deprecated parameter 'utf8' [ 380.484777][T26065] exfat: Deprecated parameter 'namecase' [ 380.502715][T26065] exfat: Deprecated parameter 'utf8' [ 380.519482][T26065] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 380.757525][T26086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12131'. [ 380.888157][ T60] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 380.900974][T26084] loop6: detected capacity change from 0 to 40427 [ 380.917010][T26084] F2FS-fs (loop6): Invalid segment count (1) [ 380.926008][T26084] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 380.934472][T26084] F2FS-fs (loop6): heap/no_heap options were deprecated [ 380.944076][T26084] F2FS-fs (loop6): invalid crc value [ 380.950590][T26084] F2FS-fs (loop6): Found nat_bits in checkpoint [ 380.997781][ T28] kauditd_printk_skb: 1593 callbacks suppressed [ 380.997797][ T28] audit: type=1400 audit(402.271:52600): avc: denied { setattr } for pid=23725 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 381.030964][T26084] F2FS-fs (loop6): Try to recover 1th superblock, ret: -30 [ 381.038099][T26084] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 381.067206][ T60] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 381.077362][ T60] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.080533][ T28] audit: type=1400 audit(402.303:52601): avc: denied { setattr } for pid=23725 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 381.099186][ T60] usb 2-1: config 0 has no interface number 0 [ 381.111523][ T28] audit: type=1400 audit(402.314:52602): avc: denied { setattr } for pid=23725 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 381.139544][ T28] audit: type=1400 audit(402.325:52603): avc: denied { mount } for pid=26083 comm="syz.6.12130" name="/" dev="loop6" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 381.147552][ T60] usb 2-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.195801][ T28] audit: type=1400 audit(402.325:52604): avc: denied { read write } for pid=26083 comm="syz.6.12130" name="loop6" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 381.248854][ T28] audit: type=1400 audit(402.325:52605): avc: denied { setattr } for pid=23725 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 381.273809][ T60] usb 2-1: config 0 interface 25 has no altsetting 0 [ 381.293387][ T60] usb 2-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 381.317556][T26096] loop6: detected capacity change from 0 to 512 [ 381.317744][T23725] audit: audit_backlog=65 > audit_backlog_limit=64 [ 381.323830][ T28] audit: type=1400 audit(402.325:52606): avc: denied { open } for pid=26083 comm="syz.6.12130" path="/dev/loop6" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 381.335943][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.366776][ T28] audit: type=1400 audit(402.325:52607): avc: denied { ioctl } for pid=26083 comm="syz.6.12130" path="/dev/loop6" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 381.370198][T23976] audit: audit_backlog=65 > audit_backlog_limit=64 [ 381.427581][T26096] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 381.429379][ T60] usb 2-1: Product: syz [ 381.482516][ T60] usb 2-1: Manufacturer: syz [ 381.495390][T18983] EXT4-fs (loop6): unmounting filesystem. [ 381.513245][ T60] usb 2-1: SerialNumber: syz [ 381.531736][ T60] usb 2-1: config 0 descriptor?? [ 381.649616][T26113] loop6: detected capacity change from 0 to 2048 [ 381.687754][T26113] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 381.731826][ T60] usb 2-1: Found UVC 0.00 device syz (1b3b:2951) [ 381.748791][T18983] EXT4-fs (loop6): unmounting filesystem. [ 381.757578][ T60] usb 2-1: No valid video chain found. [ 381.779430][ T60] usb 2-1: USB disconnect, device number 118 [ 382.057527][T26141] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12156'. [ 382.077201][T26141] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12156'. [ 382.453323][T26166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12167'. [ 382.491132][T26168] loop1: detected capacity change from 0 to 1024 [ 382.520287][T26168] EXT4-fs: Ignoring removed i_version option [ 382.579598][T26168] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 382.649592][T26180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12173'. [ 382.753468][ T313] EXT4-fs (loop1): unmounting filesystem. [ 383.005097][T26205] netlink: 80 bytes leftover after parsing attributes in process `syz.0.12186'. [ 383.044833][T26205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12186'. [ 383.071319][T26205] tipc: MTU too low for tipc bearer [ 384.089866][T26298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12228'. [ 384.116824][T26300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12229'. [ 384.551412][T26351] @0ÿ: renamed from bond_slave_0 [ 385.208650][T26427] loop4: detected capacity change from 0 to 128 [ 385.268681][T26437] loop6: detected capacity change from 0 to 1024 [ 385.275509][T26427] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 385.300555][T26427] EXT4-fs warning (device loop4): __ext4_ioctl:1246: Setting inode version is not supported with metadata_csum enabled. [ 385.365394][T23976] EXT4-fs (loop4): unmounting filesystem. [ 385.374696][T26437] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 385.428437][T26437] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.6.12295: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 385.531475][T26437] EXT4-fs (loop6): Remounting filesystem read-only [ 385.542857][T26437] EXT4-fs error (device loop6) in ext4_delete_inline_entry:1804: Corrupt filesystem [ 385.578001][T26437] EXT4-fs (loop6): Remounting filesystem read-only [ 385.633549][T18983] EXT4-fs (loop6): unmounting filesystem. [ 385.661565][ T28] kauditd_printk_skb: 2039 callbacks suppressed [ 385.661581][ T28] audit: type=1400 audit(406.504:54634): avc: denied { setattr } for pid=23725 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.717003][ T28] audit: type=1400 audit(406.504:54635): avc: denied { read write } for pid=315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.770039][ T28] audit: type=1400 audit(406.504:54636): avc: denied { open } for pid=315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.793886][ T60] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 385.822688][ T28] audit: type=1400 audit(406.504:54637): avc: denied { ioctl } for pid=315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.850684][ T28] audit: type=1400 audit(406.536:54638): avc: denied { setattr } for pid=23725 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.874103][ T28] audit: type=1400 audit(406.547:54639): avc: denied { setattr } for pid=23725 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.902778][ T304] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 385.904917][ T28] audit: type=1400 audit(406.547:54640): avc: denied { setattr } for pid=23725 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.940495][ T28] audit: type=1400 audit(406.547:54641): avc: denied { setattr } for pid=23725 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.973496][ T28] audit: type=1400 audit(406.547:54642): avc: denied { setattr } for pid=23725 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.997998][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.037728][ T60] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 386.048841][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.057540][T23725] audit: audit_backlog=65 > audit_backlog_limit=64 [ 386.089826][ T60] usb 5-1: config 0 descriptor?? [ 386.107855][ T304] usb 2-1: Using ep0 maxpacket: 16 [ 386.114386][ T304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.131101][ T304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.144167][T26485] xt_bpf: check failed: parse error [ 386.151458][ T304] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 386.182763][ T304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.200354][ T304] usb 2-1: config 0 descriptor?? [ 386.361681][T26499] __nla_validate_parse: 1 callbacks suppressed [ 386.361700][T26499] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12324'. [ 386.407057][T26499] device veth1_to_hsr entered promiscuous mode [ 386.422617][T26499] netlink: 108 bytes leftover after parsing attributes in process `syz.6.12324'. [ 386.448960][T26499] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 386.488598][ T60] uclogic 0003:5543:0003.0031: unknown main item tag 0x0 [ 386.506979][ T60] uclogic 0003:5543:0003.0031: unknown main item tag 0x0 [ 386.541364][ T60] uclogic 0003:5543:0003.0031: unknown main item tag 0x0 [ 386.549861][ T60] uclogic 0003:5543:0003.0031: unknown main item tag 0x0 [ 386.557506][ T60] uclogic 0003:5543:0003.0031: unknown main item tag 0x0 [ 386.576821][ T60] uclogic 0003:5543:0003.0031: No inputs registered, leaving [ 386.599149][ T304] hid-multitouch 0003:1FD2:6007.0032: unknown main item tag 0x0 [ 386.607560][ T60] uclogic 0003:5543:0003.0031: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.4-1/input0 [ 386.618715][ T304] hid-multitouch 0003:1FD2:6007.0032: unknown main item tag 0x0 [ 386.640685][ T304] hid-multitouch 0003:1FD2:6007.0032: unknown main item tag 0x0 [ 386.657671][ T304] hid-multitouch 0003:1FD2:6007.0032: unknown main item tag 0x0 [ 386.672264][ T304] hid-multitouch 0003:1FD2:6007.0032: unknown main item tag 0x0 [ 386.679399][ T60] usb 5-1: USB disconnect, device number 114 [ 386.691697][ T304] hid-multitouch 0003:1FD2:6007.0032: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 386.798141][ T6] usb 2-1: USB disconnect, device number 119 [ 386.944323][T26529] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12337'. [ 387.255727][T26550] loop4: detected capacity change from 0 to 512 [ 387.282410][T26550] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.12348: inline data xattr refers to an external xattr inode [ 387.302049][T26550] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.12348: couldn't read orphan inode 12 (err -117) [ 387.316010][T26550] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 387.362027][T26550] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.12348: Directory hole found for htree leaf block 0 [ 387.423722][T23976] EXT4-fs (loop4): unmounting filesystem. [ 387.541241][T26560] loop4: detected capacity change from 0 to 2048 [ 387.610731][T26560] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 387.684423][T23976] EXT4-fs (loop4): unmounting filesystem. [ 387.968753][T26578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12359'. [ 388.380890][T26563] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.387853][T26563] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.412014][T26563] device bridge_slave_0 entered promiscuous mode [ 388.419886][T26563] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.437668][T26612] netlink: 180 bytes leftover after parsing attributes in process `syz.1.12374'. [ 388.443702][T26563] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.453953][T26563] device bridge_slave_1 entered promiscuous mode [ 388.827465][T26638] loop1: detected capacity change from 0 to 40427 [ 388.836547][T26638] F2FS-fs (loop1): heap/no_heap options were deprecated [ 388.844586][T26638] F2FS-fs (loop1): Image doesn't support compression [ 388.852564][T26638] F2FS-fs (loop1): invalid crc value [ 388.859440][T26638] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 388.893963][T26638] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 388.979047][ T313] bio_check_eod: 55 callbacks suppressed [ 388.979067][ T313] syz-executor: attempt to access beyond end of device [ 388.979067][ T313] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 390.151682][T26687] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26687 comm=syz.1.12410 [ 390.258507][T26693] xt_CT: No such helper "pptp" [ 390.686823][T26730] loop6: detected capacity change from 0 to 512 [ 390.693999][ T28] kauditd_printk_skb: 1174 callbacks suppressed [ 390.694017][ T28] audit: type=1400 