last executing test programs: 46.896375709s ago: executing program 1 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@ipv6_deladdr={0x98, 0x15, 0x1, 0x70bd26, 0x25dfdbfc, {0xa, 0x10, 0x8, 0xfd, r2}, [@IFA_FLAGS={0x8, 0x8, 0x80}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x100, 0x9a, 0x400, 0xdde4}}, @IFA_ADDRESS={0x14, 0x1, @private2}, @IFA_ADDRESS={0x14, 0x1, @private0}, @IFA_FLAGS={0x8, 0x8, 0x480}, @IFA_FLAGS={0x8, 0x8, 0xa0}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_CACHEINFO={0xfdb8, 0x6, {0x8, 0x4, 0xfdf, 0xa50}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 46.7980255s ago: executing program 1 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 46.741769399s ago: executing program 1 (id=586): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000540)='task_rename\x00', r0}, 0x11) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r0}, 0x20) 46.713414015s ago: executing program 1 (id=589): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 46.525609707s ago: executing program 1 (id=595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) ustat(0x3, &(0x7f0000000000)) 45.646377127s ago: executing program 1 (id=622): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 45.604073889s ago: executing program 32 (id=622): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 45.319918076s ago: executing program 3 (id=639): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) 45.263700875s ago: executing program 3 (id=641): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x13, r1, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@filename='./file0\x00', 0x0, 0x0) 45.162405266s ago: executing program 3 (id=643): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 45.091660134s ago: executing program 3 (id=645): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 44.901416915s ago: executing program 3 (id=646): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchmodat(0xffffffffffffffff, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfffffffb) 43.466776674s ago: executing program 3 (id=674): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) getgroups(0x3, &(0x7f0000000000)=[0xee01, 0xffffffffffffffff, 0xee00]) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {0x1, 0x6}, [], {}, [{0x8, 0x1, r1}, {0x8, 0x6, r0}], {0x10, 0x6}, {0x20, 0x4}}, 0x34, 0x3) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) 43.464354893s ago: executing program 33 (id=674): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) getgroups(0x3, &(0x7f0000000000)=[0xee01, 0xffffffffffffffff, 0xee00]) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {0x1, 0x6}, [], {}, [{0x8, 0x1, r1}, {0x8, 0x6, r0}], {0x10, 0x6}, {0x20, 0x4}}, 0x34, 0x3) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) 7.531696254s ago: executing program 4 (id=1455): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="63eced8e46dcd5837fa70bfb5700", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.505186214s ago: executing program 4 (id=1456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000cf448c627599aad28ca78e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x10) 7.446660923s ago: executing program 4 (id=1457): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000c00)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}}, 0x0) 7.446372172s ago: executing program 4 (id=1458): r0 = fsopen(&(0x7f00000001c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 7.446214391s ago: executing program 4 (id=1459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$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") ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.43520327s ago: executing program 4 (id=1460): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) 3.2543481s ago: executing program 0 (id=1535): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0xa00, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 3.243365849s ago: executing program 0 (id=1538): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) 3.146490583s ago: executing program 0 (id=1541): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 2.948341844s ago: executing program 0 (id=1552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) 2.927154965s ago: executing program 0 (id=1543): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000030000000500", @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) 2.461310426s ago: executing program 0 (id=1550): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x65}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x20, 0xd, 0x15, {0x15, 0xe, "28b0af7716d1e09fb78479ec041999f38de1f6"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) 2.022257237s ago: executing program 6 (id=1554): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000021c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f0000001580)={0x50, 0x0, 0x3, {0x7, 0x29, 0x80000000, 0x0, 0x691a, 0x48e, 0x1000, 0x7fff, 0x0, 0x0, 0x80, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)={0x20, 0x0, 0x7, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)={0x78, 0x0, 0x40, {0x8000, 0xffff, 0x0, {0x4, 0x6, 0x7fffffff, 0x2, 0x0, 0x7, 0x7, 0x7, 0x8, 0x1000, 0x9, 0x0, 0x0, 0x80, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, 0x0) 1.878923256s ago: executing program 6 (id=1555): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x101) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.033668864s ago: executing program 6 (id=1556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 1.010769627s ago: executing program 6 (id=1557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x40440c0) write$tun(r0, &(0x7f00000003c0)={@void, @val={0x1, 0x3, 0x27, 0xd, 0x19, 0xc}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x3f, 0x27, 0x67, 0x0, 0x4a, 0x11, 0x0, @private=0xa010101, @local}, {0x4e21, 0x4e23, 0x13, 0x0, @gue={{0x2, 0x1, 0x3, 0x9, 0x100, @val=0x80}, "d7aa1f"}}}}, 0x31) 949.230355ms ago: executing program 6 (id=1560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) 498.315352ms ago: executing program 2 (id=1572): unshare(0x22020600) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) preadv2(r2, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/4, 0x4}], 0x1, 0xffffff80, 0x5, 0x15) 468.524179ms ago: executing program 2 (id=1573): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$incfs(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='.\x00', &(0x7f0000000040), 0x1, &(0x7f0000000080)=ANY=[]) 441.689078ms ago: executing program 2 (id=1574): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, 0x0, 0x0, 0x80005404, 0x0, 0x4) 427.156523ms ago: executing program 2 (id=1575): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 391.174177ms ago: executing program 2 (id=1577): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)="9d0caf7376dc9a7060b5c8b811344652", 0x10) 369.476125ms ago: executing program 2 (id=1578): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000001c0)={0x3, 0xffffffff, 0x17c, 0xa, 0x4, 0x4}) 368.955964ms ago: executing program 5 (id=1588): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0xd7, 0x0, r1}) 343.366357ms ago: executing program 5 (id=1579): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(r0, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000180)='leases_conflict\x00', r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa842, 0x0) 322.361887ms ago: executing program 5 (id=1580): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 186.786445ms ago: executing program 5 (id=1581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d07, 0x0, 0x1}]}) 186.534374ms ago: executing program 5 (id=1582): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) fallocate(r1, 0x8, 0x4000, 0x4000) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 14.415464ms ago: executing program 6 (id=1583): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000700)={0x1f, @none}, 0x8) listen(r1, 0x0) bind$bt_sco(r0, &(0x7f0000000000), 0x8) listen(r0, 0x0) 0s ago: executing program 5 (id=1584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x3) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x993, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x993, 0x2, r2}) kernel console output (not intermixed with test programs): _SIZE [ 47.589429][ T1491] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.476: iget: bad i_size value: 38620345925642 [ 47.622899][ T1491] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.476: couldn't read orphan inode 15 (err -117) [ 47.638781][ T1505] loop1: detected capacity change from 0 to 1024 [ 47.645220][ T1491] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,debug_want_extra_isize=0x0000000000000004,data_err=ignore,nojournal_checksum,dioread_nolock,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 47.669193][ T1491] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 47.688550][ T10] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:1: bg 0: block 5: invalid block bitmap [ 47.689664][ T1505] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,usrquota,jqfmt=vfsv0,abort,nodelalloc,lazytime,noload,bsddf,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 47.720727][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 47.733189][ T10] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.733189][ T10] [ 47.743578][ T10] EXT4-fs (loop2): Total free blocks count 0 [ 47.749987][ T10] EXT4-fs (loop2): Free/Dirty block details [ 47.772026][ T10] EXT4-fs (loop2): free_blocks=0 [ 47.781755][ T10] EXT4-fs (loop2): dirty_blocks=1 [ 47.788502][ T10] EXT4-fs (loop2): Block reservation details [ 47.796663][ T10] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 47.860429][ T1513] IPv6: sit1: Disabled Multicast RS [ 48.076517][ T337] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 48.131262][ T1537] tipc: Started in network mode [ 48.136184][ T1537] tipc: Node identity 7f000001, cluster identity 4711 [ 48.143301][ T1537] tipc: Enabled bearer , priority 10 [ 48.239933][ T1548] loop1: detected capacity change from 0 to 512 [ 48.272545][ T1548] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 48.295231][ T1548] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.501: iget: bogus i_mode (5) [ 48.310111][ T1548] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.501: couldn't read orphan inode 15 (err -117) [ 48.322360][ T1548] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 48.334339][ T1548] ext2 filesystem being mounted at /119/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.436640][ T337] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.455672][ T337] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 48.466491][ T1573] loop4: detected capacity change from 0 to 16 [ 48.537915][ T1573] erofs: (device loop4): mounted with root inode @ nid 36. [ 48.547590][ T1573] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown HEAD1 format 13 for nid 36, please upgrade kernel [ 48.560656][ T1573] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown HEAD1 format 13 for nid 36, please upgrade kernel [ 48.577900][ T1573] erofs: (device loop4): z_erofs_readpage: failed to read, err [-95] [ 48.627219][ T337] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 48.642575][ T337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.666533][ T337] usb 4-1: Product: syz [ 48.670722][ T337] usb 4-1: Manufacturer: syz [ 48.675305][ T337] usb 4-1: SerialNumber: syz [ 48.687534][ T337] usb 4-1: config 0 descriptor?? [ 48.698351][ T39] kernel read not supported for file /input/event1 (pid: 39 comm: kworker/1:1) [ 48.862788][ T1608] loop1: detected capacity change from 0 to 256 [ 48.925037][ T1608] FAT-fs (loop1): Directory bread(block 64) failed [ 48.931704][ T1608] FAT-fs (loop1): Directory bread(block 65) failed [ 48.938413][ T1608] FAT-fs (loop1): Directory bread(block 66) failed [ 48.945003][ T1608] FAT-fs (loop1): Directory bread(block 67) failed [ 48.951654][ T1608] FAT-fs (loop1): Directory bread(block 68) failed [ 48.958287][ T1608] FAT-fs (loop1): Directory bread(block 69) failed [ 48.964910][ T1608] FAT-fs (loop1): Directory bread(block 70) failed [ 48.972015][ T1608] FAT-fs (loop1): Directory bread(block 71) failed [ 48.978779][ T1608] FAT-fs (loop1): Directory bread(block 72) failed [ 48.985449][ T1608] FAT-fs (loop1): Directory bread(block 73) failed [ 49.000081][ T337] usb 4-1: USB disconnect, device number 4 [ 49.037312][ T332] attempt to access beyond end of device [ 49.037312][ T332] loop1: rw=1, want=1236, limit=256 [ 49.129543][ T1612] device veth0 entered promiscuous mode [ 49.135966][ T1612] device veth0 left promiscuous mode [ 49.256526][ T337] tipc: Node number set to 2130706433 [ 49.727290][ T1641] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 49.736891][ T1641] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 49.931372][ T1657] loop3: detected capacity change from 0 to 8192 [ 50.035802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 50.063923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.069549][ T1667] loop1: detected capacity change from 0 to 16 [ 50.072583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 50.086306][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.094797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.103198][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.108787][ T1667] erofs: (device loop1): mounted with root inode @ nid 36. [ 50.112130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.126960][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.147103][ T1667] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 50.156237][ T1667] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 50.165319][ T1667] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 50.174734][ T1667] overlayfs: failed to get redirect (-117) [ 50.231427][ T1671] syz.1.556[1671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.231507][ T1671] syz.1.556[1671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.281789][ T1675] loop4: detected capacity change from 0 to 8192 [ 50.336497][ T39] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 50.483427][ T1677] loop2: detected capacity change from 0 to 40427 [ 50.516188][ T1685] xt_hashlimit: max too large, truncated to 1048576 [ 50.539615][ T1680] loop1: detected capacity change from 0 to 40427 [ 50.541941][ T1677] F2FS-fs (loop2): Found nat_bits in checkpoint [ 50.572501][ T1680] F2FS-fs (loop1): invalid crc value [ 50.581992][ T1680] F2FS-fs (loop1): Found nat_bits in checkpoint [ 50.586755][ T1677] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 