last executing test programs: 38.280230265s ago: executing program 1 (id=749): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2800000002"], 0x28) 38.20707738s ago: executing program 1 (id=742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4000004) 38.103406011s ago: executing program 1 (id=745): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e0494993cfc0000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000094231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0) 36.321921969s ago: executing program 1 (id=784): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x0, 0x0, &(0x7f0000000540)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 36.022004351s ago: executing program 1 (id=794): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x60001}, 0x8) shutdown(r0, 0x0) 35.80568036s ago: executing program 1 (id=802): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4f3, &(0x7f0000000580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) 35.682125106s ago: executing program 32 (id=802): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4f3, &(0x7f0000000580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) 22.875623609s ago: executing program 2 (id=1135): r0 = syz_clone(0x8014a000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) waitid(0x1, r0, 0x0, 0x8, 0x0) 22.682118601s ago: executing program 2 (id=1137): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, 0x0) 22.653113566s ago: executing program 2 (id=1138): unshare(0x20000400) r0 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r0, 0x6d911162c3f4c575) 22.6236796s ago: executing program 2 (id=1139): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB='umask=0000000000000010,discard,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',allow_utime=00000000000000000000201,iocharset=cp863,errors=continue,dmask=00000000000000000000777,umask=00000000000000000000007,utf8,dmask=00000000000000000000005,\x00'], 0x1, 0x1534, &(0x7f0000002d00)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 22.473872461s ago: executing program 2 (id=1141): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x2a80, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r1, r0, &(0x7f00000001c0)=0x1, 0x8) 22.364207241s ago: executing program 2 (id=1143): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='loginuid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) 22.216898992s ago: executing program 33 (id=1143): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='loginuid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) 20.073983881s ago: executing program 5 (id=1175): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005a000d03000000000000000004000080080003805e6ea230b6b4a9e9622d4889ca9e54ebcbb99db67ab33ec684a95062ecaa99f3b24ad562be7e967027cb656dd6cbb80d1bffc8778dd9a97b1aa1c7b8edb09799990947a9cc2fb7e90049e390abe2890fc423058579dee013fa1eb4458ebf92efc764642a5922df88bd46bebec5a5046f79d32dd0a616ccacbe9f6362946376c76e0835b7ad4151a4d873a22165d74288c166750e11c19403ff1fa3d8aea4c54fcdc4cd80af6700a2db8178866abf231c7870875ef5a6810f624c73b1bb51558cab883dae0d4f10cffcda13fc87b0eb2bcb6908668d"], 0x1c}], 0x1}, 0x0) 19.978593103s ago: executing program 5 (id=1177): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000e00)='./file1\x00', 0x2008410, &(0x7f0000000180)=ANY=[], 0x1, 0x5569, &(0x7f0000005a80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) fstat(r0, &(0x7f00000000c0)) 19.464592414s ago: executing program 5 (id=1185): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000001040)=[{{}, {0x1, 0x0, 0x1, 0x1}}], 0x8) 19.326710648s ago: executing program 5 (id=1186): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0xff, 0x50f, &(0x7f0000000140)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") syz_mount_image$exfat(0x0, &(0x7f0000000180)='./bus\x00', 0x2801cb0, 0x0, 0x0, 0x0, &(0x7f0000002980)) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f00000002c0)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) 19.12600915s ago: executing program 5 (id=1188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 18.913867579s ago: executing program 5 (id=1192): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) modify_ldt$write(0x1, &(0x7f00000000c0)={0xb03}, 0x10) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 18.751839577s ago: executing program 34 (id=1192): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) modify_ldt$write(0x1, &(0x7f00000000c0)={0xb03}, 0x10) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.056175286s ago: executing program 0 (id=1528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) read$FUSE(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000100)=@tcp=r1, 0x3}, 0x20) 2.998785915s ago: executing program 0 (id=1531): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0xb}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @local=@item_012={0x2, 0x2, 0x8, "3994"}, @local=@item_4={0x3, 0x2, 0x2, "b09ea549"}, @main=@item_4={0x3, 0x0, 0x8, "ce9abc16"}]}}, 0x0}, 0x0) 2.562968251s ago: executing program 3 (id=1545): syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x4ec25, 0x400, 0x3, 0x40000333}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) 2.562381261s ago: executing program 3 (id=1547): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.536955486s ago: executing program 3 (id=1548): futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r0, 0x4, 0x2) getdents64(r0, 0xffffffffffffffff, 0x43) 2.527024924s ago: executing program 7 (id=1549): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x32) 2.465662213s ago: executing program 7 (id=1550): syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x8, 0x105b7, &(0x7f00000105c0)="$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") r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x70) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) 1.66999431s ago: executing program 3 (id=1565): r0 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x5000) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)='$\x00', 0x2) 1.56670699s ago: executing program 3 (id=1566): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2808000, &(0x7f00000029c0)=ANY=[@ANYBLOB="726f6469722c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c636f6465706167653d3836352c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c696f636861727365743d69736f383835392d372c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c00ee5d348576f7ab56a085bab7988357ac4cdf9af0a17d2d0e7c5db618573e465688abe00298ca73e21d74eec9f8e84d60ea6c1bd688be564098cb27bdb71c1e03b6"], 0x1, 0x294, &(0x7f0000000500)="$eJzs3c1qY1UcAPD/TZM0VSFZuBLBC7pwFabzBBOkwmBWSha60cHpgCSh0EDAD4xduRdc+Q6+gw/gxjdw4VJwZxfilfTem6+mrYE0HcLvt8k/55z/+cppC4V78tmbw/7zs9GLi29+j0YjicqTeBKXSbSiEqXvAgDYJ5dZFn9lubvaVqMeEVmzeFfZwfQAgHuwyd9/AGA/fPTxJx90ut2TD9O0ETH8ftxLIn/N6zsv4osYxGk8imb8E5HN5PFrT7snUU3T8p8B46PoRQw//bV43/kz4ir/OJrRup7//tPuyXGai3eGk3FvOvL0tRavJBGdLMk7ehzNeD0iq0XRyTz/8Zr86NXj3bd/Kub/72m0oxm/fR5nMYjnV13M8789TtP3sh///jpfQS8imYx7h1ft5rKDnX0oAAAAAAAAAAAAAAAAAAAAAADsvXY601q8P6e8DbDdXl9/4/1AxQ0/k4X7dR6laVpe4zPu1SLPr8Yb1ag+3MoBAAAAAAAAAAAAAAAAAADg5TH68qv+s8Hg9Hwp+CVbLbk7qC6UlI/1b5C+FPR/jtg86/8EcVBMbZBcGyIpq7Yw1uEmjY/WDRqVm/awOoh88j9sPrG3trXAW4PydPWfJXFH48b6Q7JwMo+Kzs5Hya2HdjnI1mzdwY1Z9S2tvf7qdjdzuuLabDOX2zSmn+RCSW3LPykrknv5/QMAAAAAAAAAAAAAAAAAAMzNH/qNP65VXjzIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5+bf/z8LorVashpMiuTb2pTB4flozbCtHS8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPfdfAAAA///SBV2L") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x40}}]}}, 0x0) 1.290330667s ago: executing program 7 (id=1575): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)=@v2={0x2, @adiantum, 0x0, '\x00', @c}) 1.1990549s ago: executing program 0 (id=1579): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) r1 = dup(r0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, 0x0) 1.168426244s ago: executing program 4 (id=1580): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x8000, &(0x7f0000000a80)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES8, @ANYBLOB="41f53d8ea4eec15e3b0ac51edc2f1a99904001af7628ab56cda055a83b23b4f950c1c337588ed3b42f34752bd70e307237c846cc2d4de67127ff2177b7ea426e8b93f4f72bd2f6a34234016c53ee26f75eaa7e6df5a207f445cd303f6afb4f6370dc09696c91a171cbb13732c4f50f6b8ad51c1317eea579f39b1b38e75b237b78fbdef031ae262245dad9f72613b062a823e826dd87cac564731eb0f5bf6f48d4a3bf48ac3bf16381b3da5cd075213cf2f8d136d8653803ba3dc9e88a953bb68a9f1b4f2c06baa855d2cfcdb94edc48223db9c7a2c25a3b9080ecd549252f5ab8f73f46a9e8da6d7a0ff3", @ANYRESHEX, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2c6, &(0x7f0000000740)="$eJzs3EFLG2kcx/GfiWtiRJOFZWEXdvdh97J7CZo97HE3LArLBlqskbaHwlgnbcg0kZlgSSk1l9JrX4f02Fuh7RvwUnrpvTcpFHrxUDrFmcRONGrUxGj9fkCeJ/N/fsyjM8o/AWfz6uM7lZKXLVl1xZJGMampLSmzPWsZaY2xYD6mqKb+mPjw5qcr167/ny8UZueNmcsv/Jkzxkz98vzu/Se/vqxPLD6depbQRubG5vvc242xjR82Py3cLnum7JlqrW4ss1Sr1a0lxzbLZa+SNeayY1uebcpVz3Y76iWntrLSMFZ1eTK14tqeZ6xqw1TshqnXTN1tGOuWVa6abDZrJlO6wGLSaA/Liuvz81Z+37If7+umMHDj3Q66br7ZvVhcP4U9AQCAM+bg/j/s9ffv/wuL4XiU/v/7w/t/if5/QJodrw7p/3Fe/RW9+103b6Vav7+d6P8BAAAAAAAAAAAAAAAAAAAAADgPtnw/7ft+entsHQpeJyQlJfmt+pC3iQGJXn8/8nXI9f97SNtFn0X+cS8pOY9Wi6vFcAzr+ZLKcmRrWml9DO6HlnA+919hdtoEMnrhrLXya6vFuBLtfFumW/7nb2fCvOnMf6NU9Pw5pfVd9/PnuubH9PtvkXxWab26qZocLQf39Zf8gxlj/r1U2JUfD9YBAAAAAPA1yJode96/B/VgQVJ762E+8vmA7/trB30+sOv99ah+7OURlQAAAAAA4MS8xr2K5Ti2e4xJQtIJ4v2f+L40/G3Edex4SgPb2D+SzshlOo1JUlJ4xBwn/m4n3lPK72HNqKSh/1iOMBn2XyYAAAAA/dZu+ke8I4RePxzgjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuHh6fR5Ye/2eUrtwQDxyuvipf4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGfI5AAD//7+SG5Y=") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 1.142238499s ago: executing program 6 (id=1581): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') readlinkat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) 1.131760427s ago: executing program 4 (id=1582): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') lseek(r0, 0x5, 0x0) 1.127716636s ago: executing program 6 (id=1583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x50) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0xcf, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1}, 0x20) 1.113470033s ago: executing program 0 (id=1584): mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) unshare(0x400) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x28}, 0x18) utimensat(r0, 0x0, 0x0, 0x0) 1.09546634s ago: executing program 0 (id=1585): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x1818858, &(0x7f0000000280)={[{@fat=@check_strict}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@numtail}, {@uni_xlate}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x376, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000004c0)=""/55, 0x37) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.084084767s ago: executing program 6 (id=1586): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x8800000) 1.071154645s ago: executing program 4 (id=1587): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001a00010028bd70000000000002202000ff00c8070002000008000300", @ANYRES32=r2, @ANYBLOB="08000100ffffffff"], 0x34}}, 0xea5bc50b6199d77e) 934.039459ms ago: executing program 4 (id=1588): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_stats}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0}) 845.995252ms ago: executing program 4 (id=1589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000090}]}) 633.041811ms ago: executing program 4 (id=1590): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0xb}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @local=@item_012={0x2, 0x2, 0x8, "3994"}, @local=@item_4={0x3, 0x2, 0x2, "b09ea549"}, @main=@item_4={0x3, 0x0, 0x8, "ce9abc16"}]}}, 0x0}, 0x0) 632.291951ms ago: executing program 0 (id=1600): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040e704300000000000000109022400010000000009041600010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0x8, "72d3"}, @global=@item_012={0x2, 0x1, 0x4, "d056"}, @local=@item_012={0x0, 0x2, 0x8}]}}, 0x0}, 0x0) 602.257835ms ago: executing program 7 (id=1591): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 470.18474ms ago: executing program 6 (id=1592): mlockall(0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) brk(0x5d555ede6000) 464.569009ms ago: executing program 7 (id=1593): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xf0b, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_INIT={0x16, 0x2, {0x3, 0x9, 0x6}}]}}]}, 0x50}}, 0x0) 359.209469ms ago: executing program 6 (id=1594): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) get_robust_list(0x0, 0x0, 0x0) 266.232091ms ago: executing program 7 (id=1595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x3, 0x100}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x20, 0x9, 0x0, r0, 0x100}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 241.899806ms ago: executing program 35 (id=1595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x3, 0x100}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x20, 0x9, 0x0, r0, 0x100}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 180.126344ms ago: executing program 6 (id=1597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffe01, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=1598): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. [ 23.632775][ T28] audit: type=1400 audit(1772711253.608:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.636130][ T275] cgroup: Unknown subsys name 'net' [ 23.655613][ T28] audit: type=1400 audit(1772711253.608:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.682844][ T28] audit: type=1400 audit(1772711253.638:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.683296][ T275] cgroup: Unknown subsys name 'devices' [ 23.798718][ T275] cgroup: Unknown subsys name 'hugetlb' [ 23.804365][ T275] cgroup: Unknown subsys name 'rlimit' [ 23.940057][ T28] audit: type=1400 audit(1772711253.918:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.963304][ T28] audit: type=1400 audit(1772711253.918:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.988408][ T28] audit: type=1400 audit(1772711253.918:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.013104][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.022156][ T28] audit: type=1400 audit(1772711253.998:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.043482][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.047689][ T28] audit: type=1400 audit(1772711253.998:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.081989][ T28] audit: type=1400 audit(1772711254.018:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.107550][ T28] audit: type=1400 audit(1772711254.018:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.275171][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.282306][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.289927][ T287] device bridge_slave_0 entered promiscuous mode [ 25.297421][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.304573][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.312172][ T286] device bridge_slave_0 entered promiscuous mode [ 25.328336][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.335418][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.342977][ T287] device bridge_slave_1 entered promiscuous mode [ 25.349727][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.356837][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.364290][ T286] device bridge_slave_1 entered promiscuous mode [ 25.390863][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.397961][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.405520][ T283] device bridge_slave_0 entered promiscuous mode [ 25.415590][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.422753][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.430315][ T283] device bridge_slave_1 entered promiscuous mode [ 25.469265][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.476339][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.483875][ T284] device bridge_slave_0 entered promiscuous mode [ 25.490722][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.497863][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.505358][ T285] device bridge_slave_0 entered promiscuous mode [ 25.528061][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.535137][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.542658][ T284] device bridge_slave_1 entered promiscuous mode [ 25.555774][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.562900][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.570431][ T285] device bridge_slave_1 entered promiscuous mode [ 25.751671][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.758753][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.766064][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.773132][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.796966][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.804069][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.811452][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.818595][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.829606][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.836767][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.844172][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.851287][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.881980][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.889118][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.896463][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.903535][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.932539][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.940474][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.948503][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.955803][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.963314][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.970768][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.978205][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.985476][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.994552][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.002052][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.027941][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.036095][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.044653][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.051756][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.060348][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.068735][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.075774][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.084621][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.092935][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.100015][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.112803][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.120529][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.141892][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.150680][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.159024][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.166051][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.173588][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.182070][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.189171][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.196595][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.204758][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.211828][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.233416][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.241710][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.249918][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.259305][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.268002][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.275056][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.282505][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.290887][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.299310][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.306358][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.335291][ T283] device veth0_vlan entered promiscuous mode [ 26.343538][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.351814][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.359910][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.368693][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.377118][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.384576][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.392154][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.400581][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.409373][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.416444][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.423968][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.432510][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.440875][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.447936][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.455462][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.463986][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.472381][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.480466][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.488615][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.496352][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.504003][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.519780][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.527997][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.535962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.544443][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.568242][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.576917][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.584983][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.593381][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.601670][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.609997][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.618180][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.626295][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.636913][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.645147][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.666241][ T283] device veth1_macvtap entered promiscuous mode [ 26.673159][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.682284][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.690174][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.698656][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.707128][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.715448][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.724126][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.732270][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.740917][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.749536][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.757260][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.766582][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.774594][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.790502][ T284] device veth0_vlan entered promiscuous mode [ 26.797079][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.805229][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.813354][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.821750][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.829399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.837901][ T286] device veth0_vlan entered promiscuous mode [ 26.848064][ T287] device veth0_vlan entered promiscuous mode [ 26.858231][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.867209][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.875601][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.884181][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.896229][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.904587][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.927513][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 26.935446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.945471][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.958549][ T284] device veth1_macvtap entered promiscuous mode [ 26.966190][ T285] device veth0_vlan entered promiscuous mode [ 26.974943][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.984423][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.998106][ T287] device veth1_macvtap entered promiscuous mode [ 27.005270][ T286] device veth1_macvtap entered promiscuous mode [ 27.020670][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.030121][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.038161][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.045639][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.053399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.061965][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.070548][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.079061][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.090978][ T285] device veth1_macvtap entered promiscuous mode [ 27.106849][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.116777][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.146949][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.155399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.164738][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.196821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.214452][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.226225][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.235125][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.249169][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.258795][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.268583][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.373496][ T356] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 27.450961][ T367] xt_hashlimit: size too large, truncated to 1048576 [ 27.836513][ T39] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 27.875243][ T426] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.968898][ T435] loop0: detected capacity change from 0 to 128 [ 27.975545][ T435] ======================================================= [ 27.975545][ T435] WARNING: The mand mount option has been deprecated and [ 27.975545][ T435] and is ignored by this kernel. Remove the mand [ 27.975545][ T435] option from the mount to silence this warning. [ 27.975545][ T435] ======================================================= [ 28.047507][ T39] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 28.067756][ T39] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 28.079663][ T439] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 28.086507][ T39] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.104687][ T39] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 28.135270][ T435] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 28.154308][ T435] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.178307][ T39] usb 3-1: config 0 interface 0 has no altsetting 0 [ 28.195148][ T39] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 28.215878][ T449] loop3: detected capacity change from 0 to 1024 [ 28.242412][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.259694][ T287] EXT4-fs (loop0): unmounting filesystem. [ 28.276075][ T449] EXT4-fs: Ignoring removed oldalloc option [ 28.288650][ T39] usb 3-1: config 0 descriptor?? [ 28.300926][ T449] EXT4-fs: Ignoring removed mblk_io_submit option [ 28.346013][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 28.354915][ T449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 28.369557][ T455] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 28.434581][ T449] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 28.509702][ T464] loop4: detected capacity change from 0 to 512 [ 28.550946][ T285] EXT4-fs (loop3): unmounting filesystem. [ 28.589560][ T464] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 28.649731][ T464] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 28.705162][ T464] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.58: Corrupt directory, running e2fsck is recommended [ 28.719972][ T39] hid-generic 0003:044E:120C.0001: unbalanced delimiter at end of report description [ 28.740290][ T39] hid-generic: probe of 0003:044E:120C.0001 failed with error -22 [ 28.763006][ T464] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 28.789023][ T464] EXT4-fs error (device loop4): ext4_iget_extra_inode:4758: inode #15: comm syz.4.58: corrupted in-inode xattr [ 28.803484][ T481] loop0: detected capacity change from 0 to 256 [ 28.810043][ T464] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.58: couldn't read orphan inode 15 (err -117) [ 28.830654][ T464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 28.843596][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 28.843611][ T28] audit: type=1400 audit(1772711258.818:148): avc: denied { mount } for pid=478 comm="syz.0.66" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.901745][ T485] can0: slcan on ptm0. [ 28.918189][ T28] audit: type=1400 audit(1772711258.898:149): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.949256][ T39] usb 3-1: USB disconnect, device number 2 [ 28.987065][ T485] can0 (unregistered): slcan off ptm0. [ 29.005897][ T28] audit: type=1400 audit(1772711258.898:150): avc: denied { read } for pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=824 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.070088][ T28] audit: type=1400 audit(1772711258.898:151): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=824 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.102517][ T28] audit: type=1400 audit(1772711258.898:152): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=824 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.171874][ T28] audit: type=1400 audit(1772711258.918:153): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.194337][ T505] netlink: 60 bytes leftover after parsing attributes in process `syz.1.78'. [ 29.206437][ T28] audit: type=1400 audit(1772711259.018:154): avc: denied { create } for pid=490 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.263726][ T28] audit: type=1400 audit(1772711259.018:155): avc: denied { write } for pid=490 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.304674][ T28] audit: type=1400 audit(1772711259.148:156): avc: denied { view } for pid=502 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 29.359550][ T28] audit: type=1400 audit(1772711259.168:157): avc: denied { create } for pid=504 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.514513][ T529] loop2: detected capacity change from 0 to 512 [ 29.566884][ T529] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 29.590174][ T529] System zones: 1-12 [ 29.594718][ T529] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.90: Directory hole found for htree index block 0 [ 29.630462][ T536] loop1: detected capacity change from 0 to 512 [ 29.637156][ T529] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 29.655584][ T529] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.90: Directory hole found for htree index block 0 [ 29.680084][ T464] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 29.713224][ T529] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 29.722870][ T521] loop0: detected capacity change from 0 to 40427 [ 29.731057][ T529] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 29.738235][ T536] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 29.740331][ T521] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 29.757195][ T286] EXT4-fs (loop4): unmounting filesystem. [ 29.763891][ T515] loop3: detected capacity change from 0 to 40427 [ 29.768302][ T521] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 29.776301][ T536] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.793359][ T515] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 29.802622][ T515] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 29.810978][ T515] F2FS-fs (loop3): fault_type options not supported [ 29.817713][ T521] F2FS-fs (loop0): invalid crc value [ 29.818664][ T515] F2FS-fs (loop3): fault_injection options not supported [ 29.830410][ T515] F2FS-fs (loop3): Image doesn't support compression [ 29.843276][ T515] F2FS-fs (loop3): invalid crc value [ 29.857442][ T529] EXT4-fs: Ignoring removed orlov option [ 29.870972][ T529] EXT4-fs error (device loop2): __ext4_remount:6631: comm syz.2.90: Abort forced by user [ 29.882357][ T529] EXT4-fs (loop2): Remounting filesystem read-only [ 29.889445][ T529] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 29.896438][ T515] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.910439][ T521] F2FS-fs (loop0): Found nat_bits in checkpoint [ 29.944608][ T283] EXT4-fs (loop1): unmounting filesystem. [ 29.958600][ T284] EXT4-fs (loop2): unmounting filesystem. [ 29.998744][ T552] loop1: detected capacity change from 0 to 256 [ 30.007585][ T515] F2FS-fs (loop3): Start checkpoint disabled! [ 30.014287][ T515] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 30.036834][ T515] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 30.066998][ T515] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 30.089181][ T521] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 30.097695][ T557] loop2: detected capacity change from 0 to 128 [ 30.104982][ T521] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 30.118934][ T557] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.171667][ T557] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 30.267249][ T10] kworker/u4:1: attempt to access beyond end of device [ 30.267249][ T10] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 30.302694][ T284] EXT4-fs (loop2): unmounting filesystem. [ 30.309818][ T521] syz.0.86: attempt to access beyond end of device [ 30.309818][ T521] loop0: rw=34817, sector=77824, nr_sectors = 2056 limit=40427 [ 30.473123][ T580] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.532562][ T580] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.590390][ T580] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.110: corrupted xattr block 13 [ 30.632184][ T580] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 30.666513][ T580] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.110: corrupted xattr block 13 [ 30.682835][ T593] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.110: corrupted xattr block 13 [ 30.716686][ T580] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 30.721953][ T593] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 30.735140][ T580] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.110: corrupted xattr block 13 [ 30.757186][ T593] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.110: corrupted xattr block 13 [ 30.791458][ T580] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 30.800933][ T597] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 30.809474][ T593] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 30.873669][ T603] EXT4-fs (loop1): Test dummy encryption mode enabled [ 30.881760][ T284] EXT4-fs (loop2): unmounting filesystem. [ 30.935847][ T603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 30.973438][ T614] netlink: 48 bytes leftover after parsing attributes in process `syz.0.124'. [ 30.989873][ T614] tipc: Started in network mode [ 30.994936][ T614] tipc: Node identity , cluster identity 4711 [ 31.005169][ T612] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 31.017339][ T283] EXT4-fs (loop1): unmounting filesystem. [ 31.017901][ T614] tipc: Failed to obtain node identity [ 31.031984][ T612] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.036960][ T614] tipc: Enabling of bearer rejected, failed to enable media [ 31.077255][ T612] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 31.092544][ T618] netlink: 'syz.1.125': attribute type 29 has an invalid length. [ 31.102762][ T561] F2FS-fs (loop4): invalid crc value [ 31.132324][ T561] F2FS-fs (loop4): Found nat_bits in checkpoint [ 31.139471][ T284] EXT4-fs (loop2): unmounting filesystem. [ 31.216012][ T561] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 31.345524][ T638] capability: warning: `syz.3.134' uses deprecated v2 capabilities in a way that may be insecure [ 31.585096][ T624] F2FS-fs (loop0): fault_injection options not supported [ 31.617318][ T624] F2FS-fs (loop0): invalid crc value [ 31.631646][ T625] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 31.641376][ T624] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.672654][ T625] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 31.704663][ T625] F2FS-fs (loop1): invalid crc value [ 31.710346][ T662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.733199][ T625] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 31.779273][ T624] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.783874][ T662] EXT4-fs (loop3): orphan cleanup on readonly fs [ 31.811653][ T662] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 31.823899][ T673] netlink: 156 bytes leftover after parsing attributes in process `syz.2.148'. [ 31.833419][ T662] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.145: attempt to clear invalid blocks 2 len 1 [ 31.846349][ T673] tipc: Started in network mode [ 31.851792][ T673] tipc: Node identity 000000005f003a000000000000000001, cluster identity 4711 [ 31.861070][ T662] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 31.875766][ T673] tipc: Enabling of bearer rejected, failed to enable media [ 31.884355][ T662] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.145: invalid indirect mapped block 1819239214 (level 0) [ 31.924899][ T625] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 31.942750][ T625] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 31.951607][ T662] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.145: invalid indirect mapped block 1819239214 (level 1) [ 31.976325][ T287] syz-executor: attempt to access beyond end of device [ 31.976325][ T287] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 31.991595][ T662] EXT4-fs (loop3): 1 truncate cleaned up [ 32.000980][ T662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 32.048315][ T678] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.085628][ T625] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 32.104798][ T284] EXT4-fs (loop2): unmounting filesystem. [ 32.160136][ T686] tipc: Enabling of bearer rejected, failed to enable media [ 32.271370][ T699] tipc: Enabling of bearer rejected, failed to enable media [ 32.430232][ T708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.156'. [ 32.619353][ T285] EXT4-fs (loop3): unmounting filesystem. [ 32.677035][ T715] EXT4-fs (loop1): Test dummy encryption mode enabled [ 32.718303][ T715] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 32.742064][ T715] System zones: 0-5 [ 32.747291][ T715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.774168][ T705] F2FS-fs (loop0): invalid crc value [ 32.808469][ T705] F2FS-fs (loop0): Found nat_bits in checkpoint [ 32.826562][ T283] EXT4-fs (loop1): unmounting filesystem. [ 32.940494][ T705] F2FS-fs (loop0): Start checkpoint disabled! [ 32.962225][ T705] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 32.986829][ T705] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 32.986868][ T733] netlink: 612 bytes leftover after parsing attributes in process `syz.1.172'. [ 33.046487][ T733] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 33.114684][ T10] kworker/u4:1: attempt to access beyond end of device [ 33.114684][ T10] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 33.157562][ T742] set_capacity_and_notify: 10 callbacks suppressed [ 33.157582][ T742] loop3: detected capacity change from 0 to 256 [ 33.195939][ T742] exfat: Deprecated parameter 'utf8' [ 33.212112][ T746] binder: BC_ACQUIRE_RESULT not supported [ 33.223064][ T742] exfat: Deprecated parameter 'namecase' [ 33.236825][ T742] exfat: Deprecated parameter 'namecase' [ 33.242069][ T746] binder: 745:746 ioctl c0306201 2000000001c0 returned -22 [ 33.257345][ T742] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 33.312222][ T748] loop1: detected capacity change from 0 to 256 [ 33.328541][ T750] loop4: detected capacity change from 0 to 256 [ 33.336092][ T750] exfat: Deprecated parameter 'utf8' [ 33.367766][ T750] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 33.406780][ T758] xt_hashlimit: max too large, truncated to 1048576 [ 33.488297][ T769] Illegal XDP return value 4294967274 on prog (id 18) dev N/A, expect packet loss! [ 33.500861][ T765] loop1: detected capacity change from 0 to 1024 [ 33.526849][ T772] loop4: detected capacity change from 0 to 512 [ 33.570345][ T765] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 33.599180][ T765] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.650015][ T765] EXT4-fs warning (device loop1): ext4_resize_fs:2028: can't read last block, resize aborted [ 33.668169][ T283] EXT4-fs (loop1): unmounting filesystem. [ 33.865199][ T810] loop0: detected capacity change from 0 to 8192 [ 33.896174][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 33.896191][ T28] audit: type=1400 audit(1772711263.868:219): avc: denied { connect } for pid=827 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.013138][ T28] audit: type=1400 audit(1772711263.988:220): avc: denied { sys_module } for pid=837 comm="syz.4.222" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 34.170272][ T860] loop1: detected capacity change from 0 to 512 [ 34.188196][ T862] loop4: detected capacity change from 0 to 256 [ 34.202444][ T860] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 34.216966][ T862] exfat: Deprecated parameter 'utf8' [ 34.226632][ T860] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 34.237186][ T862] exfat: Deprecated parameter 'namecase' [ 34.245351][ T862] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 34.246847][ T858] loop3: detected capacity change from 0 to 8192 [ 34.259621][ T860] EXT4-fs (loop1): 1 truncate cleaned up [ 34.306064][ T824] loop2: detected capacity change from 0 to 40427 [ 34.306590][ T860] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.326622][ T824] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 34.338073][ T28] audit: type=1400 audit(1772711264.318:221): avc: denied { remount } for pid=859 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.338272][ T860] EXT4-fs: user quota file already specified [ 34.363565][ T824] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 34.372521][ T824] F2FS-fs (loop2): invalid crc value [ 34.379524][ T824] F2FS-fs (loop2): Found nat_bits in checkpoint [ 34.391664][ T870] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 34.417527][ T283] EXT4-fs (loop1): unmounting filesystem. [ 34.514092][ T824] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 34.530288][ T824] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 35.176016][ T905] FAT-fs (loop0): Directory bread(block 64) failed [ 35.192913][ T905] FAT-fs (loop0): Directory bread(block 65) failed [ 35.203041][ T905] FAT-fs (loop0): Directory bread(block 66) failed [ 35.219888][ T905] FAT-fs (loop0): Directory bread(block 67) failed [ 35.240118][ T905] FAT-fs (loop0): Directory bread(block 68) failed [ 35.254138][ T905] FAT-fs (loop0): Directory bread(block 69) failed [ 35.276217][ T905] FAT-fs (loop0): Directory bread(block 70) failed [ 35.284419][ T28] audit: type=1400 audit(1772711265.258:222): avc: denied { write } for pid=906 comm="syz.3.251" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 35.309946][ T905] FAT-fs (loop0): Directory bread(block 71) failed [ 35.326491][ T905] FAT-fs (loop0): Directory bread(block 72) failed [ 35.343317][ T905] FAT-fs (loop0): Directory bread(block 73) failed [ 35.507451][ T921] overlayfs: './file0' not a directory [ 35.513066][ T923] capability: warning: `syz.0.260' uses 32-bit capabilities (legacy support in use) [ 35.560506][ T28] audit: type=1400 audit(1772711265.538:223): avc: denied { map } for pid=924 comm="syz.4.261" path="socket:[17666]" dev="sockfs" ino=17666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.614120][ T28] audit: type=1400 audit(1772711265.538:224): avc: denied { read accept } for pid=924 comm="syz.4.261" path="socket:[17666]" dev="sockfs" ino=17666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.723964][ T28] audit: type=1400 audit(1772711265.698:225): avc: denied { write } for pid=931 comm="syz.4.264" name="event1" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.746605][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 35.839009][ T895] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1560) blocks(1024) [ 35.860514][ T895] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 35.876308][ T895] F2FS-fs (loop1): invalid crc value [ 35.907369][ T895] F2FS-fs (loop1): Found nat_bits in checkpoint [ 35.937586][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.961804][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.977780][ T900] F2FS-fs (loop2): Found nat_bits in checkpoint [ 36.007409][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 36.038112][ T6] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 36.057772][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.066017][ T895] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 36.078094][ T6] usb 4-1: config 0 descriptor?? [ 36.083174][ T900] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 36.086534][ T895] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 36.186475][ T28] audit: type=1400 audit(1772711266.158:226): avc: denied { read } for pid=899 comm="syz.2.258" name="file2" dev="loop2" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.416021][ T930] F2FS-fs (loop0): Test dummy encryption mode enabled [ 36.427203][ T930] F2FS-fs (loop0): invalid crc value [ 36.460569][ T930] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.495623][ T6] steelseries_srws1 0003:1038:1410.0002: unknown main item tag 0x0 [ 36.522843][ T6] steelseries_srws1 0003:1038:1410.0002: item fetching failed at offset 3/7 [ 36.538399][ T6] steelseries_srws1 0003:1038:1410.0002: parse failed [ 36.551405][ T6] steelseries_srws1: probe of 0003:1038:1410.0002 failed with error -22 [ 36.567591][ T930] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 36.647863][ T953] netlink: 'syz.1.269': attribute type 27 has an invalid length. [ 36.665131][ T953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.269'. [ 36.702229][ T19] usb 4-1: USB disconnect, device number 2 [ 36.777786][ T969] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 36.825555][ T28] audit: type=1400 audit(1772711266.798:227): avc: denied { bind } for pid=972 comm="syz.1.279" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.886226][ T979] netlink: 10 bytes leftover after parsing attributes in process `syz.4.282'. [ 