audit(411.516:55803): avc: denied { module_request } for pid=26563 comm="syz-executor" kmod="rtnl-link-macvlan" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 390.760567][ T28] audit: type=1400 audit(411.535:55804): avc: denied { read write } for pid=313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.784348][ T28] audit: type=1400 audit(411.535:55805): avc: denied { open } for pid=313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.850293][T26730] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.12432: iget: bad extended attribute block 1 [ 390.878731][T26730] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.12432: couldn't read orphan inode 15 (err -117) [ 390.931738][T26730] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 390.940506][ T28] audit: type=1400 audit(411.535:55806): avc: denied { ioctl } for pid=313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.971330][T26742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12436'. [ 391.057144][ T28] audit: type=1400 audit(411.544:55807): avc: denied { module_request } for pid=26563 comm="syz-executor" kmod="rtnl-link-ipvlan" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 391.078993][ T28] audit: type=1400 audit(411.582:55808): avc: denied { mounton } for pid=26729 comm="syz.6.12432" path="/578/file0" dev="tmpfs" ino=2994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 391.102513][ T1345] device bridge_slave_1 left promiscuous mode [ 391.108563][ T28] audit: type=1400 audit(411.591:55809): avc: denied { bpf } for pid=26733 comm="syz.1.12433" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 391.133136][ T1345] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.133184][T18983] EXT4-fs (loop6): unmounting filesystem. [ 391.144044][ T28] audit: type=1400 audit(411.591:55810): avc: denied { map_create } for pid=26733 comm="syz.1.12433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 391.165074][ T28] audit: type=1400 audit(411.591:55811): avc: denied { perfmon } for pid=26733 comm="syz.1.12433" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 391.186352][ T28] audit: type=1400 audit(411.591:55812): avc: denied { map_read map_write } for pid=26733 comm="syz.1.12433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 391.202976][T26746] loop1: detected capacity change from 0 to 512 [ 391.206407][ T1345] device bridge_slave_0 left promiscuous mode [ 391.237002][ T1345] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.243090][T26746] EXT4-fs: Ignoring removed mblk_io_submit option [ 391.288399][T26746] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 391.307236][T26746] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.12438: attempt to clear invalid blocks 2 len 1 [ 391.321105][T26746] EXT4-fs (loop1): Remounting filesystem read-only [ 391.327637][T26746] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 391.343127][ T1345] device veth1_macvtap left promiscuous mode [ 391.348986][ T1345] device veth0_vlan left promiscuous mode [ 391.354758][T26746] EXT4-fs (loop1): Remounting filesystem read-only [ 391.361747][T26746] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.12438: invalid indirect mapped block 1819239214 (level 0) [ 391.376765][T26746] EXT4-fs (loop1): Remounting filesystem read-only [ 391.383168][T26746] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.12438: invalid indirect mapped block 1819239214 (level 1) [ 391.400861][T26746] EXT4-fs (loop1): Remounting filesystem read-only [ 391.415782][T26746] EXT4-fs (loop1): 1 truncate cleaned up [ 391.423640][T26746] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 391.440566][T26746] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.12438: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 391.469129][T26746] EXT4-fs (loop1): Remounting filesystem read-only [ 391.534608][ T313] EXT4-fs (loop1): unmounting filesystem. [ 391.822061][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 391.833437][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 391.867971][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 391.876211][T26775] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 391.891845][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 391.900891][T26777] loop6: detected capacity change from 0 to 256 [ 391.909044][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.915921][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.945064][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 391.963859][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 391.972754][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 391.980903][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.987772][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.041935][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 392.058370][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 392.071800][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 392.089608][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 392.127477][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 392.140927][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 392.163733][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 392.172580][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 392.181596][T26563] device veth0_vlan entered promiscuous mode [ 392.189819][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 392.198605][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 392.231502][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 392.241625][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 392.256083][T26563] device veth1_macvtap entered promiscuous mode [ 392.284096][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 392.293000][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 392.303903][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.422750][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 392.434834][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.787199][T26840] tipc: Can't bind to reserved service type 0 [ 393.457509][ T19] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 393.649914][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 393.656203][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.667594][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.677528][ T19] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 393.686712][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.696618][ T19] usb 5-1: config 0 descriptor?? [ 393.720476][T26934] netlink: 'syz.0.12525': attribute type 5 has an invalid length. [ 394.136457][ T19] lua 0003:1E7D:2C2E.0033: unknown main item tag 0x1 [ 394.153113][ T19] lua 0003:1E7D:2C2E.0033: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.4-1/input0 [ 394.361534][ T19] usb 5-1: USB disconnect, device number 115 [ 394.487443][T27016] syz.1.12564[27016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.487524][T27016] syz.1.12564[27016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.648035][T27018] loop8: detected capacity change from 0 to 40427 [ 394.667799][T27018] F2FS-fs (loop8): fault_injection options not supported [ 394.676861][T27018] F2FS-fs (loop8): invalid crc value [ 394.684130][T27018] F2FS-fs (loop8): Found nat_bits in checkpoint [ 394.720924][T27018] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 394.783669][T26563] syz-executor: attempt to access beyond end of device [ 394.783669][T26563] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 394.941749][T27037] loop4: detected capacity change from 0 to 512 [ 394.991997][T27037] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 395.017542][T27037] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.12574: Failed to acquire dquot type 0 [ 395.094218][T23976] EXT4-fs (loop4): unmounting filesystem. [ 395.328358][ T342] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 395.366280][T27062] loop4: detected capacity change from 0 to 1024 [ 395.373335][T27062] EXT4-fs: Ignoring removed nobh option [ 395.378707][T27062] EXT4-fs: Ignoring removed bh option [ 395.394335][T27062] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 395.468821][T23976] EXT4-fs (loop4): unmounting filesystem. [ 395.531509][ T342] usb 9-1: Using ep0 maxpacket: 32 [ 395.539014][ T342] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 395.555734][T27070] loop1: detected capacity change from 0 to 2048 [ 395.559832][ T342] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 395.581777][ T342] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 395.595643][ T342] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 395.597296][T27070] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 395.605115][ T342] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 395.635194][T27075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12588'. [ 395.644084][ T342] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.670716][ T342] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 395.680272][ T342] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 395.697947][ T342] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 395.707059][ T342] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.716242][ T342] usb 9-1: config 0 descriptor?? [ 395.724470][ T313] EXT4-fs (loop1): unmounting filesystem. [ 395.946474][ T342] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 396.047314][ T28] kauditd_printk_skb: 1022 callbacks suppressed [ 396.047330][ T28] audit: type=1400 audit(416.530:56812): avc: denied { read write } for pid=23976 comm="syz-executor" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.077055][ T28] audit: type=1400 audit(416.530:56813): avc: denied { read write open } for pid=23976 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.101482][ T28] audit: type=1400 audit(416.530:56814): avc: denied { ioctl } for pid=23976 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.149082][ T28] audit: type=1400 audit(416.614:56815): avc: denied { read write } for pid=315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.170152][ T5603] usb 9-1: USB disconnect, device number 2 [ 396.201846][ T5603] usblp0: removed [ 396.259732][ T28] audit: type=1400 audit(416.614:56816): avc: denied { read write open } for pid=315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.284426][ T28] audit: type=1400 audit(416.614:56817): avc: denied { ioctl } for pid=315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.319598][T27125] loop4: detected capacity change from 0 to 256 [ 396.329603][T27125] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 396.342009][ T28] audit: type=1400 audit(416.614:56818): avc: denied { create } for pid=27110 comm="syz.0.12605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 396.366653][ T28] audit: type=1400 audit(416.614:56819): avc: denied { read write } for pid=27048 comm="syz.8.12577" name="lp0" dev="devtmpfs" ino=3693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 396.388375][T27129] loop1: detected capacity change from 0 to 512 [ 396.390582][ T28] audit: type=1400 audit(416.614:56820): avc: denied { open } for pid=27048 comm="syz.8.12577" path="/dev/usb/lp0" dev="devtmpfs" ino=3693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 396.429595][ T28] audit: type=1400 audit(416.652:56821): avc: denied { read write } for pid=23976 comm="syz-executor" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.461115][T27129] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 396.474577][T27129] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 396.484786][T27129] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 396.492649][T27129] System zones: 0-2, 18-18, 34-34 [ 396.499002][T27129] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 396.514741][T27129] EXT4-fs (loop1): 1 truncate cleaned up [ 396.548982][T27129] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 396.595858][T27143] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12619'. [ 396.730216][T27152] tipc: Started in network mode [ 396.731236][ T313] EXT4-fs (loop1): unmounting filesystem. [ 396.734931][T27152] tipc: Node identity fe800000000000000000000000000012, cluster identity 4711 [ 396.749457][T27152] tipc: Enabled bearer , priority 1 [ 397.013779][T27179] loop6: detected capacity change from 0 to 2048 [ 397.079279][T27179] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 397.117231][T27195] overlayfs: workdir and upperdir must be separate subtrees [ 397.163757][T18983] EXT4-fs (loop6): unmounting filesystem. [ 397.199198][ T342] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 397.258211][T27207] EXT4-fs: Invalid gid value -1 [ 397.280448][T27211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12651'. [ 397.341595][T27217] loop6: detected capacity change from 0 to 512 [ 397.350431][T27221] loop1: detected capacity change from 0 to 256 [ 397.382141][T27217] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 397.402366][ T342] usb 9-1: Using ep0 maxpacket: 16 [ 397.412005][ T342] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.425381][T27217] EXT4-fs error (device loop6): ext4_get_first_dir_block:3583: inode #12: comm syz.6.12655: Directory hole found for htree leaf block 0 [ 397.475118][ T342] usb 9-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 397.512317][ T342] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.524557][T27237] SELinux: syz.4.12662 (27237) set checkreqprot to 1. This is deprecated and will be rejected in a future kernel release. [ 397.537998][T27237] SELinux: https://github.com/SELinuxProject/selinux-kernel/wiki/DEPRECATE-checkreqprot [ 397.547831][ T342] usb 9-1: config 0 descriptor?? [ 397.554912][T18983] EXT4-fs (loop6): unmounting filesystem. [ 397.793830][T27253] netlink: 'syz.6.12671': attribute type 3 has an invalid length. [ 397.895267][T27262] loop1: detected capacity change from 0 to 512 [ 397.936920][ T60] tipc: Node number set to 4269801490 [ 397.943193][T27262] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.12675: Failed to acquire dquot type 0 [ 397.963934][T27262] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.12675: Failed to acquire dquot type 0 [ 397.976342][T27262] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.12675: Failed to acquire dquot type 0 [ 397.989310][ T342] logitech 0003:046D:C626.0034: unbalanced delimiter at end of report description [ 397.989454][T27262] EXT4-fs (loop1): 1 orphan inode deleted [ 398.004002][T27262] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 398.007796][ T342] logitech 0003:046D:C626.0034: parse failed [ 398.036991][ T342] logitech: probe of 0003:046D:C626.0034 failed with error -22 [ 398.065554][T27272] device veth1_macvtap left promiscuous mode [ 398.071420][T27272] device macsec0 entered promiscuous mode [ 398.079290][T27274] device veth1_macvtap entered promiscuous mode [ 398.085548][T27274] device macsec0 left promiscuous mode [ 398.091644][ T313] EXT4-fs (loop1): unmounting filesystem. [ 398.209549][ T39] usb 9-1: USB disconnect, device number 3 [ 399.636677][ T39] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 399.829110][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 399.836170][ T39] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 399.846783][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.856706][ T39] usb 2-1: config 0 descriptor?? [ 399.862689][T27438] option changes via remount are deprecated (pid=27437 comm=syz.0.12760) [ 399.870915][T27438] cgroup: option or name mismatch, new: 0x0 "cpuset", old: 0x0 "" [ 399.963567][T27446] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12764'. [ 400.063145][T27460] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12770'. [ 400.121526][T27468] loop8: detected capacity change from 0 to 512 [ 400.129470][T27468] EXT4-fs: Ignoring removed orlov option [ 400.134942][T27468] EXT4-fs: Ignoring removed bh option [ 400.157654][T27468] EXT4-fs (loop8): 1 truncate cleaned up [ 400.163588][T27468] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 400.196502][T26563] EXT4-fs (loop8): unmounting filesystem. [ 400.226661][T27476] loop8: detected capacity change from 0 to 256 [ 400.233763][T27476] exfat: Unknown parameter 'di ' [ 400.267711][T27476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12777'. [ 400.295862][ T39] sony 0003:054C:05C4.0035: unknown main item tag 0x2 [ 400.310880][ T39] sony 0003:054C:05C4.0035: hidraw0: USB HID va0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 400.315581][T27480] loop8: detected capacity change from 0 to 256 [ 400.323398][ T39] sony 0003:054C:05C4.0035: failed to claim input [ 400.338139][T27480] incfs: Can't find or create .incomplete dir in ./file0 [ 400.346796][T27480] incfs: mount failed -28 [ 400.411561][T27486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12783'. [ 400.515626][ T39] usb 2-1: USB disconnect, device number 120 [ 400.663350][T27500] loop8: detected capacity change from 0 to 40427 [ 400.686665][T27500] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 400.694287][T27500] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 400.702706][T27500] F2FS-fs (loop8): Unrecognized mount option "" or missing value [ 401.453718][ T28] kauditd_printk_skb: 1186 callbacks suppressed [ 401.453735][ T28] audit: type=1400 audit(421.581:58002): avc: denied { read write } for pid=18983 comm="syz-executor" name="loop6" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 401.483918][ T28] audit: type=1400 audit(421.591:58003): avc: denied { read write } for pid=27547 comm="syz.0.12811" name="loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 401.518190][ T28] audit: type=1400 audit(421.591:58004): avc: denied { open } for pid=27547 comm="syz.0.12811" path="/dev/loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 401.542060][ T28] audit: type=1400 audit(421.591:58005): avc: denied { ioctl } for pid=27547 comm="syz.0.12811" path="/dev/loop0" dev="devtmpfs" ino=114 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 401.602209][ T28] audit: type=1400 audit(421.619:58006): avc: denied { ioctl } for pid=27547 comm="syz.0.12811" path="/dev/loop0" dev="devtmpfs" ino=114 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 401.628081][ T28] audit: type=1400 audit(421.693:58007): avc: denied { read write } for pid=18983 comm="syz-executor" name="loop6" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 401.653039][ T28] audit: type=1400 audit(421.693:58008): avc: denied { open } for pid=18983 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 401.677427][ T28] audit: type=1400 audit(421.693:58009): avc: denied { ioctl } for pid=18983 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 401.702702][ T28] audit: type=1400 audit(421.703:58010): avc: denied { read } for pid=27551 comm="syz.6.12813" dev="nsfs" ino=4026532736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 401.724839][ T28] audit: type=1400 audit(421.703:58011): avc: denied { open } for pid=27551 comm="syz.6.12813" path="net:[4026532736]" dev="nsfs" ino=4026532736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 401.767954][T27562] loop8: detected capacity change from 0 to 512 [ 401.800215][T27562] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 401.949674][T26563] EXT4-fs (loop8): unmounting filesystem. [ 402.048129][T27582] input: syz0 as /devices/virtual/input/input42 [ 402.141833][T27585] loop6: detected capacity change from 0 to 256 [ 402.173456][T27580] loop8: detected capacity change from 0 to 40427 [ 402.185576][T27585] FAT-fs (loop6): Directory bread(block 64) failed [ 402.192132][T27585] FAT-fs (loop6): Directory bread(block 65) failed [ 402.198592][T27580] F2FS-fs (loop8): fault_injection options not supported [ 402.205573][T27585] FAT-fs (loop6): Directory bread(block 66) failed [ 402.208404][T27580] F2FS-fs (loop8): invalid crc value [ 402.211906][T27585] FAT-fs (loop6): Directory bread(block 67) failed [ 402.219509][T27580] F2FS-fs (loop8): Found nat_bits in checkpoint [ 402.223414][T27585] FAT-fs (loop6): Directory bread(block 68) failed [ 402.241989][T27585] FAT-fs (loop6): Directory bread(block 69) failed [ 402.248572][T27585] FAT-fs (loop6): Directory bread(block 70) failed [ 402.254955][T27585] FAT-fs (loop6): Directory bread(block 71) failed [ 402.261354][T27585] FAT-fs (loop6): Directory bread(block 72) failed [ 402.271016][T27585] FAT-fs (loop6): Directory bread(block 73) failed [ 402.310351][T27580] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 402.315443][T27585] syz.6.12828: attempt to access beyond end of device [ 402.315443][T27585] loop6: rw=2051, sector=1160, nr_sectors = 32 limit=256 [ 402.415184][T27603] loop1: detected capacity change from 0 to 1024 [ 402.438029][T26563] syz-executor: attempt to access beyond end of device [ 402.438029][T26563] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 402.452687][T27603] EXT4-fs: Ignoring removed nobh option [ 402.458080][T27603] EXT4-fs: Ignoring removed bh option [ 402.466306][T27603] EXT4-fs: Ignoring removed oldalloc option [ 402.514525][T27603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 402.578662][T27603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12834'. [ 402.673948][ T313] EXT4-fs (loop1): unmounting filesystem. [ 402.752865][T27628] loop1: detected capacity change from 0 to 1024 [ 402.781700][T27628] EXT4-fs (loop1): INFO: recovery required on readonly filesystem [ 402.789338][T27628] EXT4-fs (loop1): write access will be enabled during recovery [ 402.796929][T27628] JBD2: no valid journal superblock found [ 402.802678][T27628] EXT4-fs (loop1): error loading journal [ 403.015077][ T60] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 403.060644][T27653] loop1: detected capacity change from 0 to 256 [ 403.084569][T27653] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 403.106276][T27653] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 403.137858][T27653] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 403.219374][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.230206][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.257970][ T60] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 403.282879][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.307299][ T60] usb 9-1: config 0 descriptor?? [ 403.656328][ T342] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 403.754107][ T60] holtek 0003:1241:5015.0036: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.8-1/input0 [ 403.765517][ T60] holtek 0003:1241:5015.0036: no inputs found [ 403.848804][ T342] usb 5-1: Using ep0 maxpacket: 8 [ 403.860861][ T342] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 403.890984][ T342] usb 5-1: config 0 has no interface number 0 [ 403.922883][ T342] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 403.939989][ T342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.948231][ T342] usb 5-1: Product: syz [ 403.952214][ T342] usb 5-1: Manufacturer: syz [ 403.957470][ T342] usb 5-1: SerialNumber: syz [ 403.971076][ T39] usb 9-1: USB disconnect, device number 4 [ 403.972823][ T342] usb 5-1: config 0 descriptor?? [ 404.212255][ T5603] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 404.222501][ T342] usb 5-1: USB disconnect, device number 116 [ 404.427581][ T5603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.438293][ T5603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.447861][ T5603] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 404.456656][ T5603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.467217][ T5603] usb 2-1: config 0 descriptor?? [ 404.587907][T27717] loop6: detected capacity change from 0 to 512 [ 404.645270][T27717] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 404.726381][T18983] EXT4-fs (loop6): unmounting filesystem. [ 404.908267][ T5603] lg-g15 0003:046D:C222.0037: unknown main item tag 0x0 [ 404.915059][ T5603] lg-g15 0003:046D:C222.0037: unknown main item tag 0x0 [ 404.930456][ T5603] lg-g15 0003:046D:C222.0037: unknown main item tag 0x0 [ 404.950389][ T5603] lg-g15 