50.623694][ T1680] F2FS-fs (loop1): Start checkpoint disabled! [ 50.631545][ T1680] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 50.706574][ T39] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 50.726528][ T39] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 50.800870][ T332] attempt to access beyond end of device [ 50.800870][ T332] loop1: rw=2049, want=40968, limit=40427 [ 50.812295][ T321] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 50.819981][ T332] attempt to access beyond end of device [ 50.819981][ T332] loop1: rw=2049, want=41000, limit=40427 [ 50.936659][ T39] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 50.946396][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.954451][ T39] usb 4-1: Product: syz [ 50.964534][ T39] usb 4-1: Manufacturer: syz [ 50.969222][ T39] usb 4-1: SerialNumber: syz [ 50.979305][ T39] usb 4-1: config 0 descriptor?? [ 50.996557][ T1665] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 51.003581][ T1665] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 51.076507][ T321] usb 5-1: Using ep0 maxpacket: 32 [ 51.155811][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 51.164317][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.173351][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 51.181652][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.190598][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.199063][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.207582][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.215740][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.216667][ T321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.225877][ T1665] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 51.235428][ T321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.242626][ T1665] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 51.252382][ T321] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 51.267927][ T321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.277488][ T321] usb 5-1: config 0 descriptor?? [ 51.316798][ T1707] syz.2.571 (1707) used greatest stack depth: 21088 bytes left [ 51.317165][ T321] hub 5-1:0.0: USB hub found [ 51.340865][ T1709] loop2: detected capacity change from 0 to 1024 [ 51.359302][ T1709] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,nolazytime,min_batch_time=0x0000000010000005,nojournal_checksum,jqfmt=vfsv1,nodelalloc,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000002000,jqfmt=vfsold,barrier,errors=continue. Quota mode: none. [ 51.428631][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 51.428647][ T30] audit: type=1326 audit(51.400:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 51.457454][ T30] audit: type=1326 audit(51.400:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 51.492231][ T30] audit: type=1326 audit(51.400:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 51.522427][ T1716] loop0: detected capacity change from 0 to 512 [ 51.529694][ T30] audit: type=1326 audit(51.400:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 51.554217][ T30] audit: type=1326 audit(51.400:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 51.577024][ T321] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 51.597383][ T30] audit: type=1326 audit(51.570:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1719 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 51.620285][ T30] audit: type=1326 audit(51.570:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1719 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 51.643753][ T30] audit: type=1326 audit(51.570:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1719 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 51.673704][ T1716] EXT4-fs (loop0): Ignoring removed nobh option [ 51.684306][ T30] audit: type=1326 audit(51.600:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1719 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 51.685115][ T1716] EXT4-fs (loop0): Test dummy encryption mode enabled [ 51.714396][ T1716] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.728013][ T1716] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.574: iget: bad i_size value: 38620345925642 [ 51.741185][ T1716] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.574: couldn't read orphan inode 15 (err -117) [ 51.753558][ T1716] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,debug_want_extra_isize=0x0000000000000004,data_err=ignore,nojournal_checksum,dioread_nolock,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 51.790076][ T1726] loop2: detected capacity change from 0 to 256 [ 51.810815][ T8] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap [ 51.826949][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 51.827281][ T1728] loop1: detected capacity change from 0 to 256 [ 51.839814][ T8] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.839814][ T8] [ 51.856395][ T8] EXT4-fs (loop0): Total free blocks count 0 [ 51.857118][ T1726] FAT-fs (loop2): Directory bread(block 64) failed [ 51.862924][ T8] EXT4-fs (loop0): Free/Dirty block details [ 51.869226][ T1726] FAT-fs (loop2): Directory bread(block 65) failed [ 51.875392][ T8] EXT4-fs (loop0): free_blocks=0 [ 51.881580][ T1726] FAT-fs (loop2): Directory bread(block 66) failed [ 51.887311][ T321] usbhid 5-1:0.0: can't add hid device: -71 [ 51.893324][ T1726] FAT-fs (loop2): Directory bread(block 67) failed [ 51.899897][ T8] EXT4-fs (loop0): dirty_blocks=1 [ 51.910924][ T1726] FAT-fs (loop2): Directory bread(block 68) failed [ 51.911225][ T8] EXT4-fs (loop0): Block reservation details [ 51.917826][ T321] usbhid: probe of 5-1:0.0 failed with error -71 [ 51.923469][ T8] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 51.935823][ T1726] FAT-fs (loop2): Directory bread(block 69) failed [ 51.942658][ T1726] FAT-fs (loop2): Directory bread(block 70) failed [ 51.949709][ T1726] FAT-fs (loop2): Directory bread(block 71) failed [ 51.966548][ T1726] FAT-fs (loop2): Directory bread(block 72) failed [ 51.976347][ T1726] FAT-fs (loop2): Directory bread(block 73) failed [ 51.989413][ T321] usb 5-1: USB disconnect, device number 3 [ 52.009848][ T30] audit: type=1326 audit(51.980:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1729 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f31b69a9 code=0x7ffc0000 [ 52.044938][ T1732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'. [ 52.116095][ T672] attempt to access beyond end of device [ 52.116095][ T672] loop2: rw=1, want=1236, limit=256 [ 52.170715][ T1747] loop1: detected capacity change from 0 to 1024 [ 52.230374][ T1753] loop0: detected capacity change from 0 to 1024 [ 52.257976][ T1747] EXT4-fs (loop1): Ignoring removed bh option [ 52.274456][ T1753] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 52.292387][ T1747] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 52.296558][ T39] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 52.337339][ T39] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 52.353751][ T281] EXT4-fs error (device loop1): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /143/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 52.359827][ T39] usb 4-1: USB disconnect, device number 5 [ 52.380801][ T281] EXT4-fs (loop1): Remounting filesystem read-only [ 52.390017][ T39] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 52.411263][ T281] EXT4-fs error (device loop1): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /143/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 52.450711][ T281] EXT4-fs (loop1): Remounting filesystem read-only [ 52.479588][ T281] EXT4-fs error (device loop1): empty_inline_dir:1869: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 52.519033][ T281] EXT4-fs (loop1): Remounting filesystem read-only [ 52.526060][ T281] EXT4-fs warning (device loop1): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 52.571208][ T281] EXT4-fs error (device loop1): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /143/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 52.602910][ T281] EXT4-fs (loop1): Remounting filesystem read-only [ 52.609734][ T281] EXT4-fs error (device loop1): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /143/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 52.641378][ T281] EXT4-fs (loop1): Remounting filesystem read-only [ 52.648774][ T281] EXT4-fs error (device loop1): empty_inline_dir:1869: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 52.669636][ T281] EXT4-fs (loop1): Remounting filesystem read-only [ 52.676180][ T281] EXT4-fs warning (device loop1): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 52.692610][ T281] EXT4-fs error (device loop1): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /143/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 52.714971][ T281] EXT4-fs (loop1): Remounting filesystem read-only [ 52.721647][ T281] EXT4-fs error (device loop1): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /143/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 52.744145][ T281] EXT4-fs (loop1): Remounting filesystem read-only [ 52.753068][ T281] EXT4-fs error (device loop1): empty_inline_dir:1869: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 52.788480][ T1789] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1789 comm=syz.2.608 [ 52.797469][ T281] EXT4-fs (loop1): Remounting filesystem read-only [ 52.807965][ T281] EXT4-fs warning (device loop1): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 52.823225][ T281] EXT4-fs error (device loop1): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /143/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 52.824522][ T1789] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1789 comm=syz.2.608 [ 52.866616][ T281] EXT4-fs (loop1): Remounting filesystem read-only [ 52.877949][ T281] EXT4-fs warning (device loop1): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 52.894938][ T281] EXT4-fs warning (device loop1): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 52.918246][ T281] EXT4-fs warning (device loop1): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 52.955474][ T281] EXT4-fs warning (device loop1): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 52.975088][ T281] EXT4-fs warning (device loop1): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 52.992633][ T281] EXT4-fs warning (device loop1): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 53.008537][ T281] EXT4-fs warning (device loop1): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 53.088470][ T1811] loop4: detected capacity change from 0 to 256 [ 53.165129][ T1811] FAT-fs (loop4): Directory bread(block 64) failed [ 53.188379][ T281] syz-executor (281) used greatest stack depth: 19840 bytes left [ 53.212111][ T1811] FAT-fs (loop4): Directory bread(block 65) failed [ 53.238297][ T1811] FAT-fs (loop4): Directory bread(block 66) failed [ 53.248356][ T1811] FAT-fs (loop4): Directory bread(block 67) failed [ 53.254952][ T1811] FAT-fs (loop4): Directory bread(block 68) failed [ 53.273099][ T1811] FAT-fs (loop4): Directory bread(block 69) failed [ 53.282150][ T1811] FAT-fs (loop4): Directory bread(block 70) failed [ 53.302905][ T1811] FAT-fs (loop4): Directory bread(block 71) failed [ 53.321481][ T1811] FAT-fs (loop4): Directory bread(block 72) failed [ 53.332972][ T1811] FAT-fs (loop4): Directory bread(block 73) failed [ 53.421406][ T332] attempt to access beyond end of device [ 53.421406][ T332] loop4: rw=1, want=1236, limit=256 [ 53.533648][ T1844] Zero length message leads to an empty skb [ 53.533814][ T1832] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.547687][ T1832] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.558245][ T1832] device bridge_slave_0 entered promiscuous mode [ 53.585937][ T1832] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.601886][ T1832] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.627139][ T1832] device bridge_slave_1 entered promiscuous mode [ 53.737513][ T1856] loop0: detected capacity change from 0 to 40427 [ 53.738588][ T1866] bridge0: port 3(vlan2) entered blocking state [ 53.751219][ T1866] bridge0: port 3(vlan2) entered disabled state [ 53.759160][ T1866] device vlan2 entered promiscuous mode [ 53.765832][ T8] device bridge_slave_1 left promiscuous mode [ 53.772295][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.781165][ T8] device bridge_slave_0 left promiscuous mode [ 53.787681][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.794435][ T1871] loop3: detected capacity change from 0 to 1024 [ 53.802250][ T8] device veth0_vlan left promiscuous mode [ 53.808732][ T1856] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 53.816639][ T1856] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 53.828435][ T1856] F2FS-fs (loop0): invalid crc value [ 53.835880][ T1856] F2FS-fs (loop0): Found nat_bits in checkpoint [ 53.868337][ T1871] EXT4-fs (loop3): Ignoring removed bh option [ 53.902132][ T1856] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 53.909593][ T1856] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 53.926578][ T1871] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 53.977807][ T282] EXT4-fs error (device loop3): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /131/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 53.986178][ T1832] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.000524][ T282] EXT4-fs (loop3): Remounting filesystem read-only [ 54.006902][ T1832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.007026][ T1832] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.007045][ T1832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.037108][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.045138][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.047158][ T282] EXT4-fs error (device loop3): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /131/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 54.054378][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.076690][ T282] EXT4-fs (loop3): Remounting filesystem read-only [ 54.090573][ T282] EXT4-fs error (device loop3): empty_inline_dir:1869: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 54.110556][ T282] EXT4-fs (loop3): Remounting filesystem read-only [ 54.117194][ T282] EXT4-fs warning (device loop3): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 54.131599][ T282] EXT4-fs error (device loop3): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /131/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 54.153915][ T282] EXT4-fs (loop3): Remounting filesystem read-only [ 54.163969][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.172629][ T282] EXT4-fs error (device loop3): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /131/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 54.194900][ T282] EXT4-fs (loop3): Remounting filesystem read-only [ 54.197364][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.204351][ T282] EXT4-fs error (device loop3): empty_inline_dir:1869: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 54.231770][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.240258][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.256791][ T282] EXT4-fs (loop3): Remounting filesystem read-only [ 54.259085][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.271679][ T282] EXT4-fs warning (device loop3): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 54.272676][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.294456][ T282] EXT4-fs error (device loop3): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /131/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 54.330242][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.330961][ T282] EXT4-fs (loop3): Remounting filesystem read-only [ 54.346129][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.349428][ T282] EXT4-fs error (device loop3): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /131/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 54.377376][ T1832] device veth0_vlan entered promiscuous mode [ 54.383736][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.391630][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.401467][ T282] EXT4-fs (loop3): Remounting filesystem read-only [ 54.423335][ T1832] device veth1_macvtap entered promiscuous mode [ 54.436821][ T282] EXT4-fs error (device loop3): empty_inline_dir:1869: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 54.465848][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.476185][ T1894] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1894 comm=syz.4.650 [ 54.487276][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.516499][ T1894] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1894 comm=syz.4.650 [ 54.517038][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.537393][ T282] EXT4-fs (loop3): Remounting filesystem read-only [ 54.554108][ T282] EXT4-fs warning (device loop3): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 54.584947][ T282] EXT4-fs error (device loop3): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /131/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 54.616192][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.630365][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.649776][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.670514][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.701706][ T282] EXT4-fs (loop3): Remounting filesystem read-only [ 54.731079][ T282] EXT4-fs warning (device loop3): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 54.795926][ T282] EXT4-fs warning (device loop3): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 54.804801][ T1907] syz.5.655[1907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.824360][ T1907] syz.5.655[1907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.840603][ T1909] loop4: detected capacity change from 0 to 128 [ 54.899195][ T282] EXT4-fs warning (device loop3): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 54.924528][ T282] EXT4-fs warning (device loop3): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 54.943979][ T282] EXT4-fs warning (device loop3): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 54.957439][ T1914] loop0: detected capacity change from 0 to 1024 [ 54.977124][ T1909] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.998554][ T282] EXT4-fs warning (device loop3): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 55.036063][ T282] EXT4-fs warning (device loop3): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 55.087449][ T1914] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,nolazytime,min_batch_time=0x0000000010000005,nojournal_checksum,jqfmt=vfsv1,nodelalloc,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000002000,jqfmt=vfsold,barrier,errors=continue. Quota mode: none. [ 55.168396][ T1930] loop2: detected capacity change from 0 to 128 [ 55.201968][ T1932] loop4: detected capacity change from 0 to 16 [ 55.251408][ T1940] syz.0.669[1940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.251482][ T1940] syz.0.669[1940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.254055][ T1932] erofs: (device loop4): mounted with root inode @ nid 36. [ 55.299749][ T1932] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 55.310431][ T1942] netlink: 28 bytes leftover after parsing attributes in process `syz.5.670'. [ 55.313025][ T1932] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 55.330060][ T1932] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 55.341896][ T1932] overlayfs: failed to get redirect (-117) [ 55.653826][ T1983] loop5: detected capacity change from 0 to 16 [ 55.670368][ T1983] erofs: (device loop5): mounted with root inode @ nid 36. [ 55.681861][ T1967] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.697080][ T1983] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 55.706288][ T1983] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 55.708427][ T1967] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.722427][ T1983] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 55.731686][ T1983] overlayfs: failed to get redirect (-117) [ 55.747240][ T1967] device bridge_slave_0 entered promiscuous mode [ 55.755609][ T1967] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.762726][ T1967] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.770471][ T1967] device bridge_slave_1 entered promiscuous mode [ 56.000847][ T1967] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.008063][ T1967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.015390][ T1967] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.022490][ T1967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.047789][ T8] device vlan2 left promiscuous mode [ 56.053243][ T8] bridge0: port 3(vlan2) entered disabled state [ 56.060630][ T8] device bridge_slave_1 left promiscuous mode [ 56.066827][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.078360][ T8] device bridge_slave_0 left promiscuous mode [ 56.086052][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.094668][ T8] device veth1_macvtap left promiscuous mode [ 56.103516][ T2002] loop5: detected capacity change from 0 to 512 [ 56.110508][ T8] device veth0_vlan left promiscuous mode [ 56.228631][ T2002] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.695: bad orphan inode 11862016 [ 56.257419][ T2002] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 56.269233][ T1990] loop4: detected capacity change from 0 to 40427 [ 56.276218][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.284145][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.302422][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.312734][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.329857][ T1990] F2FS-fs (loop4): invalid crc value [ 56.332806][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.342272][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.358039][ T1990] F2FS-fs (loop4): Found nat_bits in checkpoint [ 56.378090][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.406773][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.432344][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.446577][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.474935][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.484429][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.493881][ T1990] F2FS-fs (loop4): Start checkpoint disabled! [ 56.505623][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.515085][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.526537][ T1990] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 56.526853][ T1967] device veth0_vlan entered promiscuous mode [ 56.549350][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.557887][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.577777][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.586807][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.595461][ T1967] device veth1_macvtap entered promiscuous mode [ 56.606909][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.615050][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.623767][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.659377][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.681041][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.709507][ T6] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 56.823715][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 56.823732][ T30] audit: type=1326 audit(56.790:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2015 comm="syz.6.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e87ba9a9 code=0x7ffc0000 [ 56.866288][ T30] audit: type=1326 audit(56.820:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2015 comm="syz.6.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7ff7e87ba9a9 code=0x7ffc0000 [ 56.914726][ T8] attempt to access beyond end of device [ 56.914726][ T8] loop4: rw=2049, want=40968, limit=40427 [ 56.927753][ T30] audit: type=1326 audit(56.820:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2015 comm="syz.6.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e87ba9a9 code=0x7ffc0000 [ 56.953805][ T8] attempt to access beyond end of device [ 56.953805][ T8] loop4: rw=2049, want=40984, limit=40427 [ 57.109724][ T2026] loop6: detected capacity change from 0 to 256 [ 57.146946][ T6] usb 6-1: unable to get BOS descriptor or descriptor too short [ 57.179136][ T2026] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 57.199602][ T6] usb 6-1: not running at top speed; connect to a high speed hub [ 57.209832][ T30] audit: type=1400 audit(57.180:645): avc: denied { append } for pid=2025 comm="syz.6.704" name="bus" dev="loop6" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.306305][ T2038] syz.4.708[2038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.306387][ T2038] syz.4.708[2038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.346558][ T6] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 57.386572][ T6] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 57.403717][ T30] audit: type=1326 audit(57.370:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7779d8c9a9 code=0x7ffc0000 [ 57.436485][ T6] usb 6-1: config 4 has no interface number 0 [ 57.466829][ T30] audit: type=1326 audit(57.380:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7779d8c9a9 code=0x7ffc0000 [ 57.506551][ T30] audit: type=1326 audit(57.380:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7779d8c9a9 code=0x7ffc0000 [ 57.537170][ T30] audit: type=1326 audit(57.380:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7779d8c9a9 code=0x7ffc0000 [ 57.560354][ T30] audit: type=1326 audit(57.410:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7779d8c9a9 code=0x7ffc0000 [ 57.583419][ T30] audit: type=1326 audit(57.420:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7779d8c9a9 code=0x7ffc0000 [ 57.708971][ T6] usb 6-1: string descriptor 0 read error: -22 [ 57.715242][ T6] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 57.724822][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.726479][ T321] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 57.766510][ T39] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 57.767377][ T6] usb 6-1: Found UVC 0.00 device (04f2:b746) [ 57.781363][ T6] usb 6-1: No valid video chain found. [ 57.976799][ T648] usb 6-1: USB disconnect, device number 2 [ 58.106543][ T321] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.116948][ T321] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 58.156593][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.167854][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.178150][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.191799][ T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.201062][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.214253][ T39] usb 5-1: config 0 descriptor?? [ 58.286572][ T321] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 58.295837][ T321] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.304161][ T321] usb 7-1: Product: syz [ 58.308685][ T321] usb 7-1: Manufacturer: syz [ 58.313382][ T321] usb 7-1: SerialNumber: syz [ 58.322847][ T321] usb 7-1: config 0 descriptor?? [ 58.462647][ T2054] loop2: detected capacity change from 0 to 1024 [ 58.478975][ T2054] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,noauto_da_alloc,jqfmt=vfsold,stripe=0x0000000000000003,noauto_da_alloc,auto_da_alloc=0x0000000000000005,resuid=0x0000000000000000,dioread_lock,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 58.659821][ T321] usb 7-1: USB disconnect, device number 2 [ 58.697507][ T39] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 58.711035][ T39] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 58.727129][ T39] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 58.737051][ T39] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 58.752572][ T39] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 58.781150][ T39] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 58.796118][ T39] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 58.824848][ T39] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 58.832599][ T39] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 58.840364][ T39] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 58.866907][ T39] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 58.978893][ T39] usb 5-1: USB disconnect, device number 4 [ 59.007691][ T2105] loop0: detected capacity change from 0 to 128 [ 59.080472][ T2110] loop5: detected capacity change from 0 to 256 [ 59.195235][ T2112] loop5: detected capacity change from 0 to 128 [ 59.232645][ T2112] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 61.226455][ C1] sched: RT throttling activated [ 62.262069][ T2143] loop6: detected capacity change from 0 to 40427 [ 63.288883][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 63.288900][ T30] audit: type=1400 audit(63.260:682): avc: denied { mounton } for pid=2166 comm="syz.5.763" path="/39/file0" dev="incremental-fs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.320701][ T30] audit: type=1326 audit(63.300:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2168 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 63.377256][ T30] audit: type=1326 audit(63.300:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2168 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 63.406785][ T30] audit: type=1326 audit(63.330:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2168 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 63.443380][ T30] audit: type=1326 audit(63.330:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2168 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 63.480152][ T30] audit: type=1326 audit(63.330:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2168 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 63.503117][ T30] audit: type=1326 audit(63.410:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2168 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 63.526170][ T30] audit: type=1326 audit(63.410:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2168 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 63.599899][ T2189] loop2: detected capacity change from 0 to 512 [ 63.607716][ T2190] loop6: detected capacity change from 0 to 1024 [ 63.614342][ T30] audit: type=1326 audit(63.410:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2168 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 63.644444][ T30] audit: type=1326 audit(63.410:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2168 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 63.697480][ T2190] EXT4-fs (loop6): Ignoring removed orlov option [ 63.722015][ T2190] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 63.745890][ T2189] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 63.781818][ T2181] loop5: detected capacity change from 0 to 40427 [ 63.798998][ T2181] F2FS-fs (loop5): invalid crc value [ 63.811690][ T2181] F2FS-fs (loop5): Found nat_bits in checkpoint [ 63.856542][ T2181] F2FS-fs (loop5): Start checkpoint disabled! [ 63.867871][ T2181] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 63.905859][ T2206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'. [ 63.946482][ T6] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 63.971555][ T2212] loop2: detected capacity change from 0 to 512 [ 64.038602][ T2212] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.105175][ T332] attempt to access beyond end of device [ 64.105175][ T332] loop5: rw=2049, want=40968, limit=40427 [ 64.116736][ T332] attempt to access beyond end of device [ 64.116736][ T332] loop5: rw=2049, want=41008, limit=40427 [ 64.232411][ T2230] loop0: detected capacity change from 0 to 512 [ 64.242039][ T2233] binder: 2225:2233 ioctl 4018620d 0 returned -22 [ 64.261768][ T2230] EXT4-fs (loop0): Ignoring removed nobh option [ 64.275328][ T2230] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.787: iget: bad i_size value: 38620345925642 [ 64.297217][ T2230] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.787: couldn't read orphan inode 15 (err -117) [ 64.309769][ T2230] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 64.330854][ T2231] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 64.347066][ T6] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 64.357428][ T2231] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 64.373526][ T2240] loop5: detected capacity change from 0 to 128 [ 64.383363][ T2240] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.388633][ T6] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 64.406654][ T6] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 64.421157][ T6] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.454115][ T6] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 64.463909][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.508115][ T6] snd-usb-audio: probe of 5-1:27.0 failed with error -12 [ 64.527511][ T2249] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 64.540458][ T2249] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.547765][ T2249] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.573459][ T2251] syz.2.791[2251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.573571][ T2251] syz.2.791[2251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.596218][ T2256] loop5: detected capacity change from 0 to 512 [ 64.652750][ T2256] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 64.715203][ T6] usb 5-1: USB disconnect, device number 5 [ 64.768255][ T2265] loop0: detected capacity change from 0 to 512 [ 64.804073][ T2265] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 65.065116][ T2293] loop0: detected capacity change from 0 to 128 [ 65.094744][ T2293] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.327668][ T2315] loop2: detected capacity change from 0 to 512 [ 65.367604][ T2315] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.819: casefold flag without casefold feature [ 65.426610][ T2315] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.819: couldn't read orphan inode 15 (err -117) [ 65.476625][ T2315] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.539830][ T2349] loop6: detected capacity change from 0 to 128 [ 65.545753][ T2352] loop5: detected capacity change from 0 to 256 [ 65.589309][ T2349] FAT-fs (loop6): Directory bread(block 162) failed [ 65.598563][ T2349] FAT-fs (loop6): Directory bread(block 163) failed [ 65.605229][ T2349] FAT-fs (loop6): Directory bread(block 164) failed [ 65.612000][ T2349] FAT-fs (loop6): Directory bread(block 165) failed [ 65.618685][ T2349] FAT-fs (loop6): Directory bread(block 166) failed [ 65.625315][ T2349] FAT-fs (loop6): Directory bread(block 167) failed [ 65.631979][ T2349] FAT-fs (loop6): Directory bread(block 168) failed [ 65.638663][ T2349] FAT-fs (loop6): Directory bread(block 169) failed [ 65.649423][ T2349] FAT-fs (loop6): Directory bread(block 162) failed [ 65.656166][ T2349] FAT-fs (loop6): Directory bread(block 163) failed [ 65.663119][ T2349] attempt to access beyond end of device [ 65.663119][ T2349] loop6: rw=3, want=232, limit=128 [ 65.673893][ T2349] attempt to access beyond end of device [ 65.673893][ T2349] loop6: rw=2051, want=234, limit=128 [ 65.768134][ T2373] loop2: detected capacity change from 0 to 512 [ 65.813041][ T2373] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 65.848163][ T2386] SELinux: failed to load policy [ 65.991118][ T2404] loop0: detected capacity change from 0 to 512 [ 66.017807][ T2404] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 66.052714][ T2415] loop5: detected capacity change from 0 to 2048 [ 66.068668][ T2404] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 66.080172][ T2404] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 66.090148][ T2415] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 66.101229][ T2415] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.114867][ T2415] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 66.119625][ T2404] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 66.133090][ T2404] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c041e01c, mo2=0100] [ 66.139195][ T2415] EXT4-fs (loop5): group descriptors corrupted! [ 66.141538][ T2404] EXT4-fs (loop0): orphan cleanup on readonly fs [ 66.155549][ T2404] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.858: bg 0: block 34: padding at end of block bitmap is not set [ 66.182200][ T2404] EXT4-fs error (device loop0): ext4_acquire_dquot:6198: comm syz.0.858: Failed to acquire dquot type 1 [ 66.237529][ T2404] EXT4-fs (loop0): 1 truncate cleaned up [ 66.240258][ T2421] tipc: Started in network mode [ 66.243594][ T2404] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,noblock_validity,commit=0x0000000000000000,abort,,errors=continue. Quota mode: writeback. [ 66.292524][ T2421] tipc: Node identity ac14140f, cluster identity 4711 [ 66.309033][ T2421] tipc: New replicast peer: 255.255.255.83 [ 66.321625][ T2421] tipc: Enabled bearer , priority 10 [ 66.464392][ T2419] loop6: detected capacity change from 0 to 40427 [ 66.486884][ T2419] F2FS-fs (loop6): invalid crc value [ 66.503376][ T2419] F2FS-fs (loop6): Found nat_bits in checkpoint [ 66.557277][ T321] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 66.592892][ T2443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 66.599612][ T2419] F2FS-fs (loop6): Start checkpoint disabled! [ 66.613098][ T2419] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 66.926619][ T321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.959153][ T321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.980134][ T321] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 67.011944][ T321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.032882][ T321] usb 6-1: config 0 descriptor?? [ 67.033301][ T45] attempt to access beyond end of device [ 67.033301][ T45] loop6: rw=2049, want=40968, limit=40427 [ 67.090014][ T45] attempt to access beyond end of device [ 67.090014][ T45] loop6: rw=2049, want=40992, limit=40427 [ 67.228459][ T2480] netem: change failed [ 67.436522][ T648] tipc: Node number set to 2886997007 [ 67.450316][ T2494] loop6: detected capacity change from 0 to 512 [ 67.481771][ T2478] loop2: detected capacity change from 0 to 40427 [ 67.512248][ T2500] Illegal XDP return value 4294967274, expect packet loss! [ 67.527704][ T321] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 67.542270][ T2478] F2FS-fs (loop2): Found nat_bits in checkpoint [ 67.542466][ T321] hid-thrustmaster 0003:044F:B65D.0007: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 67.565191][ T2507] xt_hashlimit: max too large, truncated to 1048576 [ 67.573965][ T2494] EXT4-fs (loop6): Unrecognized mount option "uid<00000000000000000000" or missing value [ 67.604952][ T321] hid-thrustmaster 0003:044F:B65D.0007: Wrong number of endpoints? [ 67.699331][ T2478] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 67.712483][ T648] hid-generic 0000:0000:0000.0008: item fetching failed at offset 0/1 [ 67.736016][ T648] hid-generic: probe of 0000:0000:0000.0008 failed with error -22 [ 67.773976][ T284] attempt to access beyond end of device [ 67.773976][ T284] loop2: rw=2049, want=45104, limit=40427 [ 67.789848][ T2519] loop6: detected capacity change from 0 to 8192 [ 67.801029][ T648] usb 6-1: USB disconnect, device number 3 [ 67.809311][ T2526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.907'. [ 67.818280][ C1] hid-thrustmaster 0003:044F:B65D.0007: URB to get model id failed with error -2 [ 67.930750][ T2535] loop4: detected capacity change from 0 to 1024 [ 67.984337][ T2531] loop0: detected capacity change from 0 to 40427 [ 68.028491][ T2531] F2FS-fs (loop0): invalid crc value [ 68.035070][ T2531] F2FS-fs (loop0): Found nat_bits in checkpoint [ 68.078272][ T2535] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.120827][ T2531] F2FS-fs (loop0): Start checkpoint disabled! [ 68.121026][ T2542] loop2: detected capacity change from 0 to 128 [ 68.128193][ T2531] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 68.141037][ T6] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.170532][ T2545] xt_hashlimit: size too large, truncated to 1048576 [ 68.217881][ T2549] xt_bpf: check failed: parse error [ 68.261473][ T2552] loop4: detected capacity change from 0 to 512 [ 68.320602][ T2552] EXT4-fs (loop4): Ignoring removed nobh option [ 68.350241][ T2552] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.917: iget: bad i_size value: 38620345925642 [ 68.366476][ T30] kauditd_printk_skb: 179 callbacks suppressed [ 68.366494][ T30] audit: type=1326 audit(68.320:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2557 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150e0699a9 code=0x7ffc0000 [ 68.419648][ T2552] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.917: couldn't read orphan inode 15 (err -117) [ 68.447948][ T30] audit: type=1326 audit(68.320:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2557 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150e0699a9 code=0x7ffc0000 [ 68.477126][ T2552] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 68.487514][ T30] audit: type=1326 audit(68.380:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2557 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f150e0699a9 code=0x7ffc0000 [ 68.515400][ T30] audit: type=1326 audit(68.380:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2557 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150e0699a9 code=0x7ffc0000 [ 68.538052][ T2558] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 68.546573][ T6] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 68.555617][ T30] audit: type=1326 audit(68.380:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2557 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f150e0699a9 code=0x7ffc0000 [ 68.587090][ T30] audit: type=1326 audit(68.380:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2557 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150e0699a9 code=0x7ffc0000 [ 68.608015][ T6] usb 7-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 68.612882][ T30] audit: type=1326 audit(68.380:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2557 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f150e0699a9 code=0x7ffc0000 [ 68.652911][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.661808][ T30] audit: type=1326 audit(68.380:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2557 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150e0699a9 code=0x7ffc0000 [ 68.722637][ T30] audit: type=1326 audit(68.380:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2557 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f150e0699a9 code=0x7ffc0000 [ 68.727478][ T6] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 68.748151][ T30] audit: type=1326 audit(68.380:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2557 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150e0699a9 code=0x7ffc0000 [ 68.785185][ T2577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.927'. [ 68.787542][ T2581] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 68.808668][ T2581] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 68.826976][ T8] attempt to access beyond end of device [ 68.826976][ T8] loop0: rw=2049, want=40968, limit=40427 [ 68.840083][ T2577] device veth1_macvtap left promiscuous mode [ 68.847533][ T8] attempt to access beyond end of device [ 68.847533][ T8] loop0: rw=2049, want=41000, limit=40427 [ 68.950304][ T6] usb 7-1: USB disconnect, device number 3 [ 68.970158][ T2587] loop5: detected capacity change from 0 to 512 [ 69.014126][ T2580] loop2: detected capacity change from 0 to 40427 [ 69.026351][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.034526][ T2587] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #3: comm syz.5.932: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 69.052939][ T2587] EXT4-fs error (device loop5): ext4_quota_enable:6409: comm syz.5.932: Bad quota inode: 3, type: 0 [ 69.064748][ T2587] EXT4-fs warning (device loop5): ext4_enable_quotas:6450: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 69.079828][ T2580] F2FS-fs (loop2): fault_injection options not supported [ 69.080630][ T2587] EXT4-fs (loop5): mount failed [ 69.092516][ T2580] F2FS-fs (loop2): fault_type options not supported [ 69.101270][ T2580] F2FS-fs (loop2): invalid crc value [ 69.109089][ T2580] F2FS-fs (loop2): Found nat_bits in checkpoint [ 69.139408][ T2580] F2FS-fs (loop2): Start checkpoint disabled! [ 69.146329][ T2580] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 69.179314][ T2580] attempt to access beyond end of device [ 69.179314][ T2580] loop2: rw=2049, want=45104, limit=40427 [ 69.221481][ T8] attempt to access beyond end of device [ 69.221481][ T8] loop2: rw=2049, want=40984, limit=40427 [ 69.310408][ T2602] loop5: detected capacity change from 0 to 512 [ 69.380410][ T2606] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.387518][ T2606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.395346][ T2602] EXT4-fs (loop5): Ignoring removed nobh option [ 69.412510][ T2602] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.937: iget: bad i_size value: 38620345925642 [ 69.425790][ T2602] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.937: couldn't read orphan inode 15 (err -117) [ 69.438571][ T2602] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 69.504410][ T2613] loop6: detected capacity change from 0 to 2048 [ 69.543770][ T2613] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 69.561879][ T2613] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 69.573868][ T2613] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 69.585707][ T2613] EXT4-fs (loop6): group descriptors corrupted! [ 69.669430][ T2624] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.687430][ T2624] FAT-fs (loop11): unable to read boot sector [ 69.839403][ T2649] loop2: detected capacity change from 0 to 128 [ 69.863240][ T2649] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.942557][ T2654] tipc: Enabling not permitted [ 69.952344][ T2656] loop2: detected capacity change from 0 to 2048 [ 69.959752][ T2654] tipc: Enabling of bearer rejected, failed to enable media [ 69.970175][ T2658] loop5: detected capacity change from 0 to 512 [ 69.982123][ T2656] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 69.992240][ T2656] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 70.003296][ T2656] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 70.013524][ T2656] EXT4-fs (loop2): group descriptors corrupted! [ 70.022215][ T2658] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 70.032556][ T2658] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 70.042554][ T2658] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 70.053117][ T2658] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 70.065908][ T2664] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2664 comm=syz.0.964 [ 70.067954][ T2658] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c041e01c, mo2=0100] [ 70.078713][ T2664] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2664 comm=syz.0.964 [ 70.087522][ T2658] EXT4-fs (loop5): orphan cleanup on readonly fs [ 70.107563][ T2658] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.962: bg 0: block 34: padding at end of block bitmap is not set [ 70.124130][ T2658] EXT4-fs error (device loop5): ext4_acquire_dquot:6198: comm syz.5.962: Failed to acquire dquot type 1 [ 70.156765][ T2658] EXT4-fs (loop5): 1 truncate cleaned up [ 70.162789][ T2658] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,noblock_validity,commit=0x0000000000000000,abort,,errors=continue. Quota mode: writeback. [ 70.291539][ T2678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'. [ 70.495798][ T2692] loop0: detected capacity change from 0 to 128 [ 70.521379][ T2692] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.586656][ T371] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 70.886508][ T648] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.902807][ T2731] input: syz1 as /devices/virtual/input/input4 [ 70.956577][ T371] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 70.977575][ T2735] netem: change failed [ 70.980520][ T2725] loop6: detected capacity change from 0 to 40427 [ 70.992927][ T2725] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 71.001314][ T2725] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 71.018359][ T2725] F2FS-fs (loop6): invalid crc value [ 71.025236][ T2725] F2FS-fs (loop6): Found nat_bits in checkpoint [ 71.046541][ T371] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.055676][ T371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 71.059671][ T2725] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 71.064050][ T371] usb 3-1: SerialNumber: syz [ 71.071279][ T2725] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 71.080847][ T60] Bluetooth: hci0: command 0x1003 tx timeout [ 71.096530][ T932] Bluetooth: hci0: sending frame failed (-49) [ 71.256738][ T648] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.267360][ T648] usb 6-1: config 0 has no interfaces? [ 71.272984][ T648] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 71.282152][ T648] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.290752][ T648] usb 6-1: config 0 descriptor?? [ 71.436999][ T2758] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1005'. [ 71.532073][ T6] usb 6-1: USB disconnect, device number 4 [ 71.768155][ T371] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 71.986537][ T20] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 72.124016][ T2805] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.182642][ T39] usb 3-1: USB disconnect, device number 5 [ 72.188921][ T39] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 72.356735][ T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.367699][ T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.377464][ T20] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.386553][ T20] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.395484][ T20] usb 7-1: config 0 descriptor?? [ 72.798074][ T2811] loop2: detected capacity change from 0 to 40427 [ 72.898501][ T2811] F2FS-fs (loop2): invalid crc value [ 72.905344][ T2811] F2FS-fs (loop2): Found nat_bits in checkpoint [ 72.937212][ T2811] F2FS-fs (loop2): Start checkpoint disabled! [ 72.944050][ T2811] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 73.061297][ T332] attempt to access beyond end of device [ 73.061297][ T332] loop2: rw=2049, want=40968, limit=40427 [ 73.072669][ T332] attempt to access beyond end of device [ 73.072669][ T332] loop2: rw=2049, want=40984, limit=40427 [ 73.136533][ T20] usb 7-1: string descriptor 0 read error: -71 [ 73.146536][ T371] Bluetooth: hci0: command 0x1001 tx timeout [ 73.152582][ T2802] Bluetooth: hci0: sending frame failed (-49) [ 73.158774][ T20] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 73.167629][ T20] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 73.175715][ T20] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 73.183901][ T20] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 73.191450][ T20] uclogic: probe of 0003:256C:006D.0009 failed with error -71 [ 73.200104][ T20] usb 7-1: USB disconnect, device number 4 [ 73.237471][ T2819] syz.2.1030[2819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.237580][ T2819] syz.2.1030[2819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.252202][ T2819] loop2: detected capacity change from 0 to 512 [ 73.306369][ T2819] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1030: casefold flag without casefold feature [ 73.319270][ T2819] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1030: couldn't read orphan inode 15 (err -117) [ 73.331336][ T2819] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,abort,block_validity,,errors=continue. Quota mode: writeback. [ 73.388694][ T2825] loop2: detected capacity change from 0 to 1024 [ 73.439106][ T2825] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.451742][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 73.451759][ T30] audit: type=1400 audit(73.430:1007): avc: denied { ioctl } for pid=2824 comm="syz.2.1032" path="/234/file1/file1" dev="loop2" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.459168][ T2825] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: comm syz.2.1032: lblock 0 mapped to illegal pblock 0 (length 4) [ 73.498671][ T2825] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: block 3: comm syz.2.1032: lblock 3 mapped to illegal pblock 3 (length 1) [ 73.512994][ T2825] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 73.525376][ T2825] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.525376][ T2825] [ 73.540758][ T45] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.554459][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 73.566784][ T45] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.566784][ T45] [ 73.577001][ T8] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 73.591886][ T8] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 73.604221][ T8] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.604221][ T8] [ 73.613877][ T8] EXT4-fs (loop2): Total free blocks count 0 [ 73.619900][ T8] EXT4-fs (loop2): Free/Dirty block details [ 73.625809][ T8] EXT4-fs (loop2): free_blocks=4293918720 [ 73.632167][ T8] EXT4-fs (loop2): dirty_blocks=64 [ 73.693650][ T30] audit: type=1326 audit(73.660:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2832 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 73.735342][ T30] audit: type=1326 audit(73.690:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2832 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 73.761917][ T30] audit: type=1326 audit(73.690:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2832 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 73.785212][ T30] audit: type=1326 audit(73.690:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2832 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 73.808531][ T30] audit: type=1326 audit(73.690:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2832 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 73.831449][ T30] audit: type=1326 audit(73.690:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2832 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 73.854271][ T30] audit: type=1326 audit(73.690:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2832 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 73.877643][ T30] audit: type=1400 audit(73.740:1015): avc: denied { sys_module } for pid=2834 comm="syz.2.1035" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.898268][ T30] audit: type=1400 audit(73.740:1016): avc: denied { module_load } for pid=2834 comm="syz.2.1035" path="/sys/power/wakeup_count" dev="sysfs" ino=1147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 73.907664][ T2838] netlink: 'syz.6.1036': attribute type 4 has an invalid length. [ 73.929694][ T2838] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1036'. [ 73.964520][ T2842] syz.2.1049[2842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.964602][ T2842] syz.2.1049[2842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.978571][ T2842] syz.2.1049[2842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.990397][ T2842] syz.2.1049[2842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.129465][ T2860] loop2: detected capacity change from 0 to 8192 [ 74.224934][ T2854] loop6: detected capacity change from 0 to 40427 [ 74.246853][ T2854] F2FS-fs (loop6): fault_injection options not supported [ 74.254078][ T2854] F2FS-fs (loop6): fault_type options not supported [ 74.262025][ T2854] F2FS-fs (loop6): invalid crc value [ 74.268740][ T2854] F2FS-fs (loop6): Found nat_bits in checkpoint [ 74.307623][ T2854] F2FS-fs (loop6): Start checkpoint disabled! [ 74.308017][ T2860] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 74.314885][ T2854] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 74.321744][ T2860] FAT-fs (loop2): Filesystem has been set read-only [ 74.363180][ T2854] attempt to access beyond end of device [ 74.363180][ T2854] loop6: rw=2049, want=45104, limit=40427 [ 74.395970][ T8] attempt to access beyond end of device [ 74.395970][ T8] loop6: rw=2049, want=40984, limit=40427 [ 74.577982][ T2880] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 74.585884][ T2880] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1055'. [ 74.899843][ T2905] loop6: detected capacity change from 0 to 40427 [ 74.913402][ T2905] F2FS-fs (loop6): invalid crc value [ 74.922787][ T2905] F2FS-fs (loop6): Found nat_bits in checkpoint [ 74.954339][ T2905] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 74.990063][ T1967] attempt to access beyond end of device [ 74.990063][ T1967] loop6: rw=2049, want=45104, limit=40427 [ 75.226574][ T6] Bluetooth: hci0: command 0x1009 tx timeout [ 75.769287][ T2923] 9pnet: p9_errstr2errno: server reported unknown error  [ 75.969391][ T2948] loop0: detected capacity change from 0 to 2048 [ 75.992243][ T2948] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.370337][ T3019] loop6: detected capacity change from 0 to 1024 [ 77.447756][ T3019] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.461891][ T3019] EXT4-fs error (device loop6): ext4_map_blocks:740: inode #15: comm syz.6.1116: lblock 0 mapped to illegal pblock 0 (length 4) [ 77.477068][ T3019] EXT4-fs error (device loop6): ext4_map_blocks:740: inode #15: block 3: comm syz.6.1116: lblock 3 mapped to illegal pblock 3 (length 1) [ 77.491586][ T3019] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 77.503899][ T3019] EXT4-fs (loop6): This should not happen!! Data will be lost [ 77.503899][ T3019] [ 77.521089][ T332] EXT4-fs error (device loop6): ext4_map_blocks:740: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 77.534982][ T332] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 77.547872][ T332] EXT4-fs (loop6): This should not happen!! Data will be lost [ 77.547872][ T332] [ 77.558111][ T8] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 