last executing test programs: 8m43.809316564s ago: executing program 32 (id=11162): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0xf, 0x3, 0x2) write(r0, &(0x7f0000a97ff0)="02", 0x1) 8m34.08404219s ago: executing program 33 (id=11036): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) setgid(0x0) 8m10.481109008s ago: executing program 34 (id=12093): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0x46, 0x5865c4db1fe74f7e}}, 0x1c}}, 0x4000000) 6m45.198635523s ago: executing program 35 (id=14209): timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000040)) 6m0.293857853s ago: executing program 36 (id=15486): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(r0, 0x0, 0x0, 0x9) 4m6.111634882s ago: executing program 37 (id=18707): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x40010) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000180)={0x1, 0x0, {0x31, 0xf, 0x11, 0xc, 0x3, 0xa, 0x5, 0xbd, 0xffffffffffffffff}}) 3m46.305153158s ago: executing program 38 (id=18809): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x56, 0xfffff02c}, {0x6, 0x1, 0x8, 0x81}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 3m29.994749076s ago: executing program 39 (id=18880): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040), 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x84042, 0x1af) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000300)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001, 0x3, 0xdc}) 2m35.089573372s ago: executing program 9 (id=20374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x4, 0x4, 0x7ff}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r0, 0x0, 0x100000000000000}, 0x38) 2m34.847087903s ago: executing program 9 (id=20392): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000b00)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYBLOB="fd5a30494a98e2fd594c7f5575b44a6b9875a6deb8a9ed63e149fdc3a5e345922596d46c4a2b3978044b864f941e1137ce034002852c9ef5606de83cf95a02ef4bacef1188250b8a73609da88d66c4224c3ea46f117012f2aab4bca171e710172b4c22e4d51e27059feb304bb3e260a2", @ANYRESOCT], 0x1, 0x128f, &(0x7f0000001600)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000c00)=""/173, 0xad) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2m34.632615221s ago: executing program 9 (id=20386): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m34.526943456s ago: executing program 9 (id=20390): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xc0800, 0x80) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mknod$loop(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 2m34.493860077s ago: executing program 9 (id=20393): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r2}) 2m18.694861573s ago: executing program 40 (id=20380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, 0x0) 2m18.189230334s ago: executing program 41 (id=20393): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r2}) 1m41.994310631s ago: executing program 0 (id=21474): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) 1m41.909159484s ago: executing program 0 (id=21475): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69) close(r0) execve(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) 1m41.862210517s ago: executing program 0 (id=21477): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x51d, &(0x7f00000019c0)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea8a1d91bec8d4b5a6d80b8785d9600010000000000000094d75396dccd0ff600000000a81b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x1]}}) 1m41.622785977s ago: executing program 0 (id=21480): r0 = memfd_create(&(0x7f0000000280)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="4904d300eb5c808dbd1e2a489d84f72e37c4375142e20ae41780908207e1b5c48f2c596e830faa6445b2d312f3931135a6bb2834dd688a08ab", 0xffffffc4}, {&(0x7f0000000000)="14808beb87549413f813e5100000007a6b009e4444b460e95e5a2c52d917d5eee25b9d80612b2b9499adb96bc276754ef2314b423c6028a970d19ef3ff9d878841fbd7a5b704cdbf521408000000000000005b659ad72c8aa9d5149648457e9f51f5662d37a71248190a0bceaaea1064bb78ecd043", 0x75}], 0x2) 1m41.503346352s ago: executing program 0 (id=21482): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfc, 0x19c, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x31) syz_genetlink_get_family_id$nl80211(0x0, r0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1m25.245891897s ago: executing program 42 (id=21482): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfc, 0x19c, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x31) syz_genetlink_get_family_id$nl80211(0x0, r0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1m2.194456042s ago: executing program 6 (id=22272): setresuid(0x0, 0xee00, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/156, 0x9c}], 0x1, &(0x7f0000000580)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x0) 1m2.060193168s ago: executing program 6 (id=22274): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b00, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) 1m1.114528298s ago: executing program 6 (id=22287): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1m1.008984383s ago: executing program 6 (id=22292): syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f00000001c0)={[{@nolazytime}, {@fault_injection={'fault_injection', 0x3d, 0x4e6}}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@grpjquota}, {@noflush_merge}, {@nocheckpoint_merge}, {@acl}, {@gc_merge}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@background_gc_off}, {@checkpoint_diasble}]}, 0x4, 0x550c, &(0x7f00000089c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20080, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000100)) 59.90132706s ago: executing program 6 (id=22321): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) 59.581217034s ago: executing program 6 (id=22330): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 43.066098949s ago: executing program 43 (id=22330): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 14.765222659s ago: executing program 4 (id=23054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)) 14.633553565s ago: executing program 4 (id=23056): ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@loopback, @dev={0xfe, 0x80, '\x00', 0x17}, @private2, 0x8, 0x439, 0x3f, 0x100, 0x2, 0x440200}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 14.538544539s ago: executing program 4 (id=23059): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x2000c058) 14.472618292s ago: executing program 4 (id=23063): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5515, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 14.004483582s ago: executing program 4 (id=23065): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c001080080002400000000708000140000046e2080003"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 13.553178481s ago: executing program 4 (id=23075): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x90, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x28, 0x41, 0x4, 0x6}, {0x2d, 0x0, 0x81, 0x4}, {0xc, 0x90, 0x2, 0x5}, {0xe54, 0x6a, 0x1, 0xfffffff7}, {0xff01, 0x3, 0x81, 0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 13.428744076s ago: executing program 44 (id=23075): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x90, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x28, 0x41, 0x4, 0x6}, {0x2d, 0x0, 0x81, 0x4}, {0xc, 0x90, 0x2, 0x5}, {0xe54, 0x6a, 0x1, 0xfffffff7}, {0xff01, 0x3, 0x81, 0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 11.959264299s ago: executing program 2 (id=23107): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 11.879584962s ago: executing program 2 (id=23110): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 11.68962125s ago: executing program 2 (id=23114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c001080080002400000000708000140000046e2080003"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 11.46490427s ago: executing program 2 (id=23125): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) open$dir(&(0x7f0000000000)='./file0/file2\x00', 0x2, 0xa1) 11.143982254s ago: executing program 2 (id=23121): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 10.803871768s ago: executing program 1 (id=23130): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 9.850758619s ago: executing program 1 (id=23152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)='\b', 0x1, 0x40000, &(0x7f0000000200)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 9.757453763s ago: executing program 1 (id=23155): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='./file0\x00') lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8) 9.641104328s ago: executing program 1 (id=23158): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) open$dir(&(0x7f0000000000)='./file0/file2\x00', 0x2, 0xa1) 9.533698913s ago: executing program 2 (id=23162): r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, 0x0) read(r0, &(0x7f0000000100)=""/162, 0xa2) 9.443252537s ago: executing program 45 (id=23162): r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, 0x0) read(r0, &(0x7f0000000100)=""/162, 0xa2) 9.230236166s ago: executing program 1 (id=23169): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlink(&(0x7f0000001500)='./file1\x00', &(0x7f00000014c0)='./file0\x00') 9.093195201s ago: executing program 3 (id=23172): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x7, 0x2, {0xf, "0000000f0f000000000100000e00"}}}]}, 0x48}}, 0x0) 8.951827657s ago: executing program 3 (id=23183): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000105, 0x0, 0x100000001}]}) 8.741250587s ago: executing program 3 (id=23178): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) 8.738987947s ago: executing program 3 (id=23179): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) open$dir(&(0x7f0000000000)='./file0/file2\x00', 0x2, 0xa1) 8.296518655s ago: executing program 3 (id=23188): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x125d, &(0x7f0000001080)) 7.113084556s ago: executing program 1 (id=23197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000002780)) 6.963420043s ago: executing program 46 (id=23197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000002780)) 6.721341423s ago: executing program 3 (id=23206): syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x38, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x6, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) utime(0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x84, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0) 6.582356879s ago: executing program 47 (id=23206): syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x38, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x6, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) utime(0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x84, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0) 1.249098207s ago: executing program 9 (id=23199): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x0, r1}) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) 1.062096135s ago: executing program 0 (id=23207): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 600.686124ms ago: executing program 8 (id=23313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd24, 0x0, {0x2, 0x20, 0x14, 0x0, 0xff, 0x0, 0xfd, 0x7, 0x200}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_SRC={0x8, 0x2, @local}]}, 0x34}}, 0xea5bc50b6199d7fe) 538.873127ms ago: executing program 8 (id=23314): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) 485.63034ms ago: executing program 5 (id=23315): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x100, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1347, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x10001, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x100, 0x0, 0x8a, 0x2f000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x4, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x4, 0x8000009, 0x934a, {0x10, 0x0, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 462.002551ms ago: executing program 8 (id=23316): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x1, 0x1ce, &(0x7f0000000800)="$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") listxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) listxattr(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)=""/21, 0x15) syz_clone(0x40848080, 0x0, 0x0, 0x0, 0x0, 0x0) 417.260682ms ago: executing program 7 (id=23317): unshare(0x60400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) close(0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 374.111244ms ago: executing program 7 (id=23318): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @empty, 0x40000000}, 0x1c) 335.101066ms ago: executing program 7 (id=23319): openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0xb0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="28000000120001000000000000000000100000000c00000000000000000000000800"], 0x28}], 0x1}, 0x0) 261.525539ms ago: executing program 7 (id=23320): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x5, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x401}, {0x4, 0xfff, 0x4, 0x0, 0x8, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 261.194169ms ago: executing program 5 (id=23321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xfffffffe}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffb}]}}]}, 0x40}}, 0x20004010) 214.365431ms ago: executing program 7 (id=23322): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0xffffffffffffffff, 0x0) 213.962551ms ago: executing program 5 (id=23323): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x10) fallocate(r0, 0x10, 0x6, 0x10001) 213.420921ms ago: executing program 8 (id=23324): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 160.392124ms ago: executing program 7 (id=23325): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x6, 0x6f, 0x2, 0x0, 0x10, "88bd91aa28528000000000007500000400"}) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 160.187933ms ago: executing program 5 (id=23326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000140)=0x2) write$tun(r0, &(0x7f0000000040)=ANY=[], 0x1043) 88.334866ms ago: executing program 8 (id=23327): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 42.544438ms ago: executing program 5 (id=23328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) 29.205899ms ago: executing program 8 (id=23329): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) unshare(0x60600) r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x2f4, 0xfffff, 0x0, 0x0) 0s ago: executing program 5 (id=23330): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a80000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4254030028000100280012800b00010065727370616e00001800028004001200080015001a4901000500160001000000140003006e696376663000000000000000000000050010000300000005002700050000003c001a"], 0xa8}, 0x1, 0x0, 0x0, 0x200008c1}, 0x810) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 6][T14246] ext4 filesystem being mounted at /487/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.921457][T14248] FAT-fs (loop0): Directory bread(block 38) failed [ 753.928462][T14248] FAT-fs (loop0): Directory bread(block 39) failed [ 753.988660][ T19] usb 5-1: USB disconnect, device number 24 [ 753.999936][T14248] FAT-fs (loop0): Directory bread(block 40) failed [ 754.014324][T14248] FAT-fs (loop0): Directory bread(block 41) failed [ 754.028373][ T8911] EXT4-fs (loop1): unmounting filesystem. [ 754.040022][T14258] loop3: detected capacity change from 0 to 128 [ 754.079688][T14258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 754.116484][T14258] ext4 filesystem being mounted at /635/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 754.175529][ T28] kauditd_printk_skb: 544 callbacks suppressed [ 754.175547][ T28] audit: type=1400 audit(2000001166.572:88754): avc: denied { unmount } for pid=8170 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 754.180075][ T8170] EXT4-fs (loop3): unmounting filesystem. [ 754.211624][ T28] audit: type=1400 audit(2000001166.599:88755): avc: denied { read write } for pid=8170 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 754.255744][ T3745] Bluetooth: hci0: command 0x1003 tx timeout [ 754.255786][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 754.283302][ T28] audit: type=1400 audit(2000001166.627:88756): avc: denied { read write } for pid=14203 comm="syz.4.21462" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 754.317496][ T28] audit: type=1400 audit(2000001166.627:88757): avc: denied { read write open } for pid=14203 comm="syz.4.21462" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 754.342303][ T28] audit: type=1400 audit(2000001166.627:88758): avc: denied { ioctl } for pid=14203 comm="syz.4.21462" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 754.368638][ T28] audit: type=1400 audit(2000001166.627:88759): avc: denied { create } for pid=14247 comm="syz.0.21482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 754.390004][ T28] audit: type=1400 audit(2000001166.636:88760): avc: denied { ioctl } for pid=14203 comm="syz.4.21462" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 754.421084][ T28] audit: type=1400 audit(2000001166.636:88761): avc: denied { read write open } for pid=8170 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 754.449423][ T28] audit: type=1400 audit(2000001166.636:88762): avc: denied { ioctl } for pid=8170 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 754.482812][ T28] audit: type=1400 audit(2000001166.655:88763): avc: denied { read write } for pid=12326 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 754.689174][ T59] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 754.894812][ T59] usb 4-1: Using ep0 maxpacket: 16 [ 754.903160][ T59] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 754.941820][ T59] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 754.962710][T14300] loop1: detected capacity change from 0 to 128 [ 754.979917][ T59] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.002071][ T59] usb 4-1: Product: syz [ 755.033807][ T59] usb 4-1: Manufacturer: syz [ 755.045577][ T59] usb 4-1: SerialNumber: syz [ 755.076377][ T59] usb 4-1: config 0 descriptor?? [ 755.092076][ T59] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 755.123191][T14303] loop4: detected capacity change from 0 to 8192 [ 755.135468][ T59] usb 4-1: Detected FT232R [ 755.242819][T14309] loop1: detected capacity change from 0 to 128 [ 755.289951][T14309] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 755.313689][ T59] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 755.334383][T14309] ext4 filesystem being mounted at /500/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 755.433503][T14309] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 755.518011][ T8911] EXT4-fs (loop1): unmounting filesystem. [ 755.549764][ T59] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 755.580352][T14321] loop1: detected capacity change from 0 to 512 [ 755.621013][T14321] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 755.648290][T14321] EXT4-fs (loop1): 1 truncate cleaned up [ 755.664235][T14321] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 755.776054][ T19] usb 4-1: USB disconnect, device number 97 [ 755.796666][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 755.806558][ T19] ftdi_sio 4-1:0.0: device disconnected [ 755.830900][ T8911] EXT4-fs (loop1): unmounting filesystem. [ 756.067629][T14334] loop5: detected capacity change from 0 to 128 [ 756.467984][T14345] netlink: 'syz.4.21523': attribute type 25 has an invalid length. [ 756.476064][T14345] netlink: 'syz.4.21523': attribute type 8 has an invalid length. [ 757.216568][T14376] incfs: Options parsing error. -22 [ 757.234355][T14376] incfs: mount failed -22 [ 757.792491][T14411] netlink: 83 bytes leftover after parsing attributes in process `syz.1.21556'. [ 757.865285][T14417] loop4: detected capacity change from 0 to 128 [ 758.364517][T14434] netlink: 1084 bytes leftover after parsing attributes in process `syz.4.21568'. [ 758.631736][T14418] loop5: detected capacity change from 0 to 40427 [ 758.650009][T14418] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 758.673236][T14418] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 758.707553][T14418] F2FS-fs (loop5): invalid crc value [ 758.768679][T14418] F2FS-fs (loop5): Found nat_bits in checkpoint [ 