last executing test programs: 2m10.170387586s ago: executing program 0 (id=1434): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e26, 0xe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 2m10.137385016s ago: executing program 0 (id=1436): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 2m10.090496717s ago: executing program 0 (id=1440): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c9002000600000003000100"/64]) 2m9.948040389s ago: executing program 0 (id=1441): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001a00)=ANY=[@ANYBLOB='allow_utime=00000000000000000000302,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=iso8859-14,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030000000002c646973636172642c7569643d020331dcd7706de469da08a27f989c2c8492e71601372cb14bdcaee57b93e3d030470bd060999c22775e7b5ed20cdc0d19238d47a5ad1a7e4bb598f5658bf54b4ca97cce85a6296d1725", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000020000002,defcontext=user_u,obj_user=iocharset,\x00'], 0x1, 0x152a, &(0x7f0000000340)="$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") chroot(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 2m9.733855631s ago: executing program 0 (id=1455): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1100) 2m9.670419622s ago: executing program 1 (id=1459): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 2m9.659041992s ago: executing program 1 (id=1460): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='8', 0x1}], 0x4a, 0x0) 2m9.639330982s ago: executing program 0 (id=1461): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "96010000000000000000000000000000000008"}) 2m9.593966483s ago: executing program 32 (id=1461): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "96010000000000000000000000000000000008"}) 2m9.586747613s ago: executing program 1 (id=1464): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x20) 2m9.555563633s ago: executing program 1 (id=1466): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001a00)=ANY=[@ANYBLOB='allow_utime=00000000000000000000302,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=iso8859-14,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030000000002c646973636172642c7569643d020331dcd7706de469da08a27f989c2c8492e71601372cb14bdcaee57b93e3d030470bd060999c22775e7b5ed20cdc0d19238d47a5ad1a7e4bb598f5658bf54b4ca97cce85a6296d1725", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000020000002,defcontext=user_u,obj_user=iocharset,\x00'], 0x1, 0x152a, &(0x7f0000000340)="$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") chroot(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 2m9.358671586s ago: executing program 1 (id=1473): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0) 2m9.094842429s ago: executing program 1 (id=1482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0xffa6, 0x0, 0xd0}, 0x20008000) 2m9.066527259s ago: executing program 33 (id=1482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0xffa6, 0x0, 0xd0}, 0x20008000) 18.090384454s ago: executing program 2 (id=5909): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f0000000080), 0x5, 0x438, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r0, r0, 0x0, 0x200) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000100)={0x17c04, 0xffffffffffffffff, 0xfffffffffffffffc, 0x800007ff, 0x5}) 17.746352958s ago: executing program 2 (id=5914): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000000180)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) 17.673775969s ago: executing program 2 (id=5916): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x12100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r2}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 17.64142344s ago: executing program 2 (id=5917): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 17.63188309s ago: executing program 2 (id=5918): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000700000000000009209500000000000000f7315374ce569ec55869bfbcfa7c4e8f52e6288f2fbc43a3af3c6b881320c24423492f2fc14c9de730f42434dfa11c77edc1f06776d8"], &(0x7f0000000040)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1}, 0x18) 17.562733211s ago: executing program 2 (id=5919): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d40)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e00)=@newtaction={0x78, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x64, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x78}}, 0x0) 17.549542491s ago: executing program 34 (id=5919): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d40)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e00)=@newtaction={0x78, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x64, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x78}}, 0x0) 11.467150334s ago: executing program 7 (id=6136): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788031c09102f28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 11.388421284s ago: executing program 7 (id=6138): bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 11.348292445s ago: executing program 7 (id=6139): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="8497", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000140)="1e4a", 0x2, 0x3b00, 0x0, 0x0) 11.274492995s ago: executing program 7 (id=6140): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x22c904b, &(0x7f0000000100)={[{@delalloc}, {@quota}, {@noquota}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0xfffffffffffffffc}}, {@nouid32}]}, 0x81, 0x4bc, &(0x7f0000000a00)="$eJzs3c1vG2UaAPDHdvPZ7PZjV6u2K20rdaXuhxrnQ6smu3vhBBwqISpxAamExA0lThzFTmmiHlK49cABgUBCHLjzF3ChJyokxBnuiAMqghIkQEIYeWyn+XKwaGJLmd9Pmuadead+3jfW82b8zowngNQ6V/snEzEUEZ9GxLH66tYdztV/rD+4NV1bMlGtXvkmk+xXW2/u2vx/RyNiLSL6I+LpxyNeyOyMW15ZnZsqFgtLjfV8ZX4xX15ZvXh9fmq2MFtYGJ24NDk5MTI+Nrlvfb3z2kt3Ln/wZO/7P7x6/97rH31Ya9ZQo25zP/ZTves9cWLTtiMR8f+DCNYFuUZ/BrrdEH6X2vv3p4g4n+T/scgl7yaQBtVqtfpzta9V9VoVOLSyyTFwJjscEfVyNjs8XD+G/3MMZoulcuXf10rLCzP1Y+Xj0ZO9dr1YGGl8VjgePZna+mhSfrg+tm19PCI5Bn4jN5CsD0+XijOdHeqAbY5uy//vc/X8B1LCR35Irz3zP9u5dgCd5+8/pJf8h/SS/5BeO/P/l660A+i8dv7+5zrQDqDzHP9Desl/SC/5D+kl/yGVnrp8ubZUm/e/z9xYWZ4r3bg4UyjPDc8vTw9Pl5YWh2dLpdnknp3533q9Yqm0OPqfWL6ZrxTKlXx5ZfXqfGl5oXI1ua//aqGnI70C2nHi7N3PMxGx9t+BZKnpbdTJVTjcqtVMdPseZKA7nNaH9DL1B+nlMz6wy1f0btHfqmJx/9sCdIZv94D0unD6Uc7/VQ+4dcBBMv8P6WX+H9LL/D9g/h/Sx/w/pNdQi+d//WHTs7tGIuKPEfFZrqev+awv4DDIfpVpHP9fOPb3oe21vZkfk1MEvRHx8jtX3ro5Vaksjda2f7uxvfJ2Y/tYN9oPtKuZp808BgDSa/3Brenm0sm4Xz9WvwhhZ/wjjbnJ/uQc5eB6Zsu1Cpl9unZh7XZEnNotfqbxvPP6mY/B9dyO+CcbPzP1l0jaeyR5bnpn4p/eFP9vm+KfeeTfCqTD3dr4M7Jb/mWTnI6N/Ns6/gzt07UTrce/7Mb4l2sx/p1tM8aL777yZcv4tyPO7Bq/Ga8/ibU9fq1tF9qMf/+5Z/7Sqq76Xv11dovfVCvlK/OL+fLK6sXke+RmCwujE5cmJydGxscm88kcdb45U73T/059cm+v/g+2iL9X/2vb/tlm/3/668fPntsj/j/O7/7+n9wj/kBE/KvN+N+NffF8q7pa/JkW/c/uEb+2bbzN+OU3n+hrc1cAoAPKK6tzU8ViYUlBQUFho9DtkQk4aA+TvtstAQAAAAAAAAAAANrV+jLgvn27nLjbfQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAx+DQAA//+iodfy") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002180), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0) 10.826762021s ago: executing program 7 (id=6143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 10.672191533s ago: executing program 7 (id=6148): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 10.646619013s ago: executing program 35 (id=6148): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 3.406573059s ago: executing program 6 (id=6320): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000006480)) 3.37772491s ago: executing program 6 (id=6323): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000840), &(0x7f0000000340)}, 0x20) 3.3640614s ago: executing program 6 (id=6324): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 3.33968064s ago: executing program 6 (id=6327): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f00000003c0)={[], 0xf000}, 0x1000) 2.929355535s ago: executing program 6 (id=6332): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 2.309024933s ago: executing program 8 (id=6341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) write$vga_arbiter(r0, &(0x7f00000001c0)=@other={'decodes', ' ', 'mem'}, 0xc) 2.242589933s ago: executing program 8 (id=6344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) 2.212776594s ago: executing program 8 (id=6346): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0xff, @remote, @local, {[], {{0xb00, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x0, 0x0, 0x5, {[@timestamp={0x8, 0xa, 0x80000001, 0x2}, @generic={0x22, 0x5, "da6434"}, @sack={0x5, 0xe, [0xa, 0x10, 0x0]}, @md5sig={0x13, 0x12, "c23e0ddf11dfe254a9ad8c6494c61c3e"}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) 2.074271295s ago: executing program 6 (id=6353): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1, 0xf75273e73c923b54}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x4, 0x4}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000400)={0x40, 0xb, 0x2, '~\t'}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000480)={0x40, 0x13, 0x6, @remote}, &(0x7f00000004c0)={0x40, 0x17, 0x6}, &(0x7f0000000500)={0x40, 0x19, 0x2, "beb4"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x3}, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00?'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000880)={0x14, &(0x7f0000000740)={0x20, 0x22, 0x2, {0x2, 0x5}}, 0x0}, 0x0) 1.972667967s ago: executing program 8 (id=6358): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000500)='./bus\x00', 0x2000006, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f636f6c61a3ea000073683c000e1c906ec52a91a85a14cb7fb0c282c5737a29f37a113e"], 0x28, 0x363, &(0x7f0000000100)="$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") syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x120) getdents64(r0, &(0x7f0000000080)=""/203, 0xcb) 1.69236916s ago: executing program 8 (id=6365): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) 1.596655281s ago: executing program 5 (id=6370): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x5514, &(0x7f000000b2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000280)=@v2={0x2000000, [{0x6, 0x220}, {0x1000, 0x40}]}, 0x14, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1.478365612s ago: executing program 8 (id=6373): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000), 0x4) 1.457923543s ago: executing program 36 (id=6373): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000), 0x4) 1.286725235s ago: executing program 5 (id=6375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x78, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x100, 0xa608}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0xffe}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x1000}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x78}, 0x1, 0xba01, 0x0, 0x8000}, 0x810) 990.662388ms ago: executing program 5 (id=6379): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigsuspend(0x0, 0x0) 975.156988ms ago: executing program 5 (id=6381): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) 928.322719ms ago: executing program 5 (id=6382): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 927.973919ms ago: executing program 5 (id=6384): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000900)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x1, 0x8, "ed43c7bae5083872"}, 0x0}) 674.570022ms ago: executing program 3 (id=6391): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='./file0\x00') 546.921364ms ago: executing program 9 (id=6383): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) 527.718174ms ago: executing program 9 (id=6394): timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) 470.856674ms ago: executing program 3 (id=6395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000030100c0"]) 470.708285ms ago: executing program 9 (id=6396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r0, 0x4, r2}, 0x10) 460.739805ms ago: executing program 9 (id=6399): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000001240), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000004c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2000000000000005, 0x3a, 'dCta\x86\xee\xd1\x85\"\x16~kow', 0x3a, '\\-%#!\\\\\'\xaf=\xa7\x99\xcd\x80\xb7\xd0\xe8\xf5\xc9\xf2\xda\x19\x19\xbfy8U\x86y\xb4x\a\xdf\x9f\xcc\xbc\xab\t{\xdf\xd5H\xf1\xd6R\x9f\xbap?\x025\"3\x19\xc8\x88\xcf\x98j\x1bU\x14\x01\xfe\x011`A\xd3ml\x98P`\x1a\xb4A\xdf\xe1^\xc1\xa1[\xc3n\x87W\x02]\x0f\xc0\xe7d,&N\xebq\"', 0x3a, './file1', 0x3a, [0x46]}, 0x99) 389.627426ms ago: executing program 3 (id=6401): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) ioperm(0x8, 0x3, 0x7fff) 389.199435ms ago: executing program 9 (id=6403): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 382.811625ms ago: executing program 3 (id=6404): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r0, r1, 0x0, 0xc0) 322.688426ms ago: executing program 4 (id=6405): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, 0x453, 0x800, 0x70bd2b, 0x25dfdbfe, "bc583c"}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 285.694747ms ago: executing program 4 (id=6406): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) 279.044317ms ago: executing program 3 (id=6407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) 206.893318ms ago: executing program 4 (id=6408): io_setup(0x3, &(0x7f0000000180)=0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) io_submit(r0, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4, r1, 0x0, 0x0, 0x6}]) 206.785028ms ago: executing program 3 (id=6409): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x65, &(0x7f0000000500)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x5501, 0x0) 126.515639ms ago: executing program 4 (id=6410): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fchmod(r1, 0x148) 86.217459ms ago: executing program 4 (id=6411): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x7, 0x5}, {0xffe0, 0xfff2}, {0xfff3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x24000014) 0s ago: executing program 4 (id=6412): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000140)={0x0, 0x5, 0x6, "1693c6a87ad2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000180)={[{}]}) kernel console output (not intermixed with test programs): ] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 147.725357][ T60] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 147.734422][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.742598][ T60] usb 3-1: Product: syz [ 147.746788][ T60] usb 3-1: Manufacturer: syz [ 147.751376][ T60] usb 3-1: SerialNumber: syz [ 147.756727][ T60] usb 3-1: config 0 descriptor?? [ 147.795425][ T60] asix: probe of 3-1:0.251 failed with error -22 [ 147.854969][ T26] usb 6-1: Using ep0 maxpacket: 16 [ 147.996465][ T6] usb 3-1: USB disconnect, device number 14 [ 148.135053][ T26] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 148.144147][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.152176][ T26] usb 6-1: Product: syz [ 148.156379][ T26] usb 6-1: Manufacturer: syz [ 148.160957][ T26] usb 6-1: SerialNumber: syz [ 148.565892][T11421] loop2: detected capacity change from 0 to 512 [ 148.623091][T11421] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 148.639944][T11421] ext4 filesystem being mounted at /1109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.657170][T11421] EXT4-fs error (device loop2): ext4_do_update_inode:5234: inode #2: comm syz.2.5080: corrupted inode contents [ 148.670520][T11421] EXT4-fs error (device loop2): ext4_dirty_inode:6070: inode #2: comm syz.2.5080: mark_inode_dirty error [ 148.695163][T11421] EXT4-fs error (device loop2): ext4_do_update_inode:5234: inode #2: comm syz.2.5080: corrupted inode contents [ 148.708866][T11421] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.5080: mark_inode_dirty error [ 148.765074][ T26] snd-usb-audio: probe of 6-1:222.0 failed with error -71 [ 148.781278][ T26] usb 6-1: USB disconnect, device number 12 [ 148.839379][T11470] loop2: detected capacity change from 0 to 16 [ 148.856352][T11472] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 148.869017][T11470] erofs: (device loop2): mounted with root inode @ nid 36. [ 148.910695][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 148.910711][ T30] audit: type=1326 audit(2000000004.310:28469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.3.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd949d9d929 code=0x7ffc0000 [ 148.954716][T11476] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5104'. [ 148.964307][ T30] audit: type=1326 audit(2000000004.310:28470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.3.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd949d9d929 code=0x7ffc0000 [ 149.036666][ T30] audit: type=1326 audit(2000000004.310:28471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.3.