last executing test programs: 37.079465491s ago: executing program 2 (id=9292): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd26, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) 37.064175772s ago: executing program 2 (id=9293): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) 36.937520711s ago: executing program 2 (id=9305): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000003c0)=0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000280)=0x1) 36.917559033s ago: executing program 2 (id=9296): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x51e, &(0x7f0000000100)="$eJzs3dFrJHcdAPDvTLLX5C41qfqgBWuxlUvV2ySN1wYfqoLoU0Gt+HrGZBNCNtkj2bSXUGyKf4AgogVf9MkXwT9AkL74LkJB30VFkXrVB4X2RmZ29u6y2U1yuJuB5POBX3Z+M7Pz/f427G9/v51hJ4BL6+mImI2IsYh4LiKmy/VpWeKwU/L93rv7+kpeksiyV95NIinXdY/1WPl4rXzaRER882sR302Ox93dP9hcbjYbO2V9rr2VvJ9lBzc2tpbXG+uN7cXFhReWXly6uTQ/lHbORMRLX/nrj3/wi6++9JvPvfanW3+f/V6e1n+z7I3oaccwdZpeK16LrvGI2BlFsIqMFy3suFlxLgAAnCwf7384Ij5VjP+nY6wYzQEAAAAXSfbFqXg/icgAAACACyuNiKlI0np5ve9UpGm93rmG96NxNW22dtufXWvtba/m2yJmopaubTQb8+W1AzNRS/L6QnmNbbf+fE99MSKeiIgfTU8W9fpKq7la9ZcfAAAAcElc65n//3u6M/8vHFacHAAAADA8M1UnAAAAAIyc+T8AAABcfOb/AAAAcKF9/eWX85J173+9+ur+3mbr1Rurjd3N+tbeSn2ltXO7vt5qrRe/2bd12vGardbtz8f23p25dmO3Pbe7f3Brq7W33b61ceQW2AAAAMA5euKTb/8xiYjDL0wWJXel3FaLyMYe3nm8igyBUUkfZee/jC4P4Pw9/Pk+WWEewPkzpIfLq1Z1AkDlklO2D7x453fDzwUAABiN6x8ffP7/3bVKUwNGrDz/n5w2/wcunrGqEwAq0zn/dy/rqDob4DzVThoBmBTAhZcO5/z/KZcSJjoUAACo2FRRkrRezgOmIk3r9YjHi9sC1JK1jWZjPiI+FBF/mK49ltcXimcmRvMAAAAAAAAAAAAAAAAAAAAAAAAAcEZZlkQGAAAAXGgR6d+6d+a6Pv3sVO/3A1eS/0wXjxHx2k9f+cmd5XZ7ZyFf/8/769tvleufr+IbDAAAAKBXd57enccDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDC9d/f1lW45z7j/+HJEzPSLPx4TxeNE1CLi6r+SGH/oeUlEjA0h/uGbEfGxfvGTPK2YKbM4Ev9KRBoRk8OK3/f1PyF+dOJfG0J8uMzezvufL/V7/6XxdPHY//03Xpb/1+D+L73f/40N6P8eH3TQ2tHqk+/8am5g/Dcjnhzv3/904yf58frEf+aMbfzOtw4OBm3Lfh5xvV//lxyNNdfeuj23u39wY2Nreb2x3theXFx4YenFpZtL83NrG81G+bdvjB9+4tf3HtQ+ONb+qyf0v0X7B7z+z56x/R+8c+fuRzqLPf+ZqMXPsmz2mf7//8JnjsfvfvZ9utwrr+evYfrWt/vGf+qXv39qUG55+1cHtH/ilPbPnrH9z33j+38+464AwDnY3T/YXG42GzsWLDzCQj7urDyNJJI4vmm5+sQ6C2+U77HlZvfdNqQj/7acHI0y+Yr6IwAAYHQeDPp7tyTVJAQAAAAAAAAAAAAAAAAAAACX0Kk/AzZoUxoRZ/w5sd6Yh9U0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRP8LAAD//0mN1e4=") ioperm(0x0, 0x5, 0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 36.670184181s ago: executing program 2 (id=9302): r0 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xdce, 0x7) 36.451865577s ago: executing program 2 (id=9308): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000580)=[{0x28, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 36.437238928s ago: executing program 32 (id=9308): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000580)=[{0x28, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 17.58547974s ago: executing program 3 (id=9819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 17.558535212s ago: executing program 3 (id=9821): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 17.518372845s ago: executing program 3 (id=9825): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x2010050, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="574ebc0e94989fcde4c7e6c29d5b7d84ea1d3b850bb44bd48bb9519bc17acbb165391925581f91c0647c1d56315d4d044e055c5842362d6e3547a65f0d1dc45f590e08b80c1182db21b765ab93d407000000a9415a11b2facb5efbeda5c99dab23a7176fd9bdcc116a308a7b3a9e3562550da7ba26451b761e0bc1c92c045eee"], 0xff, 0x2ce, &(0x7f0000000640)="$eJzs3M9LFH8cx/G3uu6uK7p7+PL98i2iN3UpgkG3e7CEUrRQqBtZEIw6W8tOu7IzGBuhduoa/REdxKM3oTp09dKtU5duHgo6JPRjYmdnddUVk9od0+cDdN7OzNvP58OM8hrBWb/17EEx7xh505XueK90iyzKhkiqVolUa5+6RCQudV0SlWaLcr7/87tT45O3r2Wy2ZEx1dHMxMW0qg6efvnw8fKZ127/zZXB1Zispe6uf0p/WPt37f/1HxP3C44WHC2VXTV1qvzejU7Zls4UnKKhesPzTMfSQunNpIh/vOyateN5uzw7W1WzNDOQmK1YjqNmqapFq6oSEalU1bxnFkpqGIYOJAT7iS2NjZkZv4wfuHm6DRPCb7uy68avVDJmj4j07To3t9SpWQEAgMNje/7Xnfnf1xVsa3u+e57X3H+w/L8a3SP/B/m+kf9tq57/Havi/lr+d8vq1vJ/hPx/ALmt/I8jq5b/E8HPr+/JneUhvyD/AwAAAAAAAAAAAAAAAAAAAADwN9jwvKTnecnGtvERC/4lvPF12PNEe3D9j7dxDQrVuIj9dC43lxOxe+s7N6+7JUOSlG/+/RCo16NXsyND6kvJK3sh6F+Yy/X4jZm8FMQWS4YlKanW/cP1ft3e3yuJ5v60JOWf1v3plv1ROXe2qd+QpLydlrLYMuPf11v988Oql69nd/T3+ecBAAAAAHAUGLqp5fO7Yex1vN6fyYv4z9f7/31gx/N1RE5Ewl07AAAAAADHhVN9VDRt26p0sIiLSPvHqq2us+tqUcxfCHP0sItk057GS6Q7Po1I86CxYBZtGuu/5y++/LlveGnl5NfwrmB4v5MAAAAAtMdW6N/7HO9jJ2cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx04nXiYW9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCw+BkAAP//0b8mQA==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 17.261656424s ago: executing program 3 (id=9828): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xfe, 0x46c, &(0x7f0000001380)="$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") mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) lstat(&(0x7f0000000540)='./file0/../file0/../file0\x00', &(0x7f0000000580)) 17.054098808s ago: executing program 3 (id=9833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 16.568003824s ago: executing program 3 (id=9838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {}, {0xd, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}}}, ["", ""]}, 0x3c}}, 0x0) 16.559740755s ago: executing program 33 (id=9838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {}, {0xd, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}}}, ["", ""]}, 0x3c}}, 0x0) 3.610734927s ago: executing program 0 (id=10180): keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000380)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#%\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce5+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) 3.541542172s ago: executing program 0 (id=10183): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r0) 3.502750685s ago: executing program 0 (id=10185): io_setup(0x5, &(0x7f0000000e80)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0}]) 3.324363548s ago: executing program 0 (id=10199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) 3.271275572s ago: executing program 0 (id=10191): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.233715595s ago: executing program 6 (id=10192): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001280)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x2, 0x80}}, 0x1c}}, 0x0) 3.189055178s ago: executing program 0 (id=10196): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x41, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa0, 0x84}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000004c0)={0x20, 0x8, 0xb, {0xb, 0x23, "e99bca6eed386faffc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.188306248s ago: executing program 6 (id=10197): r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000001940)=0x0) io_submit(r1, 0x1, &(0x7f00000032c0)=[&(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x7589, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 3.079829966s ago: executing program 6 (id=10202): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0x800004, 0x0, 0x3}}, 0x2e) 2.993924952s ago: executing program 6 (id=10206): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000010600)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6261636b67726f756e645f67633d73796e632c696e6c696e655f646174612c66617374626f6f742c6c617a7974696d652c6673796e635f6d6f64653d7374726963742c0055a413be64900209a5cfb9a4065362139f85a00b275ed2abcd610d96f675d7"], 0x1, 0x1059b, &(0x7f0000020c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) 2.084010558s ago: executing program 6 (id=10218): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}}, 0x1c}}, 0x0) 1.894788042s ago: executing program 5 (id=10226): r0 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xb, 0xd623, 0x0, 0x6}}) 1.857102695s ago: executing program 5 (id=10227): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) remap_file_pages(&(0x7f00007c6000/0x2000)=nil, 0x2000, 0x0, 0x800000000000, 0x10000) 1.824755407s ago: executing program 5 (id=10229): connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_settime(0x1ed5d7403, &(0x7f0000000180)) 1.78650098s ago: executing program 5 (id=10231): prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000000000008608ffffffff0102"], 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) 1.673417548s ago: executing program 4 (id=10235): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x10, 0x0, &(0x7f0000001140)) 1.6495719s ago: executing program 4 (id=10236): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x200, 0x0, @local, 0x46}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="80003792a88f13ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) 1.620770942s ago: executing program 4 (id=10237): ppoll(0x0, 0x0, 0x0, &(0x7f00000013c0)={[0x7]}, 0x8) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.563013546s ago: executing program 6 (id=10238): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xed, [{{0x9, 0x4, 0x0, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x11, 0x10, {0x10, 0xf, "3217019d8cb925420f5924d83000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 915.445024ms ago: executing program 1 (id=10240): r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="1662", 0x2, 0x0, 0x0, 0x2}]) 836.007049ms ago: executing program 1 (id=10241): unshare(0x20000400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0x0, @none, 0x0, 0x3}, 0xe) 823.07203ms ago: executing program 1 (id=10242): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x50) 802.017611ms ago: executing program 1 (id=10243): r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x4, &(0x7f0000000080)='!%*(}\x00', &(0x7f00000000c0), 0x0) 800.775021ms ago: executing program 1 (id=10244): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETS2(r0, 0x402c542b, 0x0) 788.039383ms ago: executing program 1 (id=10245): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 711.963118ms ago: executing program 4 (id=10246): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@llx}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 695.832949ms ago: executing program 4 (id=10247): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$eJzs3EtsG0UfAPD/rvNo+viSr5RHSwuBgqh4JE36oAcuIJA4gIQEhyJOIUmrUrdBTZBoVUHhUI6oEnfEEYk7Eie4IOCAkLjCHVWqql5aOBmtvZs6jp06tRu3+PeT1p7ZXWfm79mxxzN2Auhb49lNErE1Iv6IiNFaduUJ47W7G9fOz/597fxsEpXKm1eT6nnXr52fLU4tHrellqlUIoaz5HCTci++EzFTLs+fyfOTS6fen1w8e+65E6dmjs8fnz89feTIwQN7hg5PH+oovjS/z+K6vuujhd07X3370uuzRy+9+/M3WX235sfr47gtWbQNxmvPbqNHs5snOyrsrvJrdrOtbkcy0PrkiQ2oEO0rRUTWXIPV/j8apRhZPjYar3za08oBd1SlUqk0e3/OXagA/2FJ9LoGQG8Ub/TZ599i26Chx13hyou1D0BZ3DfyrXZkYHnuYLDh8203jUfE0Qv/fJlt0Y15CACAW/g+G/8822z8l8YDdef9L19DGYuI/0fE9oi4LyJ2RMT9EdVzH4yIh9ZZfuMKyerxT3r5tgJrUzb+eyFf21o5/itGfzFWynPbqvEPJsdOlOf358/JvhgczvJTa5Txw8u/f16kNzUcqx//ZVtWfjEWzOtxeaBhgm5uZmmm07gLVz6J2DXQLP4kimWcJCJ2RsSu2yzjxNNf72517Nbxr2GNdaZ2Vb6KeKrW/hdiRfw3myppuT459fzh6UOTm6I8v3+yuCpW++W3i2+0Kr+j+Lsga//NTa//5VXgsWRTxOLZcyer67WL6y/j4p+f1fXpFavLWfzptxHrvv6Hkreq6aF834czS0tnpiKGktdW75+++dgiX5yfxb9vb/P+v72uxg9HRHYR74mIR/JF3KztHouIxyNi7xrx//TSE++1Oraq/UeK+NeYle+iLP65W7V/1Lf/+hOlkz9+13b8Tdv/YDW1L9/TzutfuxXs5LkDAACAe0Va/Q58kk4sp9N0YqL2Hf4dsTktLywuPXNs4YPTc7Xvyo/FYFrMdI3WzYdO5XPDRX66IX8gnzf+ojRSzU/MLpTneh089LktLfp/5q9Sr2sH3HFdWEcD7lH6P/Qv/R/6l/4P/Uv/h/7VrP9/3IN6ABvP+z/0L/0f+pf+D/1L/4e+1PK38WlHP/nvcaL43wkd/J2rvY+i48TInSwi0t4H2BeJgU4u43YSw00P9fiFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+DQAA//9L2OJW") lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000021c0), 0x0, 0x0, 0x0) listxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 605.695186ms ago: executing program 4 (id=10248): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[], 0xffdd) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0', [], 0xa, "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"}, 0x1001) 169.811518ms ago: executing program 5 (id=10249): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x2000000, &(0x7f0000000280)={[{}, {@nombcache}, {@user_xattr}, {@norecovery}, {}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 0s ago: executing program 5 (id=10250): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "c84cfed9"}]}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): own): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 365.197194][T20361] EXT4-fs error (device loop1): ext4_orphan_get:1242: comm syz.1.8756: couldn't read orphan inode 15 (err -117) [ 365.201044][T20350] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz.0.8750: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 365.210393][T20361] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 365.244188][T20350] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz.0.8750: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 365.272008][T20374] xt_bpf: check failed: parse error [ 365.280560][T20350] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz.0.8750: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 365.310791][T20350] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 18: comm syz.0.8750: lblock 23 mapped to illegal pblock 18 (length 1) [ 365.326146][T20350] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 19: comm syz.0.8750: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 365.347902][T20350] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 20: comm syz.0.8750: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 365.437510][T20389] SELinux: policydb string does not match my string SE Linux [ 365.451642][T20389] SELinux: failed to load policy [ 365.505714][T20391] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 365.528215][T20391] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 365.554185][T20391] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2227: inode #15: comm syz.1.8768: corrupted in-inode xattr [ 365.579892][T20391] EXT4-fs error (device loop1): ext4_orphan_get:1242: comm syz.1.8768: couldn't read orphan inode 15 (err -117) [ 365.607339][T20391] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue [ 365.644744][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8776'. [ 365.868992][T20425] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 365.876962][T20425] System zones: 0-7 [ 365.890315][T20425] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,debug,,errors=continue [ 365.974955][T20435] FAT-fs (loop1): Directory bread(block 64) failed [ 365.981606][T20435] FAT-fs (loop1): Directory bread(block 65) failed [ 365.988332][T20435] FAT-fs (loop1): Directory bread(block 66) failed [ 365.994856][T20435] FAT-fs (loop1): Directory bread(block 67) failed [ 366.001238][T20435] FAT-fs (loop1): Directory bread(block 68) failed [ 366.007656][T20435] FAT-fs (loop1): Directory bread(block 69) failed [ 366.013942][T20435] FAT-fs (loop1): Directory bread(block 70) failed [ 366.021403][T20423] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 366.031930][T20435] FAT-fs (loop1): Directory bread(block 71) failed [ 366.039025][T20435] FAT-fs (loop1): Directory bread(block 72) failed [ 366.045509][T20423] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 366.053690][T20435] FAT-fs (loop1): Directory bread(block 73) failed [ 366.062924][T20423] F2FS-fs (loop2): invalid crc value [ 366.077290][T20423] F2FS-fs (loop2): Found nat_bits in checkpoint [ 366.169601][T20423] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 366.176913][T20423] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 366.191493][T20451] xt_TPROXY: Can be used only with -p tcp or -p udp [ 366.304690][T20454] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 366.317566][T20454] ext4 filesystem being mounted at /1723/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until (%ptR?) (0x7fffffff) [ 