758.914122][T14418] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 758.925218][T14418] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 759.363334][T14481] loop3: detected capacity change from 0 to 131072 [ 759.378139][T14481] F2FS-fs (loop3): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 759.386751][T14481] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 759.397212][T14481] F2FS-fs (loop3): invalid crc value [ 759.419577][T14481] F2FS-fs (loop3): Found nat_bits in checkpoint [ 759.446657][T14481] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 759.453820][T14481] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 759.531852][ T24] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 759.543183][T14481] fscrypt (loop3, inode 8): Error -61 getting encryption context [ 759.621378][ T28] kauditd_printk_skb: 616 callbacks suppressed [ 759.621397][ T28] audit: type=1400 audit(2000001171.602:89380): avc: denied { read write } for pid=12326 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 759.687822][ T28] audit: type=1400 audit(2000001171.602:89381): avc: denied { read write open } for pid=12326 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 759.743532][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 759.752401][ T28] audit: type=1400 audit(2000001171.602:89382): avc: denied { ioctl } for pid=12326 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 759.772291][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 759.796906][ T24] usb 2-1: can't read configurations, error -71 [ 759.813322][ T28] audit: type=1400 audit(2000001171.611:89383): avc: denied { bpf } for pid=14488 comm="syz.5.21589" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 759.856868][ T28] audit: type=1400 audit(2000001171.611:89384): avc: denied { prog_load } for pid=14488 comm="syz.5.21589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 759.924757][ T28] audit: type=1400 audit(2000001171.611:89385): avc: denied { perfmon } for pid=14488 comm="syz.5.21589" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 759.933491][T14497] netlink: 83 bytes leftover after parsing attributes in process `syz.3.21588'. [ 759.976004][ T28] audit: type=1400 audit(2000001171.611:89386): avc: denied { prog_run } for pid=14488 comm="syz.5.21589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 760.018623][ T28] audit: type=1400 audit(2000001171.620:89387): avc: denied { bpf } for pid=14488 comm="syz.5.21589" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 760.066270][ T28] audit: type=1400 audit(2000001171.657:89388): avc: denied { read write } for pid=12326 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 760.171045][ T28] audit: type=1400 audit(2000001171.657:89389): avc: denied { open } for pid=12326 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 760.212721][T14512] netlink: 28 bytes leftover after parsing attributes in process `syz.5.21600'. [ 761.211133][ T59] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 761.423318][ T59] usb 6-1: unable to get BOS descriptor or descriptor too short [ 761.442617][ T59] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 761.469731][ T59] usb 6-1: can't read configurations, error -71 [ 761.993803][T14638] loop5: detected capacity change from 0 to 512 [ 762.021769][T14638] EXT4-fs (loop5): orphan cleanup on readonly fs [ 762.031826][T14638] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.21659: Failed to acquire dquot type 1 [ 762.057246][T14638] EXT4-fs (loop5): 1 truncate cleaned up [ 762.067650][T14638] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 762.091649][T14638] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.21659: deleted inode referenced: 12 [ 762.127044][T12326] EXT4-fs (loop5): unmounting filesystem. [ 762.889098][T14650] loop5: detected capacity change from 0 to 512 [ 762.920536][T14650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 762.940174][T14650] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 762.990337][T14656] netlink: 92 bytes leftover after parsing attributes in process `syz.3.21665'. [ 763.012916][T14650] EXT4-fs (loop5): 1 truncate cleaned up [ 763.018608][T14650] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 763.087709][T14666] netlink: 'syz.3.21670': attribute type 12 has an invalid length. [ 763.100743][T14650] EXT4-fs warning (device loop5): __ext4fs_dirhash:270: inode #2: comm syz.5.21674: Siphash requires key [ 763.182291][T12326] EXT4-fs (loop5): unmounting filesystem. [ 763.302183][ T6] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 763.507960][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 763.514593][ T6] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.541238][ T6] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.551929][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 763.558620][ T6] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 763.582014][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.595420][T14704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 763.601008][ T6] usb 5-1: config 0 descriptor?? [ 763.767036][T14710] user requested TSC rate below hardware speed [ 763.946786][T14717] loop5: detected capacity change from 0 to 128 [ 763.961075][T14717] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 763.989101][T14717] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 764.045144][ T10] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 764.075542][ T6] hid-generic 0003:060B:500A.009E: unexpected long global item [ 764.093789][T14719] netlink: 136 bytes leftover after parsing attributes in process `syz.5.21697'. [ 764.099543][ T6] hid-generic: probe of 0003:060B:500A.009E failed with error -22 [ 764.114593][T14719] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 764.187419][T14721] loop5: detected capacity change from 0 to 1024 [ 764.224643][T14721] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 764.288849][T14727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21701'. [ 764.319771][T14729] netlink: 2 bytes leftover after parsing attributes in process `syz.3.21700'. [ 764.326191][ T19] usb 5-1: USB disconnect, device number 25 [ 764.341784][T14721] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 764.415176][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21702'. [ 764.422262][T14734] binder: 14731:14734 ioctl c018620c 200000000000 returned -22 [ 764.455462][T12326] EXT4-fs (loop5): unmounting filesystem. [ 764.640423][T14752] usb usb8: usbfs: process 14752 (syz.3.21712) did not claim interface 0 before use [ 764.652079][T14752] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 764.754979][T14758] kvm [14757]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xfffffffffffffff9 [ 764.890020][T14769] binder: 14768:14769 ioctl c018620c 200000000000 returned -22 [ 764.987036][T14779] loop3: detected capacity change from 0 to 128 [ 765.037462][T14779] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 765.047226][T14779] ext4 filesystem being mounted at /699/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 765.079433][ T28] kauditd_printk_skb: 928 callbacks suppressed [ 765.079449][ T28] audit: type=1400 audit(2000001176.605:90316): avc: denied { mount } for pid=14775 comm="syz.3.21722" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 765.204495][T14791] netlink: 'syz.4.21728': attribute type 1 has an invalid length. [ 765.212935][ T28] audit: type=1400 audit(2000001176.669:90317): avc: denied { read write } for pid=12326 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 765.267886][T14791] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 765.288760][ T8170] EXT4-fs (loop3): unmounting filesystem. [ 765.294889][ T28] audit: type=1400 audit(2000001176.669:90318): avc: denied { open } for pid=12326 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 765.321059][ T28] audit: type=1400 audit(2000001176.669:90319): avc: denied { ioctl } for pid=12326 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 765.419573][T14793] kvm [14792]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xfffffffffffffff9 [ 765.420411][ T28] audit: type=1400 audit(2000001176.678:90320): avc: denied { bpf } for pid=14786 comm="syz.5.21727" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 765.481597][ T28] audit: type=1400 audit(2000001176.678:90321): avc: denied { prog_load } for pid=14786 comm="syz.5.21727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 765.516124][ T28] audit: type=1400 audit(2000001176.678:90322): avc: denied { perfmon } for pid=14786 comm="syz.5.21727" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 765.569284][ T28] audit: type=1400 audit(2000001176.688:90323): avc: denied { bpf } for pid=14786 comm="syz.5.21727" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 765.585347][T14807] loop5: detected capacity change from 0 to 256 [ 765.640711][T14807] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 765.649946][ T28] audit: type=1400 audit(2000001176.688:90324): avc: denied { prog_run } for pid=14786 comm="syz.5.21727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 765.676362][ T8170] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.755218][T14817] loop3: detected capacity change from 0 to 1024 [ 765.805646][T14817] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 765.901998][T14817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 765.974355][ T8170] EXT4-fs (loop3): unmounting filesystem. [ 766.142925][T14837] tipc: Enabling of bearer rejected, failed to enable media [ 766.220271][T14842] loop1: detected capacity change from 0 to 512 [ 766.246744][T14842] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 766.281722][T14842] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 766.325634][T14842] EXT4-fs (loop1): 1 truncate cleaned up [ 766.331300][T14842] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 766.390433][ T8911] EXT4-fs (loop1): unmounting filesystem. [ 766.547079][T14859] loop1: detected capacity change from 0 to 256 [ 766.587156][T14859] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 766.673339][T14864] syz.1.21761[14864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 766.673626][T14864] syz.1.21761[14864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 766.793114][T14872] loop4: detected capacity change from 0 to 128 [ 766.831060][T14872] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 766.888147][ T285] EXT4-fs (loop4): unmounting filesystem. [ 767.040004][ T59] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 767.247076][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.268616][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.298198][ T59] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 767.326307][ T59] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 767.349587][ T59] usb 2-1: Manufacturer: syz [ 767.363672][ T59] usb 2-1: config 0 descriptor?? [ 767.675795][T14904] loop4: detected capacity change from 0 to 40427 [ 767.694556][T14904] F2FS-fs (loop4): fault_injection options not supported [ 767.728641][T14904] F2FS-fs (loop4): invalid crc value [ 767.764685][T14904] F2FS-fs (loop4): Found nat_bits in checkpoint [ 767.815810][ T59] pyra 0003:1E7D:2CF6.009F: unknown main item tag 0x0 [ 767.817887][T14904] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 767.824904][ T59] pyra 0003:1E7D:2CF6.009F: unknown main item tag 0x0 [ 767.859401][ T59] pyra 0003:1E7D:2CF6.009F: unknown main item tag 0x0 [ 767.870251][ T59] pyra 0003:1E7D:2CF6.009F: unknown main item tag 0x0 [ 767.881157][ T59] pyra 0003:1E7D:2CF6.009F: unknown main item tag 0x0 [ 767.889041][T14904] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 767.895960][ T59] pyra 0003:1E7D:2CF6.009F: unknown main item tag 0x0 [ 767.991419][ T285] bio_check_eod: 19 callbacks suppressed [ 767.991437][ T285] syz-executor: attempt to access beyond end of device [ 767.991437][ T285] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 768.145040][ T59] pyra 0003:1E7D:2CF6.009F: unknown main item tag 0x0 [ 768.159965][ T59] pyra 0003:1E7D:2CF6.009F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 768.400048][ T59] pyra 0003:1E7D:2CF6.009F: couldn't init struct pyra_device [ 768.409252][ T59] pyra 0003:1E7D:2CF6.009F: couldn't install mouse [ 768.435533][ T59] pyra: probe of 0003:1E7D:2CF6.009F failed with error -71 [ 768.455331][ T59] usb 2-1: USB disconnect, device number 115 [ 768.555337][T14944] loop4: detected capacity change from 0 to 8192 [ 768.579914][T14942] fido_id[14942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 768.739523][T14951] netlink: 'syz.5.21797': attribute type 1 has an invalid length. [ 768.758494][T14951] netlink: 20 bytes leftover after parsing attributes in process `syz.5.21797'. [ 769.252600][T14961] loop5: detected capacity change from 0 to 40427 [ 769.271261][T14961] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 769.300941][T14961] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 769.332841][T14961] F2FS-fs (loop5): invalid crc value [ 769.376223][T14995] loop1: detected capacity change from 0 to 128 [ 769.384035][T14961] F2FS-fs (loop5): Found nat_bits in checkpoint [ 769.444712][T14995] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 769.457204][T14995] ext4 filesystem being mounted at /569/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 769.500943][T14961] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 769.508052][T14961] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 769.575199][ T361] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 769.610667][T14961] syz.5.21802: attempt to access beyond end of device [ 769.610667][T14961] loop5: rw=2051, sector=36912, nr_sectors = 8144 limit=40427 [ 769.626173][ T8911] EXT4-fs (loop1): unmounting filesystem. [ 769.640730][T14961] syz.5.21802: attempt to access beyond end of device [ 769.640730][T14961] loop5: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 769.703907][T14961] F2FS-fs (loop5): Issue discard(4614, 4614, 1018) failed, ret: -5 [ 769.703942][T14961] F2FS-fs (loop5): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 769.727760][T15006] loop1: detected capacity change from 0 to 256 [ 769.777746][T15006] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 769.791836][ T361] usb 5-1: Using ep0 maxpacket: 16 [ 769.798459][ T361] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.824457][T15006] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 769.846825][ T361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 769.861030][T15006] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 769.873147][ T361] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 769.889787][ T361] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 769.899265][ T361] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 769.952712][ T361] usb 5-1: Manufacturer: syz [ 769.966456][ T361] usb 5-1: config 0 descriptor?? [ 770.080884][T15023] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.157957][T15031] loop1: detected capacity change from 0 to 512 [ 770.165026][T15030] caif0: tun_chr_ioctl cmd 1074025681 [ 770.269932][ T59] usb 5-1: USB disconnect, device number 26 [ 770.350290][T15040] loop5: detected capacity change from 0 to 256 [ 770.390423][T15040] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 770.420709][T15040] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 770.466483][T15040] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 770.508029][ T28] kauditd_printk_skb: 702 callbacks suppressed [ 770.508046][ T28] audit: type=1400 audit(2000001181.644:91025): avc: denied { module_request } for pid=15042 comm="syz-executor" kmod="rtnl-link-team" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 770.556146][ T28] audit: type=1400 audit(2000001181.681:91026): avc: denied { unmount } for pid=12326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 770.625806][ T28] audit: type=1400 audit(2000001181.690:91027): avc: denied { read } for pid=15043 comm="syz.1.21846" dev="nsfs" ino=4026532961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 770.672323][T15042] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.679534][ T28] audit: type=1400 audit(2000001181.690:91028): avc: denied { read open } for pid=15043 comm="syz.1.21846" path="net:[4026532961]" dev="nsfs" ino=4026532961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 770.704359][T15042] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.711951][T15042] device bridge_slave_0 entered promiscuous mode [ 770.720191][T15042] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.728011][ T28] audit: type=1400 audit(2000001181.690:91029): avc: denied { module_request } for pid=15042 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 770.751550][T15042] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.765138][T15042] device bridge_slave_1 entered promiscuous mode [ 770.789723][ T28] audit: type=1400 audit(2000001181.690:91030): avc: denied { create } for pid=15043 comm="syz.1.21846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 770.849395][T15036] loop3: detected capacity change from 0 to 40427 [ 770.883012][T15036] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 770.902697][ T28] audit: type=1400 audit(2000001181.709:91031): avc: denied { read write } for pid=12326 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 770.939449][T15036] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 770.997496][T15036] F2FS-fs (loop3): invalid crc value [ 771.012597][ T28] audit: type=1400 audit(2000001181.709:91032): avc: denied { open } for pid=12326 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 771.050449][T15036] F2FS-fs (loop3): Found nat_bits in checkpoint [ 771.107470][ T28] audit: type=1400 audit(2000001181.709:91033): avc: denied { ioctl } for pid=12326 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 771.143816][T15036] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 771.164161][T15042] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.171258][T15042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.178672][T15042] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.185721][T15042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.190171][T12326] audit: audit_backlog=65 > audit_backlog_limit=64 [ 771.194876][T15036] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 771.279723][T15036] syz.3.21834: attempt to access beyond end of device [ 771.279723][T15036] loop3: rw=2051, sector=36912, nr_sectors = 8144 limit=40427 [ 771.301013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 771.310428][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.323089][T15077] loop4: detected capacity change from 0 to 4096 [ 771.330973][T15077] EXT4-fs: Ignoring removed bh option [ 771.342065][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.349623][T15036] syz.3.21834: attempt to access beyond end of device [ 771.349623][T15036] loop3: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 771.381476][T15077] EXT4-fs (loop4): Test dummy encryption mode enabled [ 771.396363][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 771.411435][T15036] F2FS-fs (loop3): Issue discard(4614, 4614, 1018) failed, ret: -5 [ 771.411476][T15036] F2FS-fs (loop3): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 771.427256][T15077] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 771.449970][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.457075][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.465441][T15077] System zones: 0-5 [ 771.471781][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 771.483915][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.490978][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.503351][T15077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 771.515499][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 771.547523][T15077] EXT4-fs (loop4): unmounting filesystem. [ 771.553574][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 771.575926][T15042] device veth0_vlan entered promiscuous mode [ 771.583020][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 771.592320][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 771.599999][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 771.608828][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 771.655081][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 771.679548][T15042] device veth1_macvtap entered promiscuous mode [ 771.740784][ T2150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 771.756374][ T2150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 771.769284][T15077] loop4: detected capacity change from 0 to 256 [ 771.818556][T15077] exfat: Deprecated parameter 'debug' [ 771.824081][T15077] exfat: Unknown parameter 'delalloc' [ 771.831393][ T2150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 771.853283][ T2150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 771.924965][ T8308] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 772.092537][T15114] incfs: iterate_incfs_dir / -22 [ 772.189263][T15121] loop1: detected capacity change from 0 to 256 [ 772.222072][T15121] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 772.433599][T15129] loop5: detected capacity change from 0 to 8192 [ 772.496601][T15129] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 772.526544][T15129] FAT-fs (loop5): Filesystem has been set read-only [ 772.566968][T15144] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 772.746189][T15153] loop1: detected capacity change from 0 to 256 [ 772.789533][T15151] loop6: detected capacity change from 0 to 4096 [ 772.806646][T15153] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 772.852921][T15151] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 772.997657][T15165] netlink: 'syz.1.21883': attribute type 8 has an invalid length. [ 773.034029][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21883'. [ 773.066479][T15147] netlink: 32 bytes leftover after parsing attributes in process `syz.6.21876'. [ 773.137251][T15042] EXT4-fs (loop6): unmounting filesystem. [ 773.594721][ T59] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 773.659645][ T24] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 773.694035][T15209] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 773.699944][T15209] syzkaller1: linktype set to 780 [ 773.801776][ T59] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 773.821121][T15214] overlayfs: workdir and upperdir must reside under the same mount [ 773.830458][ T59] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 773.857307][ T59] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 773.864750][T15217] loop4: detected capacity change from 0 to 128 [ 773.868152][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 773.902670][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 773.911434][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 773.932506][T15217] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 773.936610][ T59] usb 6-1: SerialNumber: syz [ 773.943409][T15217] ext4 filesystem being mounted at /4502/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 773.949899][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 774.015773][ T285] EXT4-fs (loop4): unmounting filesystem. [ 774.027649][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 774.046921][ T24] usb 4-1: SerialNumber: syz [ 774.120516][T15229] netlink: 'syz.4.21911': attribute type 8 has an invalid length. [ 774.154855][T15229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21911'. [ 774.218180][ T59] usb 6-1: 0:2 : does not exist [ 774.241069][ T59] usb 6-1: USB disconnect, device number 32 [ 774.293025][ T24] usb 4-1: 0:2 : does not exist [ 774.316393][ T24] usb 4-1: USB disconnect, device number 98 [ 774.381306][T15241] loop4: detected capacity change from 0 to 16 [ 774.417289][T15241] erofs: (device loop4): mounted with root inode @ nid 36. [ 774.461536][T15241] erofs: (device loop4): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 774.484361][T15241] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=loop4 ino=46 [ 774.537636][ T8619] udevd[8619]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 774.617147][T15257] loop1: detected capacity change from 0 to 256 [ 774.639686][T15257] exfat: Deprecated parameter 'utf8' [ 774.664160][T15257] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 774.782134][T15265] loop1: detected capacity change from 0 to 256 [ 774.832947][T15265] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 774.873080][T15265] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 774.896645][T15265] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 774.989132][T15265] exFAT-fs (loop1): hint_cluster is invalid (17) [ 775.614699][T15275] loop4: detected capacity change from 0 to 40427 [ 775.641533][T15275] F2FS-fs (loop4): Invalid log sectorsize (131081) [ 775.675730][T15275] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 775.702288][T15275] F2FS-fs (loop4): invalid crc value [ 775.756675][T15275] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 775.762738][T15330] input: syz0 as /devices/virtual/input/input102 [ 775.805906][T15332] netlink: 104 bytes leftover after parsing attributes in process `syz.6.21959'. [ 775.935533][ T28] kauditd_printk_skb: 888 callbacks suppressed [ 775.935550][ T28] audit: type=1400 audit(2000001186.656:91905): avc: denied { prog_load } for pid=15338 comm="syz.5.21962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 775.941349][T15275] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 775.944506][ T28] audit: type=1400 audit(2000001186.656:91906): avc: denied { bpf } for pid=15338 comm="syz.5.21962" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 775.961869][T15275] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 776.054207][ T28] audit: type=1400 audit(2000001186.684:91907): avc: denied { map_create } for pid=15340 comm="syz.1.21963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 776.145570][ T28] audit: type=1400 audit(2000001186.684:91908): avc: denied { map_read map_write } for pid=15340 comm="syz.1.21963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 776.245326][ T28] audit: type=1400 audit(2000001186.684:91909): avc: denied { bpf } for pid=15340 comm="syz.1.21963" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 776.252540][T15366] sch_fq: defrate 0 ignored. [ 776.269574][T15042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 776.289524][T12326] audit: audit_backlog=65 > audit_backlog_limit=64 [ 776.303388][T12326] audit: audit_lost=403 audit_rate_limit=0 audit_backlog_limit=64 [ 776.315017][T15042] audit: audit_lost=404 audit_rate_limit=0 audit_backlog_limit=64 [ 776.322871][T15042] audit: backlog limit exceeded [ 776.396201][T15372] netlink: 80 bytes leftover after parsing attributes in process `syz.6.21975'. [ 776.521755][T15378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15378 comm=syz.1.21980 [ 776.535339][T15380] loop3: detected capacity change from 0 to 512 [ 776.565379][T15380] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 776.587534][T15380] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.21982: invalid indirect mapped block 2683928664 (level 1) [ 776.617047][T15380] EXT4-fs (loop3): Remounting filesystem read-only [ 776.629233][T15380] EXT4-fs (loop3): 1 truncate cleaned up [ 776.634925][T15380] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 776.659000][T15380] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.21982: Invalid block bitmap block 3 in block_group 0 [ 776.673432][T15380] EXT4-fs (loop3): Remounting filesystem read-only [ 776.680060][T15380] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 776.689858][T15380] EXT4-fs (loop3): Remounting filesystem read-only [ 776.710524][T15380] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.21982: invalid indirect mapped block 4294967295 (level 0) [ 776.725317][T15380] EXT4-fs (loop3): Remounting filesystem read-only [ 776.731961][T15380] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.21982: invalid indirect mapped block 65536 (level 1) [ 776.746675][T15380] EXT4-fs (loop3): Remounting filesystem read-only [ 776.789008][ T8170] EXT4-fs (loop3): unmounting filesystem. [ 777.028049][T15406] input: syz0 as /devices/virtual/input/input103 [ 777.322303][T15388] loop4: detected capacity change from 0 to 40427 [ 777.342151][T15388] F2FS-fs (loop4): invalid crc value [ 777.347632][ T361] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 777.370997][T15388] F2FS-fs (loop4): Found nat_bits in checkpoint [ 777.484683][T15388] F2FS-fs (loop4): Start checkpoint disabled! [ 777.523119][T15388] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 777.561651][ T361] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.593771][ T361] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.624665][ T361] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 777.679766][ T361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 777.687810][ T361] usb 4-1: SerialNumber: syz [ 777.722964][T15388] syz.4.21984: attempt to access beyond end of device [ 777.722964][T15388] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 777.809363][ T8] kworker/u4:0: attempt to access beyond end of device [ 777.809363][ T8] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 777.832041][ T8] kworker/u4:0: attempt to access beyond end of device [ 777.832041][ T8] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 777.964167][ T361] usb 4-1: 0:2 : does not exist [ 777.992341][ T361] usb 4-1: USB disconnect, device number 99 [ 778.254054][ T8308] udevd[8308]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 778.652793][T15471] loop6: detected capacity change from 0 to 40427 [ 778.696029][T15471] F2FS-fs (loop6): Invalid log sectorsize (131081) [ 778.726190][T15471] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 778.748323][T15471] F2FS-fs (loop6): invalid crc value [ 778.765071][T15471] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 778.848188][T15471] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 778.855966][T15471] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 779.012325][T15509] loop4: detected capacity change from 0 to 2048 [ 779.019426][T15509] EXT4-fs: Ignoring removed bh option [ 779.022790][T15513] loop1: detected capacity change from 0 to 2048 [ 779.060416][T15483] loop5: detected capacity change from 0 to 40427 [ 779.079634][T15513] loop1: p1 p3 p4 [ 779.087791][T15513] loop1: p4 size 589824 extends beyond EOD, truncated [ 779.094667][T15483] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 779.105308][T15509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 779.114174][T15483] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 779.157953][T15513] FAT-fs (loop1p1): bogus number of FAT structure [ 779.167897][T15483] F2FS-fs (loop5): invalid crc value [ 779.186082][T15513] FAT-fs (loop1p1): Can't find a valid FAT filesystem [ 779.236784][T15509] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 779.237260][T15483] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 779.315228][T15509] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 779.369118][T15509] EXT4-fs (loop4): This should not happen!! Data will be lost [ 779.369118][T15509] [ 779.427026][T15509] EXT4-fs (loop4): Total free blocks count 0 [ 779.430163][ T8308] udevd[8308]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 779.450173][ T8619] udevd[8619]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 779.452550][T15509] EXT4-fs (loop4): Free/Dirty block details [ 779.464731][ T8617] udevd[8617]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 779.480149][T15483] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 779.487353][T15483] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 779.509456][T15509] EXT4-fs (loop4): free_blocks=2415919104 [ 779.543003][T15509] EXT4-fs (loop4): dirty_blocks=16 [ 779.561770][ T8164] udevd[8164]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 779.561901][ T8215] udevd[8215]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 779.571874][T15509] EXT4-fs (loop4): Block reservation details [ 779.612954][ T8308] udevd[8308]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 779.640832][T15509] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 779.697146][T12326] syz-executor: attempt to access beyond end of device [ 779.697146][T12326] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 779.785291][T15547] loop3: detected capacity change from 0 to 512 [ 779.796069][T15551] netlink: 'syz.6.22053': attribute type 8 has an invalid length. [ 779.822125][T15547] EXT4-fs (loop3): unable to read superblock [ 779.841571][T15551] sch_fq: defrate 0 ignored. [ 779.860853][ T285] EXT4-fs (loop4): unmounting filesystem. [ 779.900682][T15553] loop1: detected capacity change from 0 to 1024 [ 779.992820][T15553] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 780.144221][ T8911] EXT4-fs (loop1): unmounting filesystem. [ 780.519671][T15601] netlink: 24 bytes leftover after parsing attributes in process `syz.5.22073'. [ 780.672130][T15569] loop4: detected capacity change from 0 to 40427 [ 780.693357][T15569] F2FS-fs (loop4): fault_injection options not supported [ 780.727112][T15569] F2FS-fs (loop4): fault_type options not supported [ 780.758533][T15569] F2FS-fs (loop4): Image doesn't support compression [ 780.769431][T15569] F2FS-fs (loop4): invalid crc value [ 780.783219][T15569] F2FS-fs (loop4): Found nat_bits in checkpoint [ 780.890680][T15569] F2FS-fs (loop4): Start checkpoint disabled! [ 780.914642][T15569] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 781.194666][ T43] kworker/u4:2: attempt to access beyond end of device [ 781.194666][ T43] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 781.380626][ T28] kauditd_printk_skb: 927 callbacks suppressed [ 781.380643][ T28] audit: type=1400 audit(2000001191.677:92806): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 781.503624][ T28] audit: type=1400 audit(2000001191.705:92807): avc: denied { read write open } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 781.538027][T15640] loop1: detected capacity change from 0 to 40427 [ 781.557458][ T28] audit: type=1400 audit(2000001191.705:92808): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 781.604095][T15640] F2FS-fs (loop1): fault_injection options not supported [ 781.624519][T15640] F2FS-fs (loop1): fault_type options not supported [ 781.642832][T15640] F2FS-fs (loop1): Image doesn't support compression [ 781.666326][T15640] F2FS-fs (loop1): invalid crc value [ 781.704653][ T28] audit: type=1400 audit(2000001191.714:92809): avc: denied { mount } for pid=15656 comm="syz.3.22100" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 781.736727][T15640] F2FS-fs (loop1): Found nat_bits in checkpoint [ 781.820897][ T28] audit: type=1400 audit(2000001191.751:92810): avc: denied { read write } for pid=15042 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 781.858611][T15681] audit: audit_backlog=65 > audit_backlog_limit=64 [ 781.879957][T15681] audit: audit_lost=415 audit_rate_limit=0 audit_backlog_limit=64 [ 781.889841][T15640] F2FS-fs (loop1): Start checkpoint disabled! [ 781.892508][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 781.903266][T15681] audit: backlog limit exceeded [ 781.904354][ T8170] audit: audit_backlog=65 > audit_backlog_limit=64 [ 781.937791][T15640] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 782.013064][T15688] netlink: 'syz.4.22111': attribute type 1 has an invalid length. [ 782.057054][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22111'. [ 782.154473][T15697] netlink: 36 bytes leftover after parsing attributes in process `syz.6.22115'. [ 782.210749][ T8] kworker/u4:0: attempt to access beyond end of device [ 782.210749][ T8] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 782.307302][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22122'. [ 782.614657][T15735] loop3: detected capacity change from 0 to 256 [ 782.660651][T15735] FAT-fs (loop3): bogus number of FAT sectors [ 782.669125][T15735] FAT-fs (loop3): Can't find a valid FAT filesystem [ 782.757755][ T8619] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 783.121337][T15773] loop5: detected capacity change from 0 to 1024 [ 783.195068][T15773] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 783.224108][T15773] System zones: 0-1, 3-12 [ 783.246409][T15773] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 783.361327][T12326] EXT4-fs (loop5): unmounting filesystem. [ 783.523891][T15787] loop6: detected capacity change from 0 to 40427 [ 783.552558][T15787] F2FS-fs (loop6): fault_injection options not supported [ 783.565978][T15787] F2FS-fs (loop6): invalid crc value [ 783.603684][T15787] F2FS-fs (loop6): Found nat_bits in checkpoint [ 783.628227][ T360] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 783.646245][T15787] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 783.676426][T15797] loop5: detected capacity change from 0 to 8192 [ 783.722625][T15797] syz.5.22161: attempt to access beyond end of device [ 783.722625][T15797] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 783.761057][T15797] Buffer I/O error on dev loop5, logical block 57847, async page read [ 783.791640][T15797] syz.5.22161: attempt to access beyond end of device [ 783.791640][T15797] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 783.822930][T15797] Buffer I/O error on dev loop5, logical block 57847, async page read [ 783.846410][ T360] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.879681][ T360] usb 2-1: config 0 interface 0 has no altsetting 0 [ 783.908209][ T360] usb 2-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00 [ 783.947781][ T360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.984981][ T360] usb 2-1: config 0 descriptor?? [ 783.996790][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22165'. [ 784.271579][T15826] loop4: detected capacity change from 0 to 256 [ 784.323572][T15826] FAT-fs (loop4): Directory bread(block 64) failed [ 784.346912][T15826] FAT-fs (loop4): Directory bread(block 65) failed [ 784.358396][T15832] bridge0: port 3(syz_tun) entered blocking state [ 784.376196][T15826] FAT-fs (loop4): Directory bread(block 66) failed [ 784.387361][T15832] bridge0: port 3(syz_tun) entered disabled state [ 784.394339][T15832] device syz_tun entered promiscuous mode [ 784.401689][T15826] FAT-fs (loop4): Directory bread(block 67) failed [ 784.408260][T15826] FAT-fs (loop4): Directory bread(block 68) failed [ 784.426877][T15826] FAT-fs (loop4): Directory bread(block 69) failed [ 784.452191][T15826] FAT-fs (loop4): Directory bread(block 70) failed [ 784.466830][ T360] wacom 0003:056A:0343.00A0: hidraw0: USB HID v0.02 Device [HID 056a:0343] on usb-dummy_hcd.1-1/input0 [ 784.467744][T15838] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22179'. [ 784.489516][T15826] FAT-fs (loop4): Directory bread(block 71) failed [ 784.510932][T15826] FAT-fs (loop4): Directory bread(block 72) failed [ 784.519448][T15826] FAT-fs (loop4): Directory bread(block 73) failed [ 784.695938][ T360] usb 2-1: USB disconnect, device number 116 [ 784.925756][T15854] loop4: detected capacity change from 0 to 8192 [ 784.999248][T15854] syz.4.22184: attempt to access beyond end of device [ 784.999248][T15854] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 785.049234][T15854] Buffer I/O error on dev loop4, logical block 57847, async page read [ 785.077380][T15854] syz.4.22184: attempt to access beyond end of device [ 785.077380][T15854] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 785.118856][T15854] Buffer I/O error on dev loop4, logical block 57847, async page read [ 785.310626][T15874] loop3: detected capacity change from 0 to 40427 [ 785.343870][T15874] F2FS-fs (loop3): fault_injection options not supported [ 785.363031][T15874] F2FS-fs (loop3): fault_type options not supported [ 785.376148][T15874] F2FS-fs (loop3): Image doesn't support compression [ 785.436887][T15874] F2FS-fs (loop3): invalid crc value [ 785.454755][T15874] F2FS-fs (loop3): Found nat_bits in checkpoint [ 785.585331][T15874] F2FS-fs (loop3): Start checkpoint disabled! [ 785.600418][T15874] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 785.612690][T15872] loop6: detected capacity change from 0 to 40427 [ 785.654225][T15872] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 785.686287][T15872] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 785.731992][T15872] F2FS-fs (loop6): invalid crc value [ 785.754772][ T10] kworker/u4:1: attempt to access beyond end of device [ 785.754772][ T10] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 785.768021][T15872] F2FS-fs (loop6): Found nat_bits in checkpoint [ 787.177841][T15872] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 787.185157][T15872] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 