77.573640][ T8] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 77.586285][ T8] EXT4-fs (loop6): This should not happen!! Data will be lost [ 77.586285][ T8] [ 77.599613][ T8] EXT4-fs (loop6): Total free blocks count 0 [ 77.605651][ T8] EXT4-fs (loop6): Free/Dirty block details [ 77.611765][ T8] EXT4-fs (loop6): free_blocks=4293918720 [ 77.617660][ T8] EXT4-fs (loop6): dirty_blocks=64 [ 78.373034][ T3055] loop6: detected capacity change from 0 to 40427 [ 78.417762][ T3055] F2FS-fs (loop6): fault_injection options not supported [ 78.425018][ T3055] F2FS-fs (loop6): fault_type options not supported [ 78.433016][ T3055] F2FS-fs (loop6): invalid crc value [ 78.451640][ T3055] F2FS-fs (loop6): Found nat_bits in checkpoint [ 78.463212][ T3065] loop2: detected capacity change from 0 to 1024 [ 78.481135][ T3065] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.498061][ T3065] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 78.505331][ T3055] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 78.548156][ T3065] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 78.568013][ T1967] attempt to access beyond end of device [ 78.568013][ T1967] loop6: rw=2049, want=45104, limit=40427 [ 78.616801][ T3070] SELinux: failed to load policy [ 78.721560][ T3076] loop6: detected capacity change from 0 to 1024 [ 78.777815][ T3076] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,bsddf,sysvgroups,discard,noblock_validity,noquota,nogrpid,noload,sb=0x0000000800000000,,errors=continue. Quota mode: none. [ 78.803840][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 78.803856][ T30] audit: type=1400 audit(78.770:1074): avc: denied { append } for pid=3075 comm="syz.6.1137" path="/103/file1/blkio.bfq.avg_queue_size" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.834419][ T30] audit: type=1400 audit(78.800:1075): avc: denied { map } for pid=3075 comm="syz.6.1137" path="/103/file1/blkio.bfq.avg_queue_size" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.984862][ T3088] loop6: detected capacity change from 0 to 8192 [ 79.126487][ T321] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 79.177693][ T3088] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 79.185458][ T3088] FAT-fs (loop6): Filesystem has been set read-only [ 79.199180][ T30] audit: type=1400 audit(79.170:1076): avc: denied { map } for pid=3094 comm="syz.0.1146" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.496571][ T321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.507378][ T321] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 79.516267][ T321] usb 3-1: config 1 has no interface number 0 [ 79.522731][ T321] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.533965][ T321] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 79.570628][ T3110] loop4: detected capacity change from 0 to 256 [ 79.612057][ T3110] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.623056][ T3110] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 79.633259][ T3110] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001031b, chksum : 0xd41f077c, utbl_chksum : 0xe619d30d) [ 79.650318][ T30] audit: type=1400 audit(79.620:1077): avc: denied { write } for pid=3109 comm="syz.4.1154" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.672570][ T30] audit: type=1400 audit(79.620:1078): avc: denied { add_name } for pid=3109 comm="syz.4.1154" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.692743][ T30] audit: type=1400 audit(79.620:1079): avc: denied { associate } for pid=3109 comm="syz.4.1154" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.706573][ T321] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.714018][ T30] audit: type=1400 audit(79.620:1080): avc: denied { remove_name } for pid=3109 comm="syz.4.1154" name="file0" dev="loop4" ino=1048634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.722809][ T321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.751702][ T30] audit: type=1400 audit(79.620:1081): avc: denied { rename } for pid=3109 comm="syz.4.1154" name="file0" dev="loop4" ino=1048634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.779601][ T321] usb 3-1: Product: syz [ 79.781455][ T30] audit: type=1400 audit(79.620:1082): avc: denied { reparent } for pid=3109 comm="syz.4.1154" name="file0" dev="loop4" ino=1048634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.788148][ T321] usb 3-1: Manufacturer: syz [ 79.811669][ T321] usb 3-1: SerialNumber: syz [ 79.841922][ T3116] loop4: detected capacity change from 0 to 128 [ 79.922349][ T45] attempt to access beyond end of device [ 79.922349][ T45] loop4: rw=1, want=1041, limit=128 [ 80.169158][ T3124] loop6: detected capacity change from 0 to 2048 [ 80.227929][ T3124] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.242496][ T3124] fs-verity: sha512 using implementation "sha512-avx2" [ 80.276559][ T371] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 80.455380][ T30] audit: type=1400 audit(80.420:1083): avc: denied { lock } for pid=3137 comm="syz.6.1166" path="socket:[27802]" dev="sockfs" ino=27802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 80.538543][ T371] usb 5-1: Using ep0 maxpacket: 32 [ 80.656561][ T371] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 80.664718][ T371] usb 5-1: config 0 has no interface number 0 [ 80.697178][ T3157] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.708308][ T3157] FAT-fs (loop13): unable to read boot sector [ 80.736838][ T321] cdc_ncm 3-1:1.1: bind() failure [ 80.771317][ T3162] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1177'. [ 80.794658][ T3164] netlink: 'syz.6.1178': attribute type 12 has an invalid length. [ 80.802557][ T3164] netlink: 'syz.6.1178': attribute type 29 has an invalid length. [ 80.810450][ T3164] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1178'. [ 80.819603][ T3164] netlink: 59 bytes leftover after parsing attributes in process `syz.6.1178'. [ 80.839887][ T371] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 80.849638][ T371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.857960][ T371] usb 5-1: Product: syz [ 80.862236][ T371] usb 5-1: Manufacturer: syz [ 80.867090][ T371] usb 5-1: SerialNumber: syz [ 80.881677][ T371] usb 5-1: config 0 descriptor?? [ 80.927595][ T371] smsc95xx v2.0.0 [ 80.962647][ T6] usb 3-1: USB disconnect, device number 6 [ 80.986721][ T2821] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 81.366567][ T371] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 81.377440][ T371] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 81.979193][ T3227] loop2: detected capacity change from 0 to 1024 [ 82.018072][ T3227] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.034372][ T3227] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: block 3: comm syz.2.1206: lblock 3 mapped to illegal pblock 3 (length 3) [ 82.048848][ T3227] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 82.062505][ T3227] EXT4-fs (loop2): This should not happen!! Data will be lost [ 82.062505][ T3227] [ 82.066633][ T371] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 82.083010][ T371] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 82.091268][ T371] usb 5-1: USB disconnect, device number 6 [ 82.112535][ T45] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 82.127096][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 82.139516][ T45] EXT4-fs (loop2): This should not happen!! Data will be lost [ 82.139516][ T45] [ 82.247890][ T3238] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.255006][ T3238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.262390][ T3238] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.269470][ T3238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.297402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 82.309197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.317986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 82.326352][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.337242][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.345563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.355092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.363986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.379236][ T3249] loop2: detected capacity change from 0 to 512 [ 82.386131][ T321] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 82.408799][ T3249] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #3: comm syz.2.1215: corrupted inode contents [ 82.420839][ T3249] EXT4-fs error (device loop2): ext4_dirty_inode:6071: inode #3: comm syz.2.1215: mark_inode_dirty error [ 82.432813][ T3249] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #3: comm syz.2.1215: corrupted inode contents [ 82.445312][ T3249] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.1215: mark_inode_dirty error [ 82.457221][ T3249] EXT4-fs error (device loop2): ext4_acquire_dquot:6198: comm syz.2.1215: Failed to acquire dquot type 0 [ 82.469919][ T3249] EXT4-fs (loop2): 1 orphan inode deleted [ 82.476182][ T3249] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.507015][ T3255] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 82.550998][ T3261] loop6: detected capacity change from 0 to 16 [ 82.567226][ T3261] erofs: (device loop6): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 17700) [ 82.694115][ T3268] loop4: detected capacity change from 0 to 8192 [ 82.713376][ T3276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'. [ 82.754816][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.884601][ T3286] SELinux: security_context_str_to_sid(Eá…) failed for (dev ?, type ?) errno=-22 [ 82.892759][ T3268] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 82.901245][ T3286] SELinux: security_context_str_to_sid(Eá…) failed for (dev ramfs, type ramfs) errno=-22 [ 82.905896][ T3268] FAT-fs (loop4): Filesystem has been set read-only [ 82.946565][ T321] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 82.984753][ T3292] loop5: detected capacity change from 0 to 1024 [ 83.067247][ T3292] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.102669][ T3292] EXT4-fs error (device loop5): ext4_map_blocks:740: inode #15: block 3: comm syz.5.1233: lblock 3 mapped to illegal pblock 3 (length 3) [ 83.119718][ T3292] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 83.133135][ T3292] EXT4-fs (loop5): This should not happen!! Data will be lost [ 83.133135][ T3292] [ 83.153387][ T672] EXT4-fs error (device loop5): ext4_map_blocks:740: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 83.177777][ T672] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 83.190273][ T672] EXT4-fs (loop5): This should not happen!! Data will be lost [ 83.190273][ T672] [ 83.270375][ T3313] serio: Serial port ptm0 [ 83.316562][ T321] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.354058][ T321] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.364521][ T321] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 83.397476][ T321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.421239][ T321] usb 7-1: config 0 descriptor?? [ 83.509812][ T3338] netlink: 'syz.4.1251': attribute type 4 has an invalid length. [ 83.538180][ T3338] netlink: 'syz.4.1251': attribute type 4 has an invalid length. [ 83.589012][ T3340] loop4: detected capacity change from 0 to 512 [ 83.618486][ T3340] EXT4-fs (loop4): Ignoring removed oldalloc option [ 83.656943][ T3340] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 83.717244][ T3340] EXT4-fs (loop4): shut down requested (0) [ 83.806590][ T30] kauditd_printk_skb: 125 callbacks suppressed [ 83.806606][ T30] audit: type=1400 audit(83.770:1207): avc: denied { open } for pid=3348 comm="syz.5.1255" path="net:[4026532448]" dev="nsfs" ino=4026532448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 83.918354][ T321] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 83.924282][ T30] audit: type=1400 audit(83.890:1208): avc: denied { read write } for pid=3352 comm="syz.5.1258" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 83.932374][ T321] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 83.965467][ T30] audit: type=1400 audit(83.930:1209): avc: denied { open } for pid=3352 comm="syz.5.1258" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 83.988715][ T30] audit: type=1400 audit(83.930:1210): avc: denied { mount } for pid=3352 comm="syz.5.1258" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 84.026482][ T321] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 84.055359][ T3358] loop4: detected capacity change from 0 to 1024 [ 84.077088][ T30] audit: type=1400 audit(84.050:1211): avc: denied { unmount } for pid=1832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 84.117628][ T3358] EXT4-fs (loop4): Ignoring removed orlov option [ 84.128838][ T30] audit: type=1400 audit(84.080:1212): avc: denied { module_request } for pid=3360 comm="syz.2.1261" kmod="netdev-macsec0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 84.156660][ T3358] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 84.182259][ T3367] loop2: detected capacity change from 0 to 16 [ 84.193483][ T371] usb 7-1: USB disconnect, device number 5 [ 84.200006][ T3367] erofs: (device loop2): mounted with root inode @ nid 36. [ 84.201887][ T30] audit: type=1400 audit(84.150:1213): avc: denied { create } for pid=3364 comm="syz.0.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.233346][ T30] audit: type=1400 audit(84.150:1214): avc: denied { setopt } for pid=3364 comm="syz.0.1260" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.251508][ T3358] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,mblk_io_submit,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 84.263042][ T371] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 84.293498][ T30] audit: type=1400 audit(84.160:1215): avc: denied { read write } for pid=3271 comm="syz.6.1224" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.319174][ T30] audit: type=1400 audit(84.160:1216): avc: denied { open } for pid=3271 comm="syz.6.1224" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.361966][ T3372] loop5: detected capacity change from 0 to 2048 [ 84.567399][ T3397] binder: 3396:3397 ioctl c018620c 200000000180 returned -22 [ 84.639558][ T3393] loop5: detected capacity change from 0 to 40427 [ 84.656818][ T3393] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 84.663552][ T3393] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 84.682067][ T3393] F2FS-fs (loop5): Found nat_bits in checkpoint [ 84.720156][ T3393] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 84.727288][ T3393] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 84.756503][ T60] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 84.787806][ T3393] attempt to access beyond end of device [ 84.787806][ T3393] loop5: rw=2049, want=53256, limit=40427 [ 84.820422][ T3393] attempt to access beyond end of device [ 84.820422][ T3393] loop5: rw=2049, want=53264, limit=40427 [ 84.840441][ T1832] attempt to access beyond end of device [ 84.840441][ T1832] loop5: rw=2049, want=45104, limit=40427 [ 84.950820][ T3418] loop6: detected capacity change from 0 to 128 [ 84.996484][ T60] usb 3-1: Using ep0 maxpacket: 8 [ 85.116581][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.127969][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.137835][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 85.150754][ T60] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 85.159843][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.168856][ T60] usb 3-1: config 0 descriptor?? [ 85.316493][ T6] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 85.466820][ T3428] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 85.624727][ T564] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 85.633249][ T564] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 85.637708][ T60] cypress 0003:04B4:0001.000D: item fetching failed at offset 3/5 [ 85.651290][ T60] cypress 0003:04B4:0001.000D: parse failed [ 85.657420][ T60] cypress: probe of 0003:04B4:0001.000D failed with error -22 [ 85.686550][ T6] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 85.696827][ T6] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 85.754624][ T3436] hid-generic 0000:0000:0000.000C: pid 3436 passed too short report [ 85.849908][ T564] usb 3-1: USB disconnect, device number 7 [ 85.866852][ T6] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 85.882470][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.890618][ T6] usb 6-1: Product: syz [ 85.894803][ T6] usb 6-1: Manufacturer: syz [ 85.907680][ T6] usb 6-1: SerialNumber: syz [ 85.936602][ T6] usb 6-1: config 0 descriptor?? [ 85.956724][ T3424] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 85.963780][ T3424] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 85.986983][ T3451] loop6: detected capacity change from 0 to 128 [ 86.057246][ T3451] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.117523][ T3460] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 86.198095][ T3424] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 86.205209][ T3424] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 86.231032][ T3476] loop6: detected capacity change from 0 to 512 [ 86.235610][ T3472] user requested TSC rate below hardware speed [ 86.282723][ T3476] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 86.307617][ T3476] EXT4-fs error (device loop6): ext4_xattr_block_get:546: inode #12: comm syz.6.1309: corrupted xattr block 6 [ 86.328052][ T3476] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 86.342712][ T3476] EXT4-fs error (device loop6): ext4_xattr_block_get:546: inode #12: comm syz.6.1309: corrupted xattr block 6 [ 86.357344][ T3476] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 86.371507][ T3476] EXT4-fs error (device loop6): ext4_xattr_block_get:546: inode #12: comm syz.6.1309: corrupted xattr block 6 [ 86.393266][ T3476] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 86.404266][ T3476] EXT4-fs error (device loop6): ext4_xattr_block_get:546: inode #12: comm syz.6.1309: corrupted xattr block 6 [ 86.416304][ T3476] overlayfs: failed to get origin (-117) [ 86.422482][ T3476] EXT4-fs error (device loop6): ext4_xattr_block_get:546: inode #12: comm syz.6.1309: corrupted xattr block 6 [ 86.434473][ T3476] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 86.443805][ T3476] EXT4-fs error (device loop6): ext4_xattr_block_find:1866: inode #12: comm syz.6.1309: corrupted xattr block 6 [ 86.455948][ T3476] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 86.465452][ T3476] overlayfs: failed to verify upper root origin [ 86.586652][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 86.637348][ T3512] SELinux: Context system_u:object_r:netcontrol_device_t:s0 is not valid (left unmapped). [ 86.685954][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.846500][ T20] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 87.236562][ T20] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 87.261427][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.273670][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.283720][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 87.376706][ T20] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 87.385779][ T20] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 87.394193][ T20] usb 3-1: Manufacturer: syz [ 87.405276][ T20] usb 3-1: config 0 descriptor?? [ 87.436525][ T6] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 87.450597][ T6] dm9601 6-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 87.464171][ T6] usb 6-1: USB disconnect, device number 5 [ 87.472646][ T6] dm9601 6-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 87.532648][ T3573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1352'. [ 87.674550][ T3591] SELinux: failed to load policy [ 87.869068][ T20] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 87.876805][ T20] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 87.886742][ T20] appleir 0003:05AC:8243.000E: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 88.026562][ T564] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 88.059668][ T3641] loop5: detected capacity change from 0 to 512 [ 88.108556][ T3641] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 88.145992][ T3648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1384'. [ 88.397024][ T564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.407980][ T564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.422269][ T564] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.436337][ T564] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.445508][ T564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.454378][ T564] usb 5-1: config 0 descriptor?? [ 88.506535][ T60] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 88.727417][ T321] usb 3-1: USB disconnect, device number 8 [ 88.746498][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 88.751602][ T6] Bluetooth: hci0: command 0x1003 tx timeout [ 88.757705][ T47] Bluetooth: hci0: sending frame failed (-49) [ 88.886513][ T60] usb 6-1: config 0 has no interfaces? [ 88.917532][ T564] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 88.927410][ T564] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 89.056552][ T60] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 89.065703][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.074084][ T60] usb 6-1: Product: syz [ 89.078312][ T60] usb 6-1: Manufacturer: syz [ 89.082916][ T60] usb 6-1: SerialNumber: syz [ 89.088482][ T60] usb 6-1: config 0 descriptor?? [ 89.330334][ T60] usb 6-1: USB disconnect, device number 6 [ 89.450714][ T6] usb 5-1: USB disconnect, device number 7 [ 89.495215][ T30] kauditd_printk_skb: 158 callbacks suppressed [ 89.495232][ T30] audit: type=1400 audit(89.460:1375): avc: denied { ioctl } for pid=3713 comm="syz.2.1416" path="socket:[30013]" dev="sockfs" ino=30013 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.495452][ T3715] netlink: 'syz.2.1416': attribute type 12 has an invalid length. [ 89.533658][ T3715] netlink: 'syz.2.1416': attribute type 29 has an invalid length. [ 89.541881][ T3715] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1416'. [ 89.551672][ T3715] netlink: 'syz.2.1416': attribute type 1 has an invalid length. [ 89.589005][ T30] audit: type=1400 audit(89.560:1376): avc: denied { relabelfrom } for pid=3718 comm="syz.2.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.609418][ T30] audit: type=1400 audit(89.560:1377): avc: denied { relabelto } for pid=3718 comm="syz.2.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.723553][ T30] audit: type=1326 audit(89.690:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 89.747084][ T30] audit: type=1326 audit(89.690:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 89.770348][ T30] audit: type=1326 audit(89.690:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 89.793184][ T30] audit: type=1326 audit(89.690:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 89.816003][ T30] audit: type=1326 audit(89.690:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 89.839047][ T30] audit: type=1326 audit(89.690:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 89.867924][ T30] audit: type=1326 audit(89.720:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e9939a9 code=0x7ffc0000 [ 89.996044][ T3738] loop5: detected capacity change from 0 to 8192 [ 90.037839][ T3738] loop5: p1 p2 p4 < > [ 90.041980][ T3738] loop5: partition table partially beyond EOD, truncated [ 90.051700][ T3738] loop5: p1 start 16777216 is beyond EOD, truncated [ 90.066495][ T3738] loop5: p2 size 515840 extends beyond EOD, truncated [ 90.091764][ T3738] loop5: p4 start 16777216 is beyond EOD, truncated [ 90.171325][ T381] udevd[381]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 90.355728][ T3778] loop5: detected capacity change from 0 to 512 [ 90.362113][ T6] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 90.427834][ T3778] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 90.439658][ T3778] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:164: inode #17: comm syz.5.1442: inline data xattr refers to an external xattr inode [ 90.454989][ T3778] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1442: couldn't read orphan inode 17 (err -117) [ 90.467289][ T3778] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,dioread_lock,data_err=ignore,inode_readahead_blks=0x0000000000010000,resuid=0x0000000000000000,norecovery,,errors=continue. Quota mode: none. [ 90.736536][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.747533][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.757521][ T6] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 90.766635][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.775229][ T6] usb 3-1: config 0 descriptor?? [ 90.826483][ T60] Bluetooth: hci0: command 0x1001 tx timeout [ 90.832610][ T47] Bluetooth: hci0: sending frame failed (-49) [ 91.445505][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 91.907944][ T6] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0010/input/input5 [ 91.921014][ T6] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0010/input/input6 [ 91.933637][ T6] uclogic 0003:256C:006D.0010: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 92.109003][ T6] usb 3-1: USB disconnect, device number 9 [ 92.907184][ T6] Bluetooth: hci0: command 0x1009 tx timeout [ 93.466560][ T564] Bluetooth: hci1: command 0x1003 tx timeout [ 93.472732][ T2802] Bluetooth: hci1: sending frame failed (-49) [ 93.873941][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 93.900544][ T3880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1497'. [ 93.909629][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 93.918572][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 94.453083][ T3891] SELinux: failed to load policy [ 94.739395][ T3917] loop5: detected capacity change from 0 to 4096 [ 94.791962][ T3917] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 94.826507][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 94.870427][ T3925] loop5: detected capacity change from 0 to 512 [ 94.976748][ T3925] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #3: comm syz.5.1509: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 94.995027][ T3925] EXT4-fs error (device loop5): ext4_quota_enable:6409: comm syz.5.1509: Bad quota inode: 3, type: 0 [ 95.006498][ T3925] EXT4-fs warning (device loop5): ext4_enable_quotas:6450: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 95.022038][ T3925] EXT4-fs (loop5): mount failed [ 95.105920][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 95.105935][ T30] audit: type=1326 audit(95.070:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.5.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150e0699a9 code=0x7ffc0000 [ 95.150390][ T30] audit: type=1326 audit(95.100:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.5.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150e0699a9 code=0x7ffc0000 [ 95.165236][ T3934] loop5: detected capacity change from 0 to 128 [ 95.173466][ T30] audit: type=1326 audit(95.100:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.5.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f150e0699a9 code=0x7ffc0000 [ 95.203536][ T30] audit: type=1326 audit(95.100:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.5.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150e0699a9 code=0x7ffc0000 [ 95.227604][ T30] audit: type=1326 audit(95.100:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.5.