366.353915][T20462] tipc: Enabling of bearer rejected, failed to enable media [ 366.358325][T20454] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.8792: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 366.384141][T20454] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz.3.8792: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 366.405431][T20454] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz.3.8792: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 366.426894][T20454] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz.3.8792: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 366.447880][T20454] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz.3.8792: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 366.470237][T20454] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz.3.8792: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 366.497988][T20454] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz.3.8792: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 366.521650][T20454] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #2: block 18: comm syz.3.8792: lblock 23 mapped to illegal pblock 18 (length 1) [ 366.537339][T20454] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 19: comm syz.3.8792: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 366.557807][T20454] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 20: comm syz.3.8792: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 367.207307][T20487] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 367.215713][T20487] EXT4-fs (loop2): Remounting filesystem read-only [ 367.222386][T20487] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 367.231892][T20487] EXT4-fs (loop2): 1 truncate cleaned up [ 367.237594][T20487] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,discard, [ 367.247443][T20487] ext4 filesystem being mounted at /1776/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 367.835438][ T74] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 368.220341][ T74] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.233015][ T74] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 368.241902][ T74] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.250774][ T74] usb 4-1: config 0 descriptor?? [ 368.363527][T20529] EXT4-fs (loop2): Ignoring removed bh option [ 368.369640][T20529] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 368.379420][T20529] EXT4-fs (loop2): 1 truncate cleaned up [ 368.385249][T20529] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee01,bh,noload,data_err=ignore,usrjquota=,,errors=continue [ 368.628315][T20552] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,,errors=continue [ 368.638356][T20552] ext4 filesystem being mounted at /1788/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 368.673698][T20555] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue [ 368.688066][T20555] ext4 filesystem being mounted at /1956/bus supports timestamps until (%ptR?) (0x7fffffff) [ 368.766970][ T74] greenasia 0003:0E8F:0012.000E: item fetching failed at offset 3/7 [ 368.775076][ T74] greenasia 0003:0E8F:0012.000E: parse failed [ 368.781730][ T74] greenasia: probe of 0003:0E8F:0012.000E failed with error -22 [ 368.905752][T20577] xt_TPROXY: Can be used only with -p tcp or -p udp [ 368.944543][T20581] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,nobarrier,,errors=continue [ 368.959636][T20581] ext4 filesystem being mounted at /1960/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 368.983990][ T74] usb 4-1: USB disconnect, device number 88 [ 369.023083][T20586] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 369.032129][T20586] ext4 filesystem being mounted at /1795/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 369.281969][T20612] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 369.290614][T20617] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8855'. [ 369.290934][ T23] kauditd_printk_skb: 224 callbacks suppressed [ 369.290944][ T23] audit: type=1400 audit(1740312922.464:15969): avc: denied { create } for pid=20616 comm="syz.4.8855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 369.326475][T20612] ext4 filesystem being mounted at /1799/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 369.331956][T20612] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 369.332164][T20612] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 369.338108][ T23] audit: type=1400 audit(1740312922.464:15970): avc: denied { write } for pid=20616 comm="syz.4.8855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 369.389663][ T23] audit: type=1400 audit(1740312922.482:15971): avc: denied { read write } for pid=357 comm="syz-executor" name="loop4" dev="devtmpfs" ino=9412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.414212][ T23] audit: type=1400 audit(1740312922.492:15972): avc: denied { open } for pid=357 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=9412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.414230][ T23] audit: type=1400 audit(1740312922.492:15973): avc: denied { ioctl } for pid=357 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=9412 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.414247][ T23] audit: type=1400 audit(1740312922.510:15974): avc: denied { mount } for pid=20611 comm="syz.2.8856" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 369.414264][ T23] audit: type=1400 audit(1740312922.510:15975): avc: denied { write } for pid=20611 comm="syz.2.8856" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 369.414289][ T23] audit: type=1400 audit(1740312922.510:15976): avc: denied { remove_name } for pid=20611 comm="syz.2.8856" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 369.604594][T20627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=20627 comm=syz.2.8861 [ 369.679734][T20631] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 369.725931][T20648] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8870'. [ 369.736773][T20648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8870'. [ 369.758136][T20651] netlink: 'syz.0.8872': attribute type 28 has an invalid length. [ 369.766207][T20651] netlink: 'syz.0.8872': attribute type 28 has an invalid length. [ 369.774765][T20651] netlink: 'syz.0.8872': attribute type 28 has an invalid length. [ 369.782672][T20651] netlink: 'syz.0.8872': attribute type 28 has an invalid length. [ 369.790346][T20651] netlink: 'syz.0.8872': attribute type 28 has an invalid length. [ 369.798087][T20651] netlink: 'syz.0.8872': attribute type 28 has an invalid length. [ 369.808308][T20651] netlink: 'syz.0.8872': attribute type 28 has an invalid length. [ 369.853460][T20651] netlink: 'syz.0.8872': attribute type 28 has an invalid length. [ 369.867603][T20651] netlink: 'syz.0.8872': attribute type 28 has an invalid length. [ 369.878385][T20656] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 369.909564][T20651] netlink: 'syz.0.8872': attribute type 28 has an invalid length. [ 369.919776][T20656] EXT4-fs error (device loop2): __ext4_new_inode:928: comm syz.2.8871: reserved inode found cleared - inode=1 [ 370.115666][T20677] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 370.152261][T20684] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 370.420480][T20694] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 370.420491][T20694] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 370.422414][T20694] F2FS-fs (loop3): invalid crc value [ 370.459564][T20694] F2FS-fs (loop3): Found nat_bits in checkpoint [ 370.537279][T20694] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 370.537291][T20694] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 370.659477][ T7] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 370.659486][ T7] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 370.971474][T20722] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 370.971484][T20722] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 370.984859][T20722] F2FS-fs (loop2): Found nat_bits in checkpoint [ 371.078550][T20722] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 371.078563][T20722] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 371.605682][T20731] F2FS-fs (loop0): Invalid segment/section count (33048 != 24 * 1) [ 371.618040][T20765] FAT-fs (loop3): Directory bread(block 64) failed [ 371.627719][T20731] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 371.637908][T20765] FAT-fs (loop3): Directory bread(block 65) failed [ 371.646360][T20765] FAT-fs (loop3): Directory bread(block 66) failed [ 371.647511][T20731] F2FS-fs (loop0): invalid crc value [ 371.653846][T20765] FAT-fs (loop3): Directory bread(block 67) failed [ 371.681505][T20765] FAT-fs (loop3): Directory bread(block 68) failed [ 371.698484][T20765] FAT-fs (loop3): Directory bread(block 69) failed [ 371.712254][T20765] FAT-fs (loop3): Directory bread(block 70) failed [ 371.735923][T20765] FAT-fs (loop3): Directory bread(block 71) failed [ 371.770643][T20765] FAT-fs (loop3): Directory bread(block 72) failed [ 371.783672][T20765] FAT-fs (loop3): Directory bread(block 73) failed [ 371.784629][T20731] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 371.798640][T20731] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 371.806171][T20791] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 371.841042][T20797] device batadv_slave_0 entered promiscuous mode [ 371.857982][T20791] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2227: inode #15: comm syz.2.8927: corrupted in-inode xattr [ 371.887737][T20791] EXT4-fs (loop2): Remounting filesystem read-only [ 371.894230][T20791] EXT4-fs error (device loop2): ext4_orphan_get:1242: comm syz.2.8927: couldn't read orphan inode 15 (err -117) [ 371.917064][T20803] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8933'. [ 371.932183][T20791] EXT4-fs (loop2): mounted filesystem without journal. Opts: prjquota,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000005,usrjquota=,nombcache,noquota,grpquota,norecovery, [ 371.947577][T20803] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8933'. [ 371.962726][T20803] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8933'. [ 372.402739][T20836] FAT-fs (loop4): Directory bread(block 64) failed [ 372.409395][T20836] FAT-fs (loop4): Directory bread(block 65) failed [ 372.415866][ T13] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 372.423735][T20836] FAT-fs (loop4): Directory bread(block 66) failed [ 372.430292][T20836] FAT-fs (loop4): Directory bread(block 67) failed [ 372.437108][T20836] FAT-fs (loop4): Directory bread(block 68) failed [ 372.443633][T20836] FAT-fs (loop4): Directory bread(block 69) failed [ 372.450286][T20836] FAT-fs (loop4): Directory bread(block 70) failed [ 372.456796][T20836] FAT-fs (loop4): Directory bread(block 71) failed [ 372.463353][T20836] FAT-fs (loop4): Directory bread(block 72) failed [ 372.470076][T20836] FAT-fs (loop4): Directory bread(block 73) failed [ 372.743571][T20841] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 372.751133][T20841] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 372.762029][T20841] F2FS-fs (loop0): invalid crc value [ 372.768983][T20841] F2FS-fs (loop0): Found nat_bits in checkpoint [ 372.795083][T20841] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 372.801999][T20841] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 372.809390][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.827945][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.837567][ T13] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 372.846750][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.856374][ T13] usb 3-1: config 0 descriptor?? [ 372.866444][ T356] attempt to access beyond end of device [ 372.866444][ T356] loop0: rw=2049, want=45104, limit=40427 [ 373.170768][T20858] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 373.184113][T20858] ext4 filesystem being mounted at /1666/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 373.286597][T20881] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2050 sclass=netlink_tcpdiag_socket pid=20881 comm=syz.1.8961 [ 373.366046][ T13] hid-steam 0003:28DE:1142.000F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 373.404970][T20887] FAT-fs (loop0): Directory bread(block 64) failed [ 373.429538][T20887] FAT-fs (loop0): Directory bread(block 65) failed [ 373.444740][T20887] FAT-fs (loop0): Directory bread(block 66) failed [ 373.451473][T20887] FAT-fs (loop0): Directory bread(block 67) failed [ 373.464286][T20887] FAT-fs (loop0): Directory bread(block 68) failed [ 373.473388][T20887] FAT-fs (loop0): Directory bread(block 69) failed [ 373.479946][T20887] FAT-fs (loop0): Directory bread(block 70) failed [ 373.486407][T20887] FAT-fs (loop0): Directory bread(block 71) failed [ 373.493683][T20887] FAT-fs (loop0): Directory bread(block 72) failed [ 373.500243][T20887] FAT-fs (loop0): Directory bread(block 73) failed [ 373.602915][ T13] usb 3-1: USB disconnect, device number 92 [ 373.610337][ T385] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 373.623057][ T385] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 373.649986][T20912] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 373.663802][T20912] ext4 filesystem being mounted at /2000/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until (%ptR?) (0x7fffffff) [ 373.703840][T20912] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.8976: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 373.733141][T20912] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz.4.8976: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 373.756344][T20912] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz.4.8976: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 373.778410][T20912] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz.4.8976: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 373.799126][T20912] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz.4.8976: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 373.825789][T20912] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz.4.8976: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 373.847330][T20912] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz.4.8976: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 373.867643][T20912] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 18: comm syz.4.8976: lblock 23 mapped to illegal pblock 18 (length 1) [ 373.882244][T20912] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 19: comm syz.4.8976: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 373.902655][T20912] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 20: comm syz.4.8976: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 373.941193][T20919] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 373.961054][T20919] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 373.982993][T20919] F2FS-fs (loop0): invalid crc value [ 374.005182][T20919] F2FS-fs (loop0): Found nat_bits in checkpoint [ 374.087649][T20919] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 374.098252][T20919] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 374.154009][T20945] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 374.281619][T20961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8997'. [ 374.291357][T20961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8997'. [ 374.406643][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9002'. [ 374.470752][T20969] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,usrquota,dioread_lock,norecovery,debug_want_extra_isize=0x0000000000000032,lazytime,nodelalloc,usrquota,nombcache,,errors=continue [ 374.655225][ T23] kauditd_printk_skb: 296 callbacks suppressed [ 374.655236][ T23] audit: type=1400 audit(1740312927.487:16271): avc: denied { create } for pid=20994 comm="syz.4.9010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.734181][ T23] audit: type=1400 audit(1740312927.487:16272): avc: denied { execmem } for pid=20993 comm="syz.2.9011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 374.777816][ T23] audit: type=1400 audit(1740312927.524:16273): avc: denied { connect } for pid=20994 comm="syz.4.9010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.799964][ T23] audit: type=1400 audit(1740312927.524:16274): avc: denied { getopt } for pid=20994 comm="syz.4.9010" lport=40415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.820910][ T23] audit: type=1400 audit(1740312927.561:16275): avc: denied { read } for pid=21004 comm="syz.0.9017" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 374.842313][ T23] audit: type=1400 audit(1740312927.561:16276): avc: denied { open } for pid=21004 comm="syz.0.9017" path="net:[4026532301]" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 374.866980][ T23] audit: type=1400 audit(1740312927.571:16277): avc: denied { create } for pid=21004 comm="syz.0.9017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.887892][ T23] audit: type=1400 audit(1740312927.571:16278): avc: denied { accept } for pid=21004 comm="syz.0.9017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.911440][T21008] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,usrquota,dioread_lock,norecovery,debug_want_extra_isize=0x0000000000000032,lazytime,nodelalloc,usrquota,nombcache,,errors=continue [ 374.948090][ T23] audit: type=1400 audit(1740312927.674:16279): avc: denied { mounton } for pid=21007 comm="syz.0.9018" path="/1678/file1" dev="tmpfs" ino=212122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 374.980433][ T23] audit: type=1400 audit(1740312927.692:16280): avc: denied { ioctl } for pid=21001 comm="syz.4.9016" path="/dev/loop4" dev="devtmpfs" ino=9412 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.238473][T21051] EXT4-fs (loop2): Ignoring removed orlov option [ 375.271749][T21051] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,nodiscard,,errors=continue [ 375.297459][T21051] ext4 filesystem being mounted at /1834/bus supports timestamps until (%ptR?) (0x7fffffff) [ 375.609765][T21094] sock: sock_set_timeout: `syz.2.9054' (pid 21094) tries to set negative timeout [ 375.897366][T21122] validate_nla: 21 callbacks suppressed [ 375.897374][T21122] netlink: 'syz.0.9067': attribute type 280 has an invalid length. [ 376.135085][T21149] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,errors=continue,quota,,errors=continue [ 376.167413][T21149] ext4 filesystem being mounted at /2013/bus supports timestamps until (%ptR?) (0x7fffffff) [ 376.259207][T21163] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21163 comm=+}[@ [ 376.342503][T21141] F2FS-fs (loop2): Found nat_bits in checkpoint [ 376.449967][T21141] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 376.497830][ T355] attempt to access beyond end of device [ 376.497830][ T355] loop2: rw=2049, want=45104, limit=40427 [ 376.683881][T21161] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 376.703710][T21161] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 376.718693][T21161] F2FS-fs (loop0): invalid crc value [ 376.726169][T21161] F2FS-fs (loop0): Found nat_bits in checkpoint [ 376.768957][T21161] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 376.775927][T21161] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 376.902530][ T356] attempt to access beyond end of device [ 376.902530][ T356] loop0: rw=2049, want=45104, limit=40427 [ 376.997286][ T74] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 377.088936][T21177] F2FS-fs (loop4): Invalid segment/section count (33048 != 24 * 1) [ 377.097610][T21177] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 377.116208][T21177] F2FS-fs (loop4): invalid crc value [ 377.155937][T21177] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 377.167519][T21177] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 377.264598][ T74] usb 4-1: Using ep0 maxpacket: 32 [ 377.446314][ T74] usb 4-1: unable to get BOS descriptor or descriptor too short [ 377.542554][ T74] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 377.554998][ T74] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 377.566310][ T74] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 377.575359][ T74] usb 4-1: config 128 has no interface number 0 [ 377.581625][ T74] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 377.593272][ T74] usb 4-1: config 128 interface 127 has no altsetting 0 [ 377.606610][ T13] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 377.628740][T21222] F2FS-fs (loop1): Found nat_bits in checkpoint [ 377.662065][T21222] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 377.747556][T21244] xt_hashlimit: size too large, truncated to 1048576 [ 377.767092][ T74] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 377.775959][ T74] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.799032][ T74] usb 4-1: Product: syz [ 377.803026][ T74] usb 4-1: Manufacturer: syz [ 377.807444][ T74] usb 4-1: SerialNumber: syz [ 377.863332][T21182] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 378.002272][ T13] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 378.012556][ T13] usb 3-1: config 0 has no interface number 1 [ 378.026813][ T13] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 378.044927][ T13] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 378.141301][ T13] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 378.160972][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 378.171723][ T13] usb 3-1: SerialNumber: syz [ 378.180945][ T13] usb 3-1: config 0 descriptor?? [ 378.227489][ T13] uvcvideo: Found UVC 0.00 device (0002:0000) [ 378.237367][ T13] uvcvideo: No valid video chain found. [ 378.257475][T21249] EXT4-fs (loop0): Ignoring removed orlov option [ 378.311208][T21249] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,orlov,nodiscard,,errors=continue [ 378.344756][ T74] usb 4-1: USB disconnect, device number 89 [ 378.351289][T21249] ext4 filesystem being mounted at /1709/bus supports timestamps until (%ptR?) (0x7fffffff) [ 378.368997][T17059] udevd[17059]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 378.447102][ T13] usb 3-1: USB disconnect, device number 93 [ 378.569698][T21255] loop0: p2 p3 < > p4 < p5 > [ 378.579641][T21255] loop0: p2 start 55050756 is beyond EOD, truncated [ 378.597237][T21255] loop0: p5 start 55050756 is beyond EOD, truncated [ 378.648735][T21238] F2FS-fs (loop4): Test dummy encryption mode enabled [ 378.669933][T21238] F2FS-fs (loop4): invalid crc value [ 378.690470][T21238] F2FS-fs (loop4): Found nat_bits in checkpoint [ 378.697473][T21247] F2FS-fs (loop1): Invalid segment/section count (33048 != 24 * 1) [ 378.705460][T21247] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 378.726672][T21247] F2FS-fs (loop1): invalid crc value [ 378.740239][T21238] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 378.758758][T21247] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 378.765682][T21247] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 378.975076][ T13] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 379.231689][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 379.249074][T21300] netlink: 776 bytes leftover after parsing attributes in process `syz.1.9123'. [ 379.371016][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.403961][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.424047][ T13] usb 4-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 379.445588][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.464251][ T13] usb 4-1: config 0 descriptor?? [ 379.490267][T21312] EXT4-fs (loop1): orphan cleanup on readonly fs [ 379.509759][T21312] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.9140: bg 0: block 248: padding at end of block bitmap is not set [ 379.545393][T21312] EXT4-fs (loop1): 1 truncate cleaned up [ 379.561718][T21312] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodiscard,inode_readahead_blks=0x0000000000040000,discard,grpjquota=,noquota,abort,noload,noload,,errors=continue [ 379.807864][T21330] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2936: inode #16: comm syz.1.9147: corrupted xattr block 8 [ 379.831677][T21330] EXT4-fs (loop1): Remounting filesystem read-only [ 379.848889][T21330] EXT4-fs warning (device loop1): ext4_evict_inode:321: xattr delete (err -117) [ 379.871365][T21330] EXT4-fs (loop1): 1 orphan inode deleted [ 379.891866][T21330] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,auto_da_alloc=0x0000000000000004,journal_dev=0x0000000000000003,barrier,delalloc,usrquota, [ 379.913732][T21330] ext4 filesystem being mounted at /1750/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 379.926730][T21339] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro, [ 379.935753][T21339] ext4 filesystem being mounted at /1730/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 379.971812][ T13] waltop 0003:172F:0502.0011: hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.3-1/input0 [ 380.028698][T21328] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 380.042733][T21328] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 380.043803][T21294] F2FS-fs (loop2): Invalid segment/section count (33048 != 24 * 1) [ 380.051014][ T23] kauditd_printk_skb: 282 callbacks suppressed [ 380.051024][ T23] audit: type=1400 audit(1740312932.528:16561): avc: denied { unmount } for pid=354 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 380.091520][T21294] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 380.096334][T21328] F2FS-fs (loop4): invalid crc value [ 380.103479][T21294] F2FS-fs (loop2): invalid crc value [ 380.117172][T21328] F2FS-fs (loop4): Found nat_bits in checkpoint [ 380.124122][ T23] audit: type=1400 audit(1740312932.603:16562): avc: denied { create } for pid=21349 comm="syz.1.9151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 380.161703][ T23] audit: type=1400 audit(1740312932.631:16563): avc: denied { connect } for pid=21349 comm="syz.1.9151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 380.162788][T21294] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 380.197376][ T74] usb 4-1: USB disconnect, device number 90 [ 380.224463][ T23] audit: type=1400 audit(1740312932.631:16564): avc: denied { write } for pid=21349 comm="syz.1.9151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 380.232013][T21294] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 380.269195][T21328] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 380.276068][T21328] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 380.296978][T21361] tipc: Enabling of bearer rejected, failed to enable media [ 380.300382][ T23] audit: type=1400 audit(1740312932.641:16565): avc: denied { read write } for pid=354 comm="syz-executor" name="loop1" dev="devtmpfs" ino=9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.331203][ T23] audit: type=1400 audit(1740312932.641:16566): avc: denied { open } for pid=354 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.390706][ T23] audit: type=1400 audit(1740312932.669:16567): avc: denied { ioctl } for pid=356 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=9408 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.391726][T21345] attempt to access beyond end of device [ 380.391726][T21345] loop4: rw=2049, want=45104, limit=40427 [ 380.416283][ T23] audit: type=1400 audit(1740312932.687:16568): avc: denied { read } for pid=21355 comm="syz.1.9153" dev="nsfs" ino=4026532443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 380.486420][T21371] netlink: 'syz.1.9161': attribute type 3 has an invalid length. [ 380.487921][ T23] audit: type=1400 audit(1740312932.687:16569): avc: denied { open } for pid=21355 comm="syz.1.9153" path="net:[4026532443]" dev="nsfs" ino=4026532443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 380.517867][ T23] audit: type=1400 audit(1740312932.687:16570): avc: denied { create } for pid=21355 comm="syz.1.9153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 380.856132][T21396] tipc: Enabling of bearer rejected, failed to enable media [ 380.924742][T21398] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 380.963200][T21398] erofs: (device loop3): vle_extent_lookback: bogus lookback distance @ nid 36 [ 380.994178][T21398] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress, in[52, 4044] out[1851] [ 381.004377][T21398] ------------[ cut here ]------------ [ 381.009663][T21398] WARNING: CPU: 1 PID: 21398 at fs/erofs/decompressor.c:174 z_erofs_lz4_decompress+0x962/0xd00 [ 381.019801][T21398] Modules linked in: [ 381.023543][T21398] CPU: 1 PID: 21398 Comm: syz.3.9173 Tainted: G W 5.4.289-syzkaller-00011-g39762b7a60e9 #0 [ 381.034734][T21398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 381.044731][T21398] RIP: 0010:z_erofs_lz4_decompress+0x962/0xd00 [ 381.050707][T21398] Code: c0 0f 85 21 03 00 00 45 8b 0c 24 48 89 df 48 c7 c6 cf f2 5b 85 48 c7 c2 a0 ce f7 84 8b 5c 24 24 89 d9 45 89 e8 e8 3e ec fe ff <0f> 0b 89 d8 48 c7 c7 00 cf f7 84 48 c7 c6 20 cf f7 84 ba 02 00 00 [ 381.070157][T21398] RSP: 0018:ffff8881e65fe4a8 EFLAGS: 00010246 [ 381.076061][T21398] RAX: 748e78163469ab00 RBX: 0000000000000034 RCX: 748e78163469ab00 [ 381.083978][T21398] RDX: ffffc90002146000 RSI: 00000000000015f7 RDI: 00000000000015f8 [ 381.092122][T21398] RBP: ffff8881c969bfcc R08: ffffffff814d6d92 R09: ffffed103edea9b8 [ 381.100013][T21398] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881e65feac0 [ 381.107837][T21398] R13: 0000000000000fcc R14: 1ffff1103ccbfd58 R15: dffffc0000000000 [ 381.115637][T21398] FS: 00007f89b8d936c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 381.124407][T21398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.130826][T21398] CR2: 0000400000000180 CR3: 00000001d5ffd000 CR4: 00000000003406a0 [ 381.138761][T21398] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.146558][T21398] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.154890][T21398] Call Trace: [ 381.158026][T21398] ? __warn+0x162/0x250 [ 381.162021][T21398] ? report_bug+0x3a1/0x4e0 [ 381.166356][T21398] ? z_erofs_lz4_decompress+0x962/0xd00 [ 381.171734][T21398] ? z_erofs_lz4_decompress+0x962/0xd00 [ 381.177113][T21398] ? do_invalid_op+0x6e/0x110 [ 381.181628][T21398] ? invalid_op+0x1e/0x30 [ 381.185804][T21398] ? wake_up_klogd+0xb2/0xf0 [ 381.190381][T21398] ? z_erofs_lz4_decompress+0x962/0xd00 [ 381.195816][T21398] ? z_erofs_lz4_decompress+0x962/0xd00 [ 381.201192][T21398] ? z_erofs_lz4_prepare_destpages+0x690/0x690 [ 381.207173][T21398] z_erofs_decompress+0xbab/0xfc0 [ 381.212041][T21398] z_erofs_vle_unzip_all+0x1147/0x1bf0 [ 381.217342][T21398] ? blk_mq_request_issue_directly+0x1d0/0x1d0 [ 381.223325][T21398] ? z_erofs_onlinepage_endio+0x140/0x140 [ 381.228993][T21398] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 381.234373][T21398] ? _raw_spin_lock+0x1b0/0x1b0 [ 381.239053][T21398] z_erofs_submit_and_unzip+0x12d2/0x13d0 [ 381.244603][T21398] ? z_erofs_attach_page+0x4fa/0x710 [ 381.249739][T21398] ? z_erofs_do_read_page+0x2580/0x2580 [ 381.255284][T21398] ? z_erofs_vle_normalaccess_readpages+0xc70/0xc70 [ 381.261705][T21398] z_erofs_vle_normalaccess_readpage+0x30b/0x630 [ 