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd949d9d929 code=0x7ffc0000 [ 149.086423][ T30] audit: type=1326 audit(2000000004.310:28472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.3.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd949d9d929 code=0x7ffc0000 [ 149.111025][ T30] audit: type=1326 audit(2000000004.310:28473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.3.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd949d9d929 code=0x7ffc0000 [ 149.161248][ T30] audit: type=1326 audit(2000000004.310:28474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.3.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd949d9d929 code=0x7ffc0000 [ 149.209233][ T30] audit: type=1326 audit(2000000004.310:28475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.3.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd949d9d929 code=0x7ffc0000 [ 149.277585][ T30] audit: type=1326 audit(2000000004.310:28476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.3.5103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd949d9d929 code=0x7ffc0000 [ 149.307870][ T30] audit: type=1326 audit(2000000004.560:28477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.2.5118" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc9a77c929 code=0x0 [ 149.342506][ T30] audit: type=1326 audit(2000000004.680:28478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.5.5121" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8c2226929 code=0x0 [ 149.566398][T11576] loop6: detected capacity change from 0 to 512 [ 149.606979][T11576] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 149.622591][T11576] ext4 filesystem being mounted at /764/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.640417][T11576] EXT4-fs error (device loop6): ext4_do_update_inode:5234: inode #2: comm syz.6.5152: corrupted inode contents [ 149.652408][T11576] EXT4-fs error (device loop6): ext4_dirty_inode:6070: inode #2: comm syz.6.5152: mark_inode_dirty error [ 149.663996][T11576] EXT4-fs error (device loop6): ext4_do_update_inode:5234: inode #2: comm syz.6.5152: corrupted inode contents [ 149.675938][T11576] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.5152: mark_inode_dirty error [ 149.928167][T11618] loop6: detected capacity change from 0 to 256 [ 149.943307][T11618] FAT-fs (loop6): Directory bread(block 64) failed [ 149.950051][T11618] FAT-fs (loop6): Directory bread(block 65) failed [ 149.956634][T11618] FAT-fs (loop6): Directory bread(block 66) failed [ 149.963205][T11618] FAT-fs (loop6): Directory bread(block 67) failed [ 149.969852][T11618] FAT-fs (loop6): Directory bread(block 68) failed [ 149.976422][T11618] FAT-fs (loop6): Directory bread(block 69) failed [ 149.982995][T11618] FAT-fs (loop6): Directory bread(block 70) failed [ 149.989667][T11618] FAT-fs (loop6): Directory bread(block 71) failed [ 149.996338][T11618] FAT-fs (loop6): Directory bread(block 72) failed [ 150.005715][T11618] FAT-fs (loop6): Directory bread(block 73) failed [ 150.077202][T11628] loop2: detected capacity change from 0 to 2048 [ 150.123592][T11628] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000007,,errors=continue. Quota mode: none. [ 150.150197][T11638] loop5: detected capacity change from 0 to 1024 [ 150.169501][T11638] EXT4-fs (loop5): INFO: recovery required on readonly filesystem [ 150.181953][T11638] EXT4-fs (loop5): write access will be enabled during recovery [ 150.190443][T11642] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5184'. [ 150.192042][T11638] JBD2: no valid journal superblock found [ 150.206531][T11638] EXT4-fs (loop5): error loading journal [ 150.289284][T11652] loop5: detected capacity change from 0 to 16 [ 150.318993][T11652] erofs: (device loop5): mounted with root inode @ nid 36. [ 150.495593][T11690] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5203'. [ 150.576455][T11706] loop5: detected capacity change from 0 to 512 [ 150.634821][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5220'. [ 150.649772][T11706] EXT4-fs (loop5): 1 orphan inode deleted [ 150.658553][T11706] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.673841][T11706] ext4 filesystem being mounted at /623/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.689191][T11706] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5214'. [ 150.698795][T11706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.724966][ T6] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 150.964948][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 150.985387][T11766] loop4: detected capacity change from 0 to 256 [ 151.023580][T11766] FAT-fs (loop4): Directory bread(block 64) failed [ 151.030667][T11766] FAT-fs (loop4): Directory bread(block 65) failed [ 151.048999][T11766] FAT-fs (loop4): Directory bread(block 66) failed [ 151.055785][T11766] FAT-fs (loop4): Directory bread(block 67) failed [ 151.063556][T11766] FAT-fs (loop4): Directory bread(block 68) failed [ 151.070986][T11766] FAT-fs (loop4): Directory bread(block 69) failed [ 151.083457][T11766] FAT-fs (loop4): Directory bread(block 70) failed [ 151.092284][ T6] usb 3-1: config 156 has too many interfaces: 43, using maximum allowed: 32 [ 151.105832][T11766] FAT-fs (loop4): Directory bread(block 71) failed [ 151.112684][T11766] FAT-fs (loop4): Directory bread(block 72) failed [ 151.119710][ T6] usb 3-1: config 156 has an invalid descriptor of length 1, skipping remainder of the config [ 151.131690][T11766] FAT-fs (loop4): Directory bread(block 73) failed [ 151.139375][ T6] usb 3-1: config 156 has 0 interfaces, different from the descriptor's value: 43 [ 151.264675][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5258'. [ 151.287574][T11810] loop4: detected capacity change from 0 to 512 [ 151.307650][T11816] loop5: detected capacity change from 0 to 256 [ 151.315178][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.324505][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.334266][ T6] usb 3-1: Product: syz [ 151.343576][ T6] usb 3-1: Manufacturer: syz [ 151.349429][T11810] EXT4-fs (loop4): 1 orphan inode deleted [ 151.354946][ T6] usb 3-1: SerialNumber: syz [ 151.358136][T11810] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.373505][T11810] ext4 filesystem being mounted at /805/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.399959][T11816] FAT-fs (loop5): Directory bread(block 64) failed [ 151.412204][T11816] FAT-fs (loop5): Directory bread(block 65) failed [ 151.419603][T11810] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5264'. [ 151.429521][T11816] FAT-fs (loop5): Directory bread(block 66) failed [ 151.436304][T11816] FAT-fs (loop5): Directory bread(block 67) failed [ 151.443122][T11810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.458699][T11816] FAT-fs (loop5): Directory bread(block 68) failed [ 151.465405][T11816] FAT-fs (loop5): Directory bread(block 69) failed [ 151.473033][T11816] FAT-fs (loop5): Directory bread(block 70) failed [ 151.486284][T11816] FAT-fs (loop5): Directory bread(block 71) failed [ 151.489539][T11820] loop6: detected capacity change from 0 to 40427 [ 151.493090][T11816] FAT-fs (loop5): Directory bread(block 72) failed [ 151.506132][T11816] FAT-fs (loop5): Directory bread(block 73) failed [ 151.536857][T11820] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 151.538625][T11822] loop4: detected capacity change from 0 to 512 [ 151.544605][T11820] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 151.572923][T11820] F2FS-fs (loop6): Found nat_bits in checkpoint [ 151.579354][ T26] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 151.624534][T11822] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.641286][T11820] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 151.642311][T11822] ext4 filesystem being mounted at /806/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.653196][T11820] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 151.666839][ T6] usb 3-1: USB disconnect, device number 15 [ 151.702191][T11822] overlayfs: failed to resolve './file1': -2 [ 151.759725][T11838] loop5: detected capacity change from 0 to 1024 [ 151.767334][T11838] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 151.776973][T11838] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 151.793540][T11838] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.826169][T11838] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,sysvgroups,bsddf,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 151.879569][T11847] loop4: detected capacity change from 0 to 512 [ 151.909690][T11847] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 151.975034][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 151.989727][ T2848] udevd[2848]: symlink '../../loop6' '/dev/disk/by-diskseq/556.tmp-b7:6' failed: Read-only file system [ 151.990424][ T2368] udevd[2368]: symlink '../../loop5' '/dev/disk/by-diskseq/558.tmp-b7:5' failed: Read-only file system [ 152.010978][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.025419][T11867] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5287'. [ 152.031853][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 152.036259][ T2368] udevd[2368]: symlink '../../loop6' '/dev/disk/by-diskseq/556.tmp-b7:6' failed: Read-only file system [ 152.045345][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.062960][T11847] EXT4-fs (loop4): Unrecognized mount option "audit" or missing value [ 152.073946][ T26] usb 4-1: config 0 descriptor?? [ 152.082721][ T2326] udevd[2326]: symlink '../../loop5' '/dev/disk/by-diskseq/558.tmp-b7:5' failed: Read-only file system [ 152.100554][ T2326] udevd[2326]: symlink '../../loop5' '/dev/disk/by-diskseq/558.tmp-b7:5' failed: Read-only file system [ 152.119826][T11847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5276'. [ 152.126233][ T2326] udevd[2326]: symlink '../../loop4' '/dev/disk/by-diskseq/557.tmp-b7:4' failed: Read-only file system [ 152.132815][ T2848] udevd[2848]: symlink '../../loop5' '/dev/disk/by-diskseq/558.tmp-b7:5' failed: Read-only file system [ 152.143845][T11847] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5276'. [ 152.166357][ T2326] udevd[2326]: symlink '../../loop4' '/dev/disk/by-diskseq/557.tmp-b7:4' failed: Read-only file system [ 152.166497][ T2848] udevd[2848]: symlink '../../loop2' '/dev/disk/by-diskseq/540.tmp-b7:2' failed: Read-only file system [ 152.182468][T11882] loop2: detected capacity change from 0 to 256 [ 152.198435][ T2339] udevd[2339]: symlink '../../loop5' '/dev/disk/by-diskseq/558.tmp-b7:5' failed: Read-only file system [ 152.243712][T11882] FAT-fs (loop2): Directory bread(block 64) failed [ 152.255752][T11882] FAT-fs (loop2): Directory bread(block 65) failed [ 152.272260][T11882] FAT-fs (loop2): Directory bread(block 66) failed [ 152.280629][T11882] FAT-fs (loop2): Directory bread(block 67) failed [ 152.287375][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 152.297000][T11882] FAT-fs (loop2): Directory bread(block 68) failed [ 152.303544][T11882] FAT-fs (loop2): Directory bread(block 69) failed [ 152.310375][T11882] FAT-fs (loop2): Directory bread(block 70) failed [ 152.317281][T11882] FAT-fs (loop2): Directory bread(block 71) failed [ 152.324073][T11882] FAT-fs (loop2): Directory bread(block 72) failed [ 152.331014][T11882] FAT-fs (loop2): Directory bread(block 73) failed [ 152.406957][T11889] loop5: detected capacity change from 0 to 40427 [ 152.490522][T11889] F2FS-fs (loop5): invalid crc value [ 152.498083][T11889] F2FS-fs (loop5): Found nat_bits in checkpoint [ 152.524711][T11889] F2FS-fs (loop5): Start checkpoint disabled! [ 152.531711][T11889] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 152.564040][ T8962] attempt to access beyond end of device [ 152.564040][ T8962] loop5: rw=2049, want=45104, limit=40427 [ 152.576940][ T26] logitech-djreceiver 0003:046D:C52F.0022: unbalanced delimiter at end of report description [ 152.588010][ T26] logitech-djreceiver 0003:046D:C52F.0022: logi_dj_probe: parse failed [ 152.596474][ T26] logitech-djreceiver: probe of 0003:046D:C52F.0022 failed with error -22 [ 152.754954][ T26] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 152.790180][ T1118] usb 4-1: USB disconnect, device number 14 [ 152.924939][ T6] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 152.994948][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 153.115058][ T26] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 153.123265][ T26] usb 3-1: config 0 has no interface number 0 [ 153.129585][ T26] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 153.140700][ T26] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 153.150727][ T26] usb 3-1: config 0 interface 41 has no altsetting 0 [ 153.314981][ T6] usb 6-1: unable to get BOS descriptor or descriptor too short [ 153.325064][ T26] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 153.335962][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.344217][ T26] usb 3-1: Product: syz [ 153.350943][ T26] usb 3-1: Manufacturer: syz [ 153.355677][ T26] usb 3-1: SerialNumber: syz [ 153.360839][ T26] usb 3-1: config 0 descriptor?? [ 153.385034][T11905] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 153.392112][T11905] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 153.405080][ T6] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 153.417151][ T6] usb 6-1: can't read configurations, error -71 [ 153.571111][T11994] netlink: 552 bytes leftover after parsing attributes in process `syz.6.5348'. [ 153.581844][T11994] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 153.629827][T11905] loop2: detected capacity change from 0 to 512 [ 153.656978][T11905] EXT4-fs (loop2): filesystem is read-only [ 153.663175][T11998] tipc: Enabling of bearer rejected, failed to enable media [ 153.673170][T11905] EXT4-fs (loop2): filesystem is read-only [ 153.680606][T11905] EXT4-fs (loop2): orphan cleanup on readonly fs [ 153.688086][T11905] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.5305: bad orphan inode 16 [ 153.698481][T11905] ext4_test_bit(bit=15, block=3) = 0 [ 153.703850][T11905] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.727100][T12003] tipc: Enabling of bearer rejected, failed to enable media [ 153.745042][ T26] CoreChips: probe of 3-1:0.41 failed with error -71 [ 153.752723][ T26] usb 3-1: USB disconnect, device number 16 [ 153.969677][T12007] loop5: detected capacity change from 0 to 40427 [ 153.988337][T12007] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 154.003918][T12007] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 154.033021][T12007] F2FS-fs (loop5): Found nat_bits in checkpoint [ 154.100835][T12025] loop3: detected capacity change from 0 to 40427 [ 154.107533][T12007] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 154.114577][T12007] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 154.187495][T12025] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 154.206486][T12025] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 154.224600][T12025] F2FS-fs (loop3): invalid crc value [ 154.231184][T12025] F2FS-fs (loop3): Found nat_bits in checkpoint [ 154.272676][T12025] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 154.282474][T12025] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 154.335460][T12065] serio: Serial port ptm0 [ 154.496055][T12074] loop3: detected capacity change from 0 to 1024 [ 154.508769][T12074] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 154.518373][T12074] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 154.526124][T12074] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.540290][T12074] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,bsddf,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 154.964989][ T1118] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 155.205069][ T1118] usb 4-1: Using ep0 maxpacket: 16 [ 155.346952][T12113] loop6: detected capacity change from 0 to 40427 [ 155.381619][T12113] F2FS-fs (loop6): invalid crc value [ 155.406410][T12113] F2FS-fs (loop6): Found nat_bits in checkpoint [ 155.463967][T12113] F2FS-fs (loop6): Start checkpoint disabled! [ 155.475894][ T30] kauditd_printk_skb: 199 callbacks suppressed [ 155.475910][ T30] audit: type=1326 audit(2000000010.879:28678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12132 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e64ad929 code=0x7ffc0000 [ 155.506023][ T1118] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 155.520925][ T1118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.539273][T12113] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 155.541621][ T1118] usb 4-1: Product: syz [ 155.571867][ T1118] usb 4-1: Manufacturer: syz [ 155.577495][ T30] audit: type=1326 audit(2000000010.879:28679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12132 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f92e64ad929 code=0x7ffc0000 [ 155.580951][ T1118] usb 4-1: SerialNumber: syz [ 155.607130][ T30] audit: type=1326 audit(2000000010.879:28680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12132 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e64ad929 code=0x7ffc0000 [ 155.631463][ T30] audit: type=1326 audit(2000000010.909:28681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12132 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e64ad929 code=0x7ffc0000 [ 155.671137][ T340] attempt to access beyond end of device [ 155.671137][ T340] loop6: rw=2049, want=40976, limit=40427 [ 156.215030][ T1118] snd-usb-audio: probe of 4-1:222.0 failed with error -71 [ 156.224760][ T1118] usb 4-1: USB disconnect, device number 15 [ 156.316553][ T30] audit: type=1326 audit(2000000011.719:28682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.6.