36.895474][ T28] audit: type=1400 audit(1772711266.818:228): avc: denied { name_bind } for pid=972 comm="syz.1.279" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 37.216440][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 37.350339][ T1014] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.373738][ T1014] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.416670][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 37.423036][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.444147][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.461337][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 37.474970][ T285] EXT4-fs (loop3): unmounting filesystem. [ 37.482095][ T19] usb 5-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 37.501444][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.520338][ T19] usb 5-1: config 0 descriptor?? [ 37.656697][ T351] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 37.720123][ T989] F2FS-fs (loop2): invalid crc value [ 37.748684][ T989] F2FS-fs (loop2): Found nat_bits in checkpoint [ 37.817001][ T1030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 37.844489][ T989] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 37.853679][ T351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.886267][ T351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.904551][ T351] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 37.915134][ T351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.926898][ T351] usb 2-1: config 0 descriptor?? [ 37.932536][ T19] hid-multitouch 0003:045E:9994.0003: unknown main item tag 0x2 [ 37.946536][ T19] hid-multitouch 0003:045E:9994.0003: unknown main item tag 0x0 [ 37.964452][ T19] hid-multitouch 0003:045E:9994.0003: unknown main item tag 0x0 [ 37.976631][ T19] hid-multitouch 0003:045E:9994.0003: unknown main item tag 0x0 [ 37.996781][ T989] fscrypt (loop2, inode 3): Unsupported encryption flags (0x66) [ 38.003996][ T19] hid-multitouch 0003:045E:9994.0003: unknown main item tag 0x0 [ 38.026542][ T19] hid-multitouch 0003:045E:9994.0003: unknown main item tag 0x0 [ 38.052832][ T19] hid-multitouch 0003:045E:9994.0003: unknown main item tag 0x0 [ 38.068367][ T19] hid-multitouch 0003:045E:9994.0003: unknown main item tag 0x0 [ 38.096470][ T19] hid-multitouch 0003:045E:9994.0003: unknown main item tag 0x0 [ 38.104198][ T19] hid-multitouch 0003:045E:9994.0003: unknown main item tag 0x0 [ 38.146576][ T19] hid-multitouch 0003:045E:9994.0003: unknown main item tag 0x0 [ 38.155562][ T1045] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.165853][ T19] hid-multitouch 0003:045E:9994.0003: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.4-1/input0 [ 38.188833][ T19] usb 5-1: USB disconnect, device number 2 [ 38.207576][ T1045] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.278903][ T1048] fido_id[1048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 38.295907][ T287] EXT4-fs (loop0): unmounting filesystem. [ 38.376674][ T351] holtek_kbd 0003:04D9:A055.0004: item fetching failed at offset 5/7 [ 38.385311][ T351] holtek_kbd: probe of 0003:04D9:A055.0004 failed with error -22 [ 38.511680][ T1065] set_capacity_and_notify: 7 callbacks suppressed [ 38.511700][ T1065] loop0: detected capacity change from 0 to 128 [ 38.593725][ T19] usb 2-1: USB disconnect, device number 2 [ 38.763595][ T1089] loop4: detected capacity change from 0 to 4096 [ 38.803494][ T1089] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.825721][ T1089] EXT4-fs (loop4): Test dummy encryption mode enabled [ 38.850624][ T1102] loop2: detected capacity change from 0 to 256 [ 38.859057][ T1089] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.871083][ T1102] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 38.888989][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 38.895066][ T1102] exFAT-fs (loop2): Filesystem has been set read-only [ 38.902121][ T1102] exFAT-fs (loop2): error, failed to bmap (inode : ffff88813c4b1990 iblock : 0, err : -5) [ 38.914863][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 38.921245][ T1102] exFAT-fs (loop2): error, failed to bmap (inode : ffff88813c4b1990 iblock : 0, err : -5) [ 38.931738][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 38.937958][ T1102] exFAT-fs (loop2): error, failed to bmap (inode : ffff88813c4b1990 iblock : 1, err : -5) [ 38.948631][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 38.954697][ T1102] exFAT-fs (loop2): error, failed to bmap (inode : ffff88813c4b1990 iblock : 2, err : -5) [ 38.964960][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 38.971203][ T1102] exFAT-fs (loop2): error, failed to bmap (inode : ffff88813c4b1990 iblock : 3, err : -5) [ 38.982250][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 38.990699][ T1105] loop3: detected capacity change from 0 to 512 [ 38.997310][ T1102] exFAT-fs (loop2): error, failed to bmap (inode : ffff88813c4b1990 iblock : 4, err : -5) [ 39.007475][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 39.013548][ T1102] exFAT-fs (loop2): error, failed to bmap (inode : ffff88813c4b1990 iblock : 5, err : -5) [ 39.023771][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 39.036430][ T1102] exFAT-fs (loop2): error, failed to bmap (inode : ffff88813c4b1990 iblock : 6, err : -5) [ 39.047464][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 39.047604][ T1105] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 39.054163][ T1102] exFAT-fs (loop2): error, failed to bmap (inode : ffff88813c4b1990 iblock : 7, err : -5) [ 39.072157][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 39.074595][ T286] EXT4-fs (loop4): unmounting filesystem. [ 39.078650][ T1102] exFAT-fs (loop2): error, failed to bmap (inode : ffff88813c4b1990 iblock : 0, err : -5) [ 39.093866][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 39.099918][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 39.105930][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 39.111982][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 39.118024][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 39.124037][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 39.130188][ T1102] exFAT-fs (loop2): error, broken FAT chain. [ 39.177834][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 39.209308][ T1105] netlink: 20 bytes leftover after parsing attributes in process `syz.3.330'. [ 39.218304][ T1105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.330'. [ 39.222608][ T1116] loop2: detected capacity change from 0 to 16 [ 39.227337][ T1105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.330'. [ 39.251044][ T285] EXT4-fs (loop3): unmounting filesystem. [ 39.258431][ T1116] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 39.270855][ T1116] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 39.277063][ T1120] sch_fq: defrate 2147483648 ignored. [ 39.311224][ T1116] erofs: (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 39.336634][ T1126] loop0: detected capacity change from 0 to 256 [ 39.346695][ T1116] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.371329][ T1126] FAT-fs (loop0): Directory bread(block 64) failed [ 39.380315][ T1116] syz.2.339: attempt to access beyond end of device [ 39.380315][ T1116] loop2: rw=0, sector=46, nr_sectors = 1 limit=16 [ 39.396527][ T1126] FAT-fs (loop0): Directory bread(block 65) failed [ 39.404174][ T1116] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 39.406757][ T1126] FAT-fs (loop0): Directory bread(block 66) failed [ 39.446437][ T1126] FAT-fs (loop0): Directory bread(block 67) failed [ 39.466484][ T1126] FAT-fs (loop0): Directory bread(block 68) failed [ 39.473054][ T1126] FAT-fs (loop0): Directory bread(block 69) failed [ 39.477026][ T1132] loop2: detected capacity change from 0 to 256 [ 39.496219][ T1132] exfat: Deprecated parameter 'utf8' [ 39.510537][ T1126] FAT-fs (loop0): Directory bread(block 70) failed [ 39.516936][ T1132] exfat: Deprecated parameter 'namecase' [ 39.525555][ T1132] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 39.526597][ T1126] FAT-fs (loop0): Directory bread(block 71) failed [ 39.574650][ T1126] FAT-fs (loop0): Directory bread(block 72) failed [ 39.586452][ T1126] FAT-fs (loop0): Directory bread(block 73) failed [ 39.715802][ T1136] 9pnet_fd: p9_fd_create_tcp (1136): problem binding to privport [ 39.761187][ T1130] loop4: detected capacity change from 0 to 40427 [ 39.795433][ T1130] F2FS-fs (loop4): invalid crc value [ 39.815188][ T1130] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.909032][ T1130] F2FS-fs (loop4): Start checkpoint disabled! [ 39.926100][ T1130] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 39.933619][ T1130] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 39.993466][ T1134] loop2: detected capacity change from 0 to 40427 [ 40.020145][ T1134] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 40.052538][ T1134] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 40.081086][ T1134] F2FS-fs (loop2): invalid crc value [ 40.134443][ T1134] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.146430][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.181866][ T1147] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 40.242936][ T1134] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 40.256485][ T1134] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 40.266555][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 40.266570][ T28] audit: type=1326 audit(1772711270.238:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 40.337516][ T28] audit: type=1326 audit(1772711270.238:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff66b95cfce code=0x7ffc0000 [ 40.366495][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 40.372874][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.384059][ T28] audit: type=1326 audit(1772711270.238:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff66b95cfce code=0x7ffc0000 [ 40.404612][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.417573][ T28] audit: type=1326 audit(1772711270.238:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 40.470012][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 40.503322][ T28] audit: type=1326 audit(1772711270.248:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 40.505003][ T39] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 40.555946][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.574635][ T28] audit: type=1326 audit(1772711270.248:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 40.603531][ T39] usb 1-1: config 0 descriptor?? [ 40.638546][ T1129] loop3: detected capacity change from 0 to 131072 [ 40.670866][ T28] audit: type=1400 audit(1772711270.648:244): avc: denied { read write } for pid=1160 comm="syz.2.359" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 40.674091][ T1129] F2FS-fs (loop3): invalid crc value [ 40.721454][ T28] audit: type=1400 audit(1772711270.678:245): avc: denied { open } for pid=1160 comm="syz.2.359" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 40.747424][ T1122] F2FS-fs (loop1): Test dummy encryption mode enabled [ 40.754329][ T1122] F2FS-fs (loop1): Test dummy encryption mode enabled [ 40.777716][ T1129] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.804790][ T1122] F2FS-fs (loop1): invalid crc value [ 40.831370][ T1171] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c92c, utbl_chksum : 0xe619d30d) [ 40.857961][ T1171] exFAT-fs (loop2): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 40.870152][ T1171] exFAT-fs (loop2): Filesystem has been set read-only [ 40.877491][ T1122] F2FS-fs (loop1): Found nat_bits in checkpoint [ 40.945962][ T1129] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 40.976765][ T1122] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 41.023770][ T39] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 41.037512][ T39] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 41.051743][ T39] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 41.060205][ T1122] fscrypt: AES-256-XTS using blk-crypto-fallback [ 41.071186][ T39] microsoft 0003:045E:07DA.0005: usage index exceeded [ 41.113790][ T39] microsoft 0003:045E:07DA.0005: item 0 4 2 2 parsing failed [ 41.123270][ T1193] tipc: Enabling of bearer rejected, media not registered [ 41.142241][ T39] microsoft 0003:045E:07DA.0005: parse failed [ 41.162227][ T39] microsoft: probe of 0003:045E:07DA.0005 failed with error -22 [ 41.277404][ T39] usb 1-1: USB disconnect, device number 2 [ 41.390418][ T1210] FAT-fs (loop3): Directory bread(block 64) failed [ 41.417732][ T1210] FAT-fs (loop3): Directory bread(block 65) failed [ 41.424338][ T1210] FAT-fs (loop3): Directory bread(block 66) failed [ 41.437550][ T1214] EXT4-fs: Ignoring removed bh option [ 41.447383][ T1210] FAT-fs (loop3): Directory bread(block 67) failed [ 41.454045][ T1214] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.468159][ T1210] FAT-fs (loop3): Directory bread(block 68) failed [ 41.474879][ T1210] FAT-fs (loop3): Directory bread(block 69) failed [ 41.477129][ T1214] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.481950][ T1210] FAT-fs (loop3): Directory bread(block 70) failed [ 41.497943][ T1210] FAT-fs (loop3): Directory bread(block 71) failed [ 41.504653][ T1210] FAT-fs (loop3): Directory bread(block 72) failed [ 41.511389][ T1210] FAT-fs (loop3): Directory bread(block 73) failed [ 41.521929][ T1214] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.380: invalid indirect mapped block 4294967295 (level 0) [ 41.540470][ T1214] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.380: invalid indirect mapped block 4294967295 (level 1) [ 41.555063][ T1214] EXT4-fs (loop4): 1 orphan inode deleted [ 41.564613][ T1214] EXT4-fs (loop4): 1 truncate cleaned up [ 41.574689][ T1214] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.641129][ T1214] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 41.645764][ T28] audit: type=1400 audit(1772711271.618:246): avc: denied { link } for pid=1213 comm="syz.4.380" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 41.710733][ T286] EXT4-fs (loop4): unmounting filesystem. [ 41.783784][ T28] audit: type=1400 audit(1772711271.758:247): avc: denied { execheap } for pid=1237 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 41.981697][ T1272] netlink: 'syz.4.407': attribute type 196 has an invalid length. [ 42.013797][ T1276] exfat: Deprecated parameter 'utf8' [ 42.046501][ T1276] exfat: Deprecated parameter 'utf8' [ 42.069582][ T1276] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb14608cb, utbl_chksum : 0xe619d30d) [ 42.219670][ T1304] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 42.289994][ T1304] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 42.307078][ T1304] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.343864][ T1315] FAT-fs (loop1): Directory bread(block 64) failed [ 42.368051][ T1317] netlink: 'syz.2.428': attribute type 1 has an invalid length. [ 42.374085][ T1315] FAT-fs (loop1): Directory bread(block 65) failed [ 42.394300][ T1315] FAT-fs (loop1): Directory bread(block 66) failed [ 42.421417][ T1315] FAT-fs (loop1): Directory bread(block 67) failed [ 42.439306][ T1315] FAT-fs (loop1): Directory bread(block 68) failed [ 42.454586][ T1315] FAT-fs (loop1): Directory bread(block 69) failed [ 42.467533][ T1315] FAT-fs (loop1): Directory bread(block 70) failed [ 42.484481][ T1315] FAT-fs (loop1): Directory bread(block 71) failed [ 42.498733][ T1315] FAT-fs (loop1): Directory bread(block 72) failed [ 42.513825][ T1315] FAT-fs (loop1): Directory bread(block 73) failed [ 42.578807][ T1331] xt_hashlimit: size too large, truncated to 1048576 [ 43.039649][ T1356] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 43.072243][ T1356] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 43.082546][ T1356] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.088981][ T1356] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.447: bad orphan inode 3 [ 43.106579][ T1356] EXT4-fs (loop1): Remounting filesystem read-only [ 43.123298][ T1356] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 43.141732][ T283] EXT4-fs (loop1): unmounting filesystem. [ 43.377333][ T1388] EXT4-fs (loop3): Test dummy encryption mode enabled [ 43.394384][ T1388] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.446912][ T1388] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.462: bad orphan inode 131083 [ 43.493373][ T1388] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 43.508753][ T1403] device macsec1 entered promiscuous mode [ 43.514685][ T1403] device vlan1 entered promiscuous mode [ 43.520464][ T1323] F2FS-fs (loop4): Test dummy encryption mode enabled [ 43.527846][ T1323] F2FS-fs (loop4): invalid crc value [ 43.534518][ T1403] device vlan1 left promiscuous mode [ 43.560625][ T1323] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.573742][ T1388] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 43.600375][ T285] EXT4-fs (loop3): unmounting filesystem. [ 43.668887][ T1323] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.679986][ T1421] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 43.724423][ T1424] netlink: 136 bytes leftover after parsing attributes in process `syz.0.475'. [ 43.749119][ T1323] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 43.757666][ T1424] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 43.823628][ T1424] syz.0.475 (1424) used greatest stack depth: 20960 bytes left [ 43.847521][ T1436] sock: sock_timestamping_bind_phc: sock not bind to device [ 43.944117][ T1445] set_capacity_and_notify: 10 callbacks suppressed [ 43.944137][ T1445] loop0: detected capacity change from 0 to 1024 [ 43.987671][ T1445] EXT4-fs: Ignoring removed bh option [ 44.011573][ T1445] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.026766][ T1448] support for cryptoloop has been removed. Use dm-crypt instead. [ 44.063571][ T1445] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.139207][ T1445] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3852: comm syz.0.486: Allocating blocks 497-513 which overlap fs metadata [ 44.171305][ T1445] EXT4-fs (loop0): pa ffff8881174d1c78: logic 256, phys. 385, len 8 [ 44.179413][ T1445] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 44.191798][ T1456] loop3: detected capacity change from 0 to 512 [ 44.224634][ T1456] EXT4-fs (loop3): 1 orphan inode deleted [ 44.236949][ T1456] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 44.270123][ T285] EXT4-fs (loop3): unmounting filesystem. [ 44.509266][ T287] EXT4-fs (loop0): unmounting filesystem. [ 44.631653][ T1507] loop3: detected capacity change from 0 to 512 [ 44.660226][ T1506] loop2: detected capacity change from 0 to 4096 [ 44.678190][ T1506] EXT4-fs (loop2): Test dummy encryption mode enabled [ 44.686141][ T1507] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.695450][ T1507] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.701785][ T1469] loop4: detected capacity change from 0 to 40427 [ 44.716971][ T1469] F2FS-fs (loop4): Invalid log sectorsize (131081) [ 44.724013][ T1469] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 44.735460][ T1506] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 44.742039][ T1469] F2FS-fs (loop4): Image doesn't support compression [ 44.761289][ T285] EXT4-fs (loop3): unmounting filesystem. [ 44.778453][ T1506] System zones: 0-5 [ 44.795993][ T1506] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 44.821103][ T1515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.515'. [ 44.856409][ T19] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 44.872039][ T284] EXT4-fs (loop2): unmounting filesystem. [ 44.902941][ T1517] loop4: detected capacity change from 0 to 256 [ 44.929846][ T1517] FAT-fs (loop4): Directory bread(block 64) failed [ 44.947217][ T1517] FAT-fs (loop4): Directory bread(block 65) failed [ 44.975045][ T1517] FAT-fs (loop4): Directory bread(block 66) failed [ 44.982890][ T1517] FAT-fs (loop4): Directory bread(block 67) failed [ 44.989745][ T1517] FAT-fs (loop4): Directory bread(block 68) failed [ 44.996346][ T1517] FAT-fs (loop4): Directory bread(block 69) failed [ 45.005031][ T1517] FAT-fs (loop4): Directory bread(block 70) failed [ 45.011994][ T1517] FAT-fs (loop4): Directory bread(block 71) failed [ 45.025603][ T1517] FAT-fs (loop4): Directory bread(block 72) failed [ 45.032359][ T1517] FAT-fs (loop4): Directory bread(block 73) failed [ 45.040062][ T1523] SELinux: security policydb version 17 (MLS) not backwards compatible [ 45.048562][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 45.053868][ T1523] SELinux: failed to load policy [ 45.060155][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.076794][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.100953][ T19] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 45.122449][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.145753][ T19] usb 1-1: config 0 descriptor?? [ 45.176523][ T19] hub 1-1:0.0: USB hub found [ 45.184830][ T1513] loop3: detected capacity change from 0 to 40427 [ 45.202168][ T1513] F2FS-fs (loop3): invalid crc value [ 45.217966][ T1513] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.255075][ T1513] F2FS-fs (loop3): Start checkpoint disabled! [ 45.262028][ T1513] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 45.269835][ T1513] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 45.359045][ T19] hub 1-1:0.0: 1 port detected [ 45.366818][ T1544] loop4: detected capacity change from 0 to 512 [ 45.422556][ T1544] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.436500][ T1544] ext4 filesystem being mounted at /92/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.471429][ T286] EXT4-fs (loop4): unmounting filesystem. [ 45.522262][ T1561] loop4: detected capacity change from 0 to 2048 [ 45.553923][ T1561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.562969][ T19] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 45.573766][ T19] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 45.582069][ T1561] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.595685][ T1565] can0: slcan on ptm0. [ 45.606534][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 45.606548][ T28] audit: type=1400 audit(1772711275.578:280): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.623275][ T1561] incfs: Can't find or create .incomplete dir in . [ 45.641176][ T1561] incfs: mount failed -28 [ 45.652948][ T19] usbhid 1-1:0.0: can't add hid device: -71 [ 45.664628][ T19] usbhid: probe of 1-1:0.0 failed with error -71 [ 45.671684][ T1564] can0 (unregistered): slcan off ptm0. [ 45.672667][ T28] audit: type=1400 audit(1772711275.588:281): avc: denied { mounton } for pid=1559 comm="syz.4.532" path="/93/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 45.712550][ T286] EXT4-fs (loop4): unmounting filesystem. [ 45.718674][ T19] usb 1-1: USB disconnect, device number 3 [ 45.761385][ T28] audit: type=1400 audit(1772711275.728:282): avc: denied { ioctl } for pid=1572 comm="syz.3.539" path="socket:[19846]" dev="sockfs" ino=19846 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.818369][ T28] audit: type=1400 audit(1772711275.768:283): avc: denied { read } for pid=1577 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.877157][ T28] audit: type=1400 audit(1772711275.768:284): avc: denied { open } for pid=1577 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.936113][ T28] audit: type=1400 audit(1772711275.768:285): avc: denied { getattr } for pid=1577 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.973153][ T1597] loop3: detected capacity change from 0 to 128 [ 46.007358][ T1597] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.016432][ T28] audit: type=1400 audit(1772711275.828:286): avc: denied { getopt } for pid=1582 comm="syz.3.