787.193046][ T28] kauditd_printk_skb: 802 callbacks suppressed [ 787.193063][ T28] audit: type=1400 audit(2000001197.037:93609): avc: denied { mount } for pid=15871 comm="syz.6.22196" name="/" dev="loop6" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 788.274497][ T28] audit: type=1400 audit(2000001197.037:93610): avc: denied { read write } for pid=15871 comm="syz.6.22196" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 788.322020][ T28] audit: type=1400 audit(2000001197.037:93611): avc: denied { open } for pid=15871 comm="syz.6.22196" path="/dev/loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 788.403167][ T28] audit: type=1400 audit(2000001197.037:93612): avc: denied { ioctl } for pid=15871 comm="syz.6.22196" path="/dev/loop6" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 788.538681][ T28] audit: type=1400 audit(2000001197.074:93613): avc: denied { write } for pid=15871 comm="syz.6.22196" name="/" dev="loop6" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 788.620858][ T28] audit: type=1400 audit(2000001197.074:93614): avc: denied { add_name } for pid=15871 comm="syz.6.22196" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 788.732208][ T28] audit: type=1400 audit(2000001197.074:93615): avc: denied { create } for pid=15871 comm="syz.6.22196" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 788.760604][T15933] audit: audit_backlog=65 > audit_backlog_limit=64 [ 788.766533][T15931] audit: audit_backlog=65 > audit_backlog_limit=64 [ 788.773709][T15931] audit: audit_lost=418 audit_rate_limit=0 audit_backlog_limit=64 [ 788.931989][T15939] input: syz0 as /devices/virtual/input/input107 [ 789.147152][T15918] loop5: detected capacity change from 0 to 40427 [ 789.180337][T15918] F2FS-fs (loop5): fault_injection options not supported [ 789.215503][T15918] F2FS-fs (loop5): invalid crc value [ 789.243893][T15918] F2FS-fs (loop5): Found nat_bits in checkpoint [ 790.384243][T15918] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 791.675556][T15980] loop1: detected capacity change from 0 to 512 [ 791.797523][T15980] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 791.829827][T15980] ext4 filesystem being mounted at /651/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 791.904373][T15996] loop4: detected capacity change from 0 to 256 [ 791.975746][T15980] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.22238: corrupted inode contents [ 791.985242][T16001] loop3: detected capacity change from 0 to 256 [ 792.033005][T16001] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 792.045743][T15980] EXT4-fs error (device loop1): ext4_dirty_inode:6121: inode #2: comm syz.1.22238: mark_inode_dirty error [ 792.094126][T15980] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.22238: corrupted inode contents [ 792.137952][T15980] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.22238: mark_inode_dirty error [ 792.227996][ T8911] EXT4-fs (loop1): unmounting filesystem. [ 792.598675][T16036] can0: slcan on ttyS3. [ 792.615053][ T28] kauditd_printk_skb: 401 callbacks suppressed [ 792.615071][ T28] audit: type=1400 audit(2000000000.673:94014): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.690507][T16036] can0 (unregistered): slcan off ttyS3. [ 792.697409][ T28] audit: type=1400 audit(2000000000.673:94015): avc: denied { read } for pid=142 comm="dhcpcd" name="n23" dev="tmpfs" ino=86707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 792.733273][ T19] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 792.806884][ T28] audit: type=1400 audit(2000000000.673:94016): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n23" dev="tmpfs" ino=86707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 792.852063][T16053] overlayfs: upper fs does not support tmpfile. [ 792.864122][ T28] audit: type=1400 audit(2000000000.673:94017): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n23" dev="tmpfs" ino=86707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 792.914233][ T28] audit: type=1400 audit(2000000000.673:94018): avc: denied { search } for pid=16037 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.941865][T16039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 792.955871][T16039] audit: audit_lost=420 audit_rate_limit=0 audit_backlog_limit=64 [ 792.970492][T16024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 792.977890][T16024] audit: audit_lost=421 audit_rate_limit=0 audit_backlog_limit=64 [ 792.988628][T15042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 793.017951][ T19] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 793.044879][ T19] usb 5-1: config 0 has no interface number 0 [ 793.056963][ T19] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.133595][ T19] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.146405][T16027] loop1: detected capacity change from 0 to 40427 [ 793.185797][T16027] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 793.191419][ T19] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 793.216706][T16027] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 793.247036][T16027] F2FS-fs (loop1): fault_type options not supported [ 793.267289][T16027] F2FS-fs (loop1): fault_injection options not supported [ 793.271147][ T19] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 793.290805][T16027] F2FS-fs (loop1): Image doesn't support compression [ 793.312591][T16027] F2FS-fs (loop1): invalid crc value [ 793.330912][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.363073][ T19] usb 5-1: config 0 descriptor?? [ 793.368404][T16027] F2FS-fs (loop1): Found nat_bits in checkpoint [ 793.503410][T16027] F2FS-fs (loop1): Start checkpoint disabled! [ 793.542667][T16027] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 793.555929][T16027] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 793.703147][T16027] syz.1.22258: attempt to access beyond end of device [ 793.703147][T16027] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 793.837613][ T10] kworker/u4:1: attempt to access beyond end of device [ 793.837613][ T10] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 794.031027][ T19] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.00A1/input/input108 [ 794.049693][ T19] uclogic 0003:28BD:0042.00A1: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 794.329088][ T19] usb 5-1: USB disconnect, device number 27 [ 794.484293][T16140] loop5: detected capacity change from 0 to 256 [ 794.527374][T16140] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 794.638067][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 794.649731][T16146] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 794.867244][T16160] loop3: detected capacity change from 0 to 256 [ 794.898556][T16135] loop6: detected capacity change from 0 to 40427 [ 794.925361][T16135] F2FS-fs (loop6): fault_injection options not supported [ 794.950346][T16135] F2FS-fs (loop6): fault_type options not supported [ 794.980569][T16166] loop5: detected capacity change from 0 to 128 [ 794.987155][T16135] F2FS-fs (loop6): Image doesn't support compression [ 795.019332][T16135] F2FS-fs (loop6): invalid crc value [ 795.021315][T16166] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 795.039126][T16135] F2FS-fs (loop6): Found nat_bits in checkpoint [ 795.219071][T16135] F2FS-fs (loop6): Start checkpoint disabled! [ 795.263291][T16135] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 795.383570][T16190] loop5: detected capacity change from 0 to 128 [ 795.644321][T16209] loop4: detected capacity change from 0 to 128 [ 795.666319][T16211] loop5: detected capacity change from 0 to 256 [ 795.702327][T16209] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 795.733917][T16209] ext4 filesystem being mounted at /4573/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 795.889350][ T285] EXT4-fs (loop4): unmounting filesystem. [ 795.900656][T16223] loop5: detected capacity change from 0 to 512 [ 795.975633][T16223] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 795.994577][T16223] ext4 filesystem being mounted at /325/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.051248][T16229] loop4: detected capacity change from 0 to 128 [ 796.126176][T16223] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.22342: corrupted inode contents [ 796.192902][T16223] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #2: comm syz.5.22342: mark_inode_dirty error [ 796.239709][T16223] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.22342: corrupted inode contents [ 796.285260][T16223] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.22342: mark_inode_dirty error [ 796.350597][T12326] EXT4-fs (loop5): unmounting filesystem. [ 796.363768][T16221] loop3: detected capacity change from 0 to 40427 [ 796.382967][T16221] F2FS-fs (loop3): fault_injection options not supported [ 796.406065][T16221] F2FS-fs (loop3): fault_type options not supported [ 796.412764][T16221] F2FS-fs (loop3): Image doesn't support compression [ 796.452274][T16221] F2FS-fs (loop3): invalid crc value [ 796.488723][T16221] F2FS-fs (loop3): Found nat_bits in checkpoint [ 796.583889][T16221] F2FS-fs (loop3): Start checkpoint disabled! [ 796.616099][T16221] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 796.817789][ T3744] Bluetooth: hci0: command 0x1003 tx timeout [ 796.823861][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 796.868786][T16248] loop4: detected capacity change from 0 to 256 [ 797.403474][ T2150] Bluetooth: hci0: Frame reassembly failed (-84) [ 797.410171][T16274] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 797.424315][T16276] loop1: detected capacity change from 0 to 512 [ 797.446794][T16276] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 797.578348][T16276] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 797.610450][T16276] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 797.702206][T16288] loop3: detected capacity change from 0 to 256 [ 797.772414][T16276] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 797.884120][T16276] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 798.020369][ T59] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 798.030539][T16276] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 798.151982][T16276] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 798.166181][ T28] kauditd_printk_skb: 1179 callbacks suppressed [ 798.166199][ T28] audit: type=1400 audit(2000000005.796:95167): avc: denied { read write } for pid=16289 comm="syz.3.22358" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 798.205034][T16290] loop3: detected capacity change from 0 to 40427 [ 798.223449][T16290] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 798.227666][ T59] usb 6-1: config 5 has an invalid interface number: 3 but max is 0 [ 798.255403][T16290] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 798.262180][ T59] usb 6-1: config 5 has no interface number 0 [ 798.270033][ T28] audit: type=1400 audit(2000000005.824:95168): avc: denied { setattr } for pid=15042 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 798.285916][T16290] F2FS-fs (loop3): invalid crc value [ 798.294911][T16276] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 798.314025][T16290] F2FS-fs (loop3): Found nat_bits in checkpoint [ 798.315410][ T59] usb 6-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 798.351379][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.362312][ T28] audit: type=1400 audit(2000000005.833:95169): avc: denied { read write open } for pid=16289 comm="syz.3.22358" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 798.386519][T16290] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 798.400539][T16290] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 798.409517][ T59] usb 6-1: Product: syz [ 798.413838][ T59] usb 6-1: Manufacturer: syz [ 798.418622][ T59] usb 6-1: SerialNumber: syz [ 798.445582][ T59] ftdi_sio 6-1:5.3: FTDI USB Serial Device converter detected [ 798.453429][ T59] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 798.475380][ T28] audit: type=1400 audit(2000000005.833:95170): avc: denied { ioctl } for pid=16289 comm="syz.3.22358" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 798.501450][ T8170] syz-executor: attempt to access beyond end of device [ 798.501450][ T8170] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 798.566715][ T28] audit: type=1400 audit(2000000005.842:95171): avc: denied { mounton } for pid=16289 comm="syz.3.22358" path="/845/file2" dev="tmpfs" ino=4383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 798.631142][T16276] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 798.651239][ T28] audit: type=1400 audit(2000000005.851:95172): avc: denied { ioctl } for pid=16284 comm="syz.5.22369" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 798.706224][ T28] audit: type=1400 audit(2000000005.851:95173): avc: denied { setattr } for pid=15042 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 798.728201][ T360] usb 6-1: USB disconnect, device number 33 [ 798.755632][ T360] ftdi_sio 6-1:5.3: device disconnected [ 798.814509][ T28] audit: type=1400 audit(2000000005.888:95174): avc: denied { setattr } for pid=15042 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 798.899109][ T28] audit: type=1400 audit(2000000005.897:95175): avc: denied { setattr } for pid=15042 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 798.906569][T16298] audit: audit_backlog=65 > audit_backlog_limit=64 [ 799.325431][T16320] netem: incorrect ge model size [ 799.329818][T16318] loop3: detected capacity change from 0 to 256 [ 799.337460][T16320] netem: change failed [ 799.591375][ T3744] Bluetooth: hci0: command 0x1003 tx timeout [ 799.591491][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 799.927900][T16351] loop3: detected capacity change from 0 to 128 [ 800.032112][T16351] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 800.060918][T16351] ext4 filesystem being mounted at /854/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.222729][ T8170] EXT4-fs (loop3): unmounting filesystem. [ 800.359458][T16369] loop4: detected capacity change from 0 to 512 [ 800.442893][T16369] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 800.479973][T16369] ext4 filesystem being mounted at /4590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.617419][ T285] EXT4-fs (loop4): unmounting filesystem. [ 800.903098][T16364] loop5: detected capacity change from 0 to 40427 [ 800.936433][T16364] F2FS-fs (loop5): invalid crc value [ 800.976678][T16364] F2FS-fs (loop5): Found nat_bits in checkpoint [ 801.127575][T16364] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 801.325633][T12326] syz-executor: attempt to access beyond end of device [ 801.325633][T12326] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 801.955910][T16413] loop4: detected capacity change from 0 to 40427 [ 801.989210][T16413] F2FS-fs (loop4): invalid crc value [ 802.005389][T16413] F2FS-fs (loop4): Found nat_bits in checkpoint [ 802.169038][T16413] F2FS-fs (loop4): Start checkpoint disabled! [ 802.212135][T16413] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 802.366976][T16454] loop1: detected capacity change from 0 to 512 [ 802.387717][T16455] loop3: detected capacity change from 0 to 1024 [ 802.419086][T16455] EXT4-fs: Ignoring removed bh option [ 802.436418][T16454] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 802.450608][T16454] System zones: 0-2, 18-18, 34-35 [ 802.451574][T16455] EXT4-fs: Ignoring removed oldalloc option [ 802.461687][T16455] EXT4-fs: Ignoring removed orlov option [ 802.470489][ T2150] kworker/u4:5: attempt to access beyond end of device [ 802.470489][ T2150] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 802.471059][T16454] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 802.507462][T16454] ext4 filesystem being mounted at /687/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 802.535791][T16455] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 802.724828][ T8170] EXT4-fs (loop3): unmounting filesystem. [ 802.789267][ T8911] EXT4-fs (loop1): unmounting filesystem. [ 803.470610][T16511] loop4: detected capacity change from 0 to 128 [ 803.488566][T16511] EXT4-fs: Ignoring removed orlov option [ 803.510782][T16511] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 803.549230][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 803.560512][T16511] ext4 filesystem being mounted at /4602/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 803.560544][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 803.560568][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 803.608075][ T28] kauditd_printk_skb: 1215 callbacks suppressed [ 803.608094][ T28] audit: type=1400 audit(2000000010.808:96347): avc: denied { setattr } for pid=15042 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 803.615897][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22458'. [ 803.675808][ T28] audit: type=1400 audit(2000000010.817:96348): avc: denied { setattr } for pid=15042 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 803.687203][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 803.719412][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22458'. [ 803.722970][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 803.742124][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22458'. [ 803.750042][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 803.762355][ T28] audit: type=1400 audit(2000000010.854:96349): avc: denied { setattr } for pid=15042 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 803.781320][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 803.787792][ T285] EXT4-fs (loop4): unmounting filesystem. [ 803.805861][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 803.806072][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22458'. [ 803.821614][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 803.839585][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 803.847266][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22458'. [ 803.855417][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 803.872654][ T28] audit: type=1400 audit(2000000010.909:96350): avc: denied { read write } for pid=16510 comm="syz.4.22452" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 803.873306][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 803.905392][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22458'. [ 803.908475][ T28] audit: type=1400 audit(2000000010.909:96351): avc: denied { open } for pid=16510 comm="syz.4.22452" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 803.935475][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22458'. [ 803.960047][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 803.971363][ T28] audit: type=1400 audit(2000000010.909:96352): avc: denied { ioctl } for pid=16510 comm="syz.4.22452" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 803.975806][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 804.014321][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22458'. [ 804.028625][ T28] audit: type=1400 audit(2000000010.909:96353): avc: denied { setattr } for pid=15042 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 804.042143][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22458'. [ 804.063957][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 804.078633][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22458'. [ 804.079558][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 804.098344][ T28] audit: type=1400 audit(2000000010.928:96354): avc: denied { write } for pid=16510 comm="syz.4.22452" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 804.103377][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 804.121315][T16519] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 804.146509][ T360] hid-generic 0003:0004:0000.00A2: unknown main item tag 0x0 [ 804.157360][ T28] audit: type=1400 audit(2000000010.928:96355): avc: denied { add_name } for pid=16510 comm="syz.4.22452" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 804.180898][ T360] hid-generic 0003:0004:0000.00A2: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 804.206859][ T28] audit: type=1400 audit(2000000010.928:96356): avc: denied { create } for pid=16510 comm="syz.4.22452" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 804.367900][T16534] loop4: detected capacity change from 0 to 512 [ 804.382035][T16534] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 