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89d9a929 code=0x7ffc0000 [ 156.408286][ T30] audit: type=1326 audit(2000000011.719:28683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.6.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f5e89d9a929 code=0x7ffc0000 [ 156.436740][T12171] loop5: detected capacity change from 0 to 128 [ 156.471409][ T30] audit: type=1326 audit(2000000011.719:28684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.6.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89d9a929 code=0x7ffc0000 [ 156.496662][ T30] audit: type=1326 audit(2000000011.719:28685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.6.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89d9a929 code=0x7ffc0000 [ 156.565637][T12171] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 156.670538][ T30] audit: type=1400 audit(2000000012.069:28686): avc: denied { write } for pid=12184 comm="syz.6.5431" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 156.750574][T12176] loop2: detected capacity change from 0 to 40427 [ 156.764476][T12176] F2FS-fs (loop2): invalid crc value [ 156.780023][T12176] F2FS-fs (loop2): Found nat_bits in checkpoint [ 156.831419][T12176] F2FS-fs (loop2): Start checkpoint disabled! [ 156.848104][T12199] __nla_validate_parse: 1 callbacks suppressed [ 156.848122][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5435'. [ 156.869758][T12176] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 156.962610][ T10] attempt to access beyond end of device [ 156.962610][ T10] loop2: rw=2049, want=40976, limit=40427 [ 156.982576][T12221] input: syz1 as /devices/virtual/input/input13 [ 156.997905][ T2326] udevd[2326]: symlink '../../loop4' '/dev/disk/by-diskseq/559.tmp-b7:4' failed: Read-only file system [ 157.019536][ T2368] udevd[2368]: symlink '../../loop5' '/dev/disk/by-diskseq/575.tmp-b7:5' failed: Read-only file system [ 157.033794][ T2848] udevd[2848]: symlink '../../loop3' '/dev/disk/by-diskseq/571.tmp-b7:3' failed: Read-only file system [ 157.055575][ T2326] udevd[2326]: symlink '../../loop5' '/dev/disk/by-diskseq/575.tmp-b7:5' failed: Read-only file system [ 157.058193][T12229] serio: Serial port ttyS3 [ 157.073450][ T2368] udevd[2368]: symlink '../../loop2' '/dev/disk/by-diskseq/576.tmp-b7:2' failed: Read-only file system [ 157.100974][ T2326] udevd[2326]: symlink '../../loop2' '/dev/disk/by-diskseq/576.tmp-b7:2' failed: Read-only file system [ 157.140304][ T2368] udevd[2368]: symlink '../../loop5' '/dev/disk/by-diskseq/575.tmp-b7:5' failed: Read-only file system [ 157.155042][ T2326] udevd[2326]: symlink '../../loop2' '/dev/disk/by-diskseq/577.tmp-b7:2' failed: Read-only file system [ 157.167859][ T2848] udevd[2848]: symlink '../../loop4' '/dev/disk/by-diskseq/559.tmp-b7:4' failed: Read-only file system [ 157.180622][ T2339] udevd[2339]: symlink '../../loop3' '/dev/disk/by-diskseq/571.tmp-b7:3' failed: Read-only file system [ 157.406437][T12281] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12281 comm=syz.3.5470 [ 157.506078][T12303] loop2: detected capacity change from 0 to 128 [ 157.518208][T12303] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.531912][T12303] ext4 filesystem being mounted at /1156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.578716][T12303] EXT4-fs warning (device loop2): ext4_group_extend:1823: can't shrink FS - resize aborted [ 157.658145][ T30] audit: type=1326 audit(2000000013.059:28687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12313 comm="syz.2.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9a77c929 code=0x7ffc0000 [ 157.693335][T12309] loop3: detected capacity change from 0 to 40427 [ 157.701502][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5490'. [ 157.721347][T12320] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 157.746235][T12309] F2FS-fs (loop3): invalid crc value [ 157.764046][T12309] F2FS-fs (loop3): Found nat_bits in checkpoint [ 157.802073][T12309] F2FS-fs (loop3): Start checkpoint disabled! [ 157.817671][T12309] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 157.870877][ T8962] attempt to access beyond end of device [ 157.870877][ T8962] loop3: rw=2049, want=40976, limit=40427 [ 157.978958][T12338] loop2: detected capacity change from 0 to 40427 [ 158.056536][T12338] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 158.064367][T12338] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 158.073612][T12338] F2FS-fs (loop2): invalid crc value [ 158.080210][T12338] F2FS-fs (loop2): Found nat_bits in checkpoint [ 158.094951][ T42] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 158.121251][T12338] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 158.128409][T12338] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 158.307203][T12369] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12369 comm=syz.5.5513 [ 158.346869][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 158.465061][ T42] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 158.480081][ T42] usb 7-1: config 0 has no interface number 0 [ 158.491736][ T42] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 158.521040][ T42] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 158.549539][ T42] usb 7-1: config 0 interface 41 has no altsetting 0 [ 158.570450][T12413] loop3: detected capacity change from 0 to 512 [ 158.610771][T12382] loop5: detected capacity change from 0 to 40427 [ 158.653926][T12420] loop2: detected capacity change from 0 to 256 [ 158.662189][T12413] EXT4-fs (loop3): Ignoring removed nobh option [ 158.668511][T12382] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 158.673525][T12413] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.686255][T12382] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 158.687163][T12382] F2FS-fs (loop5): invalid crc value [ 158.696868][T12413] EXT4-fs (loop3): 1 truncate cleaned up [ 158.701630][T12382] F2FS-fs (loop5): Found nat_bits in checkpoint [ 158.706220][T12413] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 158.739816][T12382] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 158.747052][ T42] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 158.747096][T12382] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 158.763694][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.772387][ T42] usb 7-1: Product: syz [ 158.776690][ T42] usb 7-1: Manufacturer: syz [ 158.776709][ T42] usb 7-1: SerialNumber: syz [ 158.777286][ T42] usb 7-1: config 0 descriptor?? [ 158.804997][T12333] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 158.820485][T12333] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 158.834648][T12429] loop3: detected capacity change from 0 to 16 [ 158.863947][T12429] erofs: (device loop3): mounted with root inode @ nid 36. [ 158.913755][T12435] overlayfs: './file0' not a directory [ 158.988882][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5546'. [ 159.022960][T12450] loop5: detected capacity change from 0 to 256 [ 159.049438][T12333] loop6: detected capacity change from 0 to 512 [ 159.090038][T12450] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 159.102273][T12333] EXT4-fs (loop6): filesystem is read-only [ 159.102437][T12450] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 159.131482][T12333] EXT4-fs (loop6): filesystem is read-only [ 159.137371][T12333] EXT4-fs (loop6): orphan cleanup on readonly fs [ 159.143827][T12333] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.5499: bad orphan inode 16 [ 159.154327][T12333] ext4_test_bit(bit=15, block=3) = 0 [ 159.159707][T12333] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.185099][ T42] CoreChips: probe of 7-1:0.41 failed with error -71 [ 159.194160][ T42] usb 7-1: USB disconnect, device number 10 [ 159.339277][T12458] loop4: detected capacity change from 0 to 40427 [ 159.377711][T12458] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 159.385567][T12458] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 159.394645][T12458] F2FS-fs (loop4): invalid crc value [ 159.401553][T12458] F2FS-fs (loop4): Found nat_bits in checkpoint [ 159.423208][T12458] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 159.430364][T12458] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 159.594932][ T951] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 161.386234][T12482] serio: Serial port ptm0 [ 161.392588][T12480] loop2: detected capacity change from 0 to 2048 [ 161.422104][T12484] input: syz1 as /devices/virtual/input/input14 [ 161.456243][T12480] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.537240][T12499] serio: Serial port ttyS3 [ 161.551133][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 161.551149][ T30] audit: type=1400 audit(2000000016.949:28701): avc: denied { read } for pid=12500 comm="syz.6.5569" path="socket:[56194]" dev="sockfs" ino=56194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.604090][T12506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5572'. [ 161.615084][ T951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 161.632582][ T951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.654814][ T951] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 161.664624][ T951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.686348][ T951] usb 6-1: config 0 descriptor?? [ 161.814081][T12541] loop2: detected capacity change from 0 to 16 [ 161.859920][T12547] SELinux: failed to load policy [ 161.860615][T12541] erofs: (device loop2): mounted with root inode @ nid 36. [ 161.899152][T12541] incfs: Can't find or create .index dir in ./file0 [ 161.914319][T12541] incfs: mount failed -30 [ 161.924652][ T30] audit: type=1400 audit(2000000017.319:28702): avc: denied { connect } for pid=12552 comm="syz.4.5593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.961470][ T30] audit: type=1400 audit(2000000017.359:28703): avc: denied { validate_trans } for pid=12550 comm="syz.6.5592" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 161.995373][T12559] SELinux: policydb version 0 does not match my version range 15-33 [ 162.003721][T12559] SELinux: failed to load policy [ 162.016072][ T2368] udevd[2368]: symlink '../../loop2' '/dev/disk/by-diskseq/600.tmp-b7:2' failed: Read-only file system [ 162.024374][T12563] overlayfs: './file0' not a directory [ 162.027171][ T30] audit: type=1326 audit(2000000017.409:28704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.4.5596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e64ad929 code=0x7ffc0000 [ 162.060359][ T2848] udevd[2848]: symlink '../../loop4' '/dev/disk/by-diskseq/597.tmp-b7:4' failed: Read-only file system [ 162.062207][ T2368] udevd[2368]: symlink '../../loop2' '/dev/disk/by-diskseq/600.tmp-b7:2' failed: Read-only file system [ 162.082596][ T30] audit: type=1326 audit(2000000017.409:28705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.4.5596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e64ad929 code=0x7ffc0000 [ 162.110981][ T2368] udevd[2368]: symlink '../../loop2' '/dev/disk/by-diskseq/601.tmp-b7:2' failed: Read-only file system [ 162.126076][ T2848] udevd[2848]: symlink '../../loop4' '/dev/disk/by-diskseq/597.tmp-b7:4' failed: Read-only file system [ 162.126747][ T2339] udevd[2339]: setting mode of /dev/vcs24 to 020660 failed: Read-only file system [ 162.143383][ T30] audit: type=1326 audit(2000000017.409:28706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.4.5596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f92e64ad929 code=0x7ffc0000 [ 162.152541][ T3718] udevd[3718]: symlink '../../loop6' '/dev/disk/by-diskseq/598.tmp-b7:6' failed: Read-only file system [ 162.171522][ T2848] udevd[2848]: setting mode of /dev/vcsu24 to 020660 failed: Read-only file system [ 162.182802][ T2339] udevd[2339]: setting owner of /dev/vcs24 to uid=0, gid=5 failed: Read-only file system [ 162.190752][ T2838] udevd[2838]: setting mode of /dev/vcsa24 to 020660 failed: Read-only file system [ 162.205755][ T30] audit: type=1326 audit(2000000017.409:28707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.4.5596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e64ad929 code=0x7ffc0000 [ 162.234158][ T951] logitech-djreceiver 0003:046D:C52F.0023: unbalanced delimiter at end of report description [ 162.235172][ T30] audit: type=1326 audit(2000000017.409:28708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.4.5596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e64ad929 code=0x7ffc0000 [ 162.249359][ T951] logitech-djreceiver 0003:046D:C52F.0023: logi_dj_probe: parse failed [ 162.300973][ T951] logitech-djreceiver: probe of 0003:046D:C52F.0023 failed with error -22 [ 162.320417][T12575] loop4: detected capacity change from 0 to 2048 [ 162.330883][T12577] SELinux: policydb version 0 does not match my version range 15-33 [ 162.339697][T12577] SELinux: failed to load policy [ 162.370450][ T30] audit: type=1107 audit(2000000017.769:28709): pid=12584 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 162.390561][T12575] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.432574][ T26] usb 6-1: USB disconnect, device number 15 [ 162.441468][T12597] loop6: detected capacity change from 0 to 16 [ 162.476405][ T30] audit: type=1400 audit(2000000017.879:28710): avc: denied { write } for pid=12603 comm="syz.2.5616" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.501448][T12597] erofs: (device loop6): mounted with root inode @ nid 36. [ 162.546571][T12597] incfs: Can't find or create .index dir in ./file0 [ 162.595056][T12597] incfs: mount failed -30 [ 162.613324][T12620] loop4: detected capacity change from 0 to 512 [ 162.666770][T12620] EXT4-fs (loop4): Test dummy encryption mode enabled [ 162.700485][T12620] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 162.725752][T12620] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 162.735520][T12620] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 162.826552][T12620] EXT4-fs (loop4): Ignoring removed bh option [ 162.827072][T12620] EXT4-fs (loop4): re-mounted. Opts: usrjquota=t,nodelalloc,jqfmt=vfsold,bh,block_validity,quota,. Quota mode: writeback. [ 162.926375][T12649] loop6: detected capacity change from 0 to 256 [ 162.961748][T12649] exfat: Deprecated parameter 'namecase' [ 162.972306][T12649] exfat: Deprecated parameter 'utf8' [ 162.988318][T12649] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 163.133010][T12664] loop6: detected capacity change from 0 to 1024 [ 163.170269][T12668] netlink: 'syz.4.5654': attribute type 12 has an invalid length. [ 163.275175][T12664] EXT4-fs (loop6): Test dummy encryption mode enabled [ 163.298439][T12664] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,barrier=0x00000000000083fc,grpid,discard,acl,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 163.474571][T12696] loop5: detected capacity change from 0 to 512 [ 163.492561][T12696] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 163.528430][T12696] EXT4-fs (loop5): 1 orphan inode deleted [ 163.539289][T12696] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,max_batch_time=0x0000000000005314,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000000100,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 163.588755][T12709] loop6: detected capacity change from 0 to 512 [ 163.667720][T12709] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 163.694619][T12718] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5665'. [ 163.711056][T12709] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 163.719235][ T951] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 163.726949][T12709] System zones: 0-2, 18-18, 34-34 [ 163.749349][T12709] EXT4-fs (loop6): mounted filesystem without journal. Opts: noquota,debug,jqfmt=vfsv0,noauto_da_alloc,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 163.766576][T12709] ext4 filesystem being mounted at /890/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.801297][T12709] EXT4-fs error (device loop6): ext4_acquire_dquot:6195: comm syz.6.5673: Failed to acquire dquot type 1 [ 163.853437][T12740] binder: 12739:12740 ioctl 4018620d 0 returned -22 [ 163.894535][T12748] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 163.964949][ T951] usb 4-1: Using ep0 maxpacket: 16 [ 163.983778][T12758] loop5: detected capacity change from 0 to 16 [ 164.010993][T12761] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5685'. [ 164.025712][T12758] erofs: (device loop5): mounted with root inode @ nid 36. [ 164.085036][ T951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.096025][ T951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.106730][ T951] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 164.120115][ T951] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 164.129378][ T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.138133][ T951] usb 4-1: config 0 descriptor?? [ 164.367683][T12789] SELinux: failed to load policy [ 164.597099][ T951] microsoft 0003:045E:07DA.0024: No inputs registered, leaving [ 164.605559][ T951] microsoft 0003:045E:07DA.0024: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 164.623681][ T951] microsoft 0003:045E:07DA.0024: no inputs found [ 164.630569][ T951] microsoft 0003:045E:07DA.0024: could not initialize ff, continuing anyway [ 164.678351][T12811] loop5: detected capacity change from 0 to 512 [ 164.698869][T12811] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 164.752218][T12811] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,mblk_io_submit,grpjquota=,quota,nobarrier,,errors=continue. Quota mode: writeback. [ 164.782861][T12811] ext4 filesystem being mounted at /726/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.805924][ T951] usb 4-1: USB disconnect, device number 16 [ 165.163907][T12835] loop2: detected capacity change from 0 to 40427 [ 165.183017][T12835] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 165.194761][T12835] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 165.204276][T12835] F2FS-fs (loop2): invalid crc value [ 165.211354][T12835] F2FS-fs (loop2): Found nat_bits in checkpoint [ 165.270147][T12835] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 165.277480][T12835] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 165.379173][T12868] loop3: detected capacity change from 0 to 512 [ 165.462455][T12878] netlink: 'syz.2.5738': attribute type 12 has an invalid length. [ 165.480159][T12868] EXT4-fs (loop3): Test dummy encryption mode enabled [ 165.500651][T12868] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 165.504354][T12884] loop2: detected capacity change from 0 to 512 [ 165.524446][T12884] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 165.535924][T12868] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 165.545008][ T42] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 165.553182][T12868] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 165.578855][T12884] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 165.583050][T12868] EXT4-fs (loop3): Ignoring removed bh option [ 165.589611][T12884] System zones: 0-2, 18-18, 34-34 [ 165.599807][T12884] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,debug,jqfmt=vfsv0,noauto_da_alloc,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 165.616052][T12868] EXT4-fs (loop3): re-mounted. Opts: usrjquota=t,nodelalloc,jqfmt=vfsold,bh,block_validity,quota,. Quota mode: writeback. [ 165.616973][T12884] ext4 filesystem being mounted at /1221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.667334][T12884] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.5740: Failed to acquire dquot type 1 [ 165.706351][T12896] binder: 12895:12896 ioctl 4018620d 0 returned -22 [ 165.752462][T12905] loop2: detected capacity change from 0 to 16 [ 165.795013][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 165.801168][T12911] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 165.813743][T12905] erofs: (device loop2): mounted with root inode @ nid 36. [ 165.857488][T12914] loop5: detected capacity change from 0 to 1024 [ 165.896254][T12914] EXT4-fs (loop5): Test dummy encryption mode enabled [ 165.925389][ T42] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.937001][ T42] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 165.946491][T12914] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,barrier=0x00000000000083fc,grpid,discard,acl,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 165.947090][ T42] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.984032][ T42] usb 7-1: config 1 interface 0 has no altsetting 0 [ 166.051028][T12929] binder: 12928:12929 ioctl 4018620d 0 returned -22 [ 166.091835][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5766'. [ 166.145099][ T42] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 166.160090][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.160548][T12947] loop5: detected capacity change from 0 to 512 [ 166.175063][ T42] usb 7-1: Product: syz [ 166.187746][ T42] usb 7-1: Manufacturer: syz [ 166.193537][T12947] EXT4-fs (loop5): Test dummy encryption mode enabled [ 166.200866][ T42] usb 7-1: SerialNumber: syz [ 166.223547][T12947] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 166.233440][T12947] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 166.241241][T12947] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 166.258401][T12955] loop2: detected capacity change from 0 to 1024 [ 166.296719][T12947] EXT4-fs (loop5): Ignoring removed bh option [ 166.304664][T12947] EXT4-fs (loop5): re-mounted. Opts: usrjquota=t,nodelalloc,jqfmt=vfsold,bh,block_validity,quota,. Quota mode: writeback. [ 166.348030][T12955] EXT4-fs (loop2): Test dummy encryption mode enabled [ 166.357515][T12955] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,barrier=0x00000000000083fc,grpid,discard,acl,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 166.396542][T12970] loop5: detected capacity change from 0 to 256 [ 166.464549][T12970] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.476273][ T42] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 166.507669][T12970] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 166.534435][T12970] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 166.672335][T12998] loop2: detected capacity change from 0 to 512 [ 166.686800][T13000] loop4: detected capacity change from 0 to 512 [ 166.707089][T12998] EXT4-fs (loop2): Test dummy encryption mode enabled [ 166.716381][T13000] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 166.734575][ T1118] usb 7-1: USB disconnect, device number 11 [ 166.742340][T12998] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 166.743969][ T1118] usblp0: removed [ 166.759278][T12998] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 166.768990][T13000] EXT4-fs (loop4): 1 orphan inode deleted [ 166.774730][T13000] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,max_batch_time=0x0000000000005314,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000000100,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 166.802243][T12998] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 166.835695][T12998] EXT4-fs (loop2): Ignoring removed bh option [ 166.843717][T12998] EXT4-fs (loop2): re-mounted. Opts: usrjquota=t,nodelalloc,jqfmt=vfsold,bh,block_validity,quota,. Quota mode: writeback. [ 166.854315][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5803'. [ 166.894766][T13009] loop5: detected capacity change from 0 to 128 [ 166.895319][T13007] loop4: detected capacity change from 0 to 1024 [ 166.931873][T13007] EXT4-fs (loop4): Test dummy encryption mode enabled [ 166.939686][T13009] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.950039][T13007] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,barrier=0x00000000000083fc,grpid,discard,acl,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 166.971156][T13009] ext4 filesystem being mounted at /744/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.018592][T13009] fscrypt (loop5, inode 12): Mutually exclusive encryption flags (0x0f) [ 167.034171][ T2368] udevd[2368]: symlink '../../loop4' '/dev/disk/by-diskseq/640.tmp-b7:4' failed: Read-only file system [ 167.056737][ T2326] udevd[2326]: symlink '../../loop4' '/dev/disk/by-diskseq/640.tmp-b7:4' failed: Read-only file system [ 167.083960][T13020] loop4: detected capacity change from 0 to 4096 [ 167.101612][ T2326] udevd[2326]: symlink '../../loop4' '/dev/disk/by-diskseq/643.tmp-b7:4' failed: Read-only file system [ 167.114250][ T2326] udevd[2326]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 167.127191][T13020] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.144258][ T2368] udevd[2368]: symlink '../../loop5' '/dev/disk/by-diskseq/639.tmp-b7:5' failed: Read-only file system [ 167.160852][ T2326] udevd[2326]: symlink '../../loop4' '/dev/disk/by-diskseq/643.tmp-b7:4' failed: Read-only file system [ 167.173578][ T2368] udevd[2368]: symlink '../../loop5' '/dev/disk/by-diskseq/639.tmp-b7:5' failed: Read-only file system [ 167.174686][ T2326] udevd[2326]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 167.186774][ T2848] udevd[2848]: symlink '../../loop2' '/dev/disk/by-diskseq/641.tmp-b7:2' failed: Read-only file system [ 167.200397][ T2368] udevd[2368]: symlink '../../loop5' '/dev/disk/by-diskseq/644.tmp-b7:5' failed: Read-only file system [ 167.488573][T13053] loop6: detected capacity change from 0 to 512 [ 167.547867][T13068] loop3: detected capacity change from 0 to 1024 [ 167.561896][T13070] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 167.591534][T13053] EXT4-fs (loop6): Test dummy encryption mode enabled [ 167.595679][T13068] EXT4-fs (loop3): Test dummy encryption mode enabled [ 167.610853][T13053] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 167.626028][T13068] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,barrier=0x00000000000083fc,grpid,discard,acl,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 167.630291][T13053] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 167.657909][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.670626][T13053] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 167.740975][T13053] EXT4-fs (loop6): Ignoring removed bh option [ 167.747656][T13053] EXT4-fs (loop6): re-mounted. Opts: usrjquota=t,nodelalloc,jqfmt=vfsold,bh,block_validity,quota,. Quota mode: writeback. [ 167.774977][ T1118] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 167.900257][ T30] kauditd_printk_skb: 177 callbacks suppressed [ 167.900274][ T30] audit: type=1326 audit(2000000023.299:28884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13084 comm="syz.2.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9a77c929 code=0x7ffc0000 [ 167.960257][ T30] audit: type=1326 audit(2000000023.299:28885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13084 comm="syz.2.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7efc9a77c929 code=0x7ffc0000 [ 167.984145][ T30] audit: type=1326 audit(2000000023.299:28886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13084 comm="syz.2.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9a77c929 code=0x7ffc0000 [ 168.008098][ T30] audit: type=1326 audit(2000000023.309:28887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13084 comm="syz.2.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9a77c929 code=0x7ffc0000 [ 168.054986][ T1118] usb 6-1: Using ep0 maxpacket: 16 [ 168.072096][T13106] loop6: detected capacity change from 0 to 128 [ 168.105738][T13108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5839'. [ 168.126442][T13111] loop3: detected capacity change from 0 to 512 [ 168.160833][T13111] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 168.195145][ T1118] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.212601][T13114] loop6: detected capacity change from 0 to 256 [ 168.219357][ T1118] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 168.228404][T13111] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,mblk_io_submit,grpjquota=,quota,nobarrier,,errors=continue. Quota mode: writeback. [ 168.229520][ T1118] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.244769][T13111] ext4 filesystem being mounted at /1308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.257727][ T1118] usb 6-1: config 1 interface 0 has no altsetting 0 [ 168.280037][T13114] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.298901][T13114] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 168.309264][T13114] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 168.407463][T13127] loop3: detected capacity change from 0 to 128 [ 168.445058][ T1118] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 168.454170][ T1118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.464406][ T1118] usb 6-1: Product: syz [ 168.468852][ T1118] usb 6-1: Manufacturer: syz [ 168.471112][T13127] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.473505][ T1118] usb 6-1: SerialNumber: syz [ 168.496629][T13127] ext4 filesystem being mounted at /1310/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.521186][T13127] fscrypt (loop3, inode 12): Mutually exclusive encryption flags (0x0f) [ 168.552017][ T30] audit: type=1326 audit(2000000023.949:28888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.6.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89d9a929 code=0x7ffc0000 [ 168.575953][ T30] audit: type=1326 audit(2000000023.949:28889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.6.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e89d9a929 code=0x7ffc0000 [ 168.600547][ T30] audit: type=1326 audit(2000000023.979:28890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.6.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89d9a929 code=0x7ffc0000 [ 168.624389][ T30] audit: type=1326 audit(2000000023.979:28891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.6.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e89d9a929 code=0x7ffc0000 [ 168.658485][ T30] audit: type=1326 audit(2000000024.049:28892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.6.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89d9a929 code=0x7ffc0000 [ 168.694164][ T30] audit: type=1326 audit(2000000024.059:28893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.6.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f5e89d9a929 code=0x7ffc0000 [ 168.717747][ T26] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 168.738423][ T1118] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 168.766590][T13156] netlink: 'syz.3.5860': attribute type 3 has an invalid length. [ 168.791630][T13164] loop3: detected capacity change from 0 to 1024 [ 168.810576][T13164] EXT4-fs (loop3): Test dummy encryption mode enabled [ 168.822314][T13164] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,barrier=0x00000000000083fc,grpid,discard,acl,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 168.832372][T13169] loop6: detected capacity change from 0 to 256 [ 168.909751][T13169] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.923052][T13169] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 168.932884][T13169] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 168.965004][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 168.986274][ T951] usb 6-1: USB disconnect, device number 16 [ 168.996867][ T951] usblp0: removed [ 169.085053][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.096810][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.106811][ T26] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 169.116617][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.125694][ T26] usb 3-1: config 0 descriptor?? [ 169.564962][ T951] Bluetooth: hci0: command 0x1003 tx timeout [ 169.574690][ T1917] Bluetooth: hci0: sending frame failed (-49) [ 169.588831][T13220] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5889'. [ 169.598801][ T26] savu 0003:1E7D:2D5A.0025: unknown main item tag 0x6 [ 169.608948][ T26] savu 0003:1E7D:2D5A.