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.029396][ T1601] netlink: 92 bytes leftover after parsing attributes in process `syz.1.546'. [ 46.046656][ T1597] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.068837][ T28] audit: type=1400 audit(1772711275.938:287): avc: denied { write } for pid=1571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=492 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.094819][ T28] audit: type=1400 audit(1772711275.938:288): avc: denied { add_name } for pid=1571 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.117474][ T28] audit: type=1400 audit(1772711275.938:289): avc: denied { create } for pid=1571 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.181106][ T1601] device vlan3 entered promiscuous mode [ 46.200379][ T285] EXT4-fs (loop3): unmounting filesystem. [ 46.218310][ T1601] device bridge0 entered promiscuous mode [ 46.258442][ T1612] EXT4-fs: Ignoring removed orlov option [ 46.276629][ T1612] EXT4-fs: Ignoring removed bh option [ 46.320737][ T1612] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 46.367271][ T287] EXT4-fs (loop0): unmounting filesystem. [ 46.565872][ T1655] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.566' sets config #65537 [ 46.702304][ T1671] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.752000][ T1671] EXT4-fs (loop0): 1 truncate cleaned up [ 46.777341][ T1678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 46.789924][ T1671] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.856975][ T1680] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 46.874106][ T1671] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.572: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 46.946554][ T1680] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 46.982353][ T1671] EXT4-fs (loop0): Remounting filesystem read-only [ 46.989802][ T1680] System zones: 0-1, 4-36, 102-102 [ 46.995555][ T1680] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.011757][ T1671] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 47.023501][ T1633] F2FS-fs (loop1): invalid crc value [ 47.076657][ T1671] EXT4-fs (loop0): Remounting filesystem read-only [ 47.118732][ T284] EXT4-fs (loop2): unmounting filesystem. [ 47.129093][ T1633] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.136620][ T1579] F2FS-fs (loop4): Test dummy encryption mode enabled [ 47.139362][ T287] EXT4-fs (loop0): unmounting filesystem. [ 47.156235][ T1579] F2FS-fs (loop4): invalid crc value [ 47.170143][ T1694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.581'. [ 47.192754][ T1579] F2FS-fs (loop4): Found nat_bits in checkpoint [ 47.252238][ T1705] exfat: Deprecated parameter 'utf8' [ 47.284758][ T1705] exfat: Deprecated parameter 'utf8' [ 47.317988][ T1579] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 47.328235][ T1705] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 47.352974][ T1712] SELinux: Context system_u:object_r:dhcpc_exec_t:s0 is not valid (left unmapped). [ 47.442750][ T1633] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 47.445279][ T1716] FAT-fs (loop2): Directory bread(block 64) failed [ 47.457704][ T1719] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.500828][ T1716] FAT-fs (loop2): Directory bread(block 65) failed [ 47.509020][ T1716] FAT-fs (loop2): Directory bread(block 66) failed [ 47.515727][ T1716] FAT-fs (loop2): Directory bread(block 67) failed [ 47.519584][ T1719] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.545110][ T1716] FAT-fs (loop2): Directory bread(block 68) failed [ 47.562311][ T1719] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 47.566531][ T1716] FAT-fs (loop2): Directory bread(block 69) failed [ 47.606890][ T1716] FAT-fs (loop2): Directory bread(block 70) failed [ 47.613546][ T1716] FAT-fs (loop2): Directory bread(block 71) failed [ 47.620348][ T1716] FAT-fs (loop2): Directory bread(block 72) failed [ 47.627100][ T1716] FAT-fs (loop2): Directory bread(block 73) failed [ 47.694602][ T287] EXT4-fs (loop0): unmounting filesystem. [ 47.748689][ T1728] mmap: syz.0.597 (1728) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.775289][ T283] syz-executor: attempt to access beyond end of device [ 47.775289][ T283] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 47.890464][ T1739] EXT4-fs: Ignoring removed orlov option [ 47.950123][ T1739] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 48.051066][ T285] EXT4-fs (loop3): unmounting filesystem. [ 48.130847][ T1760] netlink: 104 bytes leftover after parsing attributes in process `syz.0.611'. [ 48.147040][ T19] kernel write not supported for file /290/net/rt_cache (pid: 19 comm: kworker/0:1) [ 48.269518][ T1771] FAT-fs (loop4): Directory bread(block 64) failed [ 48.277363][ T1774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 48.302823][ T1774] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.340188][ T1771] FAT-fs (loop4): Directory bread(block 65) failed [ 48.340201][ T1741] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 48.347098][ T1771] FAT-fs (loop4): Directory bread(block 66) failed [ 48.362771][ T1771] FAT-fs (loop4): Directory bread(block 67) failed [ 48.368283][ T1741] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 48.370316][ T1771] FAT-fs (loop4): Directory bread(block 68) failed [ 48.384399][ T1771] FAT-fs (loop4): Directory bread(block 69) failed [ 48.391163][ T1771] FAT-fs (loop4): Directory bread(block 70) failed [ 48.397845][ T1771] FAT-fs (loop4): Directory bread(block 71) failed [ 48.404427][ T1771] FAT-fs (loop4): Directory bread(block 72) failed [ 48.411134][ T1771] FAT-fs (loop4): Directory bread(block 73) failed [ 48.420955][ T1741] F2FS-fs (loop2): fault_type options not supported [ 48.430126][ T1741] F2FS-fs (loop2): fault_injection options not supported [ 48.446448][ T1741] F2FS-fs (loop2): Image doesn't support compression [ 48.460877][ T1741] F2FS-fs (loop2): invalid crc value [ 48.482096][ T1741] F2FS-fs (loop2): Found nat_bits in checkpoint [ 48.530898][ T285] EXT4-fs (loop3): unmounting filesystem. [ 48.588938][ T1741] F2FS-fs (loop2): Start checkpoint disabled! [ 48.612047][ T1741] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 48.642116][ T1741] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 48.656565][ T1741] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 48.706545][ T1803] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 48.729524][ T1803] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.764534][ T1803] EXT4-fs (loop4): 1 truncate cleaned up [ 48.779762][ T1803] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.796493][ T570] kworker/u4:4: attempt to access beyond end of device [ 48.796493][ T570] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 48.813087][ T1792] F2FS-fs (loop1): invalid crc value [ 48.832253][ T1792] F2FS-fs (loop1): Found nat_bits in checkpoint [ 48.841487][ T286] EXT4-fs (loop4): unmounting filesystem. [ 48.914255][ T1792] F2FS-fs (loop1): Start checkpoint disabled! [ 48.929816][ T1792] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 48.956439][ T1792] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 49.066111][ T43] kworker/u4:2: attempt to access beyond end of device [ 49.066111][ T43] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 49.113265][ T1822] set_capacity_and_notify: 15 callbacks suppressed [ 49.113284][ T1822] loop0: detected capacity change from 0 to 512 [ 49.152557][ T1822] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 49.169389][ T1822] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 49.187116][ T1822] EXT4-fs (loop0): 1 truncate cleaned up [ 49.202977][ T1822] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 49.243395][ T1822] EXT4-fs: user quota file already specified [ 49.287531][ T287] EXT4-fs (loop0): unmounting filesystem. [ 49.335545][ T1825] loop1: detected capacity change from 0 to 256 [ 49.362732][ T1825] exfat: Deprecated parameter 'utf8' [ 49.372732][ T1825] exfat: Deprecated parameter 'namecase' [ 49.389067][ T1825] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 49.630749][ T1851] loop1: detected capacity change from 0 to 512 [ 49.640979][ T1854] loop2: detected capacity change from 0 to 128 [ 49.701469][ T1854] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 49.710378][ T1851] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.746699][ T1851] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.757706][ T1854] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.782586][ T1851] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 49.829074][ T284] EXT4-fs (loop2): unmounting filesystem. [ 49.836967][ T283] EXT4-fs (loop1): unmounting filesystem. [ 49.897837][ T1839] loop3: detected capacity change from 0 to 40427 [ 49.925115][ T1839] F2FS-fs (loop3): fault_injection options not supported [ 49.963471][ T1839] F2FS-fs (loop3): invalid crc value [ 49.994298][ T1816] loop4: detected capacity change from 0 to 131072 [ 50.001895][ T1839] F2FS-fs (loop3): Found nat_bits in checkpoint [ 50.047678][ T1816] F2FS-fs (loop4): Found nat_bits in checkpoint [ 50.127681][ T1839] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 50.155516][ T1889] can0: slcan on ptm0. [ 50.164813][ T1816] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 50.206526][ T1889] can0 (unregistered): slcan off ptm0. [ 50.246933][ T1894] loop1: detected capacity change from 0 to 512 [ 50.274228][ T1894] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.284705][ T1896] netlink: 60 bytes leftover after parsing attributes in process `syz.0.665'. [ 50.306909][ T285] syz-executor: attempt to access beyond end of device [ 50.306909][ T285] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.315326][ T1898] loop2: detected capacity change from 0 to 4096 [ 50.328401][ T1894] EXT4-fs (loop1): 1 truncate cleaned up [ 50.336962][ T1894] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 50.357114][ T1898] EXT4-fs (loop2): Test dummy encryption mode enabled [ 50.376635][ T1898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 50.423999][ T284] EXT4-fs (loop2): unmounting filesystem. [ 50.454448][ T283] EXT4-fs (loop1): unmounting filesystem. [ 50.615739][ T1921] loop0: detected capacity change from 0 to 16 [ 50.634313][ T1921] erofs: (device loop0): mounted with root inode @ nid 36. [ 50.657004][ T1921] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 50.676473][ T1921] syz.0.679: attempt to access beyond end of device [ 50.676473][ T1921] loop0: rw=0, sector=16392, nr_sectors = 8 limit=16 [ 50.695579][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 50.695596][ T28] audit: type=1400 audit(1772711280.668:307): avc: denied { append } for pid=1927 comm="syz.3.681" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 50.707217][ T1921] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 50.735316][ T1921] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 50.826900][ T1945] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 50.839636][ T28] audit: type=1400 audit(1772711280.818:308): avc: denied { append } for pid=1946 comm="syz.4.687" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.959346][ T28] audit: type=1326 audit(1772711280.938:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 50.984043][ T28] audit: type=1326 audit(1772711280.938:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 51.007525][ T28] audit: type=1326 audit(1772711280.938:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 51.033117][ T28] audit: type=1326 audit(1772711280.938:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 51.059713][ T28] audit: type=1326 audit(1772711280.938:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 51.083818][ T28] audit: type=1326 audit(1772711280.938:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 51.114896][ T1971] loop0: detected capacity change from 0 to 256 [ 51.121665][ T1971] exfat: Deprecated parameter 'utf8' [ 51.127284][ T1971] exfat: Deprecated parameter 'utf8' [ 51.132864][ T1971] exfat: Deprecated parameter 'utf8' [ 51.141439][ T28] audit: type=1326 audit(1772711280.948:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 51.167541][ T1971] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d) [ 51.194892][ T28] audit: type=1326 audit(1772711280.948:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 51.233237][ T1975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 51.242105][ T1975] System zones: 1-12 [ 51.248235][ T1975] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.702: missing EA_INODE flag [ 51.258990][ T1980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'. [ 51.269917][ T1975] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.702: error while reading EA inode 12 err=-117 [ 51.280915][ T1980] netlink: 52 bytes leftover after parsing attributes in process `syz.0.704'. [ 51.289048][ T1975] EXT4-fs (loop4): 1 orphan inode deleted [ 51.301456][ T1975] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.332012][ T286] EXT4-fs (loop4): unmounting filesystem. [ 51.429163][ T1995] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 51.466162][ T1995] EXT4-fs error (device loop0): ext4_do_update_inode:5274: inode #15: comm syz.0.710: corrupted inode contents [ 51.491129][ T1995] EXT4-fs error (device loop0): ext4_dirty_inode:6139: inode #15: comm syz.0.710: mark_inode_dirty error [ 51.511779][ T1995] EXT4-fs error (device loop0): ext4_do_update_inode:5274: inode #15: comm syz.0.710: corrupted inode contents [ 51.524343][ T1995] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.710: mark_inode_dirty error [ 51.538052][ T1995] EXT4-fs error (device loop0): ext4_do_update_inode:5274: inode #15: comm syz.0.710: corrupted inode contents [ 51.573557][ T1995] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.710: mark_inode_dirty error [ 51.595267][ T1995] EXT4-fs error (device loop0): ext4_do_update_inode:5274: inode #15: comm syz.0.710: corrupted inode contents [ 51.618874][ T1995] EXT4-fs error (device loop0): ext4_truncate:4320: inode #15: comm syz.0.710: mark_inode_dirty error [ 51.630605][ T1995] EXT4-fs error (device loop0) in ext4_setattr:5678: Corrupt filesystem [ 51.646614][ T2004] EXT4-fs error (device loop0): ext4_do_update_inode:5274: inode #15: comm syz.0.710: corrupted inode contents [ 51.695805][ T287] EXT4-fs (loop0): unmounting filesystem. [ 51.713132][ T2000] F2FS-fs (loop1): invalid crc value [ 51.737272][ T2000] F2FS-fs (loop1): Found nat_bits in checkpoint [ 51.822378][ T2026] exfat: Deprecated parameter 'utf8' [ 51.838860][ T2000] F2FS-fs (loop1): Start checkpoint disabled! [ 51.846911][ T2000] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 51.865164][ T2000] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 51.896203][ T2026] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 52.006775][ T10] kworker/u4:1: attempt to access beyond end of device [ 52.006775][ T10] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 52.166807][ T2047] netlink: 48 bytes leftover after parsing attributes in process `syz.2.732'. [ 52.206529][ T2047] tipc: Enabled bearer , priority 10 [ 52.432190][ T2070] tipc: Enabling of bearer rejected, media not registered [ 52.527357][ T2076] netlink: 'syz.4.744': attribute type 29 has an invalid length. [ 52.579204][ T2078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.747'. [ 52.746506][ T1194] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 52.784574][ T2074] F2FS-fs (loop2): invalid crc value [ 52.815391][ T2074] F2FS-fs (loop2): Found nat_bits in checkpoint [ 52.892886][ T2074] F2FS-fs (loop2): Start checkpoint disabled! [ 52.907178][ T2074] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 52.919479][ T2035] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.934745][ T2074] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 52.942319][ T1194] usb 2-1: Using ep0 maxpacket: 16 [ 52.948912][ T1194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.986416][ T1194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.996202][ T1194] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 53.012227][ T2035] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 53.043095][ T1194] usb 2-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 53.063265][ T1194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.107600][ T1194] usb 2-1: config 0 descriptor?? [ 53.178654][ T2101] netlink: 'syz.2.756': attribute type 2 has an invalid length. [ 53.326426][ T19] tipc: Node number set to 1593850369 [ 53.521234][ T1194] hid-multitouch 0003:045E:9994.0006: unknown main item tag 0x2 [ 53.546608][ T1194] hid-multitouch 0003:045E:9994.0006: unknown main item tag 0x0 [ 53.556544][ T2124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.767'. [ 53.566833][ T1194] hid-multitouch 0003:045E:9994.0006: unknown main item tag 0x0 [ 53.584824][ T1194] hid-multitouch 0003:045E:9994.0006: unknown main item tag 0x0 [ 53.592592][ T2124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 53.606450][ T1194] hid-multitouch 0003:045E:9994.0006: unknown main item tag 0x0 [ 53.614171][ T1194] hid-multitouch 0003:045E:9994.0006: unknown main item tag 0x0 [ 53.635507][ T1194] hid-multitouch 0003:045E:9994.0006: unknown main item tag 0x0 [ 53.666437][ T1194] hid-multitouch 0003:045E:9994.0006: unknown main item tag 0x0 [ 53.674479][ T1194] hid-multitouch 0003:045E:9994.0006: unknown main item tag 0x0 [ 53.682576][ T1194] hid-multitouch 0003:045E:9994.0006: unknown main item tag 0x0 [ 53.692549][ T1194] hid-multitouch 0003:045E:9994.0006: unknown main item tag 0x0 [ 53.728987][ T1194] hid-multitouch 0003:045E:9994.0006: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.1-1/input0 [ 53.758263][ T1194] usb 2-1: USB disconnect, device number 3 [ 53.799710][ T2093] F2FS-fs (loop0): Test dummy encryption mode enabled [ 53.813730][ T2140] fido_id[2140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 53.847612][ T2093] F2FS-fs (loop0): invalid crc value [ 53.887416][ T2093] F2FS-fs (loop0): Found nat_bits in checkpoint [ 53.897375][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 53.992264][ T2093] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 54.058086][ T2132] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 54.088974][ T2132] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 54.107216][ T2132] F2FS-fs (loop3): invalid crc value [ 54.147385][ T2132] F2FS-fs (loop3): Found nat_bits in checkpoint [ 54.271788][ T2167] set_capacity_and_notify: 9 callbacks suppressed [ 54.271810][ T2167] loop1: detected capacity change from 0 to 512 [ 54.285158][ T2132] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 54.299621][ T2132] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 54.322588][ T2167] EXT4-fs (loop1): Test dummy encryption mode enabled [ 54.331993][ T2167] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.354832][ T2172] loop2: detected capacity change from 0 to 256 [ 54.372854][ T2172] exfat: Deprecated parameter 'utf8' [ 54.384404][ T2172] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 54.397439][ T2167] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.784: bad orphan inode 131083 [ 54.416715][ T2167] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 54.458484][ T2167] overlayfs: upper fs needs to support d_type. [ 54.527834][ T283] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /153/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 54.661509][ T2196] loop2: detected capacity change from 0 to 512 [ 54.684524][ T2196] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 54.692827][ T2196] System zones: 1-12 [ 54.704129][ T2196] EXT4-fs error (device loop2): ext4_iget_extra_inode:4758: inode #15: comm syz.2.798: corrupted in-inode xattr [ 54.727832][ T711] EXT4-fs (loop1): unmounting filesystem. [ 54.742364][ T2196] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.798: couldn't read orphan inode 15 (err -117) [ 54.756192][ T2196] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 54.792816][ T2203] loop3: detected capacity change from 0 to 4096 [ 54.805918][ T284] EXT4-fs (loop2): unmounting filesystem. [ 54.823304][ T2203] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.866006][ T2203] EXT4-fs (loop3): Test dummy encryption mode enabled [ 54.881731][ T2203] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c198, mo2=0003] [ 54.890201][ T2203] System zones: 0-5 [ 54.895266][ T2203] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 54.946463][ T288] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 56.046363][ C1] sched: RT throttling activated [ 56.124354][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 56.124370][ T28] audit: type=1400 audit(1772711286.098:346): avc: denied { mounton } for pid=2213 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.128644][ T285] EXT4-fs (loop3): unmounting filesystem. [ 56.154829][ T288] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 56.179553][ T288] usb 1-1: config 2 has no interface number 0 [ 56.185741][ T288] usb 1-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 56.199298][ T288] usb 1-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 56.211599][ T288] usb 1-1: config 2 interface 88 has no altsetting 0 [ 56.233716][ T288] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 56.243400][ T288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.259713][ T288] usb 1-1: Product: syz [ 56.259736][ T288] usb 1-1: Manufacturer: syz [ 56.259750][ T288] usb 1-1: SerialNumber: syz [ 56.283314][ T2198] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 56.292831][ T2198] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 56.319132][ T2225] loop3: detected capacity change from 0 to 256 [ 56.327252][ T2225] exfat: Deprecated parameter 'namecase' [ 56.356137][ T2225] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x31c160c0, utbl_chksum : 0xe619d30d) [ 56.381207][ T2231] loop2: detected capacity change from 0 to 256 [ 56.396963][ T2231] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.407731][ T2231] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 56.429067][ T2213] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.436334][ T2213] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.446429][ T1194] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.448373][ T2213] device bridge_slave_0 entered promiscuous mode [ 56.467311][ T2231] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 56.483001][ T2213] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.490714][ T2213] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.498877][ T2213] device bridge_slave_1 entered promiscuous mode [ 56.506019][ T2198] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 56.510969][ T2236] device syz_tun entered promiscuous mode [ 56.520228][ T2198] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 56.527584][ T2236] device syz_tun left promiscuous mode [ 56.530799][ T2231] exFAT-fs (loop2): hint_cluster is invalid (17) [ 56.540223][ T2231] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 56.548443][ T2231] exFAT-fs (loop2): Filesystem has been set read-only [ 56.605761][ T2240] loop2: detected capacity change from 0 to 512 [ 56.627293][ T1486] device bridge_slave_1 left promiscuous mode [ 56.633517][ T1486] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.644540][ T1486] device bridge_slave_0 left promiscuous mode [ 56.650939][ T1194] usb 5-1: Using ep0 maxpacket: 