804.395279][T16527] fido_id[16527]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 804.552824][T16534] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 804.603981][T16534] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 804.765975][T16534] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 804.930907][T16534] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 804.948806][T16539] loop1: detected capacity change from 0 to 40427 [ 804.985758][T16539] F2FS-fs (loop1): invalid crc value [ 805.021677][T16539] F2FS-fs (loop1): Found nat_bits in checkpoint [ 805.034657][T16545] loop3: detected capacity change from 0 to 40427 [ 805.065986][T16545] F2FS-fs (loop3): invalid crc value [ 805.081817][T16534] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 805.096027][T16545] F2FS-fs (loop3): Found nat_bits in checkpoint [ 805.124852][T16539] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 805.198583][T16545] F2FS-fs (loop3): Start checkpoint disabled! [ 805.216713][T16545] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 805.301173][ T8911] syz-executor: attempt to access beyond end of device [ 805.301173][ T8911] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 805.324793][T16534] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 805.442093][ T2150] kworker/u4:5: attempt to access beyond end of device [ 805.442093][ T2150] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 805.553708][T16534] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 805.807031][T16571] loop1: detected capacity change from 0 to 128 [ 805.868636][T16571] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 805.900249][T16571] ext4 filesystem being mounted at /699/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.061684][T16583] netem: incorrect ge model size [ 806.066931][T16583] netem: change failed [ 806.093662][ T8911] EXT4-fs (loop1): unmounting filesystem. [ 806.956625][ T2150] Bluetooth: hci0: Frame reassembly failed (-84) [ 807.069128][T16616] device erspan0 entered promiscuous mode [ 808.677053][T16683] loop3: detected capacity change from 0 to 1024 [ 808.708327][T16683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 808.790739][T16683] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 808.831250][T16691] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 808.909874][ T8170] EXT4-fs (loop3): unmounting filesystem. [ 808.997088][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.005002][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.039234][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.048389][ T28] kauditd_printk_skb: 1016 callbacks suppressed [ 809.048404][ T28] audit: type=1400 audit(1007.373:97373): avc: denied { setattr } for pid=15042 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 809.093228][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.100676][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.125466][ T3745] Bluetooth: hci0: command 0x1003 tx timeout [ 809.131751][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 809.152037][ T28] audit: type=1400 audit(1007.392:97374): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 809.163801][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.231700][ T28] audit: type=1400 audit(1007.392:97375): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 809.246321][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.297198][ T28] audit: type=1400 audit(1007.392:97376): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 809.300541][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.371859][ T28] audit: type=1400 audit(1007.392:97377): avc: denied { setattr } for pid=15042 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 809.424144][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.436892][ T28] audit: type=1400 audit(1007.392:97378): avc: denied { setattr } for pid=15042 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 809.453980][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.468743][T16712] audit: audit_backlog=65 > audit_backlog_limit=64 [ 809.491394][ T28] audit: type=1400 audit(1007.392:97379): avc: denied { bpf } for pid=16701 comm="syz.4.22535" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 809.493844][T16712] audit: audit_lost=447 audit_rate_limit=0 audit_backlog_limit=64 [ 809.513120][T15042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 809.537154][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.544689][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.580487][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.587931][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.633194][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.663122][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.694858][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.725482][ T24] hid-generic 0003:0004:0000.00A3: unknown main item tag 0x0 [ 809.769072][ T24] hid-generic 0003:0004:0000.00A3: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 809.850480][T16710] loop1: detected capacity change from 0 to 40427 [ 809.879590][T16710] F2FS-fs (loop1): invalid crc value [ 809.972732][T16763] loop3: detected capacity change from 0 to 256 [ 810.052489][T16710] F2FS-fs (loop1): Found nat_bits in checkpoint [ 810.054417][T16763] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 810.136712][T16768] fido_id[16768]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 810.231745][T16710] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 810.437727][ T8911] syz-executor: attempt to access beyond end of device [ 810.437727][ T8911] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 810.523969][T16786] loop3: detected capacity change from 0 to 128 [ 810.890018][T16774] loop4: detected capacity change from 0 to 40427 [ 810.921395][T16774] F2FS-fs (loop4): fault_injection options not supported [ 810.939596][T16774] F2FS-fs (loop4): invalid crc value [ 810.980835][T16774] F2FS-fs (loop4): Found nat_bits in checkpoint [ 811.090156][T16774] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 811.263237][ T285] syz-executor: attempt to access beyond end of device [ 811.263237][ T285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 811.390172][T16822] loop1: detected capacity change from 0 to 128 [ 811.428450][T16822] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 811.467277][T16822] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 811.660183][T16812] loop5: detected capacity change from 0 to 40427 [ 811.705107][T16812] F2FS-fs (loop5): invalid crc value [ 811.716285][T16812] F2FS-fs (loop5): Found nat_bits in checkpoint [ 811.768353][T16831] loop4: detected capacity change from 0 to 4096 [ 811.817161][T16812] F2FS-fs (loop5): Start checkpoint disabled! [ 811.826137][T16831] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 811.856421][T16812] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 811.929301][ T285] EXT4-fs (loop4): unmounting filesystem. [ 812.036316][T16742] kworker/u4:35: attempt to access beyond end of device [ 812.036316][T16742] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 812.244778][T16834] loop1: detected capacity change from 0 to 40427 [ 812.290402][T16834] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 812.311118][T16834] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 812.332560][T16834] F2FS-fs (loop1): invalid crc value [ 812.385887][T16834] F2FS-fs (loop1): Found nat_bits in checkpoint [ 812.499943][T16834] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 812.521249][T16834] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 812.521280][T16834] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 812.775184][T16853] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.775206][T16853] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.777138][T16853] device bridge_slave_0 entered promiscuous mode [ 812.839550][T16853] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.839575][T16853] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.841257][T16853] device bridge_slave_1 entered promiscuous mode [ 813.109223][T16853] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.109250][T16853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.109350][T16853] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.109365][T16853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.172260][T16742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 813.172864][T16742] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.173348][T16742] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.185454][T16742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 813.264403][T16742] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.264443][T16742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.267385][T16740] device bridge_slave_1 left promiscuous mode [ 813.307541][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.308187][T16740] device bridge_slave_0 left promiscuous mode [ 813.332098][T16740] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.332740][T16870] loop4: detected capacity change from 0 to 40427 [ 813.339207][T16870] F2FS-fs (loop4): fault_injection options not supported [ 813.339237][T16870] F2FS-fs (loop4): Image doesn't support compression [ 813.339281][T16870] F2FS-fs (loop4): Image doesn't support compression [ 813.340544][T16740] device veth1_macvtap left promiscuous mode [ 813.340606][T16740] device veth0_vlan left promiscuous mode [ 813.351080][T16870] F2FS-fs (loop4): invalid crc value [ 813.373773][T16870] F2FS-fs (loop4): Found nat_bits in checkpoint [ 813.415544][T16870] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 813.493546][T16870] syz.4.22578: attempt to access beyond end of device [ 813.493546][T16870] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 813.538685][T16870] syz.4.22578: attempt to access beyond end of device [ 813.538685][T16870] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 813.581886][T16781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 813.603685][T16781] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.610819][T16781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.622866][ T285] syz-executor: attempt to access beyond end of device [ 813.622866][ T285] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 813.733476][T16764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 813.769284][T16764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 813.784538][T16764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 813.818756][T16764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 813.860482][T16764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 813.869074][T16764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 813.913859][T16781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 813.933456][T16781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 813.970640][T16853] device veth0_vlan entered promiscuous mode [ 813.983880][T16781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 814.022374][T16781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 814.123415][T16853] device veth1_macvtap entered promiscuous mode [ 814.149698][T16781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 814.163828][T16781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 814.183065][T16781] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 814.200511][T16915] __nla_validate_parse: 195 callbacks suppressed [ 814.200531][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22595'. [ 814.221995][T16894] loop3: detected capacity change from 0 to 40427 [ 814.238882][T16894] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 814.251427][T16781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 814.272820][T16781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 814.293408][T16894] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 814.315854][T16781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 814.329292][T16894] F2FS-fs (loop3): Found nat_bits in checkpoint [ 814.334924][T16781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 814.427566][T16894] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 814.440878][T16894] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 814.468366][ T28] kauditd_printk_skb: 946 callbacks suppressed [ 814.468383][ T28] audit: type=1400 audit(1012.385:98323): avc: denied { read write } for pid=16853 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.497555][T16929] loop5: detected capacity change from 0 to 256 [ 814.533485][T16929] exfat: Deprecated parameter 'namecase' [ 814.569667][T16929] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 814.575810][ T28] audit: type=1400 audit(1012.385:98324): avc: denied { read write } for pid=12326 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.630168][ T28] audit: type=1400 audit(1012.385:98325): avc: denied { read write open } for pid=12326 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.673266][ T28] audit: type=1400 audit(1012.385:98326): avc: denied { ioctl } for pid=12326 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.740829][ T28] audit: type=1400 audit(1012.404:98327): avc: denied { read write } for pid=16928 comm="syz.5.22599" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.767909][ T8170] syz-executor: attempt to access beyond end of device [ 814.767909][ T8170] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 814.782816][ T28] audit: type=1400 audit(1012.404:98328): avc: denied { read write open } for pid=16928 comm="syz.5.22599" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.848610][ T28] audit: type=1400 audit(1012.404:98329): avc: denied { ioctl } for pid=16928 comm="syz.5.22599" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.943516][ T28] audit: type=1400 audit(1012.431:98330): avc: denied { mounton } for pid=16928 comm="syz.5.22599" path="/390/file0" dev="tmpfs" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 815.019874][ T28] audit: type=1400 audit(1012.459:98331): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 815.081599][ T28] audit: type=1400 audit(1012.459:98332): avc: denied { read write open } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 815.229547][T16940] loop4: detected capacity change from 0 to 40427 [ 815.265154][T16940] F2FS-fs (loop4): invalid crc value [ 815.287111][T16940] F2FS-fs (loop4): Found nat_bits in checkpoint [ 815.384789][T16940] F2FS-fs (loop4): Start checkpoint disabled! [ 815.408185][T16940] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 815.617648][T16781] kworker/u4:60: attempt to access beyond end of device [ 815.617648][T16781] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 815.728299][T17006] loop3: detected capacity change from 0 to 512 [ 815.776477][T17006] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 815.885647][T17006] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 815.902588][T17006] EXT4-fs (loop3): 1 truncate cleaned up [ 815.908420][T17006] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 815.989211][ T8170] EXT4-fs (loop3): unmounting filesystem. [ 816.371310][T17049] loop2: detected capacity change from 0 to 1024 [ 816.373837][T17047] loop4: detected capacity change from 0 to 512 [ 816.390684][T17049] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 816.447976][T17049] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 816.457376][T17047] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 816.517087][T17047] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 816.581975][T16853] EXT4-fs (loop2): unmounting filesystem. [ 816.600407][T17047] EXT4-fs (loop4): 1 truncate cleaned up [ 816.633701][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 816.641634][T17047] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 816.671860][T17065] loop5: detected capacity change from 0 to 128 [ 816.701399][T17065] EXT4-fs: Ignoring removed nobh option [ 816.726290][T17065] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 816.774085][ T285] EXT4-fs (loop4): unmounting filesystem. [ 816.789043][T17074] loop1: detected capacity change from 0 to 2048 [ 816.807412][T12326] EXT4-fs (loop5): unmounting filesystem. [ 816.864564][ T24] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 816.874306][T17074] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 816.921435][ T24] usb 4-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 816.956659][ T24] usb 4-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 816.990060][ T8911] EXT4-fs (loop1): unmounting filesystem. [ 816.998471][ T24] usb 4-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 817.031455][ T24] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 817.053635][ T24] usb 4-1: config 220 has no interface number 2 [ 817.073330][ T24] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 817.110467][ T24] usb 4-1: config 220 interface 0 has no altsetting 0 [ 817.130720][ T24] usb 4-1: config 220 interface 76 has no altsetting 0 [ 817.149456][ T24] usb 4-1: config 220 interface 1 has no altsetting 0 [ 817.167152][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 817.203255][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.230005][ T24] usb 4-1: Product: syz [ 817.242419][ T24] usb 4-1: Manufacturer: syz [ 817.252903][ T24] usb 4-1: SerialNumber: syz [ 817.401356][T17110] loop1: detected capacity change from 0 to 2048 [ 817.422539][T17114] syz.2.22670[17114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 817.422614][T17114] syz.2.22670[17114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 817.451127][T17110] loop1: p1 p2 p3 [ 817.488088][ T24] usb 4-1: selecting invalid altsetting 0 [ 817.496424][ T24] usb 4-1: selecting invalid altsetting 0 [ 817.514032][ T24] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 817.534426][ T24] usb 4-1: No valid video chain found. [ 817.566690][ T24] usb 4-1: USB disconnect, device number 100 [ 817.727155][T16090] udevd[16090]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 817.727708][ T8619] udevd[8619]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 817.758051][T17125] loop2: detected capacity change from 0 to 128 [ 817.767833][ T8308] udevd[8308]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 817.796523][T17125] EXT4-fs: Ignoring removed nobh option [ 817.817435][ T8617] udevd[8617]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 817.830733][ T8619] udevd[8619]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 817.847791][ T8308] udevd[8308]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 817.859405][T17125] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 817.928795][T16853] EXT4-fs (loop2): unmounting filesystem. [ 817.990861][T17134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22678'. [ 818.000786][T17134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22678'. [ 818.059634][T17136] tap0: tun_chr_ioctl cmd 2147767520 [ 818.153504][T17140] loop2: detected capacity change from 0 to 128 [ 818.202578][T17140] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 818.208968][T17142] loop4: detected capacity change from 0 to 2048 [ 818.225372][T17140] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 4294965625 (only 1 groups) [ 818.269531][ T24] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 818.319748][T16853] EXT4-fs (loop2): unmounting filesystem. [ 818.354289][T17142] loop4: p1 p2 p3 [ 818.394706][ T103] loop4: p1 p2 p3 [ 818.432890][ T285] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 818.440719][ T8308] I/O error, dev loop4, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 818.468032][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.494572][ T8308] I/O error, dev loop4, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 818.505247][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.516233][T16090] I/O error, dev loop4, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 818.530218][ T8308] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 818.544305][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 818.547425][ T8619] I/O error, dev loop4, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 818.560516][ T8308] I/O error, dev loop4, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 818.574866][T16090] I/O error, dev loop4, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 818.583235][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.606917][ T24] usb 2-1: config 0 descriptor?? [ 818.612439][ T8308] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 818.616474][T16090] Buffer I/O error on dev loop4p3, logical block 8, async page read [ 818.629719][ T8619] I/O error, dev loop4, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 818.630922][ T8308] I/O error, dev loop4, sector 110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 818.645493][T16090] I/O error, dev loop4, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 818.659231][ T8619] Buffer I/O error on dev loop4p2, logical block 8, async page read [ 818.667876][ T8619] I/O error, dev loop4, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 818.670444][ T8308] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 818.677173][T16090] Buffer I/O error on dev loop4p3, logical block 9, async page read [ 818.693534][ T8619] Buffer I/O error on dev loop4p2, logical block 9, async page read [ 818.701725][ T8619] Buffer I/O error on dev loop4p2, logical block 10, async page read [ 818.702620][ T8308] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 818.714766][T16090] Buffer I/O error on dev loop4p3, logical block 10, async page read [ 818.771871][ T8619] udevd[8619]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 818.783663][T16090] udevd[16090]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 818.784907][ T8308] udevd[8308]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 818.908665][ T8619] udevd[8619]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 819.061641][T17173] loop3: detected capacity change from 0 to 256 [ 819.073708][ T24] sony 0003:054C:0BA0.00A4: unknown main item tag 0x0 [ 819.083694][ T24] sony 0003:054C:0BA0.00A4: hidraw0: USB HID v80.