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 169.629832][T13227] loop5: detected capacity change from 0 to 1024 [ 169.650270][T13227] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.661797][T13227] ext4 filesystem being mounted at /757/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.764138][T13238] loop5: detected capacity change from 0 to 128 [ 169.800160][ T6] usb 3-1: USB disconnect, device number 17 [ 169.810782][T13238] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,nouid32,,errors=continue. Quota mode: none. [ 169.825283][T13238] ext4 filesystem being mounted at /761/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.894968][ T951] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 170.134951][ T951] usb 4-1: Using ep0 maxpacket: 16 [ 170.255003][ T951] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.264937][ T951] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 170.274750][ T951] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.287730][ T951] usb 4-1: config 1 interface 0 has no altsetting 0 [ 170.312369][T13254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5903'. [ 170.332322][T13256] loop5: detected capacity change from 0 to 512 [ 170.343880][T13256] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 170.386194][T13256] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 170.398578][T13256] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 170.406921][T13266] loop2: detected capacity change from 0 to 512 [ 170.418216][T13266] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 170.446012][ T951] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 170.455635][T13256] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000001,max_dir_size_kb=0x0000000000000004,grpjquota=,nomblk_io_submit,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 170.458437][T13266] EXT4-fs (loop2): 1 truncate cleaned up [ 170.476675][ T951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.492184][ T951] usb 4-1: Product: syz [ 170.496591][T13256] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev loop5, type ext4) errno=-22 [ 170.507254][ T951] usb 4-1: Manufacturer: syz [ 170.511848][ T951] usb 4-1: SerialNumber: syz [ 170.515215][T13266] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.571314][T13266] EXT4-fs error (device loop2): mb_free_blocks:1865: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 170.586300][T13266] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.5909: invalid indirect mapped block 3489660928 (level 0) [ 170.656023][T13266] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.5909: invalid indirect mapped block 6 (level 1) [ 170.785582][ T951] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 170.830689][T13283] loop5: detected capacity change from 0 to 1024 [ 170.873064][ T281] syz-executor (281) used greatest stack depth: 21088 bytes left [ 170.911982][T13283] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.942827][T13283] ext4 filesystem being mounted at /771/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.030051][ T26] usb 4-1: USB disconnect, device number 17 [ 171.045637][ T26] usblp0: removed [ 171.155292][T13292] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.162400][T13292] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.171756][T13292] device bridge_slave_0 entered promiscuous mode [ 171.180481][T13292] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.189040][T13292] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.198395][T13292] device bridge_slave_1 entered promiscuous mode [ 171.297456][T13292] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.304516][T13292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.311800][T13292] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.318832][T13292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.343554][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.352617][ T8962] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.361792][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.382128][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.390431][ T8962] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.397500][ T8962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.405523][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.413823][ T8962] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.420865][ T8962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.436205][ T340] device bridge_slave_1 left promiscuous mode [ 171.442520][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.450935][ T340] device bridge_slave_0 left promiscuous mode [ 171.457124][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.466041][ T340] device veth1_macvtap left promiscuous mode [ 171.472064][ T340] device veth0_vlan left promiscuous mode [ 171.578014][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.587067][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.595865][T13304] sch_fq: defrate 0 ignored. [ 171.614960][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.631238][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.645027][ T2918] Bluetooth: hci0: command 0x1001 tx timeout [ 171.648372][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.651108][ T1917] Bluetooth: hci0: sending frame failed (-49) [ 171.658978][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.691654][T13292] device veth0_vlan entered promiscuous mode [ 171.725722][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.735815][ T289] kernel write not supported for file bpf-prog (pid: 289 comm: kworker/0:2) [ 171.747671][T13292] device veth1_macvtap entered promiscuous mode [ 171.774626][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.818996][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.034779][T13382] loop7: detected capacity change from 0 to 512 [ 172.046600][ T2326] udevd[2326]: symlink '../../loop5' '/dev/disk/by-diskseq/671.tmp-b7:5' failed: Read-only file system [ 172.053470][T13384] loop5: detected capacity change from 0 to 512 [ 172.075792][T13382] EXT4-fs (loop7): Ignoring removed nobh option [ 172.085797][ T2848] udevd[2848]: symlink '../../loop3' '/dev/disk/by-diskseq/660.tmp-b7:3' failed: Read-only file system [ 172.087312][ T2339] udevd[2339]: symlink '../../loop6' '/dev/disk/by-diskseq/661.tmp-b7:6' failed: Read-only file system [ 172.108677][T13382] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 172.119543][T13382] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 172.127349][ T2368] udevd[2368]: symlink '../../loop7' '/dev/disk/by-diskseq/672.tmp-b7:7' failed: Read-only file system [ 172.128094][ T2368] udevd[2368]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 172.174846][T13396] loop6: detected capacity change from 0 to 1024 [ 172.185397][T13384] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 172.188982][ T2326] udevd[2326]: symlink '../../loop7' '/dev/disk/by-diskseq/672.tmp-b7:7' failed: Read-only file system [ 172.205584][ T2368] udevd[2368]: symlink '../../loop5' '/dev/disk/by-diskseq/673.tmp-b7:5' failed: Read-only file system [ 172.208652][ T2848] udevd[2848]: symlink '../../loop6' '/dev/disk/by-diskseq/674.tmp-b7:6' failed: Read-only file system [ 172.228501][ T2368] udevd[2368]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 172.234093][ T2339] udevd[2339]: symlink '../../loop3' '/dev/disk/by-diskseq/660.tmp-b7:3' failed: Read-only file system [ 172.242938][T13384] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 172.251602][T13396] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 172.259724][T13384] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.5960: attempt to clear invalid blocks 2 len 1 [ 172.281441][T13384] EXT4-fs (loop5): Remounting filesystem read-only [ 172.284795][T13396] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,abort,discard,max_batch_time=0x0000000000000003,data=ordered,mblk_io_submit,usrquota,init_itable,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback. [ 172.288994][T13384] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 172.336996][T13384] EXT4-fs (loop5): Remounting filesystem read-only [ 172.346649][T13384] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.5960: invalid indirect mapped block 1819239214 (level 0) [ 172.353442][T13396] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2755: inode #2: comm syz.6.5965: corrupted in-inode xattr [ 172.361312][T13384] EXT4-fs (loop5): Remounting filesystem read-only [ 172.378237][T13396] EXT4-fs (loop6): Remounting filesystem read-only [ 172.397572][T13384] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.5960: invalid indirect mapped block 1819239214 (level 1) [ 172.411728][T13396] EXT4-fs error (device loop6): ext4_xattr_ibody_get:603: inode #2: comm syz.6.5965: corrupted in-inode xattr [ 172.411817][T13384] EXT4-fs (loop5): Remounting filesystem read-only [ 172.428255][T13396] EXT4-fs (loop6): Remounting filesystem read-only [ 172.430186][T13384] EXT4-fs (loop5): 1 truncate cleaned up [ 172.442232][T13384] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 172.522165][T13409] loop6: detected capacity change from 0 to 2048 [ 172.555799][ T2326] Alternate GPT is invalid, using primary GPT. [ 172.559317][T13417] loop3: detected capacity change from 0 to 512 [ 172.562051][ T2326] loop6: p1 p2 p3 [ 172.569810][T13415] loop5: detected capacity change from 0 to 128 [ 172.580330][T13409] Alternate GPT is invalid, using primary GPT. [ 172.586586][T13409] loop6: p1 p2 p3 [ 172.599280][T13417] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 172.614447][T13417] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.5975: invalid indirect mapped block 4294967295 (level 0) [ 172.628642][T13417] EXT4-fs (loop3): Remounting filesystem read-only [ 172.635395][T13417] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.5975: invalid indirect mapped block 4294967295 (level 1) [ 172.656824][T13417] EXT4-fs (loop3): Remounting filesystem read-only [ 172.677479][T13417] EXT4-fs (loop3): 1 orphan inode deleted [ 172.688941][T13417] EXT4-fs (loop3): 1 truncate cleaned up [ 172.694596][T13417] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,block_validity,block_validity,block_validity,quota,jqfmt=vfsv0,. Quota mode: writeback. [ 172.909584][T13443] netlink: 'syz.7.5987': attribute type 1 has an invalid length. [ 172.921801][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 172.921817][ T30] audit: type=1400 audit(2000000028.319:28952): avc: denied { create } for pid=13446 comm="syz.6.5988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.961386][ T30] audit: type=1400 audit(2000000028.349:28953): avc: denied { write } for pid=13446 comm="syz.6.5988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.982471][ T30] audit: type=1400 audit(2000000028.349:28954): avc: denied { read } for pid=13446 comm="syz.6.5988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.003754][ T30] audit: type=1400 audit(2000000028.409:28955): avc: denied { ioctl } for pid=13450 comm="syz.3.5991" path="socket:[61556]" dev="sockfs" ino=61556 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.055651][T13455] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13455 comm=syz.3.5993 [ 173.062123][ T30] audit: type=1400 audit(2000000028.459:28956): avc: denied { read } for pid=13458 comm="syz.6.5994" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 173.093706][ T30] audit: type=1400 audit(2000000028.469:28957): avc: denied { audit_write } for pid=13454 comm="syz.3.5993" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 173.129747][ T30] audit: type=1107 audit(2000000028.469:28958): pid=13454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 173.143702][T13462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5995'. [ 173.154218][ T30] audit: type=1400 audit(2000000028.489:28959): avc: denied { open } for pid=13458 comm="syz.6.5994" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 173.184092][ T30] audit: type=1400 audit(2000000028.489:28960): avc: denied { ioctl } for pid=13458 comm="syz.6.5994" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 173.231142][ T30] audit: type=1400 audit(2000000028.619:28961): avc: denied { read } for pid=13467 comm="syz.3.5998" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 173.389000][T13489] loop6: detected capacity change from 0 to 1024 [ 173.418501][T13489] EXT4-fs (loop6): Ignoring removed orlov option [ 173.429991][T13489] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 173.445925][T13497] loop3: detected capacity change from 0 to 128 [ 173.459288][T13489] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 173.497826][T13497] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.519723][T13497] ext4 filesystem being mounted at /1361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.572229][T13503] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6012'. [ 173.617522][T13507] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6014'. [ 173.646507][T13511] loop6: detected capacity change from 0 to 256 [ 173.694974][ T289] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 173.725270][ T2918] Bluetooth: hci0: command 0x1009 tx timeout [ 173.943422][T13548] loop5: detected capacity change from 0 to 2048 [ 173.949974][ T289] usb 8-1: Using ep0 maxpacket: 16 [ 173.982719][T13558] loop6: detected capacity change from 0 to 16 [ 173.995999][T13558] erofs: (device loop6): mounted with root inode @ nid 36. [ 174.001880][T13548] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.004800][T13558] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 174.016008][T13548] ext4 filesystem being mounted at /792/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.033637][T13558] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 174.046693][T13558] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 174.075054][ T289] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.086113][ T289] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.105254][ T289] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 174.118292][ T289] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 174.131379][ T289] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.140275][ T289] usb 8-1: config 0 descriptor?? [ 174.205219][ T42] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 174.565065][ T42] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 174.574727][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.584322][ T42] usb 4-1: config 0 descriptor?? [ 174.625923][ T289] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 174.633209][ T289] microsoft 0003:045E:07DA.0026: ignoring exceeding usage max [ 174.642977][ T289] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 174.650410][ T289] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 174.658367][ T289] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 174.665946][ T289] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 174.673201][ T289] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 174.680637][ T289] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 174.688018][ T289] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 174.695440][ T289] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 174.702681][ T289] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 174.710081][ T289] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 174.717644][ T289] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 174.725017][ T289] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 174.732268][ T289] microsoft 0003:045E:07DA.0026: unsupported Resolution Multiplier 0 [ 174.778034][T13605] loop6: detected capacity change from 0 to 40427 [ 174.816037][T13605] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 174.823897][T13605] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 174.834093][T13605] F2FS-fs (loop6): invalid crc value [ 174.840827][T13605] F2FS-fs (loop6): Found nat_bits in checkpoint [ 174.845018][ T289] microsoft 0003:045E:07DA.0026: unsupported Resolution Multiplier 0 [ 174.856614][ T289] microsoft 0003:045E:07DA.0026: No inputs registered, leaving [ 174.864701][ T289] microsoft 0003:045E:07DA.0026: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 174.875457][T13605] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 174.876398][ T289] microsoft 0003:045E:07DA.0026: no inputs found [ 174.883178][T13605] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 174.890184][ T289] microsoft 0003:045E:07DA.0026: could not initialize ff, continuing anyway [ 174.912869][ T646] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 174.919164][ T289] usb 8-1: USB disconnect, device number 2 [ 174.931141][ T646] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 174.942882][T13610] fido_id[13610]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 175.034564][T13612] loop6: detected capacity change from 0 to 2048 [ 175.047498][T13612] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.138550][T13626] netlink: 'syz.6.6065': attribute type 3 has an invalid length. [ 175.177696][T13630] loop6: detected capacity change from 0 to 4096 [ 175.232868][T13635] tmpfs: Unknown parameter 'n' [ 175.248470][T13630] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.440127][T13662] loop5: detected capacity change from 0 to 256 [ 175.465281][T13662] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 175.480234][T13662] FAT-fs (loop5): Filesystem has been set read-only [ 175.490155][T13662] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 175.495416][ T42] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 175.519456][ T42] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 175.522115][T13662] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 175.542622][T13662] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 175.553062][T13661] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 175.563448][T13662] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 175.577016][T13661] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 175.587327][T13662] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 175.597503][T13662] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 175.613607][T13679] syz.6.6089[13679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.613678][T13679] syz.6.6089[13679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.618854][T13675] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 175.663150][T13679] x_tables: duplicate underflow at hook 4 [ 175.696682][ T42] asix 4-1:0.0 eth1: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 175.714193][T13683] binfmt_misc: register: failed to install interpreter file ./file0 [ 175.721841][ T42] usb 4-1: USB disconnect, device number 18 [ 175.736467][ T42] asix 4-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet [ 175.848092][T13690] SELinux: failed to load policy [ 176.103229][T13704] loop7: detected capacity change from 0 to 8192 [ 176.310408][T13716] loop3: detected capacity change from 0 to 1024 [ 176.333955][T13716] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 176.364178][T13716] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,resgid=0x0000000000000000,. Quota mode: writeback. [ 176.395770][T13704] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 176.403378][T13704] FAT-fs (loop7): Filesystem has been set read-only [ 176.423536][T13719] loop6: detected capacity change from 0 to 256 [ 176.592036][ T951] kernel write not supported for file /keys (pid: 951 comm: kworker/0:3) [ 176.727478][T13756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13756 comm=syz.7.6126 [ 176.760310][T13756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=13756 comm=syz.7.6126 [ 176.829862][T13727] loop5: detected capacity change from 0 to 40427 [ 176.850875][T13727] F2FS-fs (loop5): invalid crc value [ 176.911921][T13727] F2FS-fs (loop5): Found nat_bits in checkpoint [ 176.916208][T13777] loop3: detected capacity change from 0 to 16 [ 176.978882][T13781] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 176.987613][T13777] erofs: (device loop3): mounted with root inode @ nid 36. [ 176.992963][T13727] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 177.032450][T13777] attempt to access beyond end of device [ 177.032450][T13777] loop3: rw=524288, want=1049296, limit=16 [ 177.049340][ T3572] attempt to access beyond end of device [ 177.049340][ T3572] loop5: rw=2049, want=45104, limit=40427 [ 177.070781][T13777] attempt to access beyond end of device [ 177.070781][T13777] loop3: rw=524288, want=1049304, limit=16 [ 177.087471][ T2326] udevd[2326]: symlink '../../loop7' '/dev/disk/by-diskseq/707.tmp-b7:7' failed: Read-only file system [ 177.105241][T13777] attempt to access beyond end of device [ 177.105241][T13777] loop3: rw=524288, want=40, limit=16 [ 177.130127][T13785] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8203 @ nid 36 [ 177.144653][ T2326] udevd[2326]: symlink '../../loop7' '/dev/disk/by-diskseq/707.tmp-b7:7' failed: Read-only file system [ 177.154965][T13777] attempt to access beyond end of device [ 177.154965][T13777] loop3: rw=524288, want=48, limit=16 [ 177.189612][T13785] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8202 @ nid 36 [ 177.192615][ T2326] udevd[2326]: symlink '../../loop5' '/dev/disk/by-diskseq/710.tmp-b7:5' failed: Read-only file system [ 177.204974][T13785] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8201 @ nid 36 [ 177.222179][ T2368] udevd[2368]: symlink '../../loop7' '/dev/disk/by-diskseq/707.tmp-b7:7' failed: Read-only file system [ 177.236914][T13792] loop7: detected capacity change from 0 to 512 [ 177.249854][ T2326] udevd[2326]: symlink '../../loop5' '/dev/disk/by-diskseq/710.tmp-b7:5' failed: Read-only file system [ 177.262498][T13777] attempt to access beyond end of device [ 177.262498][T13777] loop3: rw=524288, want=408, limit=16 [ 177.276112][ T2368] udevd[2368]: symlink '../../loop7' '/dev/disk/by-diskseq/713.tmp-b7:7' failed: Read-only file system [ 177.295219][T13785] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8203 @ nid 36 [ 177.306054][ T2368] udevd[2368]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 177.306899][ T2326] udevd[2326]: symlink '../../loop5' '/dev/disk/by-diskseq/712.tmp-b7:5' failed: Read-only file system [ 177.332597][T13792] EXT4-fs (loop7): orphan cleanup on readonly fs [ 177.334693][T13785] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8202 @ nid 36 [ 177.341662][T13795] loop5: detected capacity change from 0 to 16 [ 177.356145][T13785] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8201 @ nid 36 [ 177.373523][T13792] EXT4-fs error (device loop7): ext4_orphan_get:1427: comm syz.7.6140: bad orphan inode 13 [ 177.387172][T13785] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8200 @ nid 36 [ 177.405039][ T2326] udevd[2326]: symlink '../../loop5' '/dev/disk/by-diskseq/714.tmp-b7:5' failed: Read-only file system [ 177.417615][T13795] erofs: (device loop5): mounted with root inode @ nid 36. [ 177.425271][T13785] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 177.433467][T13792] ext4_test_bit(bit=12, block=18) = 1 [ 177.439410][T13792] is_bad_inode(inode)=0 [ 177.443570][T13792] NEXT_ORPHAN(inode)=2130706432 [ 177.456087][T13795] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 177.468593][ T2326] udevd[2326]: symlink '../../loop5' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:5' failed: Read-only file system [ 177.492697][T13792] max_ino=32 [ 177.501575][T13792] i_nlink=1 [ 177.504814][T13792] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.516407][T13795] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 177.580347][T13795] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 177.621461][T13292] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 177.661819][T13292] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 177.924976][ T30] kauditd_printk_skb: 2577 callbacks suppressed [ 177.924992][ T30] audit: type=1326 audit(2000000033.329:31539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.6.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e89d36b19 code=0x7ffc0000 [ 177.954798][ T951] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 177.979081][T13814] audit: audit_backlog=65 > audit_backlog_limit=64 [ 177.987774][T13814] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 177.995628][T13814] audit: backlog limit exceeded [ 178.000576][ T30] audit: type=1326 audit(2000000033.359:31540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.6.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e89d918e7 code=0x7ffc0000 [ 178.028006][T13814] input: syz0 as /devices/virtual/input/input17 [ 178.028403][T13811] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.041547][ T30] audit: type=1326 audit(2000000033.359:31541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.6.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e89d36b19 code=0x7ffc0000 [ 178.061450][T13811] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.067291][ T30] audit: type=1326 audit(2000000033.359:31542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.6.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e89d918e7 code=0x7ffc0000 [ 178.092614][T13811] device bridge_slave_0 entered promiscuous mode [ 178.102727][ T30] audit: type=1326 audit(2000000033.359:31543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.6.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e89d36b19 code=0x7ffc0000 [ 178.127218][ T30] audit: type=1326 audit(2000000033.359:31544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.6.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e89d918e7 code=0x7ffc0000 [ 178.151172][T13811] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.158259][ T30] audit: type=1326 audit(2000000033.359:31545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.6.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e89d36b19 code=0x7ffc0000 [ 178.181796][T13811] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.189379][T13811] device bridge_slave_1 entered promiscuous mode [ 178.244619][T13818] binfmt_misc: register: failed to install interpreter file ./file0 [ 178.302726][T13820] loop4: detected capacity change from 0 to 512 [ 178.325835][T13820] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 178.328047][T13811] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.342741][T13811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.350080][T13811] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.357131][T13811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.365981][ T646] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.377216][ T646] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.385071][ T951] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.389674][T13820] EXT4-fs (loop4): 1 truncate cleaned up [ 178.399379][ T951] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 178.411881][T13820] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 178.417623][ T951] usb 4-1: config 0 interface 0 has no altsetting 0 [ 178.462140][ T951] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 178.471233][ T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.480278][ T951] usb 4-1: config 0 descriptor?? [ 178.495913][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.505107][T13802] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.513386][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.547117][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.562954][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.581551][ T646] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.588648][ T646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.609126][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.624833][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.650058][ T646] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.657150][ T646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.674240][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.685258][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.704985][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.713341][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.733582][ T340] device bridge_slave_1 left promiscuous mode [ 178.745408][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.762977][ T340] device bridge_slave_0 left promiscuous mode [ 178.771360][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.780408][ T340] device veth1_macvtap left promiscuous mode [ 178.795121][ T340] device veth0_vlan left promiscuous mode [ 178.816507][T13840] loop4: detected capacity change from 0 to 128 [ 178.936786][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.945802][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.960311][T13811] device veth0_vlan entered promiscuous mode [ 178.968744][ T951] uclogic 0003:5543:0005.0027: unknown main item tag 0x0 [ 178.974713][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.983677][ T951] uclogic 0003:5543:0005.0027: unknown main item tag 0x0 [ 178.986500][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.998378][ T951] uclogic 0003:5543:0005.0027: unknown main item tag 0x0 [ 179.008245][T13811] device veth1_macvtap entered promiscuous mode [ 179.014706][ T951] uclogic 0003:5543:0005.0027: unknown main item tag 0x0 [ 179.025656][ T951] uclogic 0003:5543:0005.0027: unknown main item tag 0x0 [ 179.032835][ T951] uclogic 0003:5543:0005.0027: unknown main item tag 0x0 [ 179.035616][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.040416][ T951] uclogic 0003:5543:0005.0027: No inputs registered, leaving [ 179.047746][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.055443][ T951] uclogic 0003:5543:0005.0027: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.3-1/input0 [ 179.066272][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.117579][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.128211][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.140479][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.149317][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.168875][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.190815][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.192965][ T951] usb 4-1: USB disconnect, device number 19 [ 179.254401][T13877] loop4: detected capacity change from 0 to 1024 [ 179.262414][T13875] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6158'. [ 179.272083][T13877] EXT4-fs (loop4): Ignoring removed orlov option [ 179.295759][T13877] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 179.312761][T13881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13881 comm=syz.8.6177 [ 179.331387][T13877] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 179.383852][T13889] ------------[ cut here ]------------ [ 179.393913][T13889] trace type BPF program uses run-time allocation [ 179.400740][T13889] WARNING: CPU: 0 PID: 13889 at kernel/bpf/verifier.c:11701 check_map_prog_compatibility+0x6cd/0x870 [ 179.413466][T13889] Modules linked in: [ 179.415859][T13886] loop6: detected capacity change from 0 to 8192 [ 179.417592][T13889] CPU: 0 PID: 13889 Comm: syz.8.6180 Not tainted 5.15.185-syzkaller-00207-g32c443bd6d40 #0 [ 179.434417][T13889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.444552][T13889] RIP: 0010:check_map_prog_compatibility+0x6cd/0x870 [ 179.452596][T13889] Code: ee ff 48 c7 c6 00 e4 47 85 4c 8b 65 d0 e9 fd fc ff ff e8 56 4c ee ff c6 05 b3 73 6b 05 01 48 c7 c7 60 e0 47 85 e8 43 31 22 03 <0f> 0b e9 88 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ac f9 ff [ 179.472298][T13889] RSP: 0018:ffffc9000166f428 EFLAGS: 00010246 [ 179.490549][T13889] RAX: 6002e73bf7d61500 RBX: 0000000000000001 RCX: 0000000000080000 [ 179.555090][T13889] RDX: ffffc90003774000 RSI: 000000000000404a RDI: 000000000000404b [ 179.563129][T13889] RBP: ffffc9000166f470 R08: dffffc0000000000 R09: ffffed103ee065e8 [ 179.597626][T13889] R10: ffffed103ee065e8 R11: 1ffff1103ee065e7 R12: ffff888131684000 [ 179.605811][T13889] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff888118ce2000 [ 179.613792][T13889] FS: 00007fafe29476c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 179.623478][T13889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.630147][T13889] CR2: 0000001b2d10fff8 CR3: 0000000120568000 CR4: 00000000003506b0 [ 179.638291][T13889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 179.646324][T13889] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 179.654383][T13889] Call Trace: [ 179.664931][T13889] [ 179.674550][T13889] resolve_pseudo_ldimm64+0x685/0x11d0 [ 179.686380][T13889] ? check_attach_btf_id+0xde0/0xde0 [ 179.703918][T13889] ? __mark_reg_known+0x1b0/0x1b0 [ 179.710362][T13886] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 179.718759][T13886] FAT-fs (loop6): Filesystem has been set read-only [ 179.743761][T13889] ? security_capable+0x87/0xb0 [ 179.751354][T13897] loop4: detected capacity change from 0 to 40427 [ 179.752103][T13889] bpf_check+0x2c44/0xf330 [ 179.794981][T13889] ? 