0003:046D:C222.0037: unknown main item tag 0x0 [ 404.958200][ T5603] lg-g15 0003:046D:C222.0037: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 405.125647][ T5603] usb 2-1: USB disconnect, device number 121 [ 405.528130][T27797] input: syz0 as /devices/virtual/input/input43 [ 405.597532][T27804] loop8: detected capacity change from 0 to 256 [ 405.627349][T27804] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 405.706901][T27804] exFAT-fs (loop8): hint_cluster is invalid (1) [ 405.727029][T27814] loop1: detected capacity change from 0 to 512 [ 405.741419][T27804] exFAT-fs (loop8): error, invalid access to exfat cache (entry 0x00000000) [ 405.749949][T27804] exFAT-fs (loop8): Filesystem has been set read-only [ 405.763193][T27804] exFAT-fs (loop8): error, failed to bmap (inode : ffff8881151fc4f0 iblock : 9, err : -5) [ 405.800155][T27804] syz.8.12925: attempt to access beyond end of device [ 405.800155][T27804] loop8: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 405.804224][T27814] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 405.827925][ T342] kworker/0:3: attempt to access beyond end of device [ 405.827925][ T342] loop8: rw=2049, sector=34359738488, nr_sectors = 1 limit=256 [ 405.868412][ T342] Buffer I/O error on dev loop8, logical block 34359738488, lost async page write [ 406.021028][ T313] EXT4-fs (loop1): unmounting filesystem. [ 406.046217][T27828] loop4: detected capacity change from 0 to 256 [ 406.094351][T27828] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 406.220861][T27828] exFAT-fs (loop4): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442) [ 406.220861][T27828] [ 406.254321][T27828] exFAT-fs (loop4): Filesystem has been set read-only [ 406.289259][T27852] loop1: detected capacity change from 0 to 512 [ 406.336602][T27852] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.12946: inode #1: comm syz.1.12946: iget: illegal inode # [ 406.361500][T27852] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.12946: error while reading EA inode 1 err=-117 [ 406.380373][T27852] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.12946: inode #1: comm syz.1.12946: iget: illegal inode # [ 406.443465][T27852] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.12946: error while reading EA inode 1 err=-117 [ 406.466019][T27852] EXT4-fs (loop1): 1 orphan inode deleted [ 406.481395][T27852] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 406.587155][ T313] EXT4-fs (loop1): unmounting filesystem. [ 406.639064][ T5603] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 406.698125][T27873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27873 comm=syz.6.12955 [ 406.800123][ T28] kauditd_printk_skb: 1122 callbacks suppressed [ 406.800141][ T28] audit: type=1400 audit(426.576:59134): avc: denied { bpf } for pid=27875 comm="syz.6.12957" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 406.856416][ T5603] usb 9-1: config 0 has an invalid interface number: 123 but max is 0 [ 406.874277][ T5603] usb 9-1: config 0 has no interface number 0 [ 406.880307][ T28] audit: type=1400 audit(426.576:59135): avc: denied { prog_load } for pid=27875 comm="syz.6.12957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 406.908065][ T5603] usb 9-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 406.920688][ T5603] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.936483][ T5603] usb 9-1: Product: syz [ 406.940872][ T28] audit: type=1400 audit(426.576:59136): avc: denied { bpf } for pid=27875 comm="syz.6.12957" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 406.965448][ T5603] usb 9-1: Manufacturer: syz [ 406.974415][ T5603] usb 9-1: SerialNumber: syz [ 406.991925][ T5603] usb 9-1: config 0 descriptor?? [ 406.995768][ T28] audit: type=1400 audit(426.586:59137): avc: denied { perfmon } for pid=27875 comm="syz.6.12957" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 407.010306][ T5603] cdc_acm 9-1:0.123: More than one union descriptor, skipping ... [ 407.092655][ T28] audit: type=1400 audit(426.586:59138): avc: denied { prog_run } for pid=27875 comm="syz.6.12957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 407.153056][T27889] loop1: detected capacity change from 0 to 512 [ 407.159245][ T28] audit: type=1400 audit(426.614:59139): avc: denied { bpf } for pid=27879 comm="syz.1.12958" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 407.217831][ T28] audit: type=1400 audit(426.614:59140): avc: denied { prog_load } for pid=27879 comm="syz.1.12958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 407.250735][ T39] usb 9-1: USB disconnect, device number 5 [ 407.270984][T27889] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 407.302647][ T28] audit: type=1400 audit(426.623:59141): avc: denied { bpf } for pid=27879 comm="syz.1.12958" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 407.349678][ T28] audit: type=1400 audit(426.623:59142): avc: denied { prog_load } for pid=27879 comm="syz.1.12958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 407.369335][ T28] audit: type=1400 audit(426.623:59143): avc: denied { perfmon } for pid=27879 comm="syz.1.12958" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 407.407202][ T313] EXT4-fs (loop1): unmounting filesystem. [ 407.412832][ T5603] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 407.622558][ T5603] usb 1-1: Using ep0 maxpacket: 16 [ 407.629116][ T5603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.640648][ T5603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.650510][ T5603] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 407.663330][ T5603] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 407.672334][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.690344][ T5603] usb 1-1: config 0 descriptor?? [ 407.759349][T27904] loop6: detected capacity change from 0 to 256 [ 407.789764][T27904] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 407.891690][T27909] loop8: detected capacity change from 0 to 256 [ 407.911850][T27909] exfat: Deprecated parameter 'namecase' [ 407.933244][T27909] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 407.966714][T27911] loop6: detected capacity change from 0 to 256 [ 408.011872][T27911] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 408.107085][T27915] loop6: detected capacity change from 0 to 16 [ 408.122810][T27915] erofs: (device loop6): mounted with root inode @ nid 36. [ 408.137813][ T5603] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 408.155326][ T5603] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 408.171125][ T5603] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 408.180690][ T5603] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 408.187802][ T5603] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 408.195274][ T5603] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 408.202682][ T5603] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 408.209861][ T5603] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 408.217062][ T5603] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 408.237777][ T5603] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 408.254248][ T5603] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 408.269572][ T5603] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0038/input/input44 [ 408.361263][ T5603] microsoft 0003:045E:07DA.0038: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 408.381297][ T5603] usb 1-1: USB disconnect, device number 121 [ 408.419060][T27933] loop6: detected capacity change from 0 to 1024 [ 408.426598][T27933] EXT4-fs: Ignoring removed nobh option [ 408.432019][T27933] EXT4-fs: Ignoring removed bh option [ 408.439218][T27933] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 408.493177][T27933] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 408.554642][T18983] EXT4-fs (loop6): unmounting filesystem. [ 408.830701][ T5924] ------------[ cut here ]------------ [ 408.836081][ T5924] kernel BUG at fs/buffer.c:2714! [ 408.854997][ T5924] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 408.860986][ T5924] CPU: 1 PID: 5924 Comm: kmmpd-loop0 Not tainted 6.1.129-syzkaller-00054-g3e6e324f5b47 #0 [ 408.870709][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 408.880606][ T5924] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 408.885811][ T5924] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 14 bc e6 ff e9 b0 fe ff ff e8 1a 0f 9f ff 0f 0b e8 13 0f 9f ff <0f> 0b e8 0c 0f 9f ff 0f 0b e8 05 0f 9f ff 0f 0b e8 fe 0e 9f ff 0f [ 408.905254][ T5924] RSP: 0018:ffffc900125afc20 EFLAGS: 00010293 [ 408.911154][ T5924] RAX: ffffffff81d6887d RBX: 0000000000000000 RCX: ffff88811ea42880 [ 408.918964][ T5924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.926778][ T5924] RBP: ffffc900125afc70 R08: ffffffff81d68450 R09: ffffed10217d22fd [ 408.934586][ T5924] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 408.942399][ T5924] R13: 1ffff110217d22fc R14: ffff88810be917e0 R15: 0000000000003801 [ 408.950223][ T5924] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 408.958978][ T5924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.965401][ T5924] CR2: 0000001b2f61cff8 CR3: 00000001183ef000 CR4: 00000000003506a0 [ 408.973217][ T5924] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 408.981021][ T5924] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 408.988836][ T5924] Call Trace: [ 408.991957][ T5924] [ 408.994737][ T5924] ? __die_body+0x62/0xb0 [ 408.998904][ T5924] ? die+0x88/0xb0 [ 409.002463][ T5924] ? do_trap+0x103/0x330 [ 409.006545][ T5924] ? submit_bh_wbc+0x4cd/0x4f0 [ 409.011145][ T5924] ? handle_invalid_op+0x95/0xc0 [ 409.015912][ T5924] ? submit_bh_wbc+0x4cd/0x4f0 [ 409.020514][ T5924] ? exc_invalid_op+0x32/0x50 [ 409.025061][ T5924] ? asm_exc_invalid_op+0x1b/0x20 [ 409.029892][ T5924] ? submit_bh_wbc+0xa0/0x4f0 [ 409.034398][ T5924] ? submit_bh_wbc+0x4cd/0x4f0 [ 409.039001][ T5924] ? submit_bh_wbc+0x4cd/0x4f0 [ 409.043600][ T5924] ? __kasan_check_read+0x11/0x20 [ 409.048462][ T5924] submit_bh+0x1d/0x30 [ 409.052367][ T5924] write_mmp_block_thawed+0x3a0/0x570 [ 409.057572][ T5924] ? read_mmp_block+0x7d0/0x7d0 [ 409.062259][ T5924] ? update_process_times+0x1b0/0x1b0 [ 409.067468][ T5924] write_mmp_block+0x12b/0x2a0 [ 409.072065][ T5924] kmmpd+0x40c/0xa10 [ 409.075802][ T5924] ? write_mmp_block_thawed+0x570/0x570 [ 409.081184][ T5924] ? __kthread_parkme+0x12d/0x180 [ 409.086040][ T5924] kthread+0x26d/0x300 [ 409.089945][ T5924] ? write_mmp_block_thawed+0x570/0x570 [ 409.095330][ T5924] ? kthread_blkcg+0xd0/0xd0 [ 409.099757][ T5924] ret_from_fork+0x1f/0x30 [ 409.104008][ T5924] [ 409.106868][ T5924] Modules linked in: [ 409.306351][ T5924] ---[ end trace 0000000000000000 ]--- [ 409.311904][ T5924] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 409.317107][ T5924] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 14 bc e6 ff e9 b0 fe ff ff e8 1a 0f 9f ff 0f 0b e8 13 0f 9f ff <0f> 0b e8 0c 0f 9f ff 0f 0b e8 05 0f 9f ff 0f 0b e8 fe 0e 9f ff 0f [ 409.337278][ T5924] RSP: 0018:ffffc900125afc20 EFLAGS: 00010293 [ 409.343184][ T5924] RAX: ffffffff81d6887d RBX: 0000000000000000 RCX: ffff88811ea42880 [ 409.351865][ T5924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 409.359909][ T5924] RBP: ffffc900125afc70 R08: ffffffff81d68450 R09: ffffed10217d22fd [ 409.367888][ T5924] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 409.375692][ T5924] R13: 1ffff110217d22fc R14: ffff88810be917e0 R15: 0000000000003801 [ 409.383853][ T5924] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 409.393724][ T5924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.400673][ T5924] CR2: 00007fff3b63bb48 CR3: 000000015b38d000 CR4: 00000000003506a0 [ 409.408654][ T5924] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 409.416478][ T5924] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 409.424467][ T5924] Kernel panic - not syncing: Fatal exception [ 409.430676][ T5924] Kernel Offset: disabled [ 409.434811][ T5924] Rebooting in 86400 seconds..