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 819.114659][ T24] sony 0003:054C:0BA0.00A4: failed to claim input [ 819.134306][T17175] loop4: detected capacity change from 0 to 1024 [ 819.170524][T17175] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 819.213546][T17175] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 819.290920][ T285] EXT4-fs (loop4): unmounting filesystem. [ 819.413111][T17185] cgroup: fork rejected by pids controller in /syz3 [ 819.587179][T11779] device syz_tun left promiscuous mode [ 819.592977][T11779] bridge0: port 3(syz_tun) entered disabled state [ 819.616492][T17198] device ip6gre3 entered promiscuous mode [ 819.623131][ T19] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 819.635235][ T19] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 819.646031][ T19] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 819.913561][ T28] kauditd_printk_skb: 936 callbacks suppressed [ 819.913578][ T28] audit: type=1400 audit(1017.406:99269): avc: denied { module_request } for pid=17208 comm="syz-executor" kmod="rtnl-link-bond" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 819.943051][ T19] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 819.963540][ T28] audit: type=1400 audit(1017.443:99270): avc: denied { module_request } for pid=17208 comm="syz-executor" kmod="rtnl-link-team" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 820.001526][T17208] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.003057][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 820.008724][T17208] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.024423][T17208] device bridge_slave_0 entered promiscuous mode [ 820.032087][ T28] audit: type=1400 audit(1017.517:99271): avc: denied { ioctl } for pid=17200 comm="syz.4.22709" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 820.062311][T17208] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.069589][T17208] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.077429][T17208] device bridge_slave_1 entered promiscuous mode [ 820.095821][ T28] audit: type=1400 audit(1017.573:99272): avc: denied { module_request } for pid=17208 comm="syz-executor" kmod="netdev-bond0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 820.154456][ T28] audit: type=1400 audit(1017.628:99273): avc: denied { module_request } for pid=17208 comm="syz-executor" kmod="rtnl-link-hsr" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 820.178859][ T28] audit: type=1400 audit(1017.637:99274): avc: denied { read write } for pid=12326 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 820.216158][ T28] audit: type=1400 audit(1017.637:99275): avc: denied { open } for pid=12326 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 820.219736][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 820.240545][ T28] audit: type=1400 audit(1017.637:99276): avc: denied { ioctl } for pid=12326 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 820.268915][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 820.284753][ T294] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 820.289666][ T24] usb 5-1: config 0 has no interface number 0 [ 820.299995][ T28] audit: type=1400 audit(1017.739:99277): avc: denied { ioctl } for pid=17200 comm="syz.4.22709" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 820.308850][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.325274][ T28] audit: type=1400 audit(1017.748:99278): avc: denied { module_request } for pid=17208 comm="syz-executor" kmod="rtnl-link-virt_wifi" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 820.361918][T16717] device bridge_slave_1 left promiscuous mode [ 820.363488][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.368235][T16717] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.386337][T16717] device bridge_slave_0 left promiscuous mode [ 820.392487][T16717] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.393110][ T24] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 820.409782][T16717] device veth1_macvtap left promiscuous mode [ 820.415932][T16717] device veth0_vlan left promiscuous mode [ 820.425103][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.444077][ T24] usb 5-1: config 0 descriptor?? [ 820.594375][T17208] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.601497][T17208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.608817][T17208] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.615873][T17208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.650046][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 820.658508][T17002] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.668182][T17002] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.688835][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 820.697151][T17002] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.704305][T17002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.712413][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 820.721928][T17002] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.729004][T17002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.744945][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 820.753203][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 820.761237][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 820.770280][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 820.796945][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 820.806171][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 820.819738][T17208] device veth0_vlan entered promiscuous mode [ 820.826566][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 820.834689][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 820.843394][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 820.851953][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 820.868070][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 820.876843][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 820.885647][T17208] device veth1_macvtap entered promiscuous mode [ 820.899633][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 820.908521][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 820.918492][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 820.938179][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 820.946629][T17002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 821.115104][ T24] uclogic 0003:28BD:0094.00A5: pen parameters not found [ 821.135344][ T24] uclogic 0003:28BD:0094.00A5: interface is invalid, ignoring [ 821.169211][ T24] usb 5-1: USB disconnect, device number 28 [ 821.180968][T17268] cgroup: fork rejected by pids controller in /syz5 [ 821.225165][ T59] usb 2-1: USB disconnect, device number 117 [ 821.768745][T17417] loop1: detected capacity change from 0 to 128 [ 821.809791][T17417] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 822.012577][T16758] device bridge_slave_1 left promiscuous mode [ 822.021363][T16758] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.041079][T16758] device bridge_slave_0 left promiscuous mode [ 822.051994][T16758] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.071330][T16758] device veth1_macvtap left promiscuous mode [ 822.099608][T16758] device veth0_vlan left promiscuous mode [ 822.340869][T17439] pim6reg: tun_chr_ioctl cmd 1074025672 [ 822.367770][T17439] pim6reg: ignored: set checksum enabled [ 822.488905][T17453] loop3: detected capacity change from 0 to 512 [ 822.578059][T17424] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.632753][T17424] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.687384][T17424] device bridge_slave_0 entered promiscuous mode [ 822.755633][T17424] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.773942][T17424] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.794384][T17424] device bridge_slave_1 entered promiscuous mode [ 822.886415][T17484] loop3: detected capacity change from 0 to 128 [ 822.887949][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22747'. [ 823.084562][T17489] netlink: 128 bytes leftover after parsing attributes in process `syz.3.22751'. [ 823.216478][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 823.230245][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 823.233306][T17472] loop4: detected capacity change from 0 to 40427 [ 823.253619][T17472] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 823.260882][T17472] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 823.274081][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 823.296984][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 823.308341][T16746] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.315421][T16746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.324512][T17472] F2FS-fs (loop4): Found nat_bits in checkpoint [ 823.347727][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 823.373903][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 823.390397][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 823.394154][ T59] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 823.400814][T16746] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.413576][T16746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.426680][T17472] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 823.439870][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 823.447777][T17472] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 823.455800][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 823.517680][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 823.541930][T17258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 823.556087][T17258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 823.572415][T17258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 823.601134][T17424] device veth0_vlan entered promiscuous mode [ 823.613149][ T59] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 823.647187][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 823.651293][ T59] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 823.656993][T17424] device veth1_macvtap entered promiscuous mode [ 823.692081][ T59] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 823.718839][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.726236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 823.764471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 824.120069][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 824.212001][ T59] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 824.229157][ T59] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input109 [ 824.253206][ T59] input: failed to attach handler kbd to device input109, error: -5 [ 824.282960][ T59] usb 2-1: USB disconnect, device number 118 [ 824.307755][T17531] loop2: detected capacity change from 0 to 8192 [ 824.309027][T17537] blk_print_req_error: 17 callbacks suppressed [ 824.309042][T17537] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.386960][T17537] FAT-fs (loop11): unable to read boot sector [ 824.394641][T17539] loop3: detected capacity change from 0 to 128 [ 824.445664][T17539] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 824.515579][T17539] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 824.846110][T17557] loop3: detected capacity change from 0 to 128 [ 824.954467][T17557] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 824.990875][T17565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22781'. [ 825.010199][T17557] FAT-fs (loop3): Filesystem has been set read-only [ 825.051817][T17557] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 825.063352][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22782'. [ 825.293973][T17579] binder: 17577:17579 ioctl c018620c 200000000340 returned -1 [ 825.336886][ T28] kauditd_printk_skb: 787 callbacks suppressed [ 825.336904][ T28] audit: type=1400 audit(1022.418:100066): avc: denied { ioctl } for pid=17582 comm="syz.3.22789" path="pid:[4026532393]" dev="nsfs" ino=4026532393 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 825.387895][ T28] audit: type=1400 audit(1022.455:100067): avc: denied { read write } for pid=17424 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 825.467797][ T28] audit: type=1400 audit(1022.455:100068): avc: denied { open } for pid=17424 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 825.513390][ T28] audit: type=1400 audit(1022.455:100069): avc: denied { ioctl } for pid=17424 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 825.539920][ T28] audit: type=1400 audit(1022.474:100070): avc: denied { read write } for pid=16853 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 825.576921][ T28] audit: type=1400 audit(1022.474:100071): avc: denied { open } for pid=16853 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 825.679922][ T28] audit: type=1400 audit(1022.474:100072): avc: denied { ioctl } for pid=16853 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 825.708337][T17606] audit: audit_backlog=65 > audit_backlog_limit=64 [ 825.718886][T17424] audit: audit_backlog=65 > audit_backlog_limit=64 [ 825.718891][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 826.131216][T17641] loop4: detected capacity change from 0 to 128 [ 826.310754][T17655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22822'. [ 826.662940][T17689] loop3: detected capacity change from 0 to 128 [ 826.985461][T17231] Bluetooth: hci0: Frame reassembly failed (-84) [ 827.007282][T17703] loop4: detected capacity change from 0 to 8192 [ 827.079104][ T8308] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 827.276247][T17721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22851'. [ 827.315418][T17709] loop3: detected capacity change from 0 to 40427 [ 827.347834][T17709] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 827.373851][T17709] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 827.421961][T17727] loop2: detected capacity change from 0 to 128 [ 827.461530][T17709] F2FS-fs (loop3): Found nat_bits in checkpoint [ 827.478073][T17727] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 827.501369][T17727] FAT-fs (loop2): Filesystem has been set read-only [ 827.508111][T17727] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 827.576062][T17709] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 827.594227][T17709] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 827.994005][T17756] loop5: detected capacity change from 0 to 256 [ 828.045879][T17756] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 828.118700][T17756] exFAT-fs (loop5): error, invalid size(size(0) > aligned(9223372036854777344) [ 828.118700][T17756] [ 828.139574][ T294] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 828.150633][T17756] exFAT-fs (loop5): Filesystem has been set read-only [ 828.164481][T17767] netlink: 44 bytes leftover after parsing attributes in process `syz.3.22871'. [ 828.239268][T17771] loop3: detected capacity change from 0 to 2048 [ 828.292961][T17771] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 828.339145][T17771] EXT4-fs error (device loop3): ext4_lookup:1858: inode #13: comm syz.3.22872: unexpected EA_INODE flag [ 828.364502][ T294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.378498][ T294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.395620][T17208] EXT4-fs (loop3): unmounting filesystem. [ 828.402505][ T294] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 828.411877][ T294] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 828.420213][ T294] usb 5-1: Manufacturer: syz [ 828.451336][ T294] usb 5-1: config 0 descriptor?? [ 829.129337][T17812] loop5: detected capacity change from 0 to 1024 [ 829.174541][T17812] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 829.226684][T17424] EXT4-fs (loop5): unmounting filesystem. [ 829.233869][ T3745] Bluetooth: hci0: command 0x1003 tx timeout [ 829.239933][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 830.566981][ T294] uclogic 0003:256C:006D.00A6: failed retrieving string descriptor #200: -71 [ 830.575827][ T294] uclogic 0003:256C:006D.00A6: failed retrieving pen parameters: -71 [ 831.556179][ T294] uclogic 0003:256C:006D.00A6: failed probing pen v2 parameters: -71 [ 831.570584][ T28] kauditd_printk_skb: 752 callbacks suppressed [ 831.570600][ T28] audit: type=1400 audit(1028.169:100750): avc: denied { read write } for pid=17208 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 831.597673][ T294] uclogic 0003:256C:006D.00A6: failed probing parameters: -71 [ 831.653053][ T294] uclogic: probe of 0003:256C:006D.00A6 failed with error -71 [ 832.651256][ T294] usb 5-1: USB disconnect, device number 29 [ 832.666197][ T28] audit: type=1400 audit(1028.169:100751): avc: denied { open } for pid=17208 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 832.694040][ T28] audit: type=1400 audit(1028.169:100752): avc: denied { ioctl } for pid=17208 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 832.729591][ T28] audit: type=1400 audit(1028.178:100753): avc: denied { create } for pid=17831 comm="syz.3.22898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 832.750679][ T28] audit: type=1400 audit(1028.178:100754): avc: denied { write } for pid=17831 comm="syz.3.22898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 832.776613][ T28] audit: type=1400 audit(1028.178:100755): avc: denied { read } for pid=17831 comm="syz.3.22898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 832.833423][ T28] audit: type=1400 audit(1028.215:100756): avc: denied { write } for pid=17831 comm="syz.3.22898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 832.932948][ T28] audit: type=1400 audit(1028.233:100757): avc: denied { read write } for pid=17208 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 832.965972][ T28] audit: type=1400 audit(1028.233:100758): avc: denied { read write open } for pid=17208 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 833.020313][T17850] audit: audit_backlog=65 > audit_backlog_limit=64 [ 833.204873][T17867] pim6reg1: tun_chr_ioctl cmd 2147767521 [ 833.307739][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 833.657047][T17906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22928'. [ 833.735502][T17910] loop4: detected capacity change from 0 to 256 [ 833.757550][T17910] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 833.773575][T17913] loop2: detected capacity change from 0 to 512 [ 833.780062][T17908] loop5: detected capacity change from 0 to 256 [ 833.788232][T17913] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 833.840932][T17910] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 833.976206][T17921] loop2: detected capacity change from 0 to 2048 [ 834.069598][T17929] loop5: detected capacity change from 0 to 1024 [ 