381.267867][T21398] ? z_erofs_rcu_callback+0x20/0x20 [ 381.272907][T21398] ? __alloc_pages_nodemask+0x393/0x840 [ 381.278288][T21398] ? add_to_page_cache_lru+0x221/0x2c0 [ 381.283580][T21398] ? add_to_page_cache_locked+0x40/0x40 [ 381.289076][T21398] ? z_erofs_rcu_callback+0x20/0x20 [ 381.296175][T21398] do_read_cache_page+0x649/0xa10 [ 381.301122][T21398] erofs_namei+0x160/0xf90 [ 381.305378][T21398] erofs_lookup+0x145/0x450 [ 381.309720][T21398] ? lockref_get_not_dead+0xb3/0x170 [ 381.314842][T21398] ? erofs_namei+0xf90/0xf90 [ 381.319267][T21398] ? unlazy_walk+0x387/0x610 [ 381.323700][T21398] __lookup_slow+0x306/0x460 [ 381.328116][T21398] ? lookup_one_len+0x2c0/0x2c0 [ 381.332802][T21398] ? handle_dots+0xf10/0xf10 [ 381.337229][T21398] lookup_slow+0x53/0x70 [ 381.341327][T21398] walk_component+0x2dc/0x590 [ 381.345910][T21398] ? path_put_conditional+0x90/0x90 [ 381.350946][T21398] ? handle_lookup_down+0x5b0/0x5b0 [ 381.355993][T21398] ? path_init+0x8bd/0xee0 [ 381.360231][T21398] path_lookupat+0x182/0x3f0 [ 381.364662][T21398] filename_lookup+0x253/0x6e0 [ 381.369258][T21398] ? hashlen_string+0x110/0x110 [ 381.373947][T21398] ? getname_kernel+0x55/0x2d0 [ 381.378541][T21398] ? memcpy+0x38/0x50 [ 381.382367][T21398] ? getname_kernel+0x1f4/0x2d0 [ 381.387051][T21398] unix_find_other+0xdb/0x810 [ 381.391568][T21398] ? sock_kzfree_s+0x50/0x50 [ 381.396080][T21398] ? __unix_insert_socket+0x1a0/0x1a0 [ 381.401289][T21398] unix_dgram_sendmsg+0xd36/0x1ff0 [ 381.406242][T21398] ? rw_copy_check_uvector+0x75/0x2f0 [ 381.411461][T21398] ? unix_dgram_poll+0x710/0x710 [ 381.416221][T21398] ? security_socket_sendmsg+0x7d/0xa0 [ 381.421541][T21398] ? unix_dgram_poll+0x710/0x710 [ 381.426551][T21398] ____sys_sendmsg+0x5ac/0x8f0 [ 381.431132][T21398] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 381.436167][T21398] ? __sys_sendmmsg+0x3e6/0x700 [ 381.440848][T21398] __sys_sendmmsg+0x3c3/0x700 [ 381.445365][T21398] ? __ia32_sys_sendmsg+0x90/0x90 [ 381.450226][T21398] ? check_preemption_disabled+0x9f/0x320 [ 381.455781][T21398] ? selinux_file_alloc_security+0x19/0x120 [ 381.461508][T21398] ? memcpy+0x38/0x50 [ 381.465594][T21398] ? errseq_sample+0x3c/0x60 [ 381.470098][T21398] ? alloc_file+0x3f5/0x4f0 [ 381.474620][T21398] ? futex_exit_release+0x1e0/0x1e0 [ 381.479924][T21398] ? alloc_empty_file_noaccount+0x80/0x80 [ 381.485556][T21398] ? __fd_install+0x119/0x230 [ 381.490063][T21398] ? check_preemption_disabled+0x153/0x320 [ 381.495800][T21398] ? switch_fpu_return+0x1d4/0x410 [ 381.500842][T21398] ? fpu__clear+0x3c0/0x3c0 [ 381.505516][T21398] __x64_sys_sendmmsg+0x9c/0xb0 [ 381.510202][T21398] do_syscall_64+0xca/0x1c0 [ 381.514540][T21398] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 381.520398][T21398] RIP: 0033:0x7f89ba728de9 [ 381.524638][T21398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.544174][T21398] RSP: 002b:00007f89b8d93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 381.552421][T21398] RAX: ffffffffffffffda RBX: 00007f89ba941fa0 RCX: 00007f89ba728de9 [ 381.560237][T21398] RDX: 0000000000000002 RSI: 0000400000002d00 RDI: 0000000000000005 [ 381.568051][T21398] RBP: 00007f89ba7aa2a0 R08: 0000000000000000 R09: 0000000000000000 [ 381.575878][T21398] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.583755][T21398] R13: 0000000000000000 R14: 00007f89ba941fa0 R15: 00007ffdc3477c68 [ 381.592098][T21398] ---[ end trace 2d9762893b317720 ]--- [ 381.608215][T21398] erofs: (device loop3): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 381.647109][T21388] F2FS-fs (loop1): Unrecognized mount option "grpquota=/dev/uhid" or missing value [ 381.729132][T21403] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 381.755969][T21403] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 381.938497][T21403] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 381.946654][T21403] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 382.056348][ T355] attempt to access beyond end of device [ 382.056348][ T355] loop2: rw=2049, want=45104, limit=40427 [ 382.165472][T21438] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 382.173483][T21438] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 382.184204][T21438] F2FS-fs (loop3): invalid crc value [ 382.190962][T21438] F2FS-fs (loop3): Found nat_bits in checkpoint [ 382.216733][T21438] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 382.223591][T21438] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 382.379386][T21458] EXT4-fs (loop4): 1 orphan inode deleted [ 382.385043][T21458] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 382.404140][T21458] ext4 filesystem being mounted at /2036/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 382.599642][T21455] F2FS-fs (loop2): invalid crc value [ 382.715262][T21455] F2FS-fs (loop2): Start checkpoint disabled! [ 382.722870][T21455] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 382.851300][T21489] EXT4-fs (loop1): Test dummy encryption mode enabled [ 382.866802][T21489] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002c01c, mo2=0002] [ 382.874802][T21489] System zones: 0-5 [ 382.879340][T21489] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,max_dir_size_kb=0x000000000000880e,journal_ioprio=0x0000000000000000,test_dummy_encryption,grpid,nodelalloc,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 383.098106][T21512] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 383.109682][T21513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9211'. [ 383.131033][T21510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9211'. [ 383.152468][T21515] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue [ 383.336805][T21525] EXT4-fs (loop1): journaled quota format not specified [ 383.828570][ T13] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 384.213467][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.229999][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 384.255193][ T13] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 384.273134][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.289447][ T13] usb 4-1: config 0 descriptor?? [ 384.452604][T21618] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 384.472256][T21618] EXT4-fs error (device loop2): ext4_orphan_get:1238: inode #15: comm syz.2.9263: iget: bad extended attribute block 19 [ 384.484902][T21618] EXT4-fs error (device loop2): ext4_orphan_get:1242: comm syz.2.9263: couldn't read orphan inode 15 (err -117) [ 384.498322][T21618] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 384.514184][T21618] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.9263: bg 0: block 65: padding at end of block bitmap is not set [ 384.579690][T21625] xt_hashlimit: size too large, truncated to 1048576 [ 384.813646][ T13] hid-multitouch 0003:18D1:5028.0012: unknown main item tag 0x0 [ 384.821187][ T13] hid-multitouch 0003:18D1:5028.0012: unknown main item tag 0x0 [ 384.828634][ T13] hid-multitouch 0003:18D1:5028.0012: unknown main item tag 0x0 [ 384.836134][ T13] hid-multitouch 0003:18D1:5028.0012: unknown main item tag 0x0 [ 384.843777][ T13] hid-multitouch 0003:18D1:5028.0012: unknown main item tag 0x0 [ 384.852845][ T13] hid-multitouch 0003:18D1:5028.0012: hidraw0: USB HID v0.00 Device [HID 18d1:5028] on usb-dummy_hcd.3-1/input0 [ 385.035936][ T13] usb 4-1: USB disconnect, device number 91 [ 385.099699][T21651] FAT-fs (loop0): Directory bread(block 64) failed [ 385.106092][T21651] FAT-fs (loop0): Directory bread(block 65) failed [ 385.112454][T21651] FAT-fs (loop0): Directory bread(block 66) failed [ 385.118709][T21651] FAT-fs (loop0): Directory bread(block 67) failed [ 385.125240][T21651] FAT-fs (loop0): Directory bread(block 68) failed [ 385.131491][T21651] FAT-fs (loop0): Directory bread(block 69) failed [ 385.138031][T21651] FAT-fs (loop0): Directory bread(block 70) failed [ 385.145108][T21651] FAT-fs (loop0): Directory bread(block 71) failed [ 385.151415][T21651] FAT-fs (loop0): Directory bread(block 72) failed [ 385.157761][T21651] FAT-fs (loop0): Directory bread(block 73) failed [ 385.180355][T21651] attempt to access beyond end of device [ 385.180355][T21651] loop0: rw=2049, want=1200, limit=256 [ 385.401776][ T23] kauditd_printk_skb: 240 callbacks suppressed [ 385.401786][ T23] audit: type=1400 audit(1740312937.552:16809): avc: denied { create } for pid=21653 comm="syz.0.9278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 385.428381][T21654] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0000 [ 385.428761][ T23] audit: type=1400 audit(1740312937.561:16810): avc: denied { write } for pid=21653 comm="syz.0.9278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 385.436341][T21654] tipc: Enabled bearer , priority 10 [ 385.456900][ T23] audit: type=1400 audit(1740312937.561:16811): avc: denied { read } for pid=21653 comm="syz.0.9278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 385.563202][ T23] audit: type=1400 audit(1740312937.701:16812): avc: denied { mounton } for pid=21659 comm="syz.0.9281" path="/1753/file1" dev="tmpfs" ino=216654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 385.597841][ T23] audit: type=1400 audit(1740312937.729:16813): avc: denied { map_create } for pid=21662 comm="syz.3.9282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 385.619921][T21660] EXT4-fs (loop0): 1 orphan inode deleted [ 385.624105][ T23] audit: type=1400 audit(1740312937.729:16814): avc: denied { map_read map_write } for pid=21662 comm="syz.3.9282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 385.625705][T21660] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 385.646185][ T23] audit: type=1400 audit(1740312937.729:16815): avc: denied { prog_load } for pid=21662 comm="syz.3.9282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 385.672900][T21660] ext4 filesystem being mounted at /1753/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 385.694752][ T23] audit: type=1400 audit(1740312937.795:16816): avc: denied { read write } for pid=355 comm="syz-executor" name="loop2" dev="devtmpfs" ino=9410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.730554][ T23] audit: type=1400 audit(1740312937.795:16817): avc: denied { open } for pid=355 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=9410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.756058][ T23] audit: type=1400 audit(1740312937.795:16818): avc: denied { ioctl } for pid=355 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=9410 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.783824][T21674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9287'. [ 385.798254][T21671] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 385.806009][T21671] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 385.813864][T21671] System zones: 0-1, 15-15, 18-18, 34-34 [ 385.819645][T21671] EXT4-fs (loop2): orphan cleanup on readonly fs [ 385.825814][T21671] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 385.840178][T21671] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 385.846985][T21671] EXT4-fs error (device loop2): ext4_orphan_get:1262: comm syz.2.9285: bad orphan inode 16 [ 385.857013][T21671] ext4_test_bit(bit=15, block=18) = 1 [ 385.862489][T21671] is_bad_inode(inode)=0 [ 385.866457][T21671] NEXT_ORPHAN(inode)=0 [ 385.870720][T21671] max_ino=32 [ 385.874958][T21671] i_nlink=2 [ 385.877912][T21671] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 385.891122][T21671] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 385.899828][T21671] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 386.159122][ T13] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 386.221302][T21702] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 386.234078][T21702] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 386.247703][T21702] System zones: 0-1, 15-15, 18-18, 34-34 [ 386.256388][T21702] EXT4-fs (loop2): orphan cleanup on readonly fs [ 386.263983][T21702] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 386.288155][T21702] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 386.295336][T21702] EXT4-fs error (device loop2): ext4_orphan_get:1262: comm syz.2.9296: bad orphan inode 16 [ 386.305770][T21702] ext4_test_bit(bit=15, block=18) = 1 [ 386.316802][T21702] is_bad_inode(inode)=0 [ 386.321928][T21702] NEXT_ORPHAN(inode)=0 [ 386.325806][T21702] max_ino=32 [ 386.328985][T21702] i_nlink=2 [ 386.334389][T21702] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 386.366036][T21715] binder: 21714:21715 ioctl c0306201 0 returned -14 [ 386.378756][ T355] EXT4-fs error (device loop2): ext4_ext_check_inode:540: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 386.397098][ T355] EXT4-fs error (device loop2): ext4_ext_check_inode:540: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 386.507072][T21720] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 386.517519][T21720] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 386.527722][T21720] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 386.534626][ T355] syz-executor (355) used greatest stack depth: 19416 bytes left [ 386.554481][ T9] device ip6gretap0 left promiscuous mode [ 386.560303][ T13] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 386.571084][ T9] bridge0: port 3(ip6gretap0) entered disabled state [ 386.578791][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.586221][T21720] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 386.596238][ T13] usb 4-1: config 0 descriptor?? [ 386.607902][T21720] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c000e118, mo2=0000] [ 386.616253][T21720] EXT4-fs (loop4): orphan cleanup on readonly fs [ 386.629497][ T5] tipc: 32-bit node address hash set to ff7839 [ 386.636717][T21720] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.9304: bg 0: block 34: padding at end of block bitmap is not set [ 386.672706][T21720] EXT4-fs (loop4): 1 truncate cleaned up [ 386.683222][T21720] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,bsdgroups,nogrpid,noblock_validity,,errors=continue [ 386.736781][T21720] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 386.750435][T21720] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c000e118, mo2=0000] [ 386.798673][T21729] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.805658][T21729] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.820623][T21729] device bridge_slave_0 entered promiscuous mode [ 386.838420][T21729] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.845945][T21729] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.853522][T21729] device bridge_slave_1 entered promiscuous mode [ 386.988770][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 386.998199][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.026687][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.036725][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.050976][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.057869][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.073923][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.096371][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.107429][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.112495][ T13] itetech 0003:06CB:73F4.0013: unknown main item tag 0x1 [ 387.114319][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.128424][ T13] itetech 0003:06CB:73F4.0013: item fetching failed at offset 2/5 [ 387.143158][ T13] itetech: probe of 0003:06CB:73F4.0013 failed with error -22 [ 387.159842][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 387.176418][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 