16 [ 56.652367][ T1486] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.664009][ T2240] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.817: invalid indirect mapped block 10 (level 1) [ 56.664701][ T1194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.689449][ T2240] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.817: invalid indirect mapped block 8 (level 1) [ 56.690250][ T1194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.714598][ T1194] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 56.718613][ T1486] device veth1_macvtap left promiscuous mode [ 56.719052][ T2240] EXT4-fs (loop2): 1 truncate cleaned up [ 56.743275][ T1194] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 56.743983][ T288] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 56.752801][ T2240] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 56.764034][ T288] asix: probe of 1-1:2.88 failed with error -71 [ 56.777863][ T1486] device veth0_vlan left promiscuous mode [ 56.778356][ T1194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.793488][ T288] usb 1-1: USB disconnect, device number 4 [ 56.825142][ T1194] usb 5-1: config 0 descriptor?? [ 56.868067][ T284] EXT4-fs (loop2): unmounting filesystem. [ 56.920270][ T2245] netem: incorrect ge model size [ 56.925376][ T2245] netem: change failed [ 56.950415][ T2251] netlink: 56 bytes leftover after parsing attributes in process `syz.3.822'. [ 56.959832][ T2251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'. [ 56.969186][ T2251] netlink: 31 bytes leftover after parsing attributes in process `syz.3.822'. [ 56.978446][ T2251] netlink: 'syz.3.822': attribute type 2 has an invalid length. [ 56.986117][ T2251] netlink: 31 bytes leftover after parsing attributes in process `syz.3.822'. [ 57.008895][ T2213] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.015986][ T2213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.023336][ T2213] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.030436][ T2213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.058150][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.066077][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.074177][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.084507][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.093173][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.100274][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.108504][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 57.122750][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.131442][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.139887][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.146979][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.160608][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.168907][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.178499][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.187322][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.204966][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.213978][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.228927][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.237062][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.245195][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.252955][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.255036][ T1194] a4tech 0003:09DA:000A.0007: unknown main item tag 0x3 [ 57.264928][ T2213] device veth0_vlan entered promiscuous mode [ 57.273414][ T1077] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 57.286571][ T1194] a4tech 0003:09DA:000A.0007: unknown main item tag 0x5 [ 57.293686][ T1194] a4tech 0003:09DA:000A.0007: unknown main item tag 0x7 [ 57.302551][ T1194] a4tech 0003:09DA:000A.0007: collection stack underflow [ 57.309750][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.318841][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.323362][ T1194] a4tech 0003:09DA:000A.0007: item 0 2 0 12 parsing failed [ 57.331716][ T2213] device veth1_macvtap entered promiscuous mode [ 57.335260][ T1194] a4tech 0003:09DA:000A.0007: parse failed [ 57.349670][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.353257][ T1194] a4tech: probe of 0003:09DA:000A.0007 failed with error -22 [ 57.369077][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.380466][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.410037][ T28] audit: type=1400 audit(1772711287.388:347): avc: denied { mount } for pid=2213 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.431067][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.445005][ T28] audit: type=1400 audit(1772711287.388:348): avc: denied { mounton } for pid=2213 comm="syz-executor" path="/root/syzkaller.ytApyq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.453606][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.481533][ T1077] usb 4-1: config 0 has an invalid interface number: 147 but max is 0 [ 57.490822][ T1077] usb 4-1: config 0 has no interface number 0 [ 57.509680][ T1077] usb 4-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 57.522106][ T2266] loop0: detected capacity change from 0 to 128 [ 57.530588][ T1077] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 57.541719][ T2266] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.555447][ T1077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.560141][ T2269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.804'. [ 57.566480][ T1077] usb 4-1: Product: syz [ 57.577144][ T1077] usb 4-1: Manufacturer: syz [ 57.581841][ T1077] usb 4-1: SerialNumber: syz [ 57.591994][ T19] usb 5-1: USB disconnect, device number 3 [ 57.599774][ T1077] usb 4-1: config 0 descriptor?? [ 57.605250][ T2251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 57.640880][ T2271] loop0: detected capacity change from 0 to 256 [ 57.647819][ T2273] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 57.668640][ T2271] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 57.681227][ T2271] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 57.723793][ T2279] tipc: Started in network mode [ 57.728926][ T2279] tipc: Node identity ac141412, cluster identity 4711 [ 57.736308][ T2279] tipc: New replicast peer: 255.255.255.255 [ 57.744375][ T2279] tipc: Enabled bearer , priority 10 [ 57.822771][ T39] usb 4-1: USB disconnect, device number 3 [ 57.834074][ T28] audit: type=1400 audit(1772711287.808:349): avc: denied { ioctl } for pid=2291 comm="syz.2.837" path="socket:[22114]" dev="sockfs" ino=22114 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.030367][ T2300] loop2: detected capacity change from 0 to 40427 [ 58.043638][ T2300] F2FS-fs (loop2): invalid crc value [ 58.056963][ T2300] F2FS-fs (loop2): Found nat_bits in checkpoint [ 58.104490][ T2300] F2FS-fs (loop2): Start checkpoint disabled! [ 58.111172][ T2300] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 58.127047][ T2300] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 58.162012][ T2317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 58.171099][ T1486] kworker/u4:5: attempt to access beyond end of device [ 58.171099][ T1486] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 58.215480][ T2300] F2FS-fs (loop2): f2fs_enable_checkpoint() starts, meta: 0, node: 0, data: 0 [ 58.224704][ T2300] F2FS-fs (loop2): f2fs_enable_checkpoint() finishes, writeback:0, sync:0 [ 58.359155][ T2329] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 58.376815][ T2329] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 58.395561][ T2329] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.406703][ T2329] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.853: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 58.428894][ T2329] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.853: couldn't read orphan inode 13 (err -117) [ 58.467654][ T2329] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (24564!=0) [ 58.586519][ T2349] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.652109][ T28] audit: type=1326 audit(1772711288.628:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2357 comm="syz.4.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 58.726495][ T28] audit: type=1326 audit(1772711288.658:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2357 comm="syz.4.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 58.766430][ T19] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 58.786775][ T28] audit: type=1326 audit(1772711288.658:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2357 comm="syz.4.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 58.811073][ T28] audit: type=1326 audit(1772711288.658:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2357 comm="syz.4.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 58.839086][ T28] audit: type=1326 audit(1772711288.658:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2357 comm="syz.4.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 58.857843][ T1077] tipc: Node number set to 2886997010 [ 58.864120][ T28] audit: type=1326 audit(1772711288.658:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2357 comm="syz.4.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7ff66b99c799 code=0x7ffc0000 [ 58.957909][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 58.971641][ T2374] netlink: 'syz.5.873': attribute type 1 has an invalid length. [ 58.975723][ T19] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 59.017570][ T19] usb 4-1: config 1 has no interface number 1 [ 59.025269][ T19] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 59.045714][ T19] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 59.066448][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 59.076427][ T19] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 59.100420][ T19] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.114416][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.129623][ T19] usb 4-1: Product: syz [ 59.133835][ T19] usb 4-1: Manufacturer: syz [ 59.158087][ T19] usb 4-1: SerialNumber: syz [ 59.257881][ T24] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 59.269332][ T24] usb 5-1: config 0 has no interface number 0 [ 59.275479][ T24] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 59.313394][ T24] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 59.332877][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.349114][ T2401] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 59.362851][ T24] usb 5-1: Product: syz [ 59.368741][ T24] usb 5-1: Manufacturer: syz [ 59.372768][ T19] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 59.375311][ T24] usb 5-1: SerialNumber: syz [ 59.387688][ T19] usb 4-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 59.395753][ T2398] set_capacity_and_notify: 5 callbacks suppressed [ 59.395779][ T2398] loop2: detected capacity change from 0 to 4096 [ 59.398989][ T24] usb 5-1: config 0 descriptor?? [ 59.426107][ T2362] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 59.438466][ T19] usb 4-1: USB disconnect, device number 4 [ 59.461627][ T24] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, da:a3:65:0d:95:b3 [ 59.667517][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.823118][ T2423] loop5: detected capacity change from 0 to 40427 [ 59.830537][ T2423] F2FS-fs (loop5): Corrupted extension count (4294901797 + 1 > 64) [ 59.839130][ T2423] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 59.847474][ T2423] F2FS-fs (loop5): fault_injection options not supported [ 59.855300][ T2423] F2FS-fs (loop5): invalid crc value [ 59.862491][ T2423] F2FS-fs (loop5): Found nat_bits in checkpoint [ 59.908908][ T2423] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 59.916043][ T2423] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 60.022637][ T2456] loop5: detected capacity change from 0 to 512 [ 60.033623][ T2456] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.233448][ T2486] netlink: 'syz.0.917': attribute type 2 has an invalid length. [ 60.251234][ T1194] usb 5-1: USB disconnect, device number 4 [ 60.266295][ T1194] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 60.365921][ T2506] can0: slcan on ptm0. [ 60.427099][ T2506] can0 (unregistered): slcan off ptm0. [ 60.489332][ T19] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 60.624836][ T2548] tipc: Enabling of bearer rejected, failed to enable media [ 60.676462][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 60.690438][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.708734][ T2560] process 'syz.0.940' launched '/dev/fd/3' with NULL argv: empty string added [ 60.723298][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.753650][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 60.772837][ T19] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 60.782282][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.791402][ T19] usb 4-1: config 0 descriptor?? [ 60.856001][ T2569] loop0: detected capacity change from 0 to 4096 [ 60.954008][ T2578] loop0: detected capacity change from 0 to 4096 [ 60.967843][ T2584] loop4: detected capacity change from 0 to 256 [ 60.991176][ T2584] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 60.991493][ T2578] fs-verity: sha512 using implementation "sha512-avx2" [ 61.165215][ T2605] loop4: detected capacity change from 0 to 512 [ 61.172465][ T2605] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.188568][ T2605] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.216184][ T19] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 61.238440][ T19] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 61.309114][ T2621] xt_hashlimit: size too large, truncated to 1048576 [ 61.336442][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 61.418600][ T19] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 61.432423][ T19] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 61.443969][ T19] microsoft 0003:045E:07DA.0008: no inputs found [ 61.450390][ T19] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 61.461595][ T19] usb 4-1: USB disconnect, device number 5 [ 61.490932][ T2623] fido_id[2623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 61.516425][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 61.523055][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 61.543560][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.563587][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.574420][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 61.594213][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.603158][ T24] usb 1-1: Product: syz [ 61.607776][ T24] usb 1-1: Manufacturer: syz [ 61.612790][ T24] usb 1-1: SerialNumber: syz [ 61.711048][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 61.711066][ T28] audit: type=1400 audit(1772711291.688:363): avc: denied { setcurrent } for pid=2637 comm="syz.4.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.754281][ T2642] loop4: detected capacity change from 0 to 256 [ 61.764224][ T2642] exfat: Deprecated parameter 'namecase' [ 61.770220][ T2642] exfat: Deprecated parameter 'namecase' [ 61.781635][ T2642] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 61.802068][ T28] audit: type=1400 audit(1772711291.778:364): avc: denied { create } for pid=2644 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.832812][ T28] audit: type=1400 audit(1772711291.798:365): avc: denied { connect } for pid=2644 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.841071][ T24] usb 1-1: 0:1 : does not exist [ 61.869485][ T24] usb 1-1: unit 7 not found! [ 61.874999][ T28] audit: type=1400 audit(1772711291.838:366): avc: denied { rename } for pid=2641 comm="syz.4.977" name="file1" dev="loop4" ino=1048719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.879659][ T24] usb 1-1: USB disconnect, device number 5 [ 61.904019][ T28] audit: type=1400 audit(1772711291.838:367): avc: denied { rmdir } for pid=2641 comm="syz.4.977" name="file0" dev="loop4" ino=1048720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.018605][ T2658] loop4: detected capacity change from 0 to 512 [ 62.021895][ T2654] loop5: detected capacity change from 0 to 4096 [ 62.051554][ T2664] netlink: 10 bytes leftover after parsing attributes in process `syz.2.986'. [ 62.077691][ T2658] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.103632][ T2658] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 62.194599][ T28] audit: type=1400 audit(1772711292.168:368): avc: denied { mounton } for pid=2674 comm="syz.2.993" path="/223/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop2" ino=1048721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 62.196683][ T2675] incfs: Can't find or create .incomplete dir in ./file0 [ 62.248214][ T2675] incfs: mount failed -28 [ 62.324198][ T2686] EXT4-fs: Ignoring removed nobh option [ 62.324581][ T28] audit: type=1400 audit(1772711292.298:369): avc: denied { write } for pid=2684 comm="syz.5.996" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 62.393390][ T2686] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #3: comm syz.3.997: corrupted inode contents [ 62.441104][ T2696] netlink: 'syz.0.1001': attribute type 1 has an invalid length. [ 62.449120][ T2694] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 62.458861][ T2686] EXT4-fs error (device loop3): ext4_dirty_inode:6139: inode #3: comm syz.3.997: mark_inode_dirty error [ 62.503287][ T2686] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #3: comm syz.3.997: corrupted inode contents [ 62.522793][ T2686] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.997: mark_inode_dirty error [ 62.546460][ T19] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 62.571428][ T2686] Quota error (device loop3): write_blk: dquota write failed [ 62.586502][ T2686] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 62.597326][ T2686] EXT4-fs error (device loop3): ext4_acquire_dquot:6822: comm syz.3.997: Failed to acquire dquot type 0 [ 62.621907][ T2686] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #16: comm syz.3.997: corrupted inode contents [ 62.636746][ T2686] EXT4-fs error (device loop3): ext4_dirty_inode:6139: inode #16: comm syz.3.997: mark_inode_dirty error [ 62.653877][ T2686] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #16: comm syz.3.997: corrupted inode contents [ 62.695759][ T28] audit: type=1400 audit(1772711292.668:370): avc: denied { bind } for pid=2709 comm="syz.2.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.733220][ T2712] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 62.736513][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 62.750542][ T2686] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.997: mark_inode_dirty error [ 62.767518][ T19] usb 5-1: unable to get BOS descriptor or descriptor too short [ 62.776682][ T2686] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #16: comm syz.3.997: corrupted inode contents [ 62.791760][ T2686] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 62.791866][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.812760][ T2716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1011'. [ 62.824181][ T2686] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #16: comm syz.3.997: corrupted inode contents [ 62.838612][ T19] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 62.850119][ T2716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1011'. [ 62.853980][ T2686] EXT4-fs error (device loop3): ext4_truncate:4320: inode #16: comm syz.3.997: mark_inode_dirty error [ 62.870693][ T2716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1011'. [ 62.871344][ T19] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 62.890306][ T2716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1011'. [ 62.890925][ T19] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 62.899662][ T2686] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 62.911839][ T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.927227][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.930773][ T2686] EXT4-fs (loop3): 1 truncate cleaned up [ 62.935269][ T19] usb 5-1: Product: syz [ 62.935287][ T19] usb 5-1: Manufacturer: syz [ 62.935299][ T19] usb 5-1: SerialNumber: syz [ 62.961593][ T2686] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.199199][ T2727] EXT4-fs: Ignoring removed i_version option [ 63.205692][ T2727] EXT4-fs: Ignoring removed bh option [ 63.238913][ T2727] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.267399][ T2727] EXT4-fs error (device loop5): ext4_resize_begin:62: comm syz.5.1014: resize_inode disabled but reserved GDT blocks non-zero [ 63.306915][ T2738] xt_hashlimit: size too large, truncated to 1048576 [ 63.556444][ T39] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 63.564711][ T19] usb 5-1: 0:2 : does not exist [ 63.579129][ T19] usb 5-1: USB disconnect, device number 5 [ 63.747827][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 63.764394][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.780952][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 63.790597][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.799819][ T39] usb 4-1: config 0 descriptor?? [ 63.806850][ T39] hub 4-1:0.0: USB hub found [ 63.807731][ T458] udevd[458]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.050750][ T39] hub 4-1:0.0: 1 port detected [ 65.102682][ T2758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1027'. [ 65.128698][ T2760] set_capacity_and_notify: 6 callbacks suppressed [ 65.128717][ T2760] loop0: detected capacity change from 0 to 256 [ 65.249553][ T2776] loop2: detected capacity change from 0 to 2048 [ 65.256988][ T39] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 65.263830][ T2776] EXT4-fs: Ignoring removed i_version option [ 65.277952][ T39] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 65.287110][ T39] usbhid 4-1:0.0: can't add hid device: -71 [ 65.293223][ T39] usbhid: probe of 4-1:0.0 failed with error -71 [ 65.346892][ T2776] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.364439][ T39] usb 4-1: USB disconnect, device number 6 [ 65.469323][ T2803] loop0: detected capacity change from 0 to 256 [ 65.539672][ T2815] loop2: detected capacity change from 0 to 512 [ 65.554444][ T2803] FAT-fs (loop0): Directory bread(block 64) failed [ 65.563111][ T2803] FAT-fs (loop0): Directory bread(block 65) failed [ 65.570519][ T2803] FAT-fs (loop0): Directory bread(block 66) failed [ 65.579162][ T2815] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1054: inode has both inline data and extents flags [ 65.592454][ T2803] FAT-fs (loop0): Directory bread(block 67) failed [ 65.599407][ T2815] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1054: couldn't read orphan inode 15 (err -117) [ 65.599573][ T2803] FAT-fs (loop0): Directory bread(block 68) failed [ 65.618229][ T2803] FAT-fs (loop0): Directory bread(block 69) failed [ 65.624903][ T2803] FAT-fs (loop0): Directory bread(block 70) failed [ 65.631729][ T2803] FAT-fs (loop0): Directory bread(block 71) failed [ 65.639988][ T2803] FAT-fs (loop0): Directory bread(block 72) failed [ 65.646951][ T2803] FAT-fs (loop0): Directory bread(block 73) failed [ 65.989358][ T2867] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 66.017339][ T2867] SELinux: failed to load policy [ 66.058135][ T2817] loop4: detected capacity change from 0 to 40427 [ 66.081401][ T2817] F2FS-fs (loop4): invalid crc value [ 66.098409][ T2817] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.137045][ T2886] loop5: detected capacity change from 0 to 256 [ 66.202152][ T2886] FAT-fs (loop5): Directory bread(block 64) failed [ 66.220631][ T2886] FAT-fs (loop5): Directory bread(block 65) failed [ 66.239227][ T2886] FAT-fs (loop5): Directory bread(block 66) failed [ 66.258933][ T2817] F2FS-fs (loop4): Start checkpoint disabled! [ 66.263199][ T2886] FAT-fs (loop5): Directory bread(block 67) failed [ 66.272192][ T2817] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 66.286456][ T2886] FAT-fs (loop5): Directory bread(block 68) failed [ 66.286463][ T2817] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 66.326211][ T2905] loop0: detected capacity change from 0 to 512 [ 66.332629][ T2886] FAT-fs (loop5): Directory bread(block 69) failed [ 66.339524][ T2886] FAT-fs (loop5): Directory bread(block 70) failed [ 66.346484][ T2905] EXT4-fs: Ignoring removed orlov option [ 66.352227][ T2905] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.366496][ T2886] FAT-fs (loop5): Directory bread(block 71) failed [ 66.376786][ T2886] FAT-fs (loop5): Directory bread(block 72) failed [ 66.393583][ T2886] FAT-fs (loop5): Directory bread(block 73) failed [ 66.402084][ T2905] EXT4-fs error (device loop0): ext4_iget_extra_inode:4758: inode #15: comm syz.0.1097: corrupted in-inode xattr [ 66.433215][ T2905] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1097: couldn't read orphan inode 15 (err -117) [ 66.567381][ T2925] loop2: detected capacity change from 0 to 256 [ 66.572146][ T43] kworker/u4:2: attempt to access beyond end of device [ 66.572146][ T43] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 66.619284][ T2925] FAT-fs (loop2): Directory bread(block 64) failed [ 66.625898][ T2925] FAT-fs (loop2): Directory bread(block 65) failed [ 66.664961][ T2925] FAT-fs (loop2): Directory bread(block 66) failed [ 66.672666][ T2931] netlink: 'syz.3.1111': attribute type 11 has an invalid length. [ 66.680850][ T2925] FAT-fs (loop2): Directory bread(block 67) failed [ 66.688126][ T2931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1111'. [ 66.713200][ T2925] FAT-fs (loop2): Directory bread(block 68) failed [ 66.733402][ T2925] FAT-fs (loop2): Directory bread(block 69) failed [ 66.743527][ T2925] FAT-fs (loop2): Directory bread(block 70) failed [ 66.759534][ T2925] FAT-fs (loop2): Directory bread(block 71) failed [ 66.776456][ T2925] FAT-fs (loop2): Directory bread(block 72) failed [ 66.783038][ T2925] FAT-fs (loop2): Directory bread(block 73) failed [ 66.826705][ T2925] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.916174][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 66.916192][ T28] audit: type=1400 audit(1772711296.888:380): avc: denied { mount } for pid=2942 comm="syz.4.1117" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 66.996793][ T28] audit: type=1400 audit(1772711296.938:381): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 67.059013][ T2955] loop4: detected capacity change from 0 to 512 [ 67.097346][ T2927] loop5: detected capacity change from 0 to 40427 [ 67.115795][ T2927] F2FS-fs (loop5): invalid crc value [ 67.136105][ T2955] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1122: invalid indirect mapped block 10 (level 1) [ 67.152547][ T2927] F2FS-fs (loop5): Found nat_bits in checkpoint [ 67.220997][ T2955] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1122: invalid indirect mapped block 8 (level 1) [ 67.286821][ T2955] EXT4-fs (loop4): 1 truncate cleaned up [ 67.324338][ T2927] F2FS-fs (loop5): Start checkpoint disabled! [ 67.349553][ T2927] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 67.371771][ T2927] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 67.424904][ T286] EXT4-fs unmount: 29 callbacks suppressed [ 67.424925][ T286] EXT4-fs (loop4): unmounting filesystem. [ 67.557120][ T1486] kworker/u4:5: attempt to access beyond end of device [ 67.557120][ T1486] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 67.812531][ T2944] F2FS-fs (loop3): Test dummy encryption mode enabled [ 67.826662][ T2944] F2FS-fs (loop3): invalid crc value [ 67.862555][ T2944] F2FS-fs (loop3): Found nat_bits in checkpoint [ 67.876529][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 67.904141][ T2933] F2FS-fs (loop0): invalid crc value [ 67.934118][ T2933] F2FS-fs (loop0): Found nat_bits in checkpoint [ 67.973174][ T2999] exfat: Deprecated parameter 'utf8' [ 67.982256][ T2944] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 67.983317][ T2999] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 68.023480][ T28] audit: type=1400 audit(1772711297.998:382): avc: denied { mounton } for pid=2998 comm="syz.2.1139" path="/266/file0/file0" dev="loop2" ino=1048729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.027947][ T2933] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 68.076485][ T19] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 68.078100][ T24] usb 5-1: config 1 has an invalid descriptor of length 94, skipping remainder of the config [ 68.106506][ T28] audit: type=1400 audit(1772711298.028:383): avc: denied { setattr } for pid=2998 comm="syz.2.1139" name="/" dev="incremental-fs" ino=1048729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.130972][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.159011][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 68.172659][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 68.196583][ T24] usb 5-1: SerialNumber: syz [ 68.208510][ T10] tipc: Disabling bearer [ 68.222480][ T10] tipc: Left network mode [ 68.277739][ T19] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 68.316411][ T19] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.326284][ T19] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.386509][ T19] usb 6-1: config 0 interface 0 has no altsetting 0 [ 68.393190][ T19] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 68.426447][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.444459][ T24] usb 5-1: 0:2 : does not exist [ 68.459691][ T19] usb 6-1: config 0 descriptor?? [ 68.476436][ T24] usb 5-1: USB disconnect, device number 6 [ 68.548923][ T3007] device lo entered promiscuous mode [ 68.563880][ T3007] device tunl0 entered promiscuous mode [ 68.571222][ T3007] device gre0 entered promiscuous mode [ 68.579249][ T3007] device gretap0 entered promiscuous mode [ 68.586722][ T3007] device erspan0 entered promiscuous mode [ 68.593881][ T3007] device ip_vti0 entered promiscuous mode [ 68.601028][ T3007] device ip6_vti0 entered promiscuous mode [ 68.608959][ T3007] device sit0 entered promiscuous mode [ 68.616336][ T3007] device ip6tnl0 entered promiscuous mode [ 68.625017][ T3007] device ip6gre0 entered promiscuous mode [ 68.632165][ T3007] device syz_tun entered promiscuous mode [ 68.639740][ T3007] device ip6gretap0 entered promiscuous mode [ 68.647636][ T3007] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.654899][ T3007] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.667849][ T3007] device bridge0 entered promiscuous mode [ 68.677768][ T3007] device vcan0 entered promiscuous mode [ 68.686304][ T3007] device dummy0 entered promiscuous mode [ 68.693662][ T3007] device veth0 entered promiscuous mode [ 68.700483][ T458] udevd[458]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.716658][ T3007] device veth1 entered promiscuous mode [ 68.724033][ T3007] device wg0 entered promiscuous mode [ 68.731001][ T3007] device wg1 entered promiscuous mode [ 68.738337][ T3007] device wg2 entered promiscuous mode [ 68.744657][ T3007] device veth0_to_bridge entered promiscuous mode [ 68.753105][ T3007] device veth1_to_bridge entered promiscuous mode [ 68.761450][ T3007] device veth0_to_bond entered promiscuous mode [ 68.768627][ T3007] device bond_slave_0 entered promiscuous mode [ 68.775020][ T3007] device veth1_to_bond entered promiscuous mode [ 68.782365][ T3007] device bond_slave_1 entered promiscuous mode [ 68.788837][ T3007] device veth0_to_team entered promiscuous mode [ 68.795773][ T3007] device team_slave_0 entered promiscuous mode [ 68.802386][ T3007] device veth1_to_team entered promiscuous mode [ 68.809663][ T3007] device team_slave_1 entered promiscuous mode [ 68.816164][ T3007] device veth0_to_batadv entered promiscuous mode [ 68.823832][ T3007] device batadv_slave_0 entered promiscuous mode [ 68.831902][ T3007] device veth1_to_batadv entered promiscuous mode [ 68.839794][ T3007] device batadv_slave_1 entered promiscuous mode [ 68.847342][ T3007] device xfrm0 entered promiscuous mode [ 68.853985][ T3007] device veth0_to_hsr entered promiscuous mode [ 68.861387][ T3007] device hsr_slave_0 entered promiscuous mode [ 68.868480][ T3007] device veth1_to_hsr entered promiscuous mode [ 68.871892][ T19] holtek 0003:1241:5015.0009: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0 [ 68.886016][ T3007] device hsr_slave_1 entered promiscuous mode [ 68.886301][ T19] holtek 0003:1241:5015.0009: no inputs found [ 68.898592][ T3007] device veth1_virt_wifi entered promiscuous mode [ 68.906727][ T3007] device veth0_virt_wifi entered promiscuous mode [ 68.914520][ T3007] device veth1_vlan entered promiscuous mode [ 68.925615][ T3007] device vlan0 entered promiscuous mode [ 68.931913][ T3007] device vlan1 entered promiscuous mode [ 68.939237][ T3007] device veth0_macvtap entered promiscuous mode [ 68.947787][ T3007] device macsec0 entered promiscuous mode [ 68.954713][ T3007] device syztnl1 entered promiscuous mode [ 68.960753][ T3007] device vlan2 entered promiscuous mode [ 69.061206][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.071584][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.080120][ T3005] device bridge_slave_0 entered promiscuous mode [ 69.089411][ T1077] usb 6-1: USB disconnect, device number 2 [ 69.095974][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.104048][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.113991][ T3005] device bridge_slave_1 entered promiscuous mode [ 69.137651][ T10] device bridge_slave_1 left promiscuous mode [ 69.143870][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.151747][ T10] device bridge_slave_0 left promiscuous mode [ 69.158322][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.166975][ T10] device veth1_macvtap left promiscuous mode [ 69.173065][ T10] device veth0_vlan left promiscuous mode [ 69.309698][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.317300][ T19] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 69.319442][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.334073][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.342707][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.351148][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.358297][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.365971][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.375266][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.383790][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.392220][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.399565][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.407544][ T2258] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 69.418685][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.428697][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.444338][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.456777][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.465002][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.472768][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.482071][ T3005] device veth0_vlan entered promiscuous mode [ 69.494544][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.505144][ T3005] device veth1_macvtap entered promiscuous mode [ 69.513130][ T19] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 69.522428][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.530738][ T19] usb 4-1: config 0 has no interface number 0 [ 69.537022][ T19] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 69.545559][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.559471][ T19] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 69.569263][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.577457][ T19] usb 4-1: Product: syz [ 69.581748][ T19] usb 4-1: Manufacturer: syz [ 69.586517][ T2258] usb 1-1: Using ep0 maxpacket: 16 [ 69.591792][ T19] usb 4-1: SerialNumber: syz [ 69.597481][ T2258] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.612527][ T19] usb 4-1: config 0 descriptor?? [ 69.617591][ T2258] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.632324][ T2258] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 69.646550][ T3024] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 69.660643][ T19] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 4e:7c:78:57:eb:d7 [ 69.674989][ T2258] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 69.674995][ T3039] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1144'. [ 69.704504][ T2258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.730490][ T2258] usb 1-1: config 0 descriptor?? [ 70.034755][ T3047] F2FS-fs (loop5): fault_injection options not supported [ 70.062456][ T3047] F2FS-fs (loop5): invalid crc value [ 70.077758][ T3047] F2FS-fs (loop5): Found nat_bits in checkpoint [ 70.116493][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 70.134486][ T3047] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 70.144396][ T2258] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 70.158637][ T28] audit: type=1400 audit(1772711300.138:384): avc: denied { setopt } for pid=3087 comm="syz.6.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.186505][ T2258] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 70.194346][ T2258] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 70.202383][ T2258] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 70.210222][ T2258] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 70.218155][ T2258] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 70.225510][ T2258] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 70.233163][ T2258] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 70.241735][ T2258] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 70.249939][ T2258] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 70.259078][ T2258] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 70.284358][ T2258] HID 045e:07da: Invalid code 65791 type 1 [ 70.303195][ T2258] HID 045e:07da: Invalid code 768 type 1 [ 70.309711][ T2258] HID 045e:07da: Invalid code 769 type 1 [ 70.315433][ T2258] HID 045e:07da: Invalid code 770 type 1 [ 70.320917][ T39] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 70.322814][ T2258] HID 045e:07da: Invalid code 771 type 1 [ 70.342109][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.353502][ T2258] HID 045e:07da: Invalid code 772 type 1 [ 70.359692][ T2258] HID 045e:07da: Invalid code 773 type 1 [ 70.365402][ T2258] HID 045e:07da: Invalid code 774 type 1 [ 70.371521][ T2258] HID 045e:07da: Invalid code 775 type 1 [ 70.377487][ T2258] HID 045e:07da: Invalid code 776 type 1 [ 70.393946][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.398154][ T2258] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000A/input/input9 [ 70.414599][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 70.452523][ T1194] usb 4-1: USB disconnect, device number 7 [ 70.458874][ T39] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 70.469516][ T1194] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 70.487532][ T39] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 70.498719][ T28] audit: type=1400 audit(1772711300.478:385): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=1114 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.510145][ T39] usb 5-1: Manufacturer: syz [ 70.523775][ T2258] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 70.541961][ T39] usb 5-1: config 0 descriptor?? [ 70.561142][ T28] audit: type=1400 audit(1772711300.478:386): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1114 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.595111][ T2258] usb 1-1: USB disconnect, device number 6 [ 70.639224][ T28] audit: type=1400 audit(1772711300.478:387): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1114 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.680761][ T3113] fido_id[3113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 70.861283][ T3114] set_capacity_and_notify: 6 callbacks suppressed [ 70.861304][ T3114] loop5: detected capacity change from 0 to 40427 [ 70.894656][ T3114] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 70.903894][ T3114] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 70.916752][ T3114] F2FS-fs (loop5): invalid crc value [ 70.937349][ T3114] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 70.954103][ T39] appleir 0003:05AC:8243.000B: item fetching failed at offset 0/1 [ 70.965897][ T39] appleir 0003:05AC:8243.000B: parse failed [ 70.974460][ T39] appleir: probe of 0003:05AC:8243.000B failed with error -22 [ 71.015634][ T3114] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 71.025057][ T3114] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 71.056410][ T24] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 71.085233][ T3152] loop0: detected capacity change from 0 to 512 [ 71.113572][ T3152] EXT4-fs: Ignoring removed orlov option [ 71.197870][ T3152] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 71.203020][ T2258] usb 5-1: USB disconnect, device number 7 [ 71.216529][ T3152] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.247814][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 71.263358][ T3160] loop5: detected capacity change from 0 to 512 [ 71.276456][ T24] usb 7-1: not running at top speed; connect to a high speed hub [ 71.278701][ T3152] erspan0: default FDB implementation only supports local addresses [ 71.285515][ T24] usb 7-1: config 1 interface 0 altsetting 248 endpoint 0x81 has invalid maxpacket 6821, setting to 64 [ 71.303519][ T24] usb 7-1: config 1 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.310621][ T3143] loop3: detected capacity change from 0 to 40427 [ 71.316756][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 71.336770][ T3143] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 71.349459][ T3160] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 71.351647][ T24] usb 7-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 71.359065][ T3160] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.369776][ T3143] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 71.386865][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.395478][ T287] EXT4-fs (loop0): unmounting filesystem. [ 71.405875][ T24] usb 7-1: Product: syz [ 71.413348][ T3160] incfs: ino conflict with backing FS 2 [ 71.422181][ T24] usb 7-1: Manufacturer: syz [ 71.430942][ T24] usb 7-1: SerialNumber: syz [ 71.437804][ T3143] F2FS-fs (loop3): Found nat_bits in checkpoint [ 71.446581][ T2213] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 71.460415][ T3126] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 71.474863][ T2213] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 71.527530][ T3143] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 71.535677][ T3143] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 71.563877][ T3174] loop0: detected capacity change from 0 to 1024 [ 71.582845][ T2676] EXT4-fs (loop5): unmounting filesystem. [ 71.596696][ T3174] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 71.636756][ T28] audit: type=1400 audit(1772711301.618:388): avc: denied { create } for pid=3173 comm="syz.0.1191" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 71.684823][ T24] usbhid 7-1:1.0: can't add hid device: -71 [ 71.696451][ T24] usbhid: probe of 7-1:1.0 failed with error -71 [ 71.707213][ T24] usb 7-1: USB disconnect, device number 2 [ 71.715091][ T28] audit: type=1400 audit(1772711301.668:389): avc: denied { unlink } for pid=3173 comm="syz.0.1191" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 71.770142][ T287] EXT4-fs (loop0): unmounting filesystem. [ 71.877401][ T3185] loop4: detected capacity change from 0 to 256 [ 71.921180][ T3185] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 71.995302][ T3197] xt_hashlimit: size too large, truncated to 1048576 [ 72.015283][ T28] audit: type=1400 audit(1772711301.988:390): avc: denied { setopt } for pid=3199 comm="syz.4.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.058692][ T3204] random: crng reseeded on system resumption [ 72.067790][ T28] audit: type=1400 audit(1772711302.018:391): avc: denied { bind } for pid=3199 comm="syz.4.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.100925][ T28] audit: type=1400 audit(1772711302.038:392): avc: denied { write } for pid=3202 comm="syz.4.1206" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 72.100950][ T3201] xt_hashlimit: overflow, try lower: 3/0 [ 72.134335][ T28] audit: type=1400 audit(1772711302.038:393): avc: denied { open } for pid=3202 comm="syz.4.1206" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 72.170692][ T2218] device bridge_slave_1 left promiscuous mode [ 72.176999][ T2218] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.187113][ T2218] device bridge_slave_0 left promiscuous mode [ 72.193307][ T2218] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.230084][ T3210] loop4: detected capacity change from 0 to 512 [ 72.239498][ T3210] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.266053][ T2218] device veth1_macvtap left promiscuous mode [ 72.275582][ T2218] device veth0_vlan left promiscuous mode [ 72.326964][ T3210] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1208: bad orphan inode 131083 [ 72.359409][ T3210] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 72.368105][ T28] audit: type=1400 audit(1772711302.338:394): avc: denied { sqpoll } for pid=3220 comm="syz.3.