0xffffffffa002a000 [ 179.800201][T13897] F2FS-fs (loop4): invalid crc value [ 179.803019][T13889] ? is_bpf_text_address+0x177/0x190 [ 179.812342][T13889] ? bpf_get_btf_vmlinux+0x60/0x60 [ 179.818994][T13889] ? unwind_get_return_address+0x4d/0x90 [ 179.819895][T13897] F2FS-fs (loop4): Found nat_bits in checkpoint [ 179.833340][T13889] ? stack_trace_save+0xe0/0xe0 [ 179.849395][T13889] ? arch_stack_walk+0xee/0x140 [ 179.854328][T13889] ? stack_trace_save+0x98/0xe0 [ 179.890593][T13889] ? __stack_depot_save+0x34/0x480 [ 179.905981][T13889] ? __kasan_slab_alloc+0x69/0xf0 [ 179.928069][T13889] ? _find_next_bit+0x1fa/0x200 [ 179.935432][T13897] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 179.945434][T13889] ? __kasan_kmalloc+0xec/0x110 [ 179.984946][T13889] ? __kasan_kmalloc+0xda/0x110 [ 179.989861][T13889] ? kmem_cache_alloc_trace+0x119/0x270 [ 180.023520][T13889] ? selinux_bpf_prog_alloc+0x51/0x140 [ 180.045584][T13889] ? security_bpf_prog_alloc+0x62/0x90 [ 180.065052][T13889] ? bpf_prog_load+0x97c/0x1550 [ 180.070382][T13889] ? __sys_bpf+0x4c3/0x730 [ 180.075411][ T2393] attempt to access beyond end of device [ 180.075411][ T2393] loop4: rw=2049, want=45104, limit=40427 [ 180.084972][T13889] ? __x64_sys_bpf+0x7c/0x90 [ 180.095118][T13889] ? x64_sys_call+0x4b9/0x9a0 [ 180.099974][T13928] netlink: 'syz.3.6205': attribute type 1 has an invalid length. [ 180.115046][T13889] ? do_syscall_64+0x4c/0xa0 [ 180.126238][T13889] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.142668][T13889] ? check_stack_object+0x81/0x140 [ 180.148117][T13889] ? memset+0x35/0x40 [ 180.173000][T13889] ? bpf_obj_name_cpy+0x193/0x1e0 [ 180.178342][T13889] bpf_prog_load+0x1042/0x1550 [ 180.184141][T13889] ? map_freeze+0x360/0x360 [ 180.203633][T13889] ? selinux_bpf+0xc7/0xf0 [ 180.245010][T13889] ? security_bpf+0x82/0xa0 [ 180.249603][T13889] __sys_bpf+0x4c3/0x730 [ 180.253845][T13889] ? bpf_link_show_fdinfo+0x310/0x310 [ 180.290873][T13889] ? __kasan_check_write+0x14/0x20 [ 180.312790][T13889] ? switch_fpu_return+0x15d/0x2c0 [ 180.357678][T13889] __x64_sys_bpf+0x7c/0x90 [ 180.368008][T13889] x64_sys_call+0x4b9/0x9a0 [ 180.387071][T13889] do_syscall_64+0x4c/0xa0 [ 180.391590][T13889] ? clear_bhb_loop+0x50/0xa0 [ 180.396451][T13889] ? clear_bhb_loop+0x50/0xa0 [ 180.401184][T13889] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.408196][T13889] RIP: 0033:0x7fafe42de929 [ 180.412658][T13889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.461290][T13948] loop6: detected capacity change from 0 to 16 [ 180.467575][T13889] RSP: 002b:00007fafe2947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.499838][T13889] RAX: ffffffffffffffda RBX: 00007fafe4505fa0 RCX: 00007fafe42de929 [ 180.509047][T13889] RDX: 0000000000000094 RSI: 0000200000001540 RDI: 0000000000000005 [ 180.517568][T13889] RBP: 00007fafe4360b39 R08: 0000000000000000 R09: 0000000000000000 [ 180.531534][T13889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.540350][T13889] R13: 0000000000000000 R14: 00007fafe4505fa0 R15: 00007fff9e0baca8 [ 180.548580][T13948] erofs: (device loop6): mounted with root inode @ nid 36. [ 180.548755][T13943] loop3: detected capacity change from 0 to 8192 [ 180.569124][T13889] [ 180.572159][T13889] ---[ end trace c8acce93ed099ae1 ]--- [ 180.659541][T13959] input: syz0 as /devices/virtual/input/input19 [ 180.874505][T13976] sch_fq: defrate 0 ignored. [ 180.940400][T13943] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 180.955812][T13978] loop8: detected capacity change from 0 to 2048 [ 180.962765][T13943] FAT-fs (loop3): Filesystem has been set read-only [ 181.005976][ T2326] Alternate GPT is invalid, using primary GPT. [ 181.013023][ T2326] loop8: p1 p2 p3 [ 181.027186][T13978] Alternate GPT is invalid, using primary GPT. [ 181.039683][T13978] loop8: p1 p2 p3 [ 181.146833][T13982] loop3: detected capacity change from 0 to 8192 [ 181.511538][T13991] loop8: detected capacity change from 0 to 512 [ 181.567030][T13991] EXT4-fs (loop8): Ignoring removed oldalloc option [ 181.573661][T13991] EXT4-fs (loop8): Journaled quota options ignored when QUOTA feature is enabled [ 181.592933][T13991] EXT4-fs (loop8): Unrecognized mount option "seclabel"" or missing value [ 181.816123][T13997] loop3: detected capacity change from 0 to 40427 [ 181.825019][ T1118] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 181.843692][T13997] F2FS-fs (loop3): invalid crc value [ 181.850721][T13997] F2FS-fs (loop3): Found nat_bits in checkpoint [ 181.904991][T13997] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 181.954987][ T42] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 181.983341][ T287] attempt to access beyond end of device [ 181.983341][ T287] loop3: rw=2049, want=45104, limit=40427 [ 182.084939][ T1118] usb 7-1: Using ep0 maxpacket: 16 [ 182.113733][ T2326] udevd[2326]: symlink '../../loop3' '/dev/disk/by-diskseq/739.tmp-b7:3' failed: Read-only file system [ 182.150642][ T2326] udevd[2326]: symlink '../../loop3' '/dev/disk/by-diskseq/739.tmp-b7:3' failed: Read-only file system [ 182.165706][T14007] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6229'. [ 182.188816][ T2326] udevd[2326]: symlink '../../loop3' '/dev/disk/by-diskseq/739.tmp-b7:3' failed: Read-only file system [ 182.205253][ T1118] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.213584][T14009] input: syz0 as /devices/virtual/input/input21 [ 182.228254][ T1118] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.244908][ T1118] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.261632][ T2326] udevd[2326]: symlink '../../loop3' '/dev/disk/by-diskseq/739.tmp-b7:3' failed: Read-only file system [ 182.286257][ T1118] usb 7-1: config 0 interface 0 has no altsetting 0 [ 182.292885][ T1118] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 182.306279][ T2326] udevd[2326]: symlink '../../loop3' '/dev/disk/by-diskseq/739.tmp-b7:3' failed: Read-only file system [ 182.317400][ T42] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.327643][ T1118] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.328741][T14017] loop3: detected capacity change from 0 to 512 [ 182.335805][ T42] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.352330][ T1118] usb 7-1: config 0 descriptor?? [ 182.435073][ T42] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.444140][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.455363][T14017] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 182.458584][ T2326] udevd[2326]: symlink '../../loop3' '/dev/disk/by-diskseq/740.tmp-b7:3' failed: Read-only file system [ 182.485594][T14017] EXT4-fs (loop3): 1 truncate cleaned up [ 182.491253][T14017] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,lazytime,barrier,barrier,max_batch_time=0x0000000000000005,grpquota,,errors=continue. Quota mode: writeback. [ 182.509397][ T42] usb 9-1: SerialNumber: syz [ 182.515816][ T2326] udevd[2326]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 182.532049][ T2326] udevd[2326]: symlink '../../loop3' '/dev/disk/by-diskseq/740.tmp-b7:3' failed: Read-only file system [ 182.544074][ T2326] udevd[2326]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 182.605315][ T2326] udevd[2326]: symlink '../../loop3' '/dev/disk/by-diskseq/740.tmp-b7:3' failed: Read-only file system [ 182.750633][T14030] loop3: detected capacity change from 0 to 256 [ 182.800953][T14030] attempt to access beyond end of device [ 182.800953][T14030] loop3: rw=2049, want=368, limit=256 [ 182.805614][ T42] usb 9-1: 0:2 : does not exist [ 182.878834][ T42] usb 9-1: USB disconnect, device number 2 [ 182.965497][T14045] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 182.971380][T14045] syzkaller0: linktype set to 512 [ 183.005841][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 183.046528][ T26] usb 7-1: USB disconnect, device number 12 [ 183.110231][ T30] kauditd_printk_skb: 2410 callbacks suppressed [ 183.110247][ T30] audit: type=1326 audit(2000000038.509:33956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14065 comm="syz.3.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd949d9d929 code=0x7ffc0000 [ 183.140353][ T30] audit: type=1326 audit(2000000038.539:33957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14065 comm="syz.3.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd949d9d929 code=0x7ffc0000 [ 183.164161][ T30] audit: type=1326 audit(2000000038.559:33958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14065 comm="syz.3.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd949d9d929 code=0x7ffc0000 [ 183.188771][ T30] audit: type=1326 audit(2000000038.589:33959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14065 comm="syz.3.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd949d9d929 code=0x7ffc0000 [ 183.212737][ T30] audit: type=1326 audit(2000000038.589:33960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14065 comm="syz.3.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd949d9d929 code=0x7ffc0000 [ 183.236659][ T30] audit: type=1326 audit(2000000038.639:33961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14065 comm="syz.3.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fd949d9d929 code=0x7ffc0000 [ 183.260393][ T30] audit: type=1326 audit(2000000038.639:33962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14065 comm="syz.3.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd949d9d929 code=0x7ffc0000 [ 183.284216][ T30] audit: type=1326 audit(2000000038.639:33963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14065 comm="syz.3.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd949d9d929 code=0x7ffc0000 [ 183.350937][ T30] audit: type=1326 audit(2000000038.749:33964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.5.6260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c2226929 code=0x7ffc0000 [ 183.379607][ T30] audit: type=1326 audit(2000000038.759:33965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.5.6260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c2226929 code=0x7ffc0000 [ 183.897184][T14108] loop3: detected capacity change from 0 to 40427 [ 183.928782][T14120] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6280'. [ 183.937894][T14120] netlink: 'syz.6.6280': attribute type 2 has an invalid length. [ 184.041077][T14108] F2FS-fs (loop3): Found nat_bits in checkpoint [ 184.097615][T14145] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.104690][T14145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.125116][T14108] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 184.169488][T14108] overlayfs: failed to resolve './file0': -2 [ 184.195444][ T287] attempt to access beyond end of device [ 184.195444][ T287] loop3: rw=2049, want=45112, limit=40427 [ 184.222988][T14165] loop8: detected capacity change from 0 to 512 [ 184.257508][T14165] EXT4-fs (loop8): Ignoring removed oldalloc option [ 184.274716][T14165] EXT4-fs (loop8): 1 truncate cleaned up [ 184.280485][T14165] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000004,. Quota mode: writeback. [ 184.303681][T14165] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.6300: invalid indirect mapped block 234881024 (level 0) [ 184.318082][T14165] EXT4-fs (loop8): Remounting filesystem read-only [ 184.334981][ T289] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 184.506481][T14196] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6310'. [ 184.529167][T14198] loop3: detected capacity change from 0 to 512 [ 184.557665][T14198] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.6312: bg 0: block 248: padding at end of block bitmap is not set [ 184.572321][T14198] EXT4-fs error (device loop3): ext4_acquire_dquot:6195: comm syz.3.6312: Failed to acquire dquot type 1 [ 184.584182][T14198] EXT4-fs (loop3): 1 truncate cleaned up [ 184.589861][T14198] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 184.600956][T14198] ext4 filesystem being mounted at /1436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.614015][T14198] EXT4-fs (loop3): shut down requested (2) [ 184.624263][T14198] syz.3.6312 (14198) used greatest stack depth: 20960 bytes left [ 184.702382][T14217] loop3: detected capacity change from 0 to 128 [ 184.708723][ T289] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 184.717868][ T289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.725786][T14217] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.726470][ T289] usb 6-1: config 0 descriptor?? [ 184.738512][T14217] ext4 filesystem being mounted at /1438/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.755499][T14217] EXT4-fs (loop3): shut down requested (1) [ 185.088511][T14222] input: syz0 as /devices/virtual/input/input22 [ 185.132083][T14230] netlink: 277 bytes leftover after parsing attributes in process `syz.6.6324'. [ 185.655037][ T289] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 185.665351][ T289] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 185.849774][ T289] asix 6-1:0.0 eth1: register 'asix' at usb-dummy_hcd.5-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 185.865601][ T289] usb 6-1: USB disconnect, device number 17 [ 185.879661][ T289] asix 6-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.5-1, ASIX AX88178 USB 2.0 Ethernet [ 185.909694][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6335'. [ 185.965687][T14264] netlink: 'syz.3.6337': attribute type 10 has an invalid length. [ 185.978993][T14264] netlink: 'syz.3.6337': attribute type 10 has an invalid length. [ 186.006620][T14271] loop3: detected capacity change from 0 to 1024 [ 186.021663][T14271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 186.032599][T14271] jbd2_journal_init_inode: Cannot locate journal superblock [ 186.039939][T14271] EXT4-fs (loop3): Could not load journal inode [ 186.100765][T14285] sit: Src spoofed 0.0.224.0/2002:0:e0::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 186.122883][T14287] loop3: detected capacity change from 0 to 1024 [ 186.182979][T14289] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 186.200335][T14287] EXT4-fs (loop3): Ignoring removed oldalloc option [ 186.210369][T14287] EXT4-fs (loop3): Ignoring removed orlov option [ 186.244811][T14287] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 186.286971][T14302] xt_hashlimit: size too large, truncated to 1048576 [ 186.442291][T14320] loop5: detected capacity change from 0 to 256 [ 186.475863][T14320] exfat: Deprecated parameter 'utf8' [ 186.481329][T14320] exfat: Deprecated parameter 'utf8' [ 186.491415][T14320] exfat: Deprecated parameter 'utf8' [ 186.497430][T14327] loop3: detected capacity change from 0 to 512 [ 186.517936][T14329] loop8: detected capacity change from 0 to 256 [ 186.529337][T14320] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 186.552986][T14329] FAT-fs (loop8): Directory bread(block 64) failed [ 186.559673][T14329] FAT-fs (loop8): Directory bread(block 65) failed [ 186.566617][T14329] FAT-fs (loop8): Directory bread(block 66) failed [ 186.571911][T14327] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 186.573202][T14329] FAT-fs (loop8): Directory bread(block 67) failed [ 186.580362][T14327] EXT4-fs (loop3): Ignoring removed bh option [ 186.580402][T14327] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 186.591656][T14329] FAT-fs (loop8): Directory bread(block 68) failed [ 186.615367][T14329] FAT-fs (loop8): Directory bread(block 69) failed [ 186.643882][T14329] FAT-fs (loop8): Directory bread(block 70) failed [ 186.645307][T14334] loop5: detected capacity change from 0 to 256 [ 186.651401][T14329] FAT-fs (loop8): Directory bread(block 71) failed [ 186.663403][T14327] EXT4-fs (loop3): 1 truncate cleaned up [ 186.673082][T14327] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,mblk_io_submit,bh,auto_da_alloc,barrier,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 186.673200][T14329] FAT-fs (loop8): Directory bread(block 72) failed [ 186.697554][ T60] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 186.705191][T14329] FAT-fs (loop8): Directory bread(block 73) failed [ 186.764207][T14339] loop3: detected capacity change from 0 to 128 [ 186.797145][T13811] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 186.805090][T13811] FAT-fs (loop8): Filesystem has been set read-only [ 186.856251][T14339] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,,errors=continue. Quota mode: none. [ 186.869042][T14339] ext4 filesystem being mounted at /1456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.961022][T14358] loop3: detected capacity change from 0 to 512 [ 187.017018][T14354] loop5: detected capacity change from 0 to 40427 [ 187.029350][T14358] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 187.042938][T14358] ext4 filesystem being mounted at /1458/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.063361][T14358] fscrypt (loop3, inode 15): Error -61 getting encryption context [ 187.065052][ T60] usb 7-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 187.083217][T14354] F2FS-fs (loop5): Found nat_bits in checkpoint [ 187.096641][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.115629][ T60] usb 7-1: config 0 descriptor?? [ 187.129864][T14354] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 187.146082][ T2368] udevd[2368]: symlink '../../loop5' '/dev/disk/by-diskseq/767.tmp-b7:5' failed: Read-only file system [ 187.158162][ T2368] udevd[2368]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system [ 187.158827][ T3572] attempt to access beyond end of device [ 187.158827][ T3572] loop5: rw=2049, want=45104, limit=40427 [ 187.181621][ T2368] udevd[2368]: symlink '../../loop3' '/dev/disk/by-diskseq/765.tmp-b7:3' failed: Read-only file system [ 187.219664][ T2368] udevd[2368]: symlink '../../loop3' '/dev/disk/by-diskseq/765.tmp-b7:3' failed: Read-only file system [ 187.250084][ T2368] udevd[2368]: symlink '../../loop3' '/dev/disk/by-diskseq/768.tmp-b7:3' failed: Read-only file system [ 187.272431][T14365] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.280002][T14365] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.287813][T14365] device bridge_slave_0 entered promiscuous mode [ 