387.206660][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 387.231204][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 387.251063][ T9] device bridge_slave_1 left promiscuous mode [ 387.257060][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.280577][ T9] device bridge_slave_0 left promiscuous mode [ 387.289319][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.336053][ T74] usb 4-1: USB disconnect, device number 92 [ 387.539285][T21773] EXT4-fs (loop1): Ignoring removed nobh option [ 387.545477][T21773] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 387.554236][T21773] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,mblk_io_submit,dioread_nolock,,errors=continue [ 387.666585][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 387.684705][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 387.703544][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 387.712647][T21779] SELinux: duplicate or incompatible mount options [ 387.721641][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 387.748251][T21783] xt_l2tp: wrong L2TP version: 0 [ 387.830018][T21785] FAT-fs (loop4): Directory bread(block 64) failed [ 387.850224][T21785] FAT-fs (loop4): Directory bread(block 65) failed [ 387.856644][T21785] FAT-fs (loop4): Directory bread(block 66) failed [ 387.880435][T21785] FAT-fs (loop4): Directory bread(block 67) failed [ 387.886844][T21785] FAT-fs (loop4): Directory bread(block 68) failed [ 387.896353][T21785] FAT-fs (loop4): Directory bread(block 69) failed [ 387.909046][T21785] FAT-fs (loop4): Directory bread(block 70) failed [ 387.923049][T21785] FAT-fs (loop4): Directory bread(block 71) failed [ 387.939116][T21785] FAT-fs (loop4): Directory bread(block 72) failed [ 387.949852][T21785] FAT-fs (loop4): Directory bread(block 73) failed [ 388.011922][T21785] attempt to access beyond end of device [ 388.011922][T21785] loop4: rw=2049, want=1200, limit=256 [ 388.391211][T21825] EXT4-fs (loop1): Test dummy encryption mode enabled [ 388.391593][T21808] F2FS-fs (loop3): invalid crc value [ 388.415356][T21825] EXT4-fs (loop1): Test dummy encryption mode enabled [ 388.448639][T21825] EXT4-fs (loop1): 1 orphan inode deleted [ 388.463260][T21825] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,test_dummy_encryption=v1,noquota,test_dummy_encryption=v1,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,errors=continue, [ 388.477742][T21808] F2FS-fs (loop3): Start checkpoint disabled! [ 388.491509][T21808] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 388.500573][T21825] ext4 filesystem being mounted at /1792/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 388.724970][ T74] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 388.982355][ T74] usb 6-1: Using ep0 maxpacket: 32 [ 389.001557][T21867] xt_hashlimit: size too large, truncated to 1048576 [ 389.109815][ T74] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.125271][ T74] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.141794][ T74] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 389.156339][ T74] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.170482][ T74] usb 6-1: config 0 descriptor?? [ 389.502975][T21865] F2FS-fs (loop1): invalid crc value [ 389.556873][T21865] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 389.688218][ T74] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 389.694740][ T74] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 389.701523][ T74] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 389.708022][ T74] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 389.714936][ T74] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 389.722874][ T74] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 389.729390][ T74] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 389.738407][ T74] lua 0003:1E7D:2C2E.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.5-1/input0 [ 389.913763][ T13] usb 6-1: USB disconnect, device number 2 [ 389.950758][T21881] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 389.970904][T21881] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 389.982687][T21881] F2FS-fs (loop3): invalid crc value [ 389.990754][T21881] F2FS-fs (loop3): Found nat_bits in checkpoint [ 390.035024][T21881] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 390.042004][T21881] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 390.245468][T21904] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 390.588465][T21926] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 390.613181][T21926] EXT4-fs (loop5): 1 truncate cleaned up [ 390.631150][T21926] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,grpid,usrjquota="errors=continue,errors=remount-ro,noblock_validity, [ 390.832040][ T23] kauditd_printk_skb: 302 callbacks suppressed [ 390.832051][ T23] audit: type=1400 audit(1740312942.631:17117): avc: denied { create } for pid=21970 comm="syz.5.9409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 390.910022][ T23] audit: type=1400 audit(1740312942.659:17118): avc: denied { setopt } for pid=21970 comm="syz.5.9409" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 390.935730][T21980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9413'. [ 390.946317][T21980] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9413'. [ 390.970235][ T23] audit: type=1400 audit(1740312942.659:17119): avc: denied { write } for pid=21970 comm="syz.5.9409" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 391.003295][ T5] hid-generic 0401:000D:0008.0015: item fetching failed at offset 0/3 [ 391.012994][ T5] hid-generic: probe of 0401:000D:0008.0015 failed with error -22 [ 391.033266][ T23] audit: type=1400 audit(1740312942.752:17120): avc: denied { create } for pid=21982 comm="syz.1.9415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 391.095231][ T23] audit: type=1400 audit(1740312942.752:17121): avc: denied { connect } for pid=21982 comm="syz.1.9415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 391.129610][ T23] audit: type=1400 audit(1740312942.780:17122): avc: denied { read write } for pid=21987 comm="syz.1.9417" name="uhid" dev="devtmpfs" ino=9555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 391.205743][ T23] audit: type=1400 audit(1740312942.780:17123): avc: denied { open } for pid=21987 comm="syz.1.9417" path="/dev/uhid" dev="devtmpfs" ino=9555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 391.251551][ T23] audit: type=1400 audit(1740312942.808:17124): avc: denied { connect } for pid=21989 comm="syz.0.9418" lport=250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 391.274435][ T23] audit: type=1400 audit(1740312942.855:17125): avc: denied { prog_load } for pid=21993 comm="syz.5.9420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 391.295765][ T23] audit: type=1400 audit(1740312942.855:17126): avc: denied { prog_run } for pid=21993 comm="syz.5.9420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 391.387557][T22004] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 391.403581][T22004] ext4 filesystem being mounted at /18/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 391.437614][T22004] EXT4-fs error (device loop5): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 391.464507][T22004] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 17 with error 28 [ 391.487707][T22004] EXT4-fs (loop5): This should not happen!! Data will be lost [ 391.487707][T22004] [ 391.504455][T22004] EXT4-fs (loop5): Total free blocks count 0 [ 391.514204][T22004] EXT4-fs (loop5): Free/Dirty block details [ 391.524345][T22004] EXT4-fs (loop5): free_blocks=39626 [ 391.531882][T22004] EXT4-fs (loop5): dirty_blocks=17 [ 391.540552][T22004] EXT4-fs (loop5): Block reservation details [ 391.546475][T22004] EXT4-fs (loop5): i_reserved_data_blocks=17 [ 391.698505][T21966] F2FS-fs (loop3): Test dummy encryption mode enabled [ 391.713555][T21966] F2FS-fs (loop3): invalid crc value [ 391.737185][T21966] F2FS-fs (loop3): Found nat_bits in checkpoint [ 391.807327][T21966] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 392.179544][T22022] F2FS-fs (loop5): Test dummy encryption mode enabled [ 392.214363][T22022] F2FS-fs (loop5): invalid crc value [ 392.253193][T22022] F2FS-fs (loop5): Found nat_bits in checkpoint [ 392.325910][T22022] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 392.778652][T22070] EXT4-fs (loop3): Test dummy encryption mode enabled [ 392.814521][T22070] EXT4-fs (loop3): Test dummy encryption mode enabled [ 392.861984][T22077] tipc: Started in network mode [ 392.871597][T22077] tipc: Own node identity e0000002, cluster identity 4711 [ 392.880762][T22070] EXT4-fs (loop3): 1 orphan inode deleted [ 392.890502][T22070] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,test_dummy_encryption=v1,noquota,test_dummy_encryption=v1,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,errors=continue, [ 392.913633][T22077] tipc: Enabling of bearer rejected, failed to enable media [ 392.923101][T22070] ext4 filesystem being mounted at /1833/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 393.012881][T22085] EXT4-fs (loop5): orphan cleanup on readonly fs [ 393.042640][T22085] EXT4-fs error (device loop5) in ext4_do_update_inode:5534: error 27 [ 393.050976][T22085] EXT4-fs error (device loop5) in ext4_do_update_inode:5534: error 27 [ 393.059399][T22085] EXT4-fs error (device loop5) in ext4_do_update_inode:5534: error 27 [ 393.067585][T22085] EXT4-fs error (device loop5) in ext4_orphan_del:3257: error 27 [ 393.075400][T22085] EXT4-fs error (device loop5) in ext4_do_update_inode:5534: error 27 [ 393.084256][T22085] EXT4-fs error (device loop5) in ext4_orphan_cleanup:2816: error 27 [ 393.100911][T22085] EXT4-fs (loop5): 1 truncate cleaned up [ 393.104429][T22041] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(9728) blocks(1024) [ 393.118840][T22085] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 393.137263][T22041] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 393.151619][T22041] F2FS-fs (loop0): invalid crc value [ 393.159596][T22041] F2FS-fs (loop0): Found nat_bits in checkpoint [ 393.222961][T22041] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 393.236382][T22041] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 393.604747][T22148] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9482'. [ 393.613701][T22149] netlink: 'syz.3.9483': attribute type 1 has an invalid length. [ 394.002470][T22182] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 394.015451][T22182] EXT4-fs (loop3): invalid journal inode [ 394.023766][T22182] EXT4-fs (loop3): can't get journal size [ 394.035751][T22182] EXT4-fs (loop3): 1 truncate cleaned up [ 394.041784][T22182] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue [ 394.065098][T22182] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 775 (only 1 groups) [ 394.081222][ T1770] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 394.099310][T22191] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 394.307831][T22207] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 394.337426][ T1770] usb 6-1: Using ep0 maxpacket: 16 [ 394.434058][ T74] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 394.529906][ T1770] usb 6-1: unable to get BOS descriptor or descriptor too short [ 394.626142][ T1770] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 394.635067][ T1770] usb 6-1: config 1 has no interface number 1 [ 394.641215][ T1770] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 394.659162][ T1770] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 131, changing to 7 [ 394.673600][T22254] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 394.682743][T22254] EXT4-fs (loop1): invalid journal inode [ 394.692148][T22254] EXT4-fs (loop1): can't get journal size [ 394.699147][T22254] EXT4-fs (loop1): 1 truncate cleaned up [ 394.704716][T22254] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue [ 394.729913][T22254] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 771 (only 1 groups) [ 394.829326][ T74] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 394.850821][ T1770] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.859968][ T1770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.869259][ T74] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 394.886537][ T1770] usb 6-1: Product: syz [ 394.890938][ T1770] usb 6-1: Manufacturer: syz [ 394.895626][ T1770] usb 6-1: SerialNumber: syz [ 394.955544][T22271] FAT-fs (loop4): Directory bread(block 64) failed [ 394.975627][T22271] FAT-fs (loop4): Directory bread(block 65) failed [ 394.980301][T22282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9544'. [ 394.982739][T22271] FAT-fs (loop4): Directory bread(block 66) failed [ 394.997757][T22271] FAT-fs (loop4): Directory bread(block 67) failed [ 395.008820][T22271] FAT-fs (loop4): Directory bread(block 68) failed [ 395.015813][T22271] FAT-fs (loop4): Directory bread(block 69) failed [ 395.022436][T22271] FAT-fs (loop4): Directory bread(block 70) failed [ 395.029085][T22271] FAT-fs (loop4): Directory bread(block 71) failed [ 395.038816][T22271] FAT-fs (loop4): Directory bread(block 72) failed [ 395.045910][T22271] FAT-fs (loop4): Directory bread(block 73) failed [ 395.053824][ T74] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 395.070638][ T74] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.083711][ T74] usb 4-1: Product: syz [ 395.087956][ T74] usb 4-1: Manufacturer: syz [ 395.092598][ T74] usb 4-1: SerialNumber: syz [ 395.103639][ T74] usb 4-1: config 0 descriptor?? [ 395.150632][ T74] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 395.158134][ T74] uvcvideo: No valid video chain found. [ 395.278367][ T1770] usb 6-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 395.292485][ T1770] usb 6-1: found format II with max.bitrate = 128, frame size=9 [ 395.309475][T22308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9556'. [ 395.330957][ T1770] usb 6-1: USB disconnect, device number 3 [ 395.373392][ T13] usb 4-1: USB disconnect, device number 93 [ 395.482932][T22314] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,,errors=continue [ 395.493058][T22314] ext4 filesystem being mounted at /2074/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 395.557094][T16934] udevd[16934]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 395.870790][T22335] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 396.202867][ T23] kauditd_printk_skb: 328 callbacks suppressed [ 396.202890][ T23] audit: type=1400 audit(1740312947.644:17455): avc: denied { mounton } for pid=22356 comm="syz.1.9577" path="/1858/file0" dev="tmpfs" ino=222359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 396.310173][T22349] F2FS-fs (loop5): fault_injection options not supported [ 396.311400][T22357] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.9577: bg 0: block 131: padding at end of block bitmap is not set [ 396.317227][T22349] F2FS-fs (loop5): fault_type options not supported [ 396.331976][T22357] EXT4-fs error (device loop1) in ext4_free_blocks:5016: Corrupt filesystem [ 396.340970][T22349] F2FS-fs (loop5): invalid crc value [ 396.346627][T22357] EXT4-fs (loop1): 1 truncate cleaned up [ 396.357030][T22357] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,norecovery,init_itable,jqfmt=vfsv1,dioread_lock,jqfmt=vfsold,data=journal,,errors=continue [ 396.362841][T22349] F2FS-fs (loop5): Found nat_bits in checkpoint [ 396.410118][ T23] audit: type=1400 audit(1740312947.841:17456): avc: denied { unmount } for pid=354 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 