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.417700][ T3210] EXT4-fs warning (device loop4): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 72.464890][ T286] EXT4-fs (loop4): unmounting filesystem. [ 72.513900][ T3227] loop4: detected capacity change from 0 to 512 [ 72.547715][ T3227] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.591706][ T3227] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 72.626806][ T3227] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 72.635401][ T3227] System zones: 0-2, 18-18, 34-35 [ 72.651361][ T3227] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 72.654512][ T3236] can0: slcan on ttyS3. [ 72.661471][ T3198] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.671330][ T3198] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.681957][ T3198] device bridge_slave_0 entered promiscuous mode [ 72.689692][ T3227] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 72.690848][ T3198] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.706033][ T3198] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.713941][ T3198] device bridge_slave_1 entered promiscuous mode [ 72.715102][ T3227] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 72.740391][ T3227] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 72.750362][ T3227] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 72.782089][ T286] EXT4-fs (loop4): unmounting filesystem. [ 72.803274][ T3249] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 72.816865][ T3239] can0 (unregistered): slcan off ttyS3. [ 73.009870][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.018499][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.053807][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.079471][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.110065][ T1486] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.117204][ T1486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.153772][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.176246][ T3243] loop6: detected capacity change from 0 to 40427 [ 73.184700][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.207771][ T3243] F2FS-fs (loop6): invalid crc value [ 73.217830][ T1486] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.225037][ T1486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.243685][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.251249][ T3243] F2FS-fs (loop6): Found nat_bits in checkpoint [ 73.259859][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.287671][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.316232][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.339629][ T3198] device veth0_vlan entered promiscuous mode [ 73.347049][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.359695][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.383220][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.391243][ T3243] F2FS-fs (loop6): Start checkpoint disabled! [ 73.398189][ T3243] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 73.406077][ T3243] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 73.427546][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.437753][ T3198] device veth1_macvtap entered promiscuous mode [ 73.477326][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.487603][ T1486] kworker/u4:5: attempt to access beyond end of device [ 73.487603][ T1486] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 73.505678][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.587454][ T3305] loop3: detected capacity change from 0 to 40427 [ 73.594359][ T28] audit: type=1326 audit(1772711303.568:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6a79c799 code=0x7fc00000 [ 73.600482][ T3305] F2FS-fs (loop3): Mismatch start address, segment0(512) cp_blkaddr(918016) [ 73.631534][ T3305] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 73.640442][ T3305] F2FS-fs (loop3): invalid crc value [ 73.647443][ T3305] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.700605][ T28] audit: type=1326 audit(1772711303.568:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f6a79c799 code=0x7fc00000 [ 73.728215][ T3319] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x8978cc48, utbl_chksum : 0xe619d30d) [ 73.732392][ T3305] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 73.753980][ T3305] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 73.762165][ T28] audit: type=1326 audit(1772711303.568:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6a79c799 code=0x7fc00000 [ 73.786300][ T28] audit: type=1326 audit(1772711303.568:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6a79c799 code=0x7fc00000 [ 73.810276][ T28] audit: type=1326 audit(1772711303.568:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6a79c799 code=0x7fc00000 [ 73.859828][ T285] syz-executor: attempt to access beyond end of device [ 73.859828][ T285] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 74.067366][ T3343] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1243: inode has both inline data and extents flags [ 74.081164][ T3343] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1243: couldn't read orphan inode 15 (err -117) [ 74.094703][ T3343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.120081][ T285] EXT4-fs (loop3): unmounting filesystem. [ 74.236505][ T39] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 74.326919][ T3331] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.426720][ T3331] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.435275][ T39] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 74.456706][ T39] usb 7-1: config 0 has no interface number 0 [ 74.462890][ T39] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 74.506665][ T39] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 74.535965][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.554558][ T39] usb 7-1: Product: syz [ 74.565621][ T287] syz-executor: attempt to access beyond end of device [ 74.565621][ T287] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 74.575020][ T39] usb 7-1: Manufacturer: syz [ 74.584601][ T39] usb 7-1: SerialNumber: syz [ 74.595413][ T39] usb 7-1: config 0 descriptor?? [ 74.605249][ T3337] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 74.616436][ T39] plusb 7-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 92:53:3f:64:fd:8c [ 74.953196][ T3379] F2FS-fs (loop3): Found nat_bits in checkpoint [ 75.046632][ T3405] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 75.090573][ T3379] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 75.135162][ T3399] f2fs_ckpt-7:3: attempt to access beyond end of device [ 75.135162][ T3399] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.162300][ T3408] FAT-fs (loop0): Directory bread(block 64) failed [ 75.172144][ T3408] FAT-fs (loop0): Directory bread(block 65) failed [ 75.180441][ T3408] FAT-fs (loop0): Directory bread(block 66) failed [ 75.188704][ T3408] FAT-fs (loop0): Directory bread(block 67) failed [ 75.195462][ T3408] FAT-fs (loop0): Directory bread(block 68) failed [ 75.216486][ T3408] FAT-fs (loop0): Directory bread(block 69) failed [ 75.226623][ T3408] FAT-fs (loop0): Directory bread(block 70) failed [ 75.239778][ T3353] F2FS-fs (loop7): Test dummy encryption mode enabled [ 75.263623][ T3408] FAT-fs (loop0): Directory bread(block 71) failed [ 75.265425][ T3353] F2FS-fs (loop7): invalid crc value [ 75.281382][ T3408] FAT-fs (loop0): Directory bread(block 72) failed [ 75.303503][ T3408] FAT-fs (loop0): Directory bread(block 73) failed [ 75.307174][ T3353] F2FS-fs (loop7): Found nat_bits in checkpoint [ 75.391152][ T1194] usb 7-1: USB disconnect, device number 3 [ 75.406941][ T1194] plusb 7-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 75.453880][ T3353] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 75.524736][ T3432] FAT-fs (loop0): Directory bread(block 64) failed [ 75.536614][ T3432] FAT-fs (loop0): Directory bread(block 65) failed [ 75.561228][ T3432] FAT-fs (loop0): Directory bread(block 66) failed [ 75.581755][ T3432] FAT-fs (loop0): Directory bread(block 67) failed [ 75.612713][ T3432] FAT-fs (loop0): Directory bread(block 68) failed [ 75.628435][ T3432] FAT-fs (loop0): Directory bread(block 69) failed [ 75.656861][ T3432] FAT-fs (loop0): Directory bread(block 70) failed [ 75.673621][ T3432] FAT-fs (loop0): Directory bread(block 71) failed [ 75.693274][ T3432] FAT-fs (loop0): Directory bread(block 72) failed [ 75.709544][ T3432] FAT-fs (loop0): Directory bread(block 73) failed [ 75.726851][ T3456] erofs: (device loop4): erofs_init_device: empty device tag @ pos 0 [ 76.146475][ T2258] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 76.336390][ T2258] usb 1-1: Using ep0 maxpacket: 16 [ 76.343901][ T2258] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 76.363542][ T2258] usb 1-1: config 1 has no interface number 0 [ 76.380763][ T2258] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 76.407974][ T2258] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 76.429094][ T2258] usb 1-1: config 1 interface 105 has no altsetting 0 [ 76.445155][ T2258] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 76.469360][ T2258] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 76.493305][ T2258] usb 1-1: Product: syz [ 76.505552][ T2258] usb 1-1: Manufacturer: syz [ 76.514715][ T2258] usb 1-1: SerialNumber: syz [ 76.533131][ T3471] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 76.545074][ T3471] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 76.546876][ T3491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1293'. [ 78.047452][ T3471] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.054827][ T3471] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.197078][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 78.197095][ T28] audit: type=1400 audit(1772711308.178:470): avc: denied { read write } for pid=3503 comm="syz.4.1299" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 78.249368][ T19] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0 [ 78.257619][ T19] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0 [ 78.267862][ T2258] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 78.286419][ T28] audit: type=1400 audit(1772711308.218:471): avc: denied { open } for pid=3503 comm="syz.4.1299" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 78.289060][ T19] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0 [ 78.322435][ T2258] aqc111: probe of 1-1:1.105 failed with error -71 [ 78.337852][ T2258] usb 1-1: USB disconnect, device number 7 [ 78.382043][ T3486] set_capacity_and_notify: 10 callbacks suppressed [ 78.382064][ T3486] loop6: detected capacity change from 0 to 131072 [ 78.387302][ T19] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0 [ 78.405542][ T3486] F2FS-fs (loop6): Test dummy encryption mode enabled [ 78.415307][ T19] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0 [ 78.427540][ T3486] F2FS-fs (loop6): invalid crc value [ 78.433629][ T19] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0 [ 78.452093][ T19] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0 [ 78.466516][ T19] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0 [ 78.477534][ T3486] F2FS-fs (loop6): Found nat_bits in checkpoint [ 78.484491][ T19] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0 [ 78.504667][ T19] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0 [ 78.512691][ T19] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0 [ 78.530665][ T19] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0 [ 78.550849][ T19] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0 [ 78.560939][ T19] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0 [ 78.576929][ T19] hid-generic 0003:0004:FFFFFFFE.000C: unknown main item tag 0x0 [ 78.597596][ T3486] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 78.617177][ T19] hid-generic 0003:0004:FFFFFFFE.000C: hidraw0: USB HID v4.00 Device [syz0] on syz1 [ 78.677184][ T3515] fido_id[3515]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.732222][ T3517] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1303'. [ 78.848191][ T28] audit: type=1400 audit(1772711308.828:472): avc: denied { rename } for pid=3528 comm="syz.7.1310" name="file0" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.888845][ T28] audit: type=1400 audit(1772711308.848:473): avc: denied { unlink } for pid=3528 comm="syz.7.1310" name="file0" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.973322][ T3537] loop4: detected capacity change from 0 to 256 [ 79.026845][ T3543] loop4: detected capacity change from 0 to 256 [ 79.040915][ T3543] exfat: Deprecated parameter 'utf8' [ 79.066485][ T3543] exfat: Deprecated parameter 'namecase' [ 79.082856][ T3543] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 79.297833][ T3502] loop3: detected capacity change from 0 to 131072 [ 79.313472][ T3502] F2FS-fs (loop3): invalid crc value [ 79.337427][ T28] audit: type=1400 audit(1772711309.318:474): avc: denied { write } for pid=3559 comm="syz.0.1324" name="ip_tables_names" dev="proc" ino=4026532665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 79.343865][ T3502] F2FS-fs (loop3): Found nat_bits in checkpoint [ 79.435029][ T3569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1327'. [ 79.526222][ T3502] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 79.584438][ T3586] loop0: detected capacity change from 0 to 256 [ 79.756246][ T28] audit: type=1400 audit(1772711309.728:475): avc: denied { mount } for pid=3596 comm="syz.0.1341" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.869640][ T28] audit: type=1400 audit(1772711309.758:476): avc: denied { remount } for pid=3596 comm="syz.0.1341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.986999][ T28] audit: type=1400 audit(1772711309.768:477): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 80.079536][ T3612] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1348'. [ 80.094637][ T3614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 80.111390][ T3578] loop4: detected capacity change from 0 to 40427 [ 80.138369][ T3578] F2FS-fs (loop4): fault_injection options not supported [ 80.160981][ T3620] loop3: detected capacity change from 0 to 512 [ 80.181586][ T3578] F2FS-fs (loop4): fault_type options not supported [ 80.198931][ T3578] F2FS-fs (loop4): invalid crc value [ 80.217209][ T3620] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.221296][ T3578] F2FS-fs (loop4): Found nat_bits in checkpoint [ 80.233605][ T3620] ext4 filesystem being mounted at /235/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.350486][ T3578] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 80.359764][ T285] EXT4-fs (loop3): unmounting filesystem. [ 80.480863][ T286] syz-executor: attempt to access beyond end of device [ 80.480863][ T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 80.628851][ T3670] loop3: detected capacity change from 0 to 512 [ 80.685314][ T3670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 80.705129][ T3670] System zones: 1-12 [ 80.715753][ T3670] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1374: Directory hole found for htree index block 0 [ 80.760813][ T3670] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 80.783808][ T3670] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1374: Directory hole found for htree index block 0 [ 80.806834][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 80.812876][ T3670] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 80.845238][ T3670] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.899794][ T3670] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1374: Directory hole found for htree index block 0 [ 80.932868][ T3693] loop4: detected capacity change from 0 to 256 [ 80.940597][ T285] EXT4-fs (loop3): unmounting filesystem. [ 80.947286][ T3693] exfat: Deprecated parameter 'utf8' [ 80.959472][ T3693] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d93, chksum : 0x4501cc6b, utbl_chksum : 0xe619d30d) [ 80.986436][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 80.992906][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.012274][ T28] audit: type=1400 audit(1772711310.988:478): avc: denied { setattr } for pid=3691 comm="syz.4.1382" name=".pending_reads" dev="loop4" ino=1048773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.026521][ T288] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 81.044145][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.064036][ T3697] loop3: detected capacity change from 0 to 2048 [ 81.096155][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 81.115965][ T3697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.123210][ T28] audit: type=1400 audit(1772711311.088:479): avc: denied { shutdown } for pid=3698 comm="syz.4.1386" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.146486][ T3697] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.166624][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 81.175727][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.210346][ T285] EXT4-fs (loop3): unmounting filesystem. [ 81.221977][ T24] usb 1-1: config 0 descriptor?? [ 81.246413][ T288] usb 7-1: Using ep0 maxpacket: 16 [ 81.260297][ T288] usb 7-1: too many configurations: 129, using maximum allowed: 8 [ 81.276601][ T3702] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 81.286141][ T3702] ext4 filesystem being mounted at /255/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.296962][ T288] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.316618][ T288] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 81.321036][ T3702] EXT4-fs error (device loop4): ext4_acquire_dquot:6822: comm syz.4.1387: Failed to acquire dquot type 0 [ 81.336867][ T288] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.336895][ T288] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 81.337867][ T288] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.370703][ T288] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 81.384854][ T288] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.403154][ T288] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 81.413948][ T286] EXT4-fs (loop4): unmounting filesystem. [ 81.420227][ T288] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.430738][ T288] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 81.449067][ T288] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.467841][ T288] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 81.482714][ T3720] netlink: 39 bytes leftover after parsing attributes in process `syz.7.1396'. [ 81.492537][ T3720] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1396'. [ 81.502137][ T288] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.528952][ T288] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 81.548078][ T288] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.558941][ T288] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 81.569077][ T3726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1397'. [ 81.579017][ T288] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 81.588211][ T288] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.608249][ T288] usb 7-1: Product: syz [ 81.622493][ T288] usb 7-1: Manufacturer: syz [ 81.627600][ T288] usb 7-1: SerialNumber: syz [ 81.638407][ T288] r8152-cfgselector 7-1: config 0 descriptor?? [ 81.644928][ T24] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 81.653909][ T3734] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1401'. [ 81.659557][ T24] microsoft 0003:045E:07DA.000D: report_id 0 is invalid [ 81.676503][ T24] microsoft 0003:045E:07DA.000D: item 0 1 1 8 parsing failed [ 81.691105][ T24] microsoft 0003:045E:07DA.000D: parse failed [ 81.697652][ T24] microsoft: probe of 0003:045E:07DA.000D failed with error -22 [ 81.729392][ T3738] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 81.746578][ T3744] erofs: (device loop3): mounted with root inode @ nid 36. [ 81.754249][ T3738] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.820517][ T286] EXT4-fs (loop4): unmounting filesystem. [ 81.848845][ T2218] usb 7-1: config 0 descriptor?? [ 81.862892][ T288] usb 1-1: USB disconnect, device number 8 [ 81.886971][ T3760] exfat: Deprecated parameter 'namecase' [ 81.895514][ T3760] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 82.051422][ T3774] exfat: Deprecated parameter 'utf8' [ 82.058827][ T3774] exfat: Deprecated parameter 'namecase' [ 82.064600][ T3774] exfat: Deprecated parameter 'namecase' [ 82.071601][ T3774] exfat: Deprecated parameter 'utf8' [ 82.074816][ T288] usb 7-1: USB disconnect, device number 4 [ 82.077481][ T2218] usb 7-1: can't set config #0, error -71 [ 82.107571][ T3774] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 82.271389][ T3793] exfat: Deprecated parameter 'utf8' [ 82.289695][ T3793] exfat: Deprecated parameter 'utf8' [ 82.309134][ T3793] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x22bddf5f, utbl_chksum : 0xe619d30d) [ 82.515601][ T3815] netlink: 'syz.3.1438': attribute type 2 has an invalid length. [ 82.696883][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 83.032624][ T3792] F2FS-fs (loop4): invalid crc value [ 83.056550][ T19] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 83.074366][ T3792] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.149895][ T3849] F2FS-fs (loop3): invalid crc value [ 83.155346][ T3792] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.171096][ T3849] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.246487][ T19] usb 7-1: Using ep0 maxpacket: 16 [ 83.252928][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.275435][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.290648][ T19] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 83.303748][ T3849] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 83.308233][ T3817] F2FS-fs (loop7): Test dummy encryption mode enabled [ 83.367342][ T3817] F2FS-fs (loop7): invalid crc value [ 83.372297][ T19] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 83.394664][ T3817] F2FS-fs (loop7): Found nat_bits in checkpoint [ 83.416388][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.457399][ T19] usb 7-1: config 0 descriptor?? [ 83.506997][ T3817] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 83.565656][ T3873] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1463'. [ 83.576268][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 83.576286][ T28] audit: type=1400 audit(1772711313.548:485): avc: denied { ioctl } for pid=3871 comm="syz.0.1464" path="socket:[28038]" dev="sockfs" ino=28038 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.618042][ T3873] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1463'. [ 83.630656][ T3873] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1463'. [ 83.646485][ T3873] tipc: MTU too low for tipc bearer [ 83.737524][ T3883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 83.865632][ T19] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 83.867518][ T3893] set_capacity_and_notify: 10 callbacks suppressed [ 83.867562][ T3893] loop3: detected capacity change from 0 to 256 [ 83.888849][ T19] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 83.914160][ T3895] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1474'. [ 83.944288][ T3895] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1474'. [ 83.996129][ T3897] loop4: detected capacity change from 0 to 128 [ 84.022303][ T3897] FAT-fs (loop4): Directory bread(block 414) failed [ 84.034089][ T3899] loop3: detected capacity change from 0 to 256 [ 84.041471][ T3897] FAT-fs (loop4): Directory bread(block 415) failed [ 84.056594][ T3897] FAT-fs (loop4): Directory bread(block 416) failed [ 84.072734][ T19] microsoft 0003:045E:07DA.000E: No inputs registered, leaving [ 84.080674][ T3897] FAT-fs (loop4): Directory bread(block 417) failed [ 84.093537][ T3899] exfat: Deprecated parameter 'utf8' [ 84.096626][ T3897] FAT-fs (loop4): Directory bread(block 418) failed [ 84.100762][ T19] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 84.105655][ T3897] FAT-fs (loop4): Directory bread(block 419) failed [ 84.118008][ T3899] exfat: Deprecated parameter 'namecase' [ 84.129932][ T3899] exfat: Deprecated parameter 'namecase' [ 84.135934][ T19] microsoft 0003:045E:07DA.000E: no inputs found [ 84.142857][ T3897] FAT-fs (loop4): Directory bread(block 420) failed [ 84.142933][ T19] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway [ 84.161490][ T3899] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 84.168250][ T3897] FAT-fs (loop4): Directory bread(block 421) failed [ 84.189017][ T19] usb 7-1: USB disconnect, device number 5 [ 84.221294][ T28] audit: type=1400 audit(1772711314.198:486): avc: denied { reparent } for pid=3898 comm="syz.3.1476" name="file0" dev="loop3" ino=1048781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.245387][ T3900] fido_id[3900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 84.615213][ T3904] loop0: detected capacity change from 0 to 40427 [ 84.636795][ T3904] F2FS-fs (loop0): fault_injection options not supported [ 84.654588][ T3904] F2FS-fs (loop0): invalid crc value [ 84.692298][ T3904] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.811084][ T3904] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 84.902768][ T287] syz-executor: attempt to access beyond end of device [ 84.902768][ T287] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 