834.075901][T17921] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 834.142648][T17929] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 834.162579][T16853] EXT4-fs (loop2): unmounting filesystem. [ 834.236459][T17424] EXT4-fs (loop5): unmounting filesystem. [ 834.425481][T17914] loop3: detected capacity change from 0 to 40427 [ 834.468858][T17914] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 834.499263][T17914] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 834.548645][T17914] F2FS-fs (loop3): invalid crc value [ 834.568913][T17914] F2FS-fs (loop3): Found nat_bits in checkpoint [ 834.616453][T17914] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 834.623649][T17914] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 834.742748][T17412] kworker/u4:152: attempt to access beyond end of device [ 834.742748][T17412] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 834.770260][T17914] VFS:Filesystem freeze failed [ 835.435182][T17992] loop4: detected capacity change from 0 to 512 [ 835.508812][T17992] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 835.596742][ T285] EXT4-fs (loop4): unmounting filesystem. [ 835.770987][T18010] loop5: detected capacity change from 0 to 256 [ 835.829994][T18010] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 836.319397][T18043] loop3: detected capacity change from 0 to 2048 [ 836.393891][T18043] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 836.441725][T17208] EXT4-fs (loop3): unmounting filesystem. [ 836.611939][ T2181] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 836.819036][ T2181] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 836.839523][ T6] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 836.841165][ T2181] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 836.876646][ T2181] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 836.880244][T18070] loop3: detected capacity change from 0 to 128 [ 836.893649][ T2181] usb 6-1: SerialNumber: syz [ 836.921389][T18070] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 836.962799][T17208] EXT4-fs (loop3): unmounting filesystem. [ 836.997190][ T28] kauditd_printk_skb: 756 callbacks suppressed [ 836.997209][ T28] audit: type=1400 audit(1033.171:101447): avc: denied { bpf } for pid=18073 comm="syz.3.22998" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 837.025871][ T28] audit: type=1400 audit(1033.208:101448): avc: denied { prog_load } for pid=18073 comm="syz.3.22998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 837.046013][ T28] audit: type=1400 audit(1033.208:101449): avc: denied { bpf } for pid=18073 comm="syz.3.22998" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 837.066949][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 837.073328][ T28] audit: type=1400 audit(1033.208:101450): avc: denied { perfmon } for pid=18073 comm="syz.3.22998" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 837.095384][ T28] audit: type=1400 audit(1033.208:101451): avc: denied { prog_run } for pid=18073 comm="syz.3.22998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 837.115338][ T6] usb 5-1: config 1 interface 0 altsetting 220 endpoint 0x1 has invalid wMaxPacketSize 0 [ 837.135515][ T28] audit: type=1400 audit(1033.245:101452): avc: denied { ioctl } for pid=18059 comm="syz.4.22992" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 837.161198][ T6] usb 5-1: config 1 interface 0 altsetting 220 bulk endpoint 0x1 has invalid maxpacket 0 [ 837.191123][ T6] usb 5-1: config 1 interface 0 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.205330][ T28] audit: type=1400 audit(1033.245:101453): avc: denied { ioctl } for pid=18059 comm="syz.4.22992" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 837.230812][ T6] usb 5-1: config 1 interface 0 has no altsetting 0 [ 837.238157][ T28] audit: type=1400 audit(1033.282:101454): avc: denied { read write } for pid=8911 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 837.267127][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 837.283610][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.292053][ T6] usb 5-1: Product: syz [ 837.299819][T18082] loop1: detected capacity change from 0 to 2048 [ 837.308247][ T28] audit: type=1400 audit(1033.282:101455): avc: denied { ioctl } for pid=18059 comm="syz.4.22992" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 837.339218][ T6] usb 5-1: Manufacturer: syz [ 837.343855][ T6] usb 5-1: SerialNumber: syz [ 837.347514][ T2181] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 837.368620][ T28] audit: type=1400 audit(1033.282:101456): avc: denied { open } for pid=8911 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 837.385910][ T2181] usb 6-1: USB disconnect, device number 34 [ 837.415414][T18082] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 837.497370][ T8911] EXT4-fs (loop1): unmounting filesystem. [ 837.585522][ T6] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 220 proto 1 vid 0x0525 pid 0xA4A8 [ 837.845126][ T6] usb 5-1: USB disconnect, device number 30 [ 837.859427][ T6] usblp0: removed [ 837.896644][T18102] kvm [18101]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000030) = 0x0 [ 838.492256][T18152] loop4: detected capacity change from 0 to 2048 [ 838.577135][T18152] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 838.698504][ T285] EXT4-fs (loop4): unmounting filesystem. [ 838.811315][ T6] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 839.016467][T18193] kvm [18192]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000030) = 0x0 [ 839.026656][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13629, setting to 64 [ 839.061293][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 839.074269][ T6] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 839.083358][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.102597][ T6] usb 4-1: config 0 descriptor?? [ 839.110872][T18157] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 839.589646][ T6] hid-generic 0003:0457:07DA.00A7: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 839.851388][ T2181] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 839.908033][ T6] usb 4-1: USB disconnect, device number 101 [ 840.058829][ T2181] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.086980][ T2181] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.106886][ T2181] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 840.129149][ T2181] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 840.151209][ T2181] usb 6-1: Manufacturer: syz [ 840.163657][ T2181] usb 6-1: config 0 descriptor?? [ 840.493804][T18284] loop1: detected capacity change from 0 to 256 [ 840.500743][T18286] loop4: detected capacity change from 0 to 256 [ 840.799835][T18298] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3944. macoff=96 [ 841.058388][ T2181] uclogic 0003:256C:006D.00A8: failed retrieving string descriptor #200: -71 [ 841.086419][ T2181] uclogic 0003:256C:006D.00A8: failed retrieving pen parameters: -71 [ 841.103488][T18310] loop4: detected capacity change from 0 to 40427 [ 841.110216][ T2181] uclogic 0003:256C:006D.00A8: failed probing pen v2 parameters: -71 [ 841.124115][T18310] F2FS-fs (loop4): invalid crc value [ 841.149154][ T2181] uclogic 0003:256C:006D.00A8: failed probing parameters: -71 [ 841.165358][T18310] F2FS-fs (loop4): Found nat_bits in checkpoint [ 841.166782][ T2181] uclogic: probe of 0003:256C:006D.00A8 failed with error -71 [ 841.216754][T18310] F2FS-fs (loop4): Start checkpoint disabled! [ 841.218203][ T2181] usb 6-1: USB disconnect, device number 35 [ 841.237359][T18310] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 841.342835][ T285] syz-executor: attempt to access beyond end of device [ 841.342835][ T285] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 841.357742][ T285] syz-executor: attempt to access beyond end of device [ 841.357742][ T285] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 841.475332][T16737] kworker/u4:30: attempt to access beyond end of device [ 841.475332][T16737] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 841.566948][T17261] tipc: Disabling bearer [ 841.582838][T17261] tipc: Left network mode [ 841.964646][T18342] loop5: detected capacity change from 0 to 512 [ 842.027167][T18342] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 842.089902][T17424] EXT4-fs (loop5): unmounting filesystem. [ 842.244329][T17261] device bridge_slave_1 left promiscuous mode [ 842.269412][T17261] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.284225][T17261] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.300469][T18361] loop1: detected capacity change from 0 to 512 [ 842.313192][T18363] random: crng reseeded on system resumption [ 842.419376][ T28] kauditd_printk_skb: 823 callbacks suppressed [ 842.419394][ T28] audit: type=1400 audit(1038.183:102280): avc: denied { read write open } for pid=18364 comm="syz.1.23087" path="/dev/loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 842.451116][ T28] audit: type=1400 audit(1038.211:102281): avc: denied { ioctl } for pid=18364 comm="syz.1.23087" path="/dev/loop1" dev="devtmpfs" ino=119 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 842.451315][T18365] loop1: detected capacity change from 0 to 512 [ 842.500560][ T28] audit: type=1400 audit(1038.257:102282): avc: denied { ioctl } for pid=18362 comm="syz.5.23086" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 842.573212][ T28] audit: type=1400 audit(1038.266:102283): avc: denied { write } for pid=18362 comm="syz.5.23086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 842.605060][T18365] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 842.608039][ T28] audit: type=1400 audit(1038.266:102284): avc: denied { module_request } for pid=18362 comm="syz.5.23086" kmod="nfnetlink-subsys-6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 842.637782][ T28] audit: type=1400 audit(1038.266:102285): avc: denied { read write } for pid=17424 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 842.663322][ T28] audit: type=1400 audit(1038.266:102286): avc: denied { open } for pid=17424 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 842.689236][ T28] audit: type=1400 audit(1038.266:102287): avc: denied { ioctl } for pid=17424 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 842.692592][ T8911] EXT4-fs (loop1): unmounting filesystem. [ 842.742418][ T28] audit: type=1400 audit(1038.294:102288): avc: denied { mounton } for pid=18364 comm="syz.1.23087" path="/815/file1" dev="tmpfs" ino=4240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 842.765293][ T28] audit: type=1400 audit(1038.386:102289): avc: denied { mount } for pid=18364 comm="syz.1.23087" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 842.900837][T18380] loop2: detected capacity change from 0 to 16 [ 842.921989][T18380] erofs: (device loop2): mounted with root inode @ nid 36. [ 842.938221][T18371] tun0: tun_chr_ioctl cmd 1074025680 [ 842.987852][T18383] loop1: detected capacity change from 0 to 512 [ 843.047067][T18383] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 843.073853][T18354] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.086593][T18354] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.095603][T18354] device bridge_slave_0 entered promiscuous mode [ 843.104166][T18354] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.111461][T18354] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.119308][T18354] device bridge_slave_1 entered promiscuous mode [ 843.234705][ T8911] EXT4-fs (loop1): unmounting filesystem. [ 843.257091][T18399] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 843.402322][T18354] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.409436][T18354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.416783][T18354] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.423923][T18354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.457728][T18421] loop1: detected capacity change from 0 to 16 [ 843.495119][T18421] erofs: (device loop1): mounted with root inode @ nid 36. [ 843.508817][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 843.534573][T17246] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.570375][T17246] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.580634][T18429] loop3: detected capacity change from 0 to 512 [ 843.607485][T18429] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 843.633774][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 843.667071][T17246] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.674202][T17246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.704099][T18435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23114'. [ 843.713641][T18435] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23114'. [ 843.724401][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 843.724478][T17208] EXT4-fs (loop3): unmounting filesystem. [ 843.733435][T17246] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.745414][T17246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.752830][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 843.760931][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 843.846518][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 843.872618][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 843.883413][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 843.925324][T17408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 843.932975][T18444] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 843.949876][T18443] loop2: detected capacity change from 0 to 1024 [ 843.969094][T18443] EXT4-fs: Ignoring removed bh option [ 843.979548][T18354] device veth0_vlan entered promiscuous mode [ 844.000446][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 844.017373][T18354] device veth1_macvtap entered promiscuous mode [ 844.025526][T18443] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 844.060658][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 844.078132][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 844.109858][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 844.122187][T18443] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.23125: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 844.122353][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 844.152126][T18443] EXT4-fs (loop2): Remounting filesystem read-only [ 844.207001][T16853] EXT4-fs error (device loop2): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /96/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 844.230207][T16853] EXT4-fs (loop2): Remounting filesystem read-only [ 844.237754][T16853] EXT4-fs error (device loop2): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /96/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 844.261771][T16853] EXT4-fs (loop2): Remounting filesystem read-only [ 844.268783][T16853] EXT4-fs error (device loop2): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 844.312910][T16853] EXT4-fs (loop2): Remounting filesystem read-only [ 844.341292][T16853] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 844.380184][T16853] EXT4-fs error (device loop2): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /96/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 844.410351][T18463] can0: slcan on ttyS3. [ 844.466814][T16853] EXT4-fs (loop2): Remounting filesystem read-only [ 844.476303][T18467] loop5: detected capacity change from 0 to 1024 [ 844.482870][T18462] can0 (unregistered): slcan off ttyS3. [ 844.510077][T16853] EXT4-fs error (device loop2): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /96/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 844.520546][T18467] EXT4-fs: Ignoring removed mblk_io_submit option [ 844.576635][T16853] EXT4-fs (loop2): Remounting filesystem read-only [ 844.600246][T16853] EXT4-fs error (device loop2): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 844.647804][T18467] EXT4-fs: Ignoring removed oldalloc option [ 844.650219][T18481] loop3: detected capacity change from 0 to 1024 [ 844.662527][T18467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 844.680628][T16853] EXT4-fs (loop2): Remounting filesystem read-only [ 844.701038][T16853] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 844.724898][T18467] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 844.762477][T16853] EXT4-fs error (device loop2): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /96/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 844.807590][T18481] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 844.858877][T17424] EXT4-fs (loop5): unmounting filesystem. [ 844.911812][T16853] EXT4-fs (loop2): Remounting filesystem read-only [ 844.918405][T16853] EXT4-fs error (device loop2): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /96/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 844.956608][T17208] EXT4-fs (loop3): unmounting filesystem. [ 845.053594][T16853] EXT4-fs (loop2): Remounting filesystem read-only [ 845.081389][T16853] EXT4-fs error (device loop2): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 845.162802][T16853] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 845.179408][T18520] netlink: 16 bytes leftover after parsing attributes in process `syz.5.23142'. [ 845.205234][T16853] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 845.253482][T16853] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 845.293286][T16853] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 845.319966][T16853] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 845.368018][T16853] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 845.422151][T16853] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 845.489637][T16853] EXT4-fs warning (device loop2): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 845.786135][T18570] loop1: detected capacity change from 0 to 1024 [ 845.799732][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 845.819671][T18570] EXT4-fs: Ignoring removed bh option [ 845.867047][T18570] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 846.010263][T18570] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.23158: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 846.064460][T18570] EXT4-fs (loop1): Remounting filesystem read-only [ 846.146374][ T8911] EXT4-fs error (device loop1): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /827/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 846.170073][T18582] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.177150][T18582] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.196516][T18582] device bridge_slave_0 entered promiscuous mode [ 846.238958][T18582] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.245964][ T8911] EXT4-fs (loop1): Remounting filesystem read-only [ 846.246974][T18582] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.266540][T18582] device bridge_slave_1 entered promiscuous mode [ 846.269999][ T8911] EXT4-fs error (device loop1): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /827/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 846.302604][T18599] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23172'. [ 846.322960][ T8911] EXT4-fs (loop1): Remounting filesystem read-only [ 846.336975][ T8911] EXT4-fs error (device loop1): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 846.382593][ T8911] EXT4-fs (loop1): Remounting filesystem read-only [ 846.397326][ T8911] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 846.440938][ T8911] EXT4-fs error (device loop1): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /827/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 846.486976][T16737] device bridge_slave_1 left promiscuous mode [ 846.494279][ T8911] EXT4-fs (loop1): Remounting filesystem read-only [ 846.498315][T16737] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.510565][ T8911] EXT4-fs error (device loop1): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /827/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 846.533506][T16737] device bridge_slave_0 left promiscuous mode [ 846.548960][T16737] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.564554][T16737] device veth1_macvtap left promiscuous mode [ 846.570403][ T8911] EXT4-fs (loop1): Remounting filesystem read-only [ 846.571128][T16737] device veth0_vlan left promiscuous mode [ 846.588567][ T8911] EXT4-fs error (device loop1): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 846.664509][T18615] loop3: detected capacity change from 0 to 1024 [ 846.678977][ T8911] EXT4-fs (loop1): Remounting filesystem read-only [ 846.685627][ T8911] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 846.686596][T18615] EXT4-fs: Ignoring removed bh option [ 846.754910][T18615] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 846.775120][ T8911] EXT4-fs error (device loop1): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /827/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 846.872398][T18615] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.23179: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 846.895449][ T8911] EXT4-fs (loop1): Remounting filesystem read-only [ 846.902169][ T8911] EXT4-fs error (device loop1): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /827/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 846.917120][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 846.927674][T18615] EXT4-fs (loop3): Remounting filesystem read-only [ 846.934838][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 846.974229][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 846.994507][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 847.013824][T17261] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.020921][T17261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.034104][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 847.037137][ T8911] EXT4-fs (loop1): Remounting filesystem read-only [ 847.045658][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 847.060676][T17208] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /122/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 847.083930][T17261] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.084303][ T8911] EXT4-fs error (device loop1): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 847.091099][T17261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.099098][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 847.143723][T17208] EXT4-fs (loop3): Remounting filesystem read-only [ 847.154630][T17208] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /122/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 847.162235][ T8911] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 847.201886][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 847.212225][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 847.222927][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 847.232066][T17208] EXT4-fs (loop3): Remounting filesystem read-only [ 847.239014][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 847.254705][T17208] EXT4-fs error (device loop3): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 847.276529][ T8911] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 847.307197][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 847.318599][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 847.327953][T17208] EXT4-fs (loop3): Remounting filesystem read-only [ 847.328424][ T8911] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 847.334516][T17208] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 847.372231][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 847.383040][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 847.392544][T18582] device veth0_vlan entered promiscuous mode [ 847.399054][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 847.408542][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 847.425344][ T8911] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 847.425369][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 847.425649][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 847.458418][T17208] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /122/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 847.479563][ T8911] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 847.483445][T18582] device veth1_macvtap entered promiscuous mode [ 847.501532][T17208] EXT4-fs (loop3): Remounting filesystem read-only [ 847.508101][T17208] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /122/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 847.523596][ T8911] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 847.536144][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 847.553151][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 847.562045][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 847.570272][T17208] EXT4-fs (loop3): Remounting filesystem read-only [ 847.587663][T17208] EXT4-fs error (device loop3): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 847.599000][ T8911] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 847.614583][T17208] EXT4-fs (loop3): Remounting filesystem read-only [ 847.637510][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 847.647050][T17208] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 847.664790][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 847.664942][T18643] loop5: detected capacity change from 0 to 40427 [ 847.681232][ T8911] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 847.687560][T17208] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /122/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 847.720662][T17208] EXT4-fs (loop3): Remounting filesystem read-only [ 847.730129][T18643] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 847.735067][T17208] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /122/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 847.749496][T18643] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 847.807334][T18643] F2FS-fs (loop5): invalid crc value [ 847.832034][T18643] F2FS-fs (loop5): Found nat_bits in checkpoint [ 847.852654][ T28] kauditd_printk_skb: 1166 callbacks suppressed [ 847.852671][ T28] audit: type=1400 audit(1043.195:103456): avc: denied { read write } for pid=18582 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 847.907315][T17208] EXT4-fs (loop3): Remounting filesystem read-only [ 847.922510][T18651] SELinux: failed to load policy [ 847.930186][T17208] EXT4-fs error (device loop3): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 847.930316][T18643] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 848.002273][ T28] audit: type=1400 audit(1043.223:103457): avc: denied { write } for pid=8911 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 848.012180][T18643] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 848.032008][T17208] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 848.100052][T18665] audit: audit_backlog=65 > audit_backlog_limit=64 [ 848.109859][T18643] audit: audit_backlog=65 > audit_backlog_limit=64 [ 848.113543][T17208] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 848.116399][T18643] audit: audit_lost=498 audit_rate_limit=0 audit_backlog_limit=64 [ 848.139107][ T28] audit: type=1400 audit(1043.223:103458): avc: denied { remove_name } for pid=8911 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 848.162430][T18667] audit: audit_backlog=65 > audit_backlog_limit=64 [ 848.168955][T18667] audit: audit_lost=499 audit_rate_limit=0 audit_backlog_limit=64 [ 848.177861][T18643] audit: backlog limit exceeded [ 848.179550][T18665] audit: audit_lost=500 audit_rate_limit=0 audit_backlog_limit=64 [ 848.209127][ T8308] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 848.216090][T17208] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 848.234827][T17246] tipc: Disabling bearer [ 848.239652][ T8308] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 848.249510][ T8308] buffer_io_error: 14 callbacks suppressed [ 848.249528][ T8308] Buffer I/O error on dev loop7p9, logical block 0, async page read [ 848.264249][T17246] tipc: Left network mode [ 848.274244][T17208] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 848.296901][T17208] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 848.313896][T17208] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 848.332192][T17208] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 848.348644][T17208] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 848.468197][ T8308] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 848.480492][ T8308] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 848.489936][ T8308] Buffer I/O error on dev loop7p9, logical block 0, async page read [ 848.784333][T18675] loop7: detected capacity change from 0 to 32768 [ 848.853105][T17246] device bridge_slave_0 left promiscuous mode [ 848.869752][T18675] loop7: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 848.890279][T17246] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.066187][T17246] device veth1_macvtap left promiscuous mode [ 849.080220][T17246] device veth0_vlan left promiscuous mode [ 849.413199][T18690] veth1_virt_wifi: vlans aren't supported yet for dev_uc|mc_add() [ 849.444265][T18699] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 849.459764][T18699] dvmrp1: linktype set to 24593 [ 849.482389][ T103] loop7: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 849.695611][T18683] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.988441][T18683] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.004869][T18683] device bridge_slave_0 entered promiscuous mode [ 850.035240][T18683] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.069385][T18683] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.088010][T18683] device bridge_slave_1 entered promiscuous mode [ 850.111860][T18693] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.118965][T18693] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.142174][ T8308] udevd[8308]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 850.169097][T18693] device bridge_slave_0 entered promiscuous mode [ 850.171366][ T8619] udevd[8619]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 850.179658][T18736] loop5: detected capacity change from 0 to 256 [ 850.189287][T16090] udevd[16090]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 850.205724][ T8617] udevd[8617]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 850.208958][ T8164] udevd[8164]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 850.230038][ T8171] udevd[8171]: inotify_add_watch(7, /dev/loop7p8, 10) failed: No such file or directory [ 850.230206][T16091] udevd[16091]: inotify_add_watch(7, /dev/loop7p9, 10) failed: No such file or directory [ 850.244432][ T8215] udevd[8215]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 850.264167][T18693] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.271498][T18693] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.305034][T18740] udevd[18740]: inotify_add_watch(7, /dev/loop7p12, 10) failed: No such file or directory [ 850.305462][T18739] udevd[18739]: inotify_add_watch(7, /dev/loop7p11, 10) failed: No such file or directory [ 850.336509][T18693] device bridge_slave_1 entered promiscuous mode [ 850.346247][T18736] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 850.367532][T18736] FAT-fs (loop5): Filesystem has been set read-only [ 850.397474][T18743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23228'. [ 850.425642][T18743] netlink: 28 bytes leftover after parsing attributes in process `syz.7.23228'. [ 850.926598][T18769] loop5: detected capacity change from 0 to 512 [ 850.968681][T18769] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 851.006500][T18769] EXT4-fs (loop5): Test dummy encryption mode enabled [ 851.058837][T18769] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.23239: casefold flag without casefold feature [ 851.097150][T18769] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.23239: couldn't read orphan inode 15 (err -117) [ 851.122907][T18769] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 851.123142][T18782] netlink: 68 bytes leftover after parsing attributes in process `syz.7.23241'. [ 851.189789][T17246] device bridge_slave_1 left promiscuous mode [ 851.225363][T18769] overlayfs: failed to resolve './file1': -2 [ 851.226979][T17246] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.276447][T17246] device bridge_slave_0 left promiscuous mode [ 851.324364][T17246] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.375151][T17424] EXT4-fs (loop5): unmounting filesystem. [ 851.388846][T17246] device veth1_macvtap left promiscuous mode [ 851.425436][T17246] device veth0_vlan left promiscuous mode [ 851.480325][T18789] input: syz1 as /devices/virtual/input/input111 [ 851.742439][T18796] netlink: 'syz.5.23246': attribute type 7 has an invalid length. [ 851.782339][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 851.802294][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 851.847965][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 851.897297][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 851.919147][T16737] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.926286][T16737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.027703][T18813] input: syz1 as /devices/virtual/input/input112 [ 852.042332][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 852.058921][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 852.105132][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 852.141738][T16737] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.148858][T16737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.217400][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 852.280189][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 852.372110][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 852.397712][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 852.435908][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 852.468254][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 852.572991][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 852.596040][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 852.659716][T16737] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.666791][T16737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.781158][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 852.816890][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 852.847078][T16737] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.854367][T16737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.922728][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 852.960216][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 853.001081][T18683] device veth0_vlan entered promiscuous mode [ 853.032812][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 853.056495][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 853.097604][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 853.132522][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 853.174761][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 853.213577][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 853.248260][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 853.274987][ T28] kauditd_printk_skb: 685 callbacks suppressed [ 853.275003][ T28] audit: type=1400 audit(1048.198:104091): avc: denied { module_request } for pid=18693 comm="syz-executor" kmod="netdev-hsr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 853.277276][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 853.281220][ T28] audit: type=1400 audit(1048.198:104092): avc: denied { sys_module } for pid=18693 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 853.383662][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 853.419031][T18683] audit: audit_backlog=65 > audit_backlog_limit=64 [ 853.425576][T18683] audit: audit_lost=518 audit_rate_limit=0 audit_backlog_limit=64 [ 853.436136][T18867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 853.448414][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 853.456698][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 853.459133][ T28] audit: type=1400 audit(1048.198:104093): avc: denied { module_request } for pid=18683 comm="syz-executor" kmod="netdev-macvlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 853.488676][T18867] audit: audit_lost=519 audit_rate_limit=0 audit_backlog_limit=64 [ 853.517780][T17424] audit: audit_backlog=65 > audit_backlog_limit=64 [ 853.535109][T18867] audit: backlog limit exceeded [ 853.540483][T18683] audit: backlog limit exceeded [ 853.546600][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 853.578600][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 853.611575][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 853.629130][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 853.668439][T18693] device veth0_vlan entered promiscuous mode [ 853.683686][T18683] device veth1_macvtap entered promiscuous mode [ 853.695084][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 853.720225][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 853.741463][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 853.778229][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 853.799910][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 853.826988][T18693] device veth1_macvtap entered promiscuous mode [ 853.862099][T18892] netlink: 12 bytes leftover after parsing attributes in process `syz.7.23291'. [ 853.907018][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 853.923161][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 853.940858][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 853.959428][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 853.977372][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 854.000897][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 854.001448][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 854.001709][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 854.001977][T17246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 854.083814][T18907] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 854.083897][T18907] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 854.148312][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 854.163995][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 854.196105][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 854.204412][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 854.228882][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 854.250402][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 854.274787][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 854.310451][T16737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 854.814649][T17246] device bridge_slave_1 left promiscuous mode [ 854.820851][T17246] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.850395][T17246] device bridge_slave_0 left promiscuous mode [ 854.850463][T17246] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.852449][T17246] device veth1_macvtap left promiscuous mode [ 854.852512][T17246] device veth0_vlan left promiscuous mode [ 855.369776][T19011] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 856.081839][T17246] device bridge_slave_1 left promiscuous mode [ 856.088006][T17246] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.095826][T17246] device bridge_slave_0 left promiscuous mode [ 856.101957][T17246] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.110437][T17246] device veth1_macvtap left promiscuous mode [ 856.116518][T17246] device veth0_vlan left promiscuous mode [ 857.133805][T17246] device bridge_slave_1 left promiscuous mode [ 857.140056][T17246] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.148121][T17246] device bridge_slave_0 left promiscuous mode [ 857.154350][T17246] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.163004][T17246] device bridge_slave_1 left promiscuous mode [ 857.169523][T17246] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.177491][T17246] device bridge_slave_0 left promiscuous mode [ 857.183654][T17246] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.192263][T17246] device bridge_slave_1 left promiscuous mode [ 857.198713][T17246] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.207148][T17246] device bridge_slave_0 left promiscuous mode [ 857.213743][T17246] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.222817][T17246] device veth1_macvtap left promiscuous mode [ 857.228871][T17246] device veth0_vlan left promiscuous mode [ 857.236142][T17246] device veth1_macvtap left promiscuous mode [ 857.242307][T17246] device veth0_vlan left promiscuous mode [ 857.248402][T17246] device veth1_macvtap left promiscuous mode [ 857.254701][T17246] device veth0_vlan left promiscuous mode