396.434610][T22349] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 396.442077][ T23] audit: type=1400 audit(1740312947.869:17457): avc: denied { mount } for pid=22346 comm="syz.5.9571" name="/" dev="loop5" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 396.513634][ T23] audit: type=1400 audit(1740312947.925:17458): avc: denied { append } for pid=22364 comm="syz.1.9578" name="001" dev="devtmpfs" ino=9453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 396.556436][T22349] F2FS-fs (loop5): Unrecognized mount option "data_err=ignore" or missing value [ 396.561740][ T23] audit: type=1400 audit(1740312947.925:17459): avc: denied { read write } for pid=358 comm="syz-executor" name="loop3" dev="devtmpfs" ino=9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.589947][ T23] audit: type=1400 audit(1740312947.925:17460): avc: denied { open } for pid=358 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.615711][ T23] audit: type=1400 audit(1740312947.925:17461): avc: denied { ioctl } for pid=358 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=9411 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.645001][ T23] audit: type=1400 audit(1740312947.981:17462): avc: denied { remount } for pid=22346 comm="syz.5.9571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 396.665891][ T23] audit: type=1400 audit(1740312948.009:17463): avc: denied { read } for pid=146 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 396.689675][ T23] audit: type=1400 audit(1740312948.009:17464): avc: denied { search } for pid=146 comm="syslogd" name="/" dev="tmpfs" ino=10830 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.747400][T22377] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 396.862749][T22388] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 397.035935][T22402] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 397.248533][T22414] F2FS-fs (loop3): invalid crc value [ 397.256459][T22414] F2FS-fs (loop3): Found nat_bits in checkpoint [ 397.264003][T22416] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 397.273090][T22416] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until (%ptR?) (0x7fffffff) [ 397.299739][T22414] F2FS-fs (loop3): recover fsync data on readonly fs [ 397.308021][T22416] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 3: comm syz.5.9597: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 397.316824][T22414] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 397.418436][T22414] F2FS-fs (loop3): Corrupted max_depth of 3: 1025 [ 397.425152][T22414] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 397.435541][T22414] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 397.694397][ T552] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 397.946356][T22439] F2FS-fs (loop3): invalid crc value [ 397.951592][ T552] usb 6-1: Using ep0 maxpacket: 32 [ 397.958072][T22439] F2FS-fs (loop3): Found nat_bits in checkpoint [ 397.981913][T22439] F2FS-fs (loop3): Start checkpoint disabled! [ 397.988841][T22439] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 398.039249][ T9] attempt to access beyond end of device [ 398.039249][ T9] loop3: rw=2049, want=40976, limit=40427 [ 398.079211][ T552] usb 6-1: config index 0 descriptor too short (expected 164, got 36) [ 398.087504][ T552] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.098231][ T552] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.107769][ T552] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 398.116616][ T552] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.125694][ T552] usb 6-1: config 0 descriptor?? [ 398.549594][ T5] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 398.583484][T22480] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 398.592762][T22480] ext4 filesystem being mounted at /1826/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until (%ptR?) (0x7fffffff) [ 398.631702][T22480] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.9625: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 398.658379][ T552] logitech 0003:046D:C29C.0016: unknown main item tag 0x0 [ 398.665344][ T552] logitech 0003:046D:C29C.0016: unknown main item tag 0x0 [ 398.672469][ T552] logitech 0003:046D:C29C.0016: unknown main item tag 0x0 [ 398.679665][ T552] logitech 0003:046D:C29C.0016: unknown main item tag 0x0 [ 398.686667][ T552] logitech 0003:046D:C29C.0016: unknown main item tag 0x0 [ 398.694940][ T552] logitech 0003:046D:C29C.0016: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 398.891749][ T552] logitech 0003:046D:C29C.0016: no inputs found [ 398.899821][ T552] usb 6-1: USB disconnect, device number 4 [ 398.977247][ T5] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 398.991911][ T5] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.001907][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 399.180467][ T5] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 399.189434][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.197257][ T5] usb 4-1: Product: syz [ 399.201202][ T5] usb 4-1: Manufacturer: syz [ 399.208196][ T5] usb 4-1: SerialNumber: syz [ 399.418482][T22492] FAT-fs (loop4): Directory bread(block 64) failed [ 399.425265][T22492] FAT-fs (loop4): Directory bread(block 65) failed [ 399.434225][T22492] FAT-fs (loop4): Directory bread(block 66) failed [ 399.441534][T22492] FAT-fs (loop4): Directory bread(block 67) failed [ 399.448048][T22492] FAT-fs (loop4): Directory bread(block 68) failed [ 399.454784][T22492] FAT-fs (loop4): Directory bread(block 69) failed [ 399.461458][T22492] FAT-fs (loop4): Directory bread(block 70) failed [ 399.467988][T22492] FAT-fs (loop4): Directory bread(block 71) failed [ 399.474575][T22492] FAT-fs (loop4): Directory bread(block 72) failed [ 399.480927][T22492] FAT-fs (loop4): Directory bread(block 73) failed [ 399.563998][ T5] usb 4-1: USB disconnect, device number 94 [ 399.577915][T22499] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,barrier,grpjquota=,norecovery,debug_want_extra_isize=0x0000000000000080,i_version,nodelalloc,journal_ioprio=0x0000000000000003,auto_da_alloc=0x0000000000800343,,errors=continue [ 399.608565][T22499] EXT4-fs error (device loop5): ext4_xattr_inode_iget:402: inode #11: comm syz.5.9632: missing EA_INODE flag [ 399.620560][T22499] EXT4-fs error (device loop5): ext4_xattr_inode_iget:407: comm syz.5.9632: error while reading EA inode 11 err=-117 [ 399.801042][T16934] udevd[16934]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 400.197133][T22541] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 400.205809][T22541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 400.214855][T22541] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2227: inode #15: comm syz.3.9650: corrupted in-inode xattr [ 400.227018][T22541] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.9650: couldn't read orphan inode 15 (err -117) [ 400.239179][T22541] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000002,,errors=continue [ 400.469916][T22560] xt_CT: You must specify a L4 protocol and not use inversions on it [ 400.641747][T22564] F2FS-fs (loop3): invalid crc value [ 400.649053][T22564] F2FS-fs (loop3): Found nat_bits in checkpoint [ 400.673153][T22564] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 400.680110][T22564] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 400.713657][ T358] attempt to access beyond end of device [ 400.713657][ T358] loop3: rw=2049, want=45104, limit=40427 [ 401.114256][T22593] binfmt_misc: register: failed to install interpreter file ./file0 [ 401.203694][T22595] EXT4-fs (loop3): 1 orphan inode deleted [ 401.209262][T22595] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 401.219586][T22595] ext4 filesystem being mounted at /1906/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 401.561050][ T23] kauditd_printk_skb: 199 callbacks suppressed [ 401.561061][ T23] audit: type=1400 audit(1740312952.658:17664): avc: denied { read } for pid=22617 comm="syz.5.9681" name="event0" dev="devtmpfs" ino=9549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 401.574974][ T552] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 401.590467][ T23] audit: type=1400 audit(1740312952.658:17665): avc: denied { read open } for pid=22617 comm="syz.5.9681" path="/dev/input/event0" dev="devtmpfs" ino=9549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 401.622319][ T23] audit: type=1400 audit(1740312952.668:17666): avc: denied { ioctl } for pid=22617 comm="syz.5.9681" path="/dev/input/event0" dev="devtmpfs" ino=9549 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 401.648387][ T23] audit: type=1400 audit(1740312952.696:17667): avc: denied { read write } for pid=21729 comm="syz-executor" name="loop5" dev="devtmpfs" ino=9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 401.672896][ T23] audit: type=1400 audit(1740312952.696:17668): avc: denied { open } for pid=21729 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 401.697836][ T23] audit: type=1400 audit(1740312952.696:17669): avc: denied { ioctl } for pid=21729 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=9413 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 401.723757][ T23] audit: type=1400 audit(1740312952.724:17670): avc: denied { ioctl } for pid=22600 comm="syz.3.9673" path="/dev/raw-gadget" dev="devtmpfs" ino=9547 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.833489][ T23] audit: type=1400 audit(1740312952.920:17671): avc: denied { mounton } for pid=22621 comm="syz.5.9683" path="/74/file0" dev="tmpfs" ino=223608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 401.857540][ T23] audit: type=1400 audit(1740312952.939:17672): avc: denied { mount } for pid=22621 comm="syz.5.9683" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 401.884996][ T552] usb 4-1: Using ep0 maxpacket: 16 [ 401.892636][ T23] audit: type=1400 audit(1740312952.967:17673): avc: denied { unmount } for pid=21729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 402.013353][ T552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 402.025487][ T552] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 402.040273][ T552] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 402.050064][ T552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.063990][ T552] usb 4-1: config 0 descriptor?? [ 402.143183][T22657] overlayfs: workdir and upperdir must be separate subtrees [ 402.249386][T22676] xt_hashlimit: max too large, truncated to 1048576 [ 402.486006][T22696] proc: Unknown parameter 'c' [ 402.580979][ T552] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0x0 [ 402.588043][ T552] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0x0 [ 402.594999][ T552] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0x0 [ 402.603371][ T552] kovaplus 0003:1E7D:2D50.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 402.815153][ T552] kovaplus 0003:1E7D:2D50.0017: couldn't init struct kovaplus_device [ 402.823124][ T552] kovaplus 0003:1E7D:2D50.0017: couldn't install mouse [ 402.831359][ T552] kovaplus: probe of 0003:1E7D:2D50.0017 failed with error -71 [ 402.842273][ T552] usb 4-1: USB disconnect, device number 95 [ 402.877183][T22734] netlink: 'syz.5.9732': attribute type 61 has an invalid length. [ 403.166359][T22732] F2FS-fs (loop4): invalid crc value [ 403.195032][T22732] F2FS-fs (loop4): Start checkpoint disabled! [ 403.201637][T22732] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 403.253836][T22744] F2FS-fs (loop5): fault_injection options not supported [ 403.264160][T22744] F2FS-fs (loop5): fault_type options not supported [ 403.273749][T22744] F2FS-fs (loop5): invalid crc value [ 403.283805][T22744] F2FS-fs (loop5): Found nat_bits in checkpoint [ 403.299311][ T103] attempt to access beyond end of device [ 403.299311][ T103] loop4: rw=2049, want=45104, limit=40427 [ 403.329374][T22744] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 403.846580][T22773] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 403.863308][T22773] ext4 filesystem being mounted at /116/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 403.904765][T22773] EXT4-fs error (device loop5): ext4_empty_dir:3039: inode #12: comm syz.5.9739: invalid size [ 404.152780][T22769] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(9728) blocks(1024) [ 404.169246][T22769] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 404.195618][T22769] F2FS-fs (loop3): invalid crc value [ 404.218563][T22769] F2FS-fs (loop3): Found nat_bits in checkpoint [ 404.276798][T22769] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 404.283990][T22769] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 404.337884][T22814] usb usb8: usbfs: process 22814 (syz.5.9764) did not claim interface 6 before use [ 404.665069][T22823] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(3) root(3) [ 404.672543][T22823] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 404.701279][T22823] F2FS-fs (loop4): invalid crc value [ 404.745550][T22823] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 404.752534][T22823] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 405.241904][ T74] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 405.626815][ T74] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.637831][ T74] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.647386][ T74] usb 6-1: config 0 interface 0 has no altsetting 0 [ 405.653862][ T74] usb 6-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 405.662680][ T74] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.671684][ T74] usb 6-1: config 0 descriptor?? [ 405.791622][T22937] F2FS-fs (loop4): fault_injection options not supported [ 405.798779][T22937] F2FS-fs (loop4): fault_type options not supported [ 405.806987][T22937] F2FS-fs (loop4): invalid crc value [ 405.814010][T22937] F2FS-fs (loop4): Found nat_bits in checkpoint [ 405.852840][T22961] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 405.880375][T22961] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 405.885399][T22937] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 405.930061][T22961] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2227: inode #15: comm syz.3.9828: corrupted in-inode xattr [ 405.942850][T22961] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.9828: couldn't read orphan inode 15 (err -117) [ 405.955128][T22961] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000002,,errors=continue [ 405.995821][ T358] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 406.016037][ T358] EXT4-fs error (device loop3): ext4_empty_dir:3080: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 406.037223][ T358] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 406.057506][ T358] EXT4-fs error (device loop3): ext4_empty_dir:3080: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 406.077024][ T358] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 406.098325][ T358] EXT4-fs error (device loop3): ext4_empty_dir:3080: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 406.117636][ T358] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 406.137576][ T358] EXT4-fs error (device loop3): ext4_empty_dir:3080: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 406.156993][ T358] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 406.177280][ T358] EXT4-fs error (device loop3): ext4_empty_dir:3080: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 406.184104][ T74] zeroplus 0003:0C12:0005.0018: collection stack underflow [ 406.213906][ T74] zeroplus 0003:0C12:0005.0018: item 0 1 0 12 parsing failed [ 406.224997][ T74] zeroplus 0003:0C12:0005.0018: parse failed [ 406.246254][ T74] zeroplus: probe of 0003:0C12:0005.0018 failed with error -22 [ 406.268233][T22970] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(3) root(3) [ 406.279234][T22970] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 406.306144][T22970] F2FS-fs (loop0): invalid crc value [ 406.335024][T22970] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 406.341897][T22970] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 406.421065][ T74] usb 6-1: USB disconnect, device number 5 [ 406.444443][T22984] usb usb1: usbfs: process 22984 (syz.4.9837) did not claim interface 63 before use [ 406.664484][T23001] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.671401][T23001] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.679470][T23001] device bridge_slave_0 entered promiscuous mode [ 406.687786][T23001] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.694787][T23001] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.707056][T23001] device bridge_slave_1 entered promiscuous mode [ 406.821611][T23001] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.828634][T23001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.835859][T23001] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.842873][T23001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.871411][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 406.879404][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.886823][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.896814][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.905793][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.912841][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.932373][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.940605][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.947620][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.951965][ T23] kauditd_printk_skb: 303 callbacks suppressed [ 406.951975][ T23] audit: type=1400 audit(1740312957.700:17977): avc: denied { read write } for pid=23029 comm="syz.4.9857" name="raw-gadget" dev="devtmpfs" ino=9547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.986349][ T23] audit: type=1400 audit(1740312957.709:17978): avc: denied { open } for pid=23029 comm="syz.4.9857" path="/dev/raw-gadget" dev="devtmpfs" ino=9547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 407.012994][ T23] audit: type=1400 audit(1740312957.709:17979): avc: denied { ioctl } for pid=23029 comm="syz.4.9857" path="/dev/raw-gadget" dev="devtmpfs" ino=9547 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 407.038955][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 407.050879][ T23] audit: type=1400 audit(1740312957.737:17980): avc: denied { create } for pid=23033 comm="syz.5.9859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 407.059971][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 407.080014][ T23] audit: type=1400 audit(1740312957.737:17981): avc: denied { write } for pid=23033 comm="syz.5.9859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 407.110252][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 407.134426][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 407.147792][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 407.157652][ T377] device bridge_slave_1 left promiscuous mode [ 407.166810][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.169668][ T23] audit: type=1400 audit(1740312957.906:17982): avc: denied { audit_write } for pid=23042 comm="syz.5.9863" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 407.195364][ T23] audit: type=1107 audit(1740312957.906:17983): pid=23042 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Z 6$5G%w [ 407.195364][ T23] [ 407.195364][ T23] [ 407.195364][ T23] dav;AO1?p_ZʿM/R޴dx.P†M^z]^)A@?\e>hu_I;l̲ ǀqsz]ހ0gd]cJ[cd&@R VhƲ,.gQ'wojX"N OUޕUqa+|T6Nb;N)\; Q-4PGh*…Ñ.I{׹f:%ybER\Gߊ kC:F$c'͕+a#g78o'?\M~2~h?2|$A3泥zaSQ9LN򪜤i.ru4ӷT8Raf71y詶l[ D4~rHSBN (VYz 6/c<7kO+H~Ѭ,qlMhOq}`!^?nm'X'Y-!_1nk]Ur>1'!x0О1#3FO=}NqAD|7 6glA(w3>*!gΦgB# N)- [ 407.198782][ T377] device bridge_slave_0 left promiscuous mode [ 407.211829][ T23] audit: type=1400 audit(1740312957.943:17984): avc: denied { map_create } for pid=23044 comm="syz.5.9864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 407.282508][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.289054][ T23] audit: type=1400 audit(1740312958.018:17985): avc: denied { map_read map_write } for pid=23044 comm="syz.5.9864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 407.338712][ T23] audit: type=1400 audit(1740312958.037:17986): avc: denied { read } for pid=146 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 407.446291][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 407.459450][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 407.469160][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 407.762189][T23069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9873'. [ 407.837719][T23081] tipc: Enabling of bearer rejected, failed to enable media [ 407.883209][T23088] netlink: 700 bytes leftover after parsing attributes in process `syz.0.9882'. [ 407.916710][T23093] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9885'. [ 407.964997][T23101] syz.5.9889[23101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 407.965051][T23101] syz.5.9889[23101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.089624][T23117] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 408.118664][T23117] EXT4-fs error (device loop6): ext4_ext_precache:644: inode #2: comm syz.6.9896: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 408.230925][T23130] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9900'. [ 408.514977][T23149] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue [ 408.526684][T23149] ext4 filesystem being mounted at /17/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 409.218747][ T552] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 409.475332][ T552] usb 6-1: Using ep0 maxpacket: 8 [ 409.603742][ T552] usb 6-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 409.612729][ T552] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.628383][ T552] usb 6-1: config 0 descriptor?? [ 409.668426][ T552] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 409.903032][ T552] usb 6-1: Detected FT232BM [ 410.125633][T23183] F2FS-fs (loop6): Unrecognized mount option "" or missing value [ 410.138231][ T552] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 410.159718][ T552] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 410.177402][ T552] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 410.187240][ T552] usb 6-1: USB disconnect, device number 6 [ 410.194389][ T552] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 410.215070][ T552] ftdi_sio 6-1:0.0: device disconnected [ 410.272602][T23197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9929'. [ 410.345335][T23203] devpts: called with bogus options [ 410.621011][T23205] F2FS-fs (loop4): invalid crc value [ 410.634151][T23205] F2FS-fs (loop4): Found nat_bits in checkpoint [ 410.657768][T23205] F2FS-fs (loop4): Start checkpoint disabled! [ 410.667274][T23205] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 410.689133][T23228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9942'. [ 411.304501][T23261] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 411.320947][T23261] EXT4-fs (loop1): group descriptors corrupted! [ 411.668482][T23272] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 411.668819][T23276] tipc: Started in network mode [ 411.678558][T23272] ext4 filesystem being mounted at /1877/bus supports timestamps until (%ptR?) (0x7fffffff) [ 411.683101][T23276] tipc: Own node identity @, cluster identity 4711 [ 411.704129][T23276] tipc: Enabling of bearer rejected, failed to enable media [ 411.849787][T23298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9971'. [ 412.309154][ T23] kauditd_printk_skb: 236 callbacks suppressed [ 412.309167][ T23] audit: type=1400 audit(1740312962.715:18221): avc: denied { read write } for pid=23353 comm="syz.1.9999" name="raw-gadget" dev="devtmpfs" ino=9547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 412.364872][ T23] audit: type=1400 audit(1740312962.715:18222): avc: denied { open } for pid=23353 comm="syz.1.9999" path="/dev/raw-gadget" dev="devtmpfs" ino=9547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 412.415627][ T23] audit: type=1400 audit(1740312962.715:18223): avc: denied { ioctl } for pid=23353 comm="syz.1.9999" path="/dev/raw-gadget" dev="devtmpfs" ino=9547 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 412.441323][T23351] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 412.498451][T23351] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 412.513533][ T23] audit: type=1400 audit(1740312962.911:18224): avc: denied { create } for pid=23357 comm="syz.0.10000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 412.535500][T23351] EXT4-fs (loop4): 1 truncate cleaned up [ 412.540979][T23351] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,block_validity,quota,,errors=continue [ 412.543806][ T23] audit: type=1400 audit(1740312962.930:18225): avc: denied { setopt } for pid=23357 comm="syz.0.10000" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 412.580086][ T23] audit: type=1400 audit(1740312962.948:18226): avc: denied { connect } for pid=23357 comm="syz.0.10000" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 412.606455][T23347] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 412.614550][ T23] audit: type=1400 audit(1740312962.958:18227): avc: denied { mount } for pid=23350 comm="syz.4.9998" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 412.646662][T23347] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 412.663460][ T23] audit: type=1400 audit(1740312962.986:18228): avc: denied { mounton } for pid=23344 comm="syz.5.9995" path="/174/file0" dev="tmpfs" ino=229106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 412.688854][T23351] EXT4-fs error (device loop4): ext4_xattr_block_get:544: inode #15: comm syz.4.9998: corrupted xattr block 19 [ 412.702907][T23347] F2FS-fs (loop5): Found nat_bits in checkpoint [ 412.733858][T23351] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 412.742988][ T23] audit: type=1400 audit(1740312963.023:18229): avc: denied { read } for pid=146 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 412.766505][T23351] EXT4-fs error (device loop4): ext4_xattr_block_get:544: inode #15: comm syz.4.9998: corrupted xattr block 19 [ 412.767376][T23347] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 412.782398][ T23] audit: type=1400 audit(1740312963.023:18230): avc: denied { search } for pid=146 comm="syslogd" name="/" dev="tmpfs" ino=10830 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.787035][T23367] EXT4-fs error (device loop4): ext4_xattr_block_get:544: inode #15: comm syz.4.9998: corrupted xattr block 19 [ 412.820085][T23351] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 412.841614][T23351] EXT4-fs error (device loop4): ext4_xattr_block_get:544: inode #15: comm syz.4.9998: corrupted xattr block 19 [ 412.854055][T23351] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 412.856749][T23367] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 412.874867][T23347] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 412.885632][T23347] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 412.897494][T23288] F2FS-fs (loop6): Invalid segment/section count (31, 24 x 150994945) [ 412.914486][T23288] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 412.937121][T23288] F2FS-fs (loop6): invalid crc value [ 412.967596][T23288] F2FS-fs (loop6): Found nat_bits in checkpoint [ 413.046036][T23288] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 413.086719][T23288] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 413.093886][T23288] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 413.147862][T23374] F2FS-fs (loop0): invalid crc value [ 413.169291][T23374] F2FS-fs (loop0): Found nat_bits in checkpoint [ 413.220178][T23374] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 413.282593][ T356] attempt to access beyond end of device [ 413.282593][ T356] loop0: rw=2049, want=45104, limit=40427 [ 413.749731][ T5] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 413.758985][ T5] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 413.785223][T23412] tipc: Enabling of bearer rejected, failed to enable media [ 414.096778][T23400] F2FS-fs (loop6): Test dummy encryption mode enabled [ 414.111266][T23400] F2FS-fs (loop6): invalid crc value [ 414.123362][T23400] F2FS-fs (loop6): Found nat_bits in checkpoint [ 414.149120][T23400] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 414.653548][T23454] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 414.679615][T23454] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 414.709041][T23454] F2FS-fs (loop5): invalid crc value [ 414.747962][T23454] F2FS-fs (loop5): Found nat_bits in checkpoint [ 414.794313][T23454] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 414.801630][T23454] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 414.837955][T23488] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 414.876538][ T103] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 414.885367][ T103] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 415.034919][T23502] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 415.084502][T23502] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,inode_readahead_blks=0x0000000000010000,delalloc,,errors=continue [ 415.104001][T23502] ext4 filesystem being mounted at /1912/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 415.260005][T23526] netlink: 312 bytes leftover after parsing attributes in process `syz.0.10064'. [ 415.270790][T23516] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 415.309869][T23516] ext4 filesystem being mounted at /53/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 415.477205][T23546] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 415.534111][T23560] netlink: 312 bytes leftover after parsing attributes in process `syz.5.10078'. [ 415.644859][T23568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10083'. [ 415.774003][T23585] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 415.838112][T23581] EXT4-fs (loop1): Test dummy encryption mode enabled [ 415.851933][T23581] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 415.985955][ T1770] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 416.010512][T23597] netlink: 312 bytes leftover after parsing attributes in process `syz.6.10093'. [ 416.120426][T23611] incfs_lookup_dentry err:-13 [ 416.134946][T23607] EXT4-fs (loop6): Test dummy encryption mode enabled [ 416.140307][T23611] incfs: Can't find or create .index dir in ./bus [ 416.148675][T23611] incfs: mount failed -13 [ 416.155052][T23607] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,delalloc,journal_ioprio=0x0000000000000007,test_dummy_encryption,nodiscard,nodelalloc,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 416.237188][T23607] EXT4-fs warning (device loop6): ext4_resize_fs:1981: can't read last block, resize aborted [ 416.261482][T23619] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 416.370869][ T1770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.385538][ T1770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.395669][ T1770] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 416.404696][ T1770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.420358][ T1770] usb 6-1: config 0 descriptor?? [ 416.581781][T23629] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 416.585197][T23634] EXT4-fs (loop4): Test dummy encryption mode enabled [ 416.608634][T23629] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,usrjquota=,errors=remount-ro,norecovery,bsddf,nomblk_io_submit,grpquota,barrier=0xfffffffffffffffe,user_xattr,jqfmt=vfsold, [ 416.609561][T23634] EXT4-fs (loop4): 1 orphan inode deleted [ 416.633378][T23634] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,test_dummy_encryption=v1,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,errors=continue, [ 416.653923][T23634] ext4 filesystem being mounted at /2163/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 416.670121][T23621] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 416.691735][T23621] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 416.727922][T23621] F2FS-fs (loop0): Found nat_bits in checkpoint [ 416.824664][T23621] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 416.831789][T23621] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 416.930368][ T1770] playstation 0003:054C:0DF2.001A: unknown main item tag 0x0 [ 416.949196][ T1770] playstation 0003:054C:0DF2.001A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 417.094175][T23621] attempt to access beyond end of device [ 417.094175][T23621] loop0: rw=2049, want=81920, limit=40427 [ 417.126318][T23621] attempt to access beyond end of device [ 417.126318][T23621] loop0: rw=2049, want=53248, limit=40427 [ 417.151253][ T1770] playstation 0003:054C:0DF2.001A: Failed to retrieve feature with reportID 9: -71 [ 417.181914][ T1770] playstation 0003:054C:0DF2.001A: Failed to retrieve DualSense pairing info: -71 [ 417.191272][ T1770] playstation 0003:054C:0DF2.001A: Failed to get MAC address from DualSense [ 417.210829][ T1770] playstation 0003:054C:0DF2.001A: Failed to create dualsense. [ 417.215317][ T5] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 417.227200][ T1770] playstation: probe of 0003:054C:0DF2.001A failed with error -71 [ 417.247226][ T1770] usb 6-1: USB disconnect, device number 7 [ 417.316945][T23621] attempt to access beyond end of device [ 417.316945][T23621] loop0: rw=2049, want=77824, limit=40427 [ 417.345386][T23621] attempt to access beyond end of device [ 417.345386][T23621] loop0: rw=2049, want=85880, limit=40427 [ 417.365459][ T356] attempt to access beyond end of device [ 417.365459][ T356] loop0: rw=2049, want=40968, limit=40427 [ 417.493291][ T5] usb 7-1: Using ep0 maxpacket: 16 [ 417.621683][ T5] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.642018][ T5] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.663476][ T5] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.696462][ T5] usb 7-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 417.716904][ T5] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.725304][ T23] kauditd_printk_skb: 307 callbacks suppressed [ 417.725313][ T23] audit: type=1400 audit(1740312967.782:18538): avc: denied { unmount } for pid=354 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 417.732661][ T5] usb 7-1: config 0 descriptor?? [ 417.782292][ T23] audit: type=1400 audit(1740312967.838:18539): avc: denied { ioctl } for pid=23672 comm="syz.6.10123" path="/dev/raw-gadget" dev="devtmpfs" ino=9547 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 417.864247][ T23] audit: type=1400 audit(1740312967.903:18540): avc: denied { create } for pid=23687 comm="syz.1.10130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 417.919499][ T23] audit: type=1400 audit(1740312967.932:18541): avc: denied { write } for pid=23687 comm="syz.1.10130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 417.974425][ T23] audit: type=1400 audit(1740312967.932:18542): avc: denied { read } for pid=23687 comm="syz.1.10130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 418.031325][ T23] audit: type=1400 audit(1740312967.941:18543): avc: denied { read write } for pid=21729 comm="syz-executor" name="loop5" dev="devtmpfs" ino=9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 418.082321][ T23] audit: type=1400 audit(1740312967.941:18544): avc: denied { open } for pid=21729 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 418.145463][ T5] usbhid 7-1:0.0: can't add hid device: -71 [ 418.151472][ T5] usbhid: probe of 7-1:0.0 failed with error -71 [ 418.172269][ T23] audit: type=1400 audit(1740312967.941:18545): avc: denied { ioctl } for pid=21729 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=9413 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 418.204567][ T5] usb 7-1: USB disconnect, device number 2 [ 418.218699][ T23] audit: type=1400 audit(1740312967.969:18546): avc: denied { create } for pid=23691 comm="syz.5.10132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 418.254863][T23708] EXT4-fs (loop0): 1 orphan inode deleted [ 418.260454][T23708] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 418.295477][T23708] ext4 filesystem being mounted at /1937/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 418.316710][ T23] audit: type=1400 audit(1740312967.978:18547): avc: denied { setopt } for pid=23691 comm="syz.5.10132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 418.932279][T23751] FAT-fs (loop5): Directory bread(block 64) failed [ 418.946757][T23751] FAT-fs (loop5): Directory bread(block 65) failed [ 418.961070][T23751] FAT-fs (loop5): Directory bread(block 66) failed [ 418.967480][T23751] FAT-fs (loop5): Directory bread(block 67) failed [ 418.983264][T23751] FAT-fs (loop5): Directory bread(block 68) failed [ 418.995232][T23751] FAT-fs (loop5): Directory bread(block 69) failed [ 419.010693][T23751] FAT-fs (loop5): Directory bread(block 70) failed [ 419.018638][T23751] FAT-fs (loop5): Directory bread(block 71) failed [ 419.025387][T23751] FAT-fs (loop5): Directory bread(block 72) failed [ 419.032204][T23751] FAT-fs (loop5): Directory bread(block 73) failed [ 419.198276][T23775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10168'. [ 419.221914][T23777] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 419.265139][T23777] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 419.275735][T23777] ext2 filesystem being mounted at /1922/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 419.426361][T23797] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10178'. [ 419.546123][T23810] fuse: blksize only supported for fuseblk [ 419.601083][T23806] EXT4-fs (loop1): Ignoring removed orlov option [ 419.607554][T23806] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 419.648682][T23806] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable,orlov,nomblk_io_submit,,errors=continue [ 419.734854][T23820] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 420.513334][T23857] F2FS-fs (loop5): Found nat_bits in checkpoint [ 420.602706][T23857] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 420.699050][T23879] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 420.739505][T23879] incfs: Can't find or create .index dir in ./file0/../file0 [ 420.753801][T23879] incfs: mount failed -30 [ 420.811196][T23855] F2FS-fs (loop6): Invalid log_blocksize (32), supports only 12 [ 420.819067][T23855] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 420.831329][T23855] F2FS-fs (loop6): Found nat_bits in checkpoint [ 420.865433][T23855] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 420.872720][T23855] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 420.952040][T23891] tipc: Enabled bearer , priority 10 [ 421.566422][ T5] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 421.741733][T23907] F2FS-fs (loop1): invalid crc value [ 421.769589][ T13] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 421.778578][T23907] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 421.822964][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 421.951333][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.026423][ T13] usb 7-1: Using ep0 maxpacket: 16 [ 422.037176][ T5] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 422.046088][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 422.054431][ T5] usb 6-1: SerialNumber: syz [ 422.065696][ T5] usb 6-1: config 0 descriptor?? [ 422.114745][ T5] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 422.143696][ T5] tipc: 32-bit node address hash set to 20000e0 [ 422.154623][ T13] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 422.167649][ T13] usb 7-1: config 0 interface 0 has no altsetting 0 [ 422.174143][ T13] usb 7-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 422.183021][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.191863][ T13] usb 7-1: config 0 descriptor?? [ 422.329979][ T1770] usb 6-1: USB disconnect, device number 8 [ 422.394170][T23961] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 422.402467][T23961] EXT4-fs (loop4): invalid journal inode [ 422.408053][T23961] EXT4-fs (loop4): can't get journal size [ 422.415212][T23961] EXT4-fs (loop4): 1 truncate cleaned up [ 422.420680][T23961] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 422.690403][ T13] zydacron 0003:13EC:0006.001B: unknown main item tag 0x1 [ 422.697610][ T13] zydacron 0003:13EC:0006.001B: item fetching failed at offset 1/3 [ 422.706094][ T13] zydacron 0003:13EC:0006.001B: parse failed [ 422.712299][ T13] zydacron: probe of 0003:13EC:0006.001B failed with error -22 [ 422.916442][ T13] usb 7-1: USB disconnect, device number 3 [ 422.949902][T23969] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,nombcache,user_xattr,norecovery,bsddf,,errors=continue [ 422.962846][T23969] ext4 filesystem being mounted at /219/file2 supports timestamps until (%ptR?) (0x7fffffff) [ 422.982409][T23969] EXT4-fs error (device loop5): ext4_xattr_block_get:544: inode #15: comm syz.5.10249: corrupted xattr block 32 [ 422.994399][T23969] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 423.008387][T21729] ------------[ cut here ]------------ [ 423.013742][T21729] kernel BUG at fs/namei.c:2894! [ 423.018746][T21729] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 423.024705][T21729] CPU: 0 PID: 21729 Comm: syz-executor Tainted: G W 5.4.289-syzkaller-00011-g39762b7a60e9 #0 [ 423.035979][T21729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 423.046085][T21729] RIP: 0010:may_delete+0x750/0x760 [ 423.051127][T21729] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e8 fd ff ff 4c 89 e7 e8 41 0d f6 ff e9 db fd ff ff e8 17 23 c6 ff 0f 0b e8 10 23 c6 ff <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 56 53 48 89 fb [ 423.070563][T21729] RSP: 0018:ffff8881c6b1fc28 EFLAGS: 00010293 [ 423.076629][T21729] RAX: ffffffff819e2760 RBX: ffff8881dcb68788 RCX: ffff8881e4420000 [ 423.084449][T21729] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 423.092261][T21729] RBP: ffff8881dca47ad0 R08: ffffffff819e2088 R09: 0000000000000003 [ 423.100069][T21729] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881dcb68770 [ 423.107888][T21729] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8881cc83c100 [ 423.115707][T21729] FS: 00005555809ac500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 423.124455][T21729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.130877][T21729] CR2: 0000001b30b14ff8 CR3: 00000001ea0ad000 CR4: 00000000003406b0 [ 423.138694][T21729] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 423.146508][T21729] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 423.154312][T21729] Call Trace: [ 423.157469][T21729] ? __die+0xb4/0x100 [ 423.161288][T21729] ? die+0x26/0x50 [ 423.164827][T21729] ? do_trap+0x1e7/0x340 [ 423.168911][T21729] ? may_delete+0x750/0x760 [ 423.173240][T21729] ? may_delete+0x750/0x760 [ 423.177593][T21729] ? do_invalid_op+0xfb/0x110 [ 423.182091][T21729] ? may_delete+0x750/0x760 [ 423.186436][T21729] ? invalid_op+0x1e/0x30 [ 423.190600][T21729] ? may_delete+0x78/0x760 [ 423.194852][T21729] ? may_delete+0x750/0x760 [ 423.199191][T21729] ? may_delete+0x750/0x760 [ 423.203530][T21729] ? may_delete+0x750/0x760 [ 423.207878][T21729] vfs_rmdir+0x29/0x3c0 [ 423.211869][T21729] incfs_kill_sb+0x105/0x200 [ 423.216298][T21729] deactivate_locked_super+0xa8/0x110 [ 423.221503][T21729] deactivate_super+0x1e2/0x2a0 [ 423.226211][T21729] ? vfs_submount+0xb0/0xb0 [ 423.230570][T21729] ? deactivate_locked_super+0x110/0x110 [ 423.236003][T21729] ? fast_dput+0x7a/0x280 [ 423.240162][T21729] cleanup_mnt+0x44e/0x500 [ 423.244422][T21729] task_work_run+0x140/0x170 [ 423.248843][T21729] exit_to_usermode_loop+0x190/0x1a0 [ 423.253965][T21729] prepare_exit_to_usermode+0x199/0x200 [ 423.259353][T21729] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 423.265101][T21729] RIP: 0033:0x7f60fd452117 [ 423.269339][T21729] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 423.288859][T21729] RSP: 002b:00007ffe532bc738 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 423.297284][T21729] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f60fd452117 [ 423.305180][T21729] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe532bc7f0 [ 423.312986][T21729] RBP: 00007ffe532bc7f0 R08: 0000000000000000 R09: 0000000000000000 [ 423.320884][T21729] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe532bd8e0 [ 423.328699][T21729] R13: 00007f60fd4d208c R14: 00000000000625ae R15: 00007ffe532be9b0 [ 423.336541][T21729] Modules linked in: [ 423.340632][T21729] ---[ end trace 2d9762893b317721 ]--- [ 423.343180][ T23] kauditd_printk_skb: 261 callbacks suppressed [ 423.343189][ T23] audit: type=1400 audit(1740312973.039:18809): avc: denied { read } for pid=146 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 423.345851][T21729] RIP: 0010:may_delete+0x750/0x760 [ 423.354467][ T23] audit: type=1400 audit(1740312973.039:18810): avc: denied { search } for pid=146 comm="syslogd" name="/" dev="tmpfs" ino=10830 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.373871][T21729] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e8 fd ff ff 4c 89 e7 e8 41 0d f6 ff e9 db fd ff ff e8 17 23 c6 ff 0f 0b e8 10 23 c6 ff <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 56 53 48 89 fb [ 423.373877][T21729] RSP: 0018:ffff8881c6b1fc28 EFLAGS: 00010293 [ 423.373887][T21729] RAX: ffffffff819e2760 RBX: ffff8881dcb68788 RCX: ffff8881e4420000 [ 423.373894][T21729] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 423.373900][T21729] RBP: ffff8881dca47ad0 R08: ffffffff819e2088 R09: 0000000000000003 [ 423.373908][T21729] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881dcb68770 [ 423.373915][T21729] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8881cc83c100 [ 423.373924][T21729] FS: 00005555809ac500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 423.373930][T21729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.373937][T21729] CR2: 0000001b30b14ff8 CR3: 00000001ea0ad000 CR4: 00000000003406b0 [ 423.373949][T21729] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 423.400221][ T23] audit: type=1400 audit(1740312973.039:18811): avc: denied { append } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=211562 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 423.401225][T21729] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 423.421109][ T23] audit: type=1400 audit(1740312973.039:18812): avc: denied { open } for pid=146 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=211562 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 423.427067][T21729] Kernel panic - not syncing: Fatal exception [ 423.427349][T21729] Kernel Offset: disabled [ 423.560984][T21729] Rebooting in 86400 seconds..