85.186473][ T288] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 85.311353][ T3915] loop3: detected capacity change from 0 to 131072 [ 85.324404][ T3915] F2FS-fs (loop3): Test dummy encryption mode enabled [ 85.338341][ T3915] F2FS-fs (loop3): invalid crc value [ 85.367340][ T3915] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.374529][ T3912] loop4: detected capacity change from 0 to 131072 [ 85.391984][ T3912] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 85.399010][ T288] usb 7-1: unable to get BOS descriptor or descriptor too short [ 85.406941][ T3912] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 85.415760][ T288] usb 7-1: config 1 interface 0 has no altsetting 0 [ 85.423324][ T3912] F2FS-fs (loop4): invalid crc value [ 85.432839][ T3916] loop7: detected capacity change from 0 to 131072 [ 85.444366][ T288] usb 7-1: New USB device found, idVendor=0dfc, idProduct=0100, bcdDevice= 0.40 [ 85.455179][ T3916] F2FS-fs (loop7): invalid crc value [ 85.461639][ T288] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.469775][ T3912] F2FS-fs (loop4): Found nat_bits in checkpoint [ 85.488098][ T3916] F2FS-fs (loop7): Found nat_bits in checkpoint [ 85.494685][ T288] usb 7-1: Product: syz [ 85.506334][ T288] usb 7-1: Manufacturer: syz [ 85.521732][ T288] usb 7-1: SerialNumber: syz [ 85.546421][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 85.564196][ T3915] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.583875][ T3912] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 85.592649][ T3912] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 85.606449][ T3916] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 85.637233][ T3916] SELinux: inode_doinit_use_xattr: getxattr returned 2 for dev=loop7 ino=7 [ 85.736430][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 85.743045][ T24] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.764431][ T24] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.785173][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 85.805387][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 85.845804][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.870070][ T24] usb 1-1: config 0 descriptor?? [ 86.078087][ T3961] loop3: detected capacity change from 0 to 256 [ 86.109555][ T3961] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 86.151129][ T288] usbhid 7-1:1.0: can't add hid device: -71 [ 86.165023][ T288] usbhid: probe of 7-1:1.0 failed with error -71 [ 86.172722][ T28] audit: type=1400 audit(1772711316.148:487): avc: denied { ioctl } for pid=3958 comm="syz.3.1498" path="/285/file0/hugetlb.2MB.usage_in_bytes" dev="loop3" ino=1048782 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.182832][ T288] usb 7-1: USB disconnect, device number 6 [ 86.259278][ T3972] loop4: detected capacity change from 0 to 256 [ 86.289157][ T24] hid-generic 0003:04D8:00DD.000F: hidraw0: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 86.337323][ T3974] loop3: detected capacity change from 0 to 512 [ 86.391288][ T3974] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.406581][ T3974] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.433107][ T3966] F2FS-fs (loop7): invalid crc value [ 86.441134][ T3966] F2FS-fs (loop7): Found nat_bits in checkpoint [ 86.493641][ T288] usb 1-1: USB disconnect, device number 9 [ 86.511392][ T285] EXT4-fs (loop3): unmounting filesystem. [ 86.519151][ T3966] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 86.713570][ T3997] EXT4-fs: Ignoring removed orlov option [ 86.732740][ T3997] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 86.761978][ T3997] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 86.783579][ T3997] EXT4-fs error (device loop7): ext4_iget_extra_inode:4758: inode #15: comm syz.7.1511: corrupted in-inode xattr [ 86.808750][ T3989] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 86.832567][ T3997] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1511: couldn't read orphan inode 15 (err -117) [ 86.845933][ T3989] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 86.874126][ T3989] F2FS-fs (loop4): invalid crc value [ 86.880822][ T3997] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 86.891620][ T3989] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 86.907402][ T3997] EXT4-fs (loop7): shut down requested (2) [ 86.916880][ T28] audit: type=1400 audit(1772711316.898:488): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 86.938844][ T28] audit: type=1400 audit(1772711316.898:489): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.968204][ T3198] EXT4-fs (loop7): unmounting filesystem. [ 86.984518][ T28] audit: type=1400 audit(1772711316.898:490): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.014058][ T3989] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 87.026632][ T3989] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 87.056652][ T28] audit: type=1400 audit(1772711316.898:491): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.137898][ T28] audit: type=1400 audit(1772711316.898:492): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.179760][ T4019] EXT4-fs: Ignoring removed oldalloc option [ 87.198310][ T4019] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 87.209300][ T28] audit: type=1400 audit(1772711316.898:493): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.233331][ T4019] EXT4-fs (loop7): orphan cleanup on readonly fs [ 87.250119][ T4019] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:511: comm syz.7.1521: Block bitmap for bg 0 marked uninitialized [ 87.273154][ T4019] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 87.296485][ T28] audit: type=1400 audit(1772711316.898:494): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.319559][ T4019] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:511: comm syz.7.1521: Block bitmap for bg 0 marked uninitialized [ 87.354479][ T4024] xt_hashlimit: size too large, truncated to 1048576 [ 87.384368][ T4019] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 87.427737][ T4019] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:511: comm syz.7.1521: Block bitmap for bg 0 marked uninitialized [ 87.453072][ T4019] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 87.472194][ T4019] EXT4-fs (loop7): 1 orphan inode deleted [ 87.489965][ T4019] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 87.553000][ T4019] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:511: comm syz.7.1521: Block bitmap for bg 0 marked uninitialized [ 87.623371][ T3198] EXT4-fs (loop7): unmounting filesystem. [ 87.787097][ T4060] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 87.876457][ T288] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 87.946491][ T4068] syz.3.1542 (4068): /proc/4067/oom_adj is deprecated, please use /proc/4067/oom_score_adj instead. [ 88.056424][ T288] usb 1-1: Using ep0 maxpacket: 16 [ 88.063132][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.084421][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.098894][ T288] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.126332][ T288] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 88.144271][ T288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.161276][ T288] usb 1-1: config 0 descriptor?? [ 88.328684][ T4089] FAT-fs (loop6): bogus number of FAT sectors [ 88.334854][ T4047] F2FS-fs (loop4): Found nat_bits in checkpoint [ 88.341276][ T4089] FAT-fs (loop6): Can't find a valid FAT filesystem [ 88.370802][ T4089] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1552'. [ 88.425813][ T4047] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 88.502297][ T4047] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 88.532632][ T4047] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 88.546849][ T4047] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 88.554727][ T4047] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=fff70000, run fsck to fix. [ 88.583022][ T288] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 88.605793][ T288] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 88.783693][ T288] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 88.800874][ T288] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 88.822669][ T288] microsoft 0003:045E:07DA.0010: no inputs found [ 88.836669][ T288] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 88.861418][ T4113] tipc: Started in network mode [ 88.871552][ T288] usb 1-1: USB disconnect, device number 10 [ 88.900502][ T4113] tipc: Node identity f_get_cu, cluster identity 4711 [ 88.930741][ T4114] fido_id[4114]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 88.937109][ T4113] tipc: Enabling of bearer rejected, failed to enable media [ 88.982863][ T4118] set_capacity_and_notify: 8 callbacks suppressed [ 88.982883][ T4118] loop3: detected capacity change from 0 to 256 [ 89.030258][ T4082] loop7: detected capacity change from 0 to 131072 [ 89.044291][ T4124] loop6: detected capacity change from 0 to 128 [ 89.069707][ T4124] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 89.082774][ T4124] FAT-fs (loop6): Filesystem has been set read-only [ 89.098235][ T4082] F2FS-fs (loop7): Found nat_bits in checkpoint [ 89.143575][ T4131] loop4: detected capacity change from 0 to 128 [ 89.174433][ T4131] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 89.182159][ T4082] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 89.190572][ T4131] ext4 filesystem being mounted at /286/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.204592][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 89.204608][ T28] audit: type=1400 audit(1772711319.178:496): avc: denied { mounton } for pid=4130 comm="syz.4.1570" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 89.336416][ T2258] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 89.491262][ T4161] loop0: detected capacity change from 0 to 256 [ 89.508672][ T4164] loop6: detected capacity change from 0 to 256 [ 89.518041][ T4165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1587'. [ 89.519818][ T2258] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.542731][ T4161] FAT-fs (loop0): Directory bread(block 64) failed [ 89.566632][ T4161] FAT-fs (loop0): Directory bread(block 65) failed [ 89.573441][ T2258] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.574219][ T4161] FAT-fs (loop0): Directory bread(block 66) failed [ 89.589813][ T2258] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.597150][ T4164] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.622201][ T4161] FAT-fs (loop0): Directory bread(block 67) failed [ 89.629141][ T4161] FAT-fs (loop0): Directory bread(block 68) failed [ 89.635975][ T4161] FAT-fs (loop0): Directory bread(block 69) failed [ 89.647115][ T2258] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.656310][ T2258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.664554][ T28] audit: type=1400 audit(1772711575.629:497): avc: denied { ioctl } for pid=4166 comm="syz.4.1588" path="socket:[28549]" dev="sockfs" ino=28549 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.696522][ T4161] FAT-fs (loop0): Directory bread(block 70) failed [ 89.703123][ T4161] FAT-fs (loop0): Directory bread(block 71) failed [ 89.708025][ T2258] usb 4-1: Product: syz [ 89.714128][ T2258] usb 4-1: Manufacturer: syz [ 89.728090][ T4169] loop7: detected capacity change from 0 to 512 [ 89.736574][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 89.748797][ T4172] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779264) [ 89.756837][ T4161] FAT-fs (loop0): Directory bread(block 72) failed [ 89.757316][ T2258] usb 4-1: SerialNumber: syz [ 89.774341][ T4169] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 89.789331][ T4172] FAT-fs (loop6): Filesystem has been set read-only [ 89.796200][ T4161] FAT-fs (loop0): Directory bread(block 73) failed [ 89.810214][ T4169] EXT4-fs (loop7): 1 truncate cleaned up [ 89.815997][ T4169] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 89.816809][ T4172] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 89.836182][ T4169] EXT4-fs error (device loop7): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.7.1575: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 89.860433][ T4169] EXT4-fs (loop7): Remounting filesystem read-only [ 89.867298][ T4169] EXT4-fs error (device loop7) in ext4_delete_entry:2800: Corrupt filesystem [ 89.876688][ T4169] EXT4-fs (loop7): Remounting filesystem read-only [ 89.883360][ T4169] EXT4-fs warning (device loop7): ext4_rename_delete:3778: inode #2: comm syz.7.1575: Deleting old file: nlink 4, error=-117 [ 89.897544][ T4172] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 89.908936][ T4169] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #2: block 13: comm syz.7.1575: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 89.946195][ T4169] EXT4-fs (loop7): Remounting filesystem read-only [ 89.968223][ T3198] EXT4-fs (loop7): unmounting filesystem. [ 89.984576][ T4181] loop7: detected capacity change from 0 to 512 [ 89.991819][ T4181] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 90.002103][ T2258] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 90.003851][ T4181] EXT4-fs (loop7): orphan cleanup on readonly fs [ 90.016260][ T4181] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:511: comm syz.7.1591: Block bitmap for bg 0 marked uninitialized [ 90.021371][ T2258] cdc_ncm 4-1:1.0: bind() failure [ 90.032514][ T4181] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 90.046559][ T4181] EXT4-fs (loop7): 1 orphan inode deleted [ 90.053406][ T4181] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 90.067492][ T2258] usb 4-1: USB disconnect, device number 8 [ 90.069351][ T28] audit: type=1400 audit(1772711576.049:498): avc: denied { mount } for pid=4180 comm="syz.7.1591" name="/" dev="configfs" ino=13593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 90.105101][ T3198] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /74/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0 [ 90.125254][ T3198] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 90.139851][ T28] audit: type=1400 audit(1772711576.079:499): avc: denied { search } for pid=4180 comm="syz.7.1591" name="/" dev="configfs" ino=13593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.150610][ T3198] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 90.166783][ T28] audit: type=1400 audit(1772711576.079:500): avc: denied { remount } for pid=4180 comm="syz.7.1591" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 90.238838][ T3198] EXT4-fs (loop7): unmounting filesystem. [ 90.246443][ T288] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 90.257236][ T1194] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 90.437473][ T288] usb 1-1: config 0 has an invalid interface number: 22 but max is 0 [ 90.446416][ T1194] usb 5-1: Using ep0 maxpacket: 16 [ 90.452659][ T1194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.456007][ T288] usb 1-1: config 0 has no interface number 0 [ 90.473623][ T1194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.476496][ T288] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.484163][ T1194] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 90.516404][ T1194] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 90.522161][ T288] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.525487][ T1194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.527424][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.550594][ T288] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 90.560204][ T1194] usb 5-1: config 0 descriptor?? [ 90.586118][ T288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.595754][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.607397][ T288] usb 1-1: config 0 descriptor?? [ 90.612924][ T4189] device bridge_slave_0 entered promiscuous mode [ 190.606320][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 190.613344][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4191 [ 190.620672][ C1] (detected by 1, t=10003 jiffies, g=15969, q=456 ncpus=2) [ 190.627983][ C1] task:syz.6.1597 state:R running task stack:26048 pid:4191 ppid:3005 flags:0x00004000 [ 190.638789][ C1] Call Trace: [ 190.642132][ C1] [ 190.645011][ C1] sched_show_task+0x391/0x550 [ 190.649811][ C1] ? __kasan_check_write+0x14/0x20 [ 190.654958][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 190.660901][ C1] ? __cfi_sched_show_task+0x10/0x10 [ 190.666213][ C1] ? wq_watchdog_touch+0x100/0x190 [ 190.671366][ C1] print_other_cpu_stall+0xdbf/0x10f0 [ 190.676773][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 190.682606][ C1] ? print_cpu_stall+0x590/0x590 [ 190.687573][ C1] ? acct_account_cputime+0xe4/0x290 [ 190.692888][ C1] rcu_sched_clock_irq+0x7ba/0x1310 [ 190.698109][ C1] ? __cfi_rcu_sched_clock_irq+0x10/0x10 [ 190.703775][ C1] ? hrtimer_run_queues+0x166/0x430 [ 190.709020][ C1] update_process_times+0x148/0x1b0 [ 190.714265][ C1] tick_sched_timer+0x17c/0x240 [ 190.719176][ C1] ? __cfi_tick_sched_timer+0x10/0x10 [ 190.724595][ C1] __hrtimer_run_queues+0x3d5/0xa00 [ 190.729839][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 190.734990][ C1] ? ktime_get_update_offsets_now+0x30c/0x320 [ 190.741091][ C1] hrtimer_interrupt+0x3c7/0x8c0 [ 190.746079][ C1] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 190.752088][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 190.757745][ C1] [ 190.760692][ C1] [ 190.763633][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 190.769630][ C1] RIP: 0010:sched_clock+0xa/0x10 [ 190.774606][ C1] Code: ff ff e8 f9 58 cb 03 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 f0 6e 9c 52 55 48 89 e5 e8 e7 cf 06 00 5d 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 9b 8e 31 7f [ 190.794328][ C1] RSP: 0018:ffffc9001206f9f8 EFLAGS: 00000216 [ 190.800430][ C1] RAX: 0000002c61a4a52d RBX: ffffc9001206fc5c RCX: 0000000000000001 [ 190.808428][ C1] RDX: 1ffffffff0f6e008 RSI: ffffffff87b7005c RDI: ffffffff87b70040 [ 190.816647][ C1] RBP: ffffc9001206fba0 R08: ffffffff87b70048 R09: ffffffff87b70058 [ 190.824644][ C1] R10: ffffffff87b70043 R11: 1ffffffff0f6e008 R12: ffffc9001206fc58 [ 190.832665][ C1] R13: 00000000ffffffea R14: dffffc0000000000 R15: 0000000000000000 [ 190.840682][ C1] ? bpf_test_run+0x566/0x940 [ 190.845384][ C1] ? convert___skb_to_skb+0x5b0/0x5b0 [ 190.850775][ C1] ? __cfi_eth_type_trans+0x10/0x10 [ 190.856074][ C1] ? convert___skb_to_skb+0x40/0x5b0 [ 190.861381][ C1] bpf_prog_test_run_skb+0xafb/0x12c0 [ 190.866778][ C1] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 190.872604][ C1] bpf_prog_test_run+0x3e3/0x640 [ 190.877562][ C1] ? bpf_prog_query+0x270/0x270 [ 190.882430][ C1] ? selinux_bpf+0xce/0xf0 [ 190.886863][ C1] ? security_bpf+0x93/0xb0 [ 190.891396][ C1] __sys_bpf+0x5ee/0x850 [ 190.895651][ C1] ? bpf_link_show_fdinfo+0x330/0x330 [ 190.901050][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 190.906795][ C1] __x64_sys_bpf+0x7c/0x90 [ 190.911237][ C1] x64_sys_call+0x488/0x9a0 [ 190.915758][ C1] do_syscall_64+0x4c/0xa0 [ 190.920195][ C1] ? clear_bhb_loop+0x30/0x80 [ 190.924913][ C1] ? clear_bhb_loop+0x30/0x80 [ 190.929718][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.935652][ C1] RIP: 0033:0x7f22f7f9c799 [ 190.940240][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.959875][ C1] RSP: 002b:00007f22f8e6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.968326][ C1] RAX: ffffffffffffffda RBX: 00007f22f8215fa0 RCX: 00007f22f7f9c799 [ 190.976508][ C1] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 190.984507][ C1] RBP: 00007f22f8032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 190.992673][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.000661][ C1] R13: 00007f22f8216038 R14: 00007f22f8215fa0 R15: 00007ffeb0930fa8 [ 191.008656][ C1] [ 191.011700][ C1] rcu: rcu_preempt kthread starved for 1373 jiffies! g15969 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 191.022819][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 191.032807][ C1] rcu: RCU grace-period kthread stack dump: [ 191.038706][ C1] task:rcu_preempt state:R running task stack:28352 pid:14 ppid:2 flags:0x00004000 [ 191.049495][ C1] Call Trace: [ 191.052788][ C1] [ 191.055737][ C1] __schedule+0xba6/0x1500 [ 191.060188][ C1] ? release_firmware_map_entry+0x190/0x190 [ 191.066123][ C1] schedule+0xbd/0x170 [ 191.070234][ C1] schedule_timeout+0x159/0x340 [ 191.075108][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 191.080509][ C1] ? __cfi_process_timeout+0x10/0x10 [ 191.085820][ C1] ? prepare_to_swait_event+0x308/0x320 [ 191.091390][ C1] rcu_gp_fqs_loop+0x2e9/0x10c0 [ 191.096256][ C1] ? __cfi_rcu_implicit_dynticks_qs+0x10/0x10 [ 191.102357][ C1] ? rcu_gp_init+0xf30/0xf30 [ 191.106993][ C1] rcu_gp_kthread+0x99/0x390 [ 191.111631][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 191.116866][ C1] ? __kasan_check_read+0x11/0x20 [ 191.121928][ C1] ? __kthread_parkme+0x142/0x180 [ 191.126990][ C1] kthread+0x281/0x320 [ 191.131086][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 191.136330][ C1] ? __cfi_kthread+0x10/0x10 [ 191.140944][ C1] ret_from_fork+0x1f/0x30 [ 191.145385][ C1] [ 191.148421][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 191.154793][ C1] Sending NMI from CPU 1 to CPUs 0: [ 191.160027][ C0] NMI backtrace for cpu 0 [ 191.160046][ C0] CPU: 0 PID: 15 Comm: rcub/0 Not tainted syzkaller #0 [ 191.160063][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.160072][ C0] RIP: 0010:rt_mutex_slowlock_block+0x2fb/0x5f0 [ 191.160099][ C0] Code: 00 00 49 8d 4d 34 49 8d 55 14 48 89 4d a8 48 c1 e9 03 48 89 8d 50 ff ff ff 48 89 55 b0 48 c1 ea 03 48 89 95 58 ff ff ff eb 10 <48> 8b 07 48 83 e0 fe 49 39 c5 0f 85 37 01 00 00 48 8b 85 50 ff ff [ 191.160118][ C0] RSP: 0018:ffffc900000f7bf0 EFLAGS: 00000246 [ 191.160134][ C0] RAX: 1ffffffff0e36831 RBX: ffffffff871b4170 RCX: ffffffff85002651 [ 191.160148][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff871b4188 [ 191.160159][ C0] RBP: ffffc900000f7cb0 R08: ffff888100325107 R09: 1ffff11020064a20 [ 191.160172][ C0] R10: dffffc0000000000 R11: ffffed1020064a21 R12: dffffc0000000000 [ 191.160184][ C0] R13: ffff888115a31440 R14: ffff888100325100 R15: ffffc900000f7d00 [ 191.160197][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 191.160212][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.160225][ C0] CR2: 00007f0f6a7e9e80 CR3: 0000000126f92000 CR4: 00000000003506b0 [ 191.160240][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 191.160250][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 191.160261][ C0] Call Trace: [ 191.160266][ C0] [ 191.160277][ C0] rt_mutex_slowlock+0x18b/0x430 [ 191.160298][ C0] ? rt_mutex_adjust_prio_chain+0x1710/0x1710 [ 191.160319][ C0] ? __switch_to_asm+0x3a/0x60 [ 191.160343][ C0] rt_mutex_lock+0x10e/0x1c0 [ 191.160360][ C0] ? __cfi_rt_mutex_lock+0x10/0x10 [ 191.160378][ C0] ? __kasan_check_write+0x14/0x20 [ 191.160396][ C0] rcu_boost_kthread+0x239/0x650 [ 191.160417][ C0] kthread+0x281/0x320 [ 191.160434][ C0] ? __cfi_rcu_boost_kthread+0x10/0x10 [ 191.160452][ C0] ? __cfi_kthread+0x10/0x10 [ 191.160470][ C0] ret_from_fork+0x1f/0x30 [ 191.160492][ C0] [ 274.351462][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P4191 } 18373 jiffies s: 5001 root: 0x0/T [ 274.363656][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 286.411502][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 353.277675][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P4191 } 26266 jiffies s: 5001 root: 0x0/T [ 353.289442][ T16] rcu: blocking rcu_node structures (internal RCU debug):