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150e0699a9 code=0x7ffc0000 [ 95.272423][ T3934] attempt to access beyond end of device [ 95.272423][ T3934] loop5: rw=2051, want=129, limit=128 [ 95.284402][ T30] audit: type=1400 audit(95.250:1464): avc: denied { mount } for pid=3937 comm="syz.0.1515" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 95.341217][ T30] audit: type=1326 audit(95.310:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f31b69a9 code=0x7ffc0000 [ 95.373939][ T30] audit: type=1326 audit(95.310:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f31b69a9 code=0x7ffc0000 [ 95.413935][ T30] audit: type=1326 audit(95.310:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f31b69a9 code=0x7ffc0000 [ 95.440990][ T30] audit: type=1326 audit(95.310:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f31b69a9 code=0x7ffc0000 [ 95.547257][ T39] Bluetooth: hci1: command 0x1001 tx timeout [ 95.553696][ T2802] Bluetooth: hci1: sending frame failed (-49) [ 95.629669][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.647652][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.655229][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.676493][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.684210][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.691694][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.705552][ T3990] loop5: detected capacity change from 0 to 1024 [ 95.712107][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.719624][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.727082][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.734523][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.742126][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.749592][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.757293][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.764725][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.772387][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.780099][ T3990] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 95.780116][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.780141][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.792405][ T3990] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 95.812054][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.812871][ T3990] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.826523][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.840608][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.848513][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.856086][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.863828][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.863822][ T3990] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,sysvgroups,abort,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 95.871538][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.901843][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.909613][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.917325][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.924786][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.932680][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.940894][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.948597][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.956086][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.963567][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.971053][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.980227][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.987779][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.995299][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 96.002841][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 96.010398][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 96.020756][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 96.028311][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 96.035774][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 96.043282][ T60] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 96.069214][ T60] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 96.168787][ T4003] fido_id[4003]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.215563][ T4007] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.224315][ T4007] IPv6: Can't replace route, no match found [ 96.246459][ T39] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 96.556668][ T564] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 96.636573][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.647516][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.657284][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.670185][ T39] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.679395][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.688105][ T39] usb 6-1: config 0 descriptor?? [ 96.916717][ T564] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 96.927053][ T564] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 96.936140][ T564] usb 3-1: config 220 interface 0 has no altsetting 0 [ 97.096570][ T564] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 97.105720][ T564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.113759][ T564] usb 3-1: Product: syz [ 97.117975][ T564] usb 3-1: Manufacturer: syz [ 97.122584][ T564] usb 3-1: SerialNumber: syz [ 97.157349][ T39] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.164794][ T39] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.172395][ T39] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.179861][ T39] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.187313][ T39] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.194696][ T39] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.202114][ T39] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.209544][ T39] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.216982][ T39] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.224389][ T39] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.231828][ T39] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.239245][ T39] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.246670][ T39] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.254075][ T39] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.261515][ T39] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.269071][ T39] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 97.278366][ T39] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 97.427238][ T60] usb 6-1: USB disconnect, device number 7 [ 97.487425][ T564] usb 3-1: USB disconnect, device number 10 [ 97.626556][ T337] Bluetooth: hci1: command 0x1009 tx timeout [ 97.846776][ T4027] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1556'. [ 97.987260][ T4036] loop6: detected capacity change from 0 to 8192 [ 98.413529][ T4065] incfs: Options parsing error. -22 [ 98.419095][ T4065] incfs: mount failed -22 [ 98.457471][ T4069] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1575'. [ 98.566125][ T4081] device wireguard0 entered promiscuous mode [ 98.692020][ T4087] loop5: detected capacity change from 0 to 1024 [ 98.726605][ T4087] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.748560][ T4087] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 98.786471][ T337] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 98.807527][ T4087] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3876: comm syz.5.1582: Allocating blocks 497-513 which overlap fs metadata [ 98.823218][ T4087] EXT4-fs (loop5): pa ffff888129878dc8: logic 128, phys. 385, len 8 [ 98.831329][ T4087] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 98.872837][ T10] ================================================================== [ 98.880962][ T10] BUG: KASAN: slab-out-of-bounds in ext4_find_extent+0xbeb/0xe20 [ 98.888697][ T10] Read of size 4 at addr ffff888111e99018 by task kworker/u4:1/10 [ 98.896500][ T10] [ 98.898831][ T10] CPU: 0 PID: 10 Comm: kworker/u4:1 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 98.908717][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.918772][ T10] Workqueue: writeback wb_workfn (flush-7:5) [ 98.924781][ T10] Call Trace: [ 98.928062][ T10] [ 98.930993][ T10] __dump_stack+0x21/0x30 [ 98.935330][ T10] dump_stack_lvl+0xee/0x150 [ 98.939917][ T10] ? show_regs_print_info+0x20/0x20 [ 98.945116][ T10] ? load_image+0x3a0/0x3a0 [ 98.949626][ T10] print_address_description+0x7f/0x2c0 [ 98.955171][ T10] ? ext4_find_extent+0xbeb/0xe20 [ 98.960202][ T10] kasan_report+0xf1/0x140 [ 98.964670][ T10] ? __read_extent_tree_block+0x1e8/0x790 [ 98.970396][ T10] ? ext4_find_extent+0xbeb/0xe20 [ 98.975435][ T10] __asan_report_load4_noabort+0x14/0x20 [ 98.981077][ T10] ext4_find_extent+0xbeb/0xe20 [ 98.985932][ T10] ext4_ext_map_blocks+0x1de/0x6280 [ 98.991130][ T10] ? __stack_depot_save+0x34/0x480 [ 98.996248][ T10] ? __mem_cgroup_uncharge_list+0x39/0xc0 [ 99.001972][ T10] ? __kasan_slab_alloc+0xcf/0xf0 [ 99.006996][ T10] ? __kasan_slab_alloc+0xbd/0xf0 [ 99.012018][ T10] ? slab_post_alloc_hook+0x4f/0x2b0 [ 99.017302][ T10] ? kmem_cache_alloc+0xf7/0x260 [ 99.022256][ T10] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 99.027624][ T10] ? ext4_writepages+0xec8/0x2f90 [ 99.032649][ T10] ? do_writepages+0x48a/0x6c0 [ 99.037418][ T10] ? wb_workfn+0x38f/0xe20 [ 99.041835][ T10] ? process_one_work+0x6be/0xba0 [ 99.046860][ T10] ? worker_thread+0xa59/0x1200 [ 99.051711][ T10] ? ext4_ext_release+0x10/0x10 [ 99.056563][ T10] ? ext4_es_lookup_extent+0x32d/0x8c0 [ 99.062028][ T10] ext4_map_blocks+0x97b/0x1b20 [ 99.066881][ T10] ? slab_post_alloc_hook+0x6d/0x2b0 [ 99.072168][ T10] ? should_failslab+0x9/0x20 [ 99.076845][ T10] ? ext4_issue_zeroout+0x250/0x250 [ 99.082044][ T10] ? ext4_inode_journal_mode+0x19a/0x480 [ 99.087682][ T10] ext4_writepages+0x11e7/0x2f90 [ 99.092633][ T10] ? ext4_readpage+0x220/0x220 [ 99.097498][ T10] ? enqueue_task_fair+0xaa7/0x2120 [ 99.102712][ T10] ? sched_group_set_idle+0x5f0/0x5f0 [ 99.108084][ T10] ? psi_task_change+0x212/0x370 [ 99.113023][ T10] ? ext4_readpage+0x220/0x220 [ 99.117788][ T10] do_writepages+0x48a/0x6c0 [ 99.122384][ T10] ? yield_to_task_fair+0x1a0/0x1a0 [ 99.127586][ T10] ? sched_clock_cpu+0x18/0x3c0 [ 99.132446][ T10] ? __writepage+0x130/0x130 [ 99.137042][ T10] ? __kasan_check_write+0x14/0x20 [ 99.142159][ T10] ? _raw_spin_lock+0x8e/0xe0 [ 99.146835][ T10] __writeback_single_inode+0xd5/0x9c0 [ 99.152300][ T10] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 99.158286][ T10] writeback_sb_inodes+0x9c0/0x1590 [ 99.163489][ T10] ? __switch_to_asm+0x3a/0x60 [ 99.168254][ T10] ? queue_io+0x4c0/0x4c0 [ 99.172592][ T10] ? __kasan_check_read+0x11/0x20 [ 99.177614][ T10] ? queue_io+0x382/0x4c0 [ 99.181947][ T10] wb_writeback+0x3f1/0x980 [ 99.186463][ T10] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 99.192474][ T10] ? set_worker_desc+0x155/0x1c0 [ 99.197414][ T10] ? kvm_sched_clock_read+0x18/0x40 [ 99.202614][ T10] ? __kasan_check_write+0x14/0x20 [ 99.207739][ T10] wb_workfn+0x38f/0xe20 [ 99.211993][ T10] ? inode_wait_for_writeback+0x200/0x200 [ 99.217715][ T10] ? compat_start_thread+0x20/0x20 [ 99.222829][ T10] ? _raw_spin_unlock+0x4d/0x70 [ 99.227682][ T10] ? finish_task_switch+0x16b/0x780 [ 99.232890][ T10] ? __switch_to_asm+0x3a/0x60 [ 99.237672][ T10] ? __schedule+0xb76/0x14c0 [ 99.242272][ T10] process_one_work+0x6be/0xba0 [ 99.247136][ T10] worker_thread+0xa59/0x1200 [ 99.251832][ T10] kthread+0x411/0x500 [ 99.255907][ T10] ? worker_clr_flags+0x190/0x190 [ 99.260935][ T10] ? kthread_blkcg+0xd0/0xd0 [ 99.265526][ T10] ret_from_fork+0x1f/0x30 [ 99.269944][ T10] [ 99.272966][ T10] [ 99.275290][ T10] Allocated by task 381: [ 99.279529][ T10] __kasan_kmalloc+0xda/0x110 [ 99.284208][ T10] __kmalloc+0x13d/0x2c0 [ 99.288456][ T10] kvmalloc_node+0x206/0x300 [ 99.293041][ T10] seq_read_iter+0x1fc/0xd30 [ 99.297630][ T10] kernfs_fop_read_iter+0x147/0x470 [ 99.302830][ T10] vfs_read+0x68b/0xbe0 [ 99.307002][ T10] ksys_read+0x140/0x240 [ 99.311244][ T10] __x64_sys_read+0x7b/0x90 [ 99.315759][ T10] x64_sys_call+0x96d/0x9a0 [ 99.320264][ T10] do_syscall_64+0x4c/0xa0 [ 99.324679][ T10] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.330572][ T10] [ 99.332889][ T10] Freed by task 381: [ 99.336774][ T10] kasan_set_track+0x4a/0x70 [ 99.341366][ T10] kasan_set_free_info+0x23/0x40 [ 99.346302][ T10] ____kasan_slab_free+0x125/0x160 [ 99.351412][ T10] __kasan_slab_free+0x11/0x20 [ 99.356176][ T10] slab_free_freelist_hook+0xc2/0x190 [ 99.361553][ T10] kfree+0xc4/0x270 [ 99.365364][ T10] kvfree+0x35/0x40 [ 99.369167][ T10] seq_release+0x57/0x70 [ 99.373405][ T10] kernfs_fop_release+0x1af/0x250 [ 99.378430][ T10] __fput+0x20b/0x8b0 [ 99.382409][ T10] ____fput+0x15/0x20 [ 99.386386][ T10] task_work_run+0x127/0x190 [ 99.390974][ T10] exit_to_user_mode_loop+0xd0/0xe0 [ 99.396173][ T10] exit_to_user_mode_prepare+0x5a/0xa0 [ 99.401641][ T10] syscall_exit_to_user_mode+0x1a/0x30 [ 99.407103][ T10] do_syscall_64+0x58/0xa0 [ 99.411520][ T10] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.417429][ T10] [ 99.419763][ T10] The buggy address belongs to the object at ffff888111e98000 [ 99.419763][ T10] which belongs to the cache kmalloc-4k of size 4096 [ 99.433816][ T10] The buggy address is located 24 bytes to the right of [ 99.433816][ T10] 4096-byte region [ffff888111e98000, ffff888111e99000) [ 99.447621][ T10] The buggy address belongs to the page: [ 99.453249][ T10] page:ffffea000447a600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111e98 [ 99.463485][ T10] head:ffffea000447a600 order:3 compound_mapcount:0 compound_pincount:0 [ 99.471803][ T10] flags: 0x4000000000010200(slab|head|zone=1) [ 99.477884][ T10] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 99.486468][ T10] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 99.495052][ T10] page dumped because: kasan: bad access detected [ 99.501455][ T10] page_owner tracks the page as allocated [ 99.507169][ T10] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 101, ts 6302472690, free_ts 0 [ 99.525255][ T10] post_alloc_hook+0x192/0x1b0 [ 99.530030][ T10] prep_new_page+0x1c/0x110 [ 99.534534][ T10] get_page_from_freelist+0x2cc5/0x2d50 [ 99.540076][ T10] __alloc_pages+0x18f/0x440 [ 99.544664][ T10] new_slab+0xa1/0x4d0 [ 99.548754][ T10] ___slab_alloc+0x381/0x810 [ 99.553343][ T10] __slab_alloc+0x49/0x90 [ 99.557670][ T10] kmem_cache_alloc_trace+0x146/0x270 [ 99.563041][ T10] uevent_show+0x160/0x330 [ 99.567469][ T10] dev_attr_show+0x56/0xd0 [ 99.571971][ T10] sysfs_kf_seq_show+0x266/0x3d0 [ 99.576906][ T10] kernfs_seq_show+0x119/0x160 [ 99.581679][ T10] seq_read_iter+0x490/0xd30 [ 99.586279][ T10] kernfs_fop_read_iter+0x147/0x470 [ 99.591481][ T10] vfs_read+0x68b/0xbe0 [ 99.595665][ T10] ksys_read+0x140/0x240 [ 99.599911][ T10] page_owner free stack trace missing [ 99.605274][ T10] [ 99.607591][ T10] Memory state around the buggy address: [ 99.613213][ T10] ffff888111e98f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.621276][ T10] ffff888111e98f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.629332][ T10] >ffff888111e99000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 99.637383][ T10] ^ [ 99.642226][ T10] ffff888111e99080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 99.650302][ T10] ffff888111e99100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 99.658370][ T10] ================================================================== [ 99.666438][ T10] Disabling lock debugging due to kernel taint [ 99.679327][ T10] ------------[ cut here ]------------ [ 99.686031][ T10] kernel BUG at fs/ext4/inode.c:2433! [ 99.691995][ T10] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 99.698096][ T10] CPU: 1 PID: 10 Comm: kworker/u4:1 Tainted: G B 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 99.709406][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.719471][ T10] Workqueue: writeback wb_workfn (flush-7:5) [ 99.725472][ T10] RIP: 0010:ext4_writepages+0x2eed/0x2f90 [ 99.731193][ T10] Code: 00 74 08 48 89 df