187.296788][T14365] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.303911][T14365] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.311694][T14365] device bridge_slave_1 entered promiscuous mode [ 187.357227][ T2368] udevd[2368]: symlink '../../loop5' '/dev/disk/by-diskseq/767.tmp-b7:5' failed: Read-only file system [ 187.374523][ T2848] udevd[2848]: symlink '../../loop3' '/dev/disk/by-diskseq/768.tmp-b7:3' failed: Read-only file system [ 187.388631][ T2368] udevd[2368]: symlink '../../loop5' '/dev/disk/by-diskseq/767.tmp-b7:5' failed: Read-only file system [ 187.425452][ T2368] udevd[2368]: symlink '../../loop5' '/dev/disk/by-diskseq/769.tmp-b7:5' failed: Read-only file system [ 187.442413][ T2848] udevd[2848]: symlink '../../loop3' '/dev/disk/by-diskseq/768.tmp-b7:3' failed: Read-only file system [ 187.462309][T14383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6378'. [ 187.475047][T14365] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.482093][T14365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.489424][T14365] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.496469][T14365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.540483][T14393] loop3: detected capacity change from 0 to 256 [ 187.546847][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.554481][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.564192][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.574974][T14393] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.586029][T14393] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 187.596049][ T45] device bridge_slave_1 left promiscuous mode [ 187.602336][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.610321][T14393] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 187.622697][ T45] device bridge_slave_0 left promiscuous mode [ 187.635567][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.643908][ T45] device veth1_macvtap left promiscuous mode [ 187.650239][ T45] device veth0_vlan left promiscuous mode [ 187.713096][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.731704][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.743825][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.785879][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.796695][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.804380][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.813722][T14412] loop3: detected capacity change from 0 to 128 [ 187.817077][T14365] device veth0_vlan entered promiscuous mode [ 187.829370][T14412] EXT4-fs (loop3): Ignoring removed nobh option [ 187.842708][T14365] device veth1_macvtap entered promiscuous mode [ 187.845025][ T42] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 187.863941][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.875339][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.881935][T14412] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 187.895705][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.895800][T14412] ext4 filesystem being mounted at /1467/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.025590][ T60] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 188.038115][ T60] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 188.067144][T14432] binfmt_misc: register: failed to install interpreter file ./file1 [ 188.108231][T14441] loop3: detected capacity change from 0 to 1024 [ 188.125301][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 188.139236][ T30] kauditd_printk_skb: 188 callbacks suppressed [ 188.139251][ T30] audit: type=1400 audit(2000000043.539:34152): avc: denied { audit_write } for pid=14443 comm="syz.4.6405" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 188.167666][T14441] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.177213][ T30] audit: type=1107 audit(2000000043.549:34153): pid=14443 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¼X<' [ 188.222010][ T30] audit: type=1400 audit(2000000043.619:34154): avc: denied { create } for pid=14450 comm="syz.3.6407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 188.239322][ T60] asix 7-1:0.0 eth1: register 'asix' at usb-dummy_hcd.6-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 188.243390][ T30] audit: type=1400 audit(2000000043.619:34155): avc: denied { ioctl } for pid=14450 comm="syz.3.6407" path="socket:[65410]" dev="sockfs" ino=65410 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 188.254995][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.292379][ T60] usb 7-1: USB disconnect, device number 13 [ 188.298627][ T60] asix 7-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.6-1, ASIX AX88178 USB 2.0 Ethernet [ 188.308622][ T30] audit: type=1400 audit(2000000043.679:34156): avc: denied { read } for pid=14453 comm="syz.3.6409" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 188.342264][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.364957][ T951] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 188.385066][ T42] usb 6-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.00 [ 188.402972][ T30] audit: type=1400 audit(2000000043.679:34157): avc: denied { open } for pid=14453 comm="syz.3.6409" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 188.432440][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.449265][ T26] ================================================================== [ 188.452321][ T30] audit: type=1400 audit(2000000043.699:34158): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 188.457362][ T26] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 188.457390][ T26] Read of size 8 at addr ffff888119070c70 by task kworker/1:0/26 [ 188.457405][ T26] [ 188.457415][ T26] CPU: 1 PID: 26 Comm: kworker/1:0 Tainted: G W 5.15.185-syzkaller-00207-g32c443bd6d40 #0 [ 188.478815][ T30] audit: type=1400 audit(2000000043.699:34159): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.486155][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.486167][ T26] Workqueue: events destroy_super_work [ 188.486189][ T26] Call Trace: [ 188.486194][ T26] [ 188.486201][ T26] __dump_stack+0x21/0x30 [ 188.486218][ T26] dump_stack_lvl+0xee/0x150 [ 188.486231][ T26] ? show_regs_print_info+0x20/0x20 [ 188.486245][ T26] ? load_image+0x3a0/0x3a0 [ 188.486261][ T26] ? addrconf_dad_work+0xce5/0x1540 [ 188.486287][ T26] ? srcu_reschedule+0xd3/0xf0 [ 188.486302][ T26] print_address_description+0x7f/0x2c0 [ 188.486317][ T26] ? __list_del_entry_valid+0xa6/0x120 [ 188.486335][ T26] kasan_report+0xf1/0x140 [ 188.486350][ T26] ? __list_del_entry_valid+0xa6/0x120 [ 188.495430][ T30] audit: type=1400 audit(2000000043.699:34160): avc: denied { read } for pid=140 comm="dhcpcd" name="n17" dev="tmpfs" ino=30443 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 188.496355][ T26] __asan_report_load8_noabort+0x14/0x20 [ 188.507899][ T30] audit: type=1400 audit(2000000043.699:34161): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=30443 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 188.528766][ T26] __list_del_entry_valid+0xa6/0x120 [ 188.528799][ T26] process_one_work+0x453/0xba0 [ 188.528820][ T26] worker_thread+0xa59/0x1200 [ 188.528841][ T26] kthread+0x411/0x500 [ 188.528855][ T26] ? worker_clr_flags+0x190/0x190 [ 188.528871][ T26] ? kthread_blkcg+0xd0/0xd0 [ 188.528885][ T26] ret_from_fork+0x1f/0x30 [ 188.528902][ T26] [ 188.528908][ T26] [ 188.528912][ T26] Allocated by task 60: [ 188.528920][ T26] __kasan_kmalloc+0xda/0x110 [ 188.528934][ T26] __kmalloc+0x13d/0x2c0 [ 188.528949][ T26] kvmalloc_node+0x242/0x330 [ 188.528963][ T26] alloc_netdev_mqs+0x8d/0xc90 [ 188.528976][ T26] alloc_etherdev_mqs+0x34/0x40 [ 188.528989][ T26] usbnet_probe+0x219/0x2860 [ 188.529003][ T26] usb_probe_interface+0x5ff/0xae0 [ 188.529019][ T26] really_probe+0x285/0x970 [ 188.529033][ T26] __driver_probe_device+0x198/0x280 [ 188.714984][ T951] usb 10-1: Using ep0 maxpacket: 16 [ 188.715174][ T26] driver_probe_device+0x54/0x3e0 [ 188.744706][ T26] __device_attach_driver+0x2a6/0x460 [ 188.750063][ T26] bus_for_each_drv+0x175/0x200 [ 188.754895][ T26] __device_attach+0x2a2/0x400 [ 188.759642][ T26] device_initial_probe+0x1a/0x20 [ 188.764640][ T26] bus_probe_device+0xc0/0x1e0 [ 188.769381][ T26] device_add+0xb31/0xed0 [ 188.773685][ T26] usb_set_configuration+0x19c2/0x1f10 [ 188.779121][ T26] usb_generic_driver_probe+0x91/0x150 [ 188.784556][ T26] usb_probe_device+0x148/0x260 [ 188.789384][ T26] really_probe+0x285/0x970 [ 188.793866][ T26] __driver_probe_device+0x198/0x280 [ 188.799127][ T26] driver_probe_device+0x54/0x3e0 [ 188.804128][ T26] __device_attach_driver+0x2a6/0x460 [ 188.809487][ T26] bus_for_each_drv+0x175/0x200 [ 188.814320][ T26] __device_attach+0x2a2/0x400 [ 188.819057][ T26] device_initial_probe+0x1a/0x20 [ 188.824058][ T26] bus_probe_device+0xc0/0x1e0 [ 188.828799][ T26] device_add+0xb31/0xed0 [ 188.833108][ T26] usb_new_device+0xd06/0x1620 [ 188.837848][ T26] hub_event+0x27d8/0x42c0 [ 188.842238][ T26] process_one_work+0x6be/0xba0 [ 188.847066][ T26] worker_thread+0xa59/0x1200 [ 188.851733][ T26] kthread+0x411/0x500 [ 188.855782][ T26] ret_from_fork+0x1f/0x30 [ 188.860189][ T26] [ 188.862489][ T26] Freed by task 60: [ 188.866271][ T26] kasan_set_track+0x4a/0x70 [ 188.870835][ T26] kasan_set_free_info+0x23/0x40 [ 188.875748][ T26] ____kasan_slab_free+0x125/0x160 [ 188.880833][ T26] __kasan_slab_free+0x11/0x20 [ 188.885569][ T26] slab_free_freelist_hook+0xc2/0x190 [ 188.890919][ T26] kfree+0xc4/0x270 [ 188.894708][ T26] kvfree+0x35/0x40 [ 188.898491][ T26] netdev_freemem+0x3f/0x60 [ 188.902971][ T26] netdev_release+0x7f/0xb0 [ 188.907453][ T26] device_release+0x96/0x1c0 [ 188.912029][ T26] kobject_put+0x18a/0x270 [ 188.916431][ T26] put_device+0x1f/0x30 [ 188.920574][ T26] free_netdev+0x34b/0x450 [ 188.924973][ T26] usbnet_disconnect+0x24b/0x3a0 [ 188.929902][ T26] usb_unbind_interface+0x212/0x8c0 [ 188.935094][ T26] device_release_driver_internal+0x4c1/0x760 [ 188.941154][ T26] device_release_driver+0x19/0x20 [ 188.946250][ T26] bus_remove_device+0x2dd/0x340 [ 188.951170][ T26] device_del+0x696/0xe90 [ 188.955477][ T26] usb_disable_device+0x3a8/0x750 [ 188.960479][ T26] usb_disconnect+0x31e/0x850 [ 188.965131][ T26] hub_event+0x190c/0x42c0 [ 188.969520][ T26] process_one_work+0x6be/0xba0 [ 188.974346][ T26] worker_thread+0xd7b/0x1200 [ 188.979001][ T26] kthread+0x411/0x500 [ 188.983073][ T26] ret_from_fork+0x1f/0x30 [ 188.987469][ T26] [ 188.989769][ T26] Last potentially related work creation: [ 188.995481][ T26] kasan_save_stack+0x3a/0x60 [ 189.000143][ T26] __kasan_record_aux_stack+0xd2/0x100 [ 189.005602][ T26] kasan_record_aux_stack_noalloc+0xb/0x10 [ 189.011406][ T26] insert_work+0x51/0x310 [ 189.015738][ T26] __queue_work+0x8e5/0xc60 [ 189.020237][ T26] queue_work_on+0xd2/0x140 [ 189.024719][ T26] usbnet_link_change+0x176/0x1a0 [ 189.029718][ T26] usbnet_probe+0x1dfd/0x2860 [ 189.034373][ T26] usb_probe_interface+0x5ff/0xae0 [ 189.039462][ T26] really_probe+0x285/0x970 [ 189.043941][ T26] __driver_probe_device+0x198/0x280 [ 189.049200][ T26] driver_probe_device+0x54/0x3e0 [ 189.054209][ T26] __device_attach_driver+0x2a6/0x460 [ 189.059556][ T26] bus_for_each_drv+0x175/0x200 [ 189.064387][ T26] __device_attach+0x2a2/0x400 [ 189.069129][ T26] device_initial_probe+0x1a/0x20 [ 189.074128][ T26] bus_probe_device+0xc0/0x1e0 [ 189.078871][ T26] device_add+0xb31/0xed0 [ 189.083177][ T26] usb_set_configuration+0x19c2/0x1f10 [ 189.088618][ T26] usb_generic_driver_probe+0x91/0x150 [ 189.094053][ T26] usb_probe_device+0x148/0x260 [ 189.098884][ T26] really_probe+0x285/0x970 [ 189.103368][ T26] __driver_probe_device+0x198/0x280 [ 189.108627][ T26] driver_probe_device+0x54/0x3e0 [ 189.113627][ T26] __device_attach_driver+0x2a6/0x460 [ 189.118993][ T26] bus_for_each_drv+0x175/0x200 [ 189.123819][ T26] __device_attach+0x2a2/0x400 [ 189.128563][ T26] device_initial_probe+0x1a/0x20 [ 189.133572][ T26] bus_probe_device+0xc0/0x1e0 [ 189.138325][ T26] device_add+0xb31/0xed0 [ 189.142638][ T26] usb_new_device+0xd06/0x1620 [ 189.147386][ T26] hub_event+0x27d8/0x42c0 [ 189.151776][ T26] process_one_work+0x6be/0xba0 [ 189.156603][ T26] worker_thread+0xa59/0x1200 [ 189.161265][ T26] kthread+0x411/0x500 [ 189.165335][ T26] ret_from_fork+0x1f/0x30 [ 189.169738][ T26] [ 189.172058][ T26] The buggy address belongs to the object at ffff888119070000 [ 189.172058][ T26] which belongs to the cache kmalloc-4k of size 4096 [ 189.186087][ T26] The buggy address is located 3184 bytes inside of [ 189.186087][ T26] 4096-byte region [ffff888119070000, ffff888119071000) [ 189.199514][ T26] The buggy address belongs to the page: [ 189.205128][ T26] page:ffffea0004641c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119070 [ 189.215340][ T26] head:ffffea0004641c00 order:3 compound_mapcount:0 compound_pincount:0 [ 189.223636][ T26] flags: 0x4000000000010200(slab|head|zone=1) [ 189.229691][ T26] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 189.238254][ T26] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 189.246803][ T26] page dumped because: kasan: bad access detected [ 189.253186][ T26] page_owner tracks the page as allocated [ 189.258874][ T26] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2368, ts 113972632368, free_ts 113955323281 [ 189.279514][ T26] post_alloc_hook+0x192/0x1b0 [ 189.284261][ T26] prep_new_page+0x1c/0x110 [ 189.288738][ T26] get_page_from_freelist+0x2cc5/0x2d50 [ 189.294256][ T26] __alloc_pages+0x18f/0x440 [ 189.298816][ T26] new_slab+0xa1/0x4d0 [ 189.302857][ T26] ___slab_alloc+0x381/0x810 [ 189.307419][ T26] __slab_alloc+0x49/0x90 [ 189.311723][ T26] kmem_cache_alloc_trace+0x146/0x270 [ 189.317068][ T26] kernfs_iop_get_link+0x66/0x600 [ 189.322072][ T26] pick_link+0x6d4/0xe00 [ 189.326286][ T26] step_into+0xaec/0xd10 [ 189.330499][ T26] path_openat+0x1629/0x2f10 [ 189.335090][ T26] do_filp_open+0x1b3/0x3e0 [ 189.339567][ T26] do_sys_openat2+0x14c/0x7b0 [ 189.344216][ T26] __x64_sys_openat+0x136/0x160 [ 189.349039][ T26] x64_sys_call+0x219/0x9a0 [ 189.353517][ T26] page last free stack trace: [ 189.358179][ T26] free_unref_page_prepare+0x542/0x550 [ 189.363623][ T26] free_unref_page+0xa2/0x550 [ 189.368279][ T26] __free_pages+0x6c/0x100 [ 189.372670][ T26] __free_slab+0xe8/0x1e0 [ 189.376976][ T26] __unfreeze_partials+0x160/0x190 [ 189.382069][ T26] put_cpu_partial+0xc6/0x120 [ 189.386721][ T26] __slab_free+0x1d4/0x290 [ 189.391108][ T26] ___cache_free+0x104/0x120 [ 189.395669][ T26] qlink_free+0x4d/0x90 [ 189.399805][ T26] qlist_free_all+0x5f/0xb0 [ 189.404290][ T26] kasan_quarantine_reduce+0x14a/0x170 [ 189.409724][ T26] __kasan_slab_alloc+0x2f/0xf0 [ 189.414548][ T26] slab_post_alloc_hook+0x4f/0x2b0 [ 189.419638][ T26] kmem_cache_alloc+0xf7/0x260 [ 189.424378][ T26] getname_flags+0xb9/0x500 [ 189.428857][ T26] user_path_at_empty+0x30/0x1c0 [ 189.433775][ T26] [ 189.436075][ T26] Memory state around the buggy address: [ 189.441675][ T26] ffff888119070b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.449709][ T26] ffff888119070b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.457738][ T26] >ffff888119070c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.465765][ T26] ^ [ 189.473450][ T26] ffff888119070c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.481479][ T26] ffff888119070d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.489507][ T26] ================================================================== [ 189.497536][ T26] Disabling lock debugging due to kernel taint [ 189.506782][ T42] usb 6-1: config 0 descriptor?? [ 189.511942][ T951] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.529149][ T951] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.542052][ T951] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 189.551298][ T951] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.559808][ T951] usb 10-1: config 0 descriptor?? [ 189.985846][ T42] ntrig 0003:1B96:000B.0029: unknown main item tag 0x0 [ 189.992763][ T42] ntrig 0003:1B96:000B.0029: unknown main item tag 0x0 [ 189.999704][ T42] ntrig 0003:1B96:000B.0029: unknown main item tag 0x0 [ 190.006674][ T42] ntrig 0003:1B96:000B.0029: unknown main item tag 0x0 [ 190.013536][ T42] ntrig 0003:1B96:000B.0029: unknown main item tag 0x0 [ 190.020442][ T42] ntrig 0003:1B96:000B.0029: unknown main item tag 0x0 [ 190.027313][ T42] ntrig 0003:1B96:000B.0029: unknown main item tag 0x0 [ 190.034770][ T42] ntrig 0003:1B96:000B.0029: hidraw0: USB HID v0.00 Device [HID 1b96:000b] on usb-dummy_hcd.5-1/input0 [ 190.205167][ T42] ntrig 0003:1B96:000B.0029: Firmware version: 5.1.24.7.5 (c7ba e508) [ 190.429636][ T42] usb 6-1: USB disconnect, device number 18 [ 191.464982][ T951] usbhid 10-1:0.0: can't add hid device: -71 [ 191.470996][ T951] usbhid: probe of 10-1:0.0 failed with error -71 [ 191.478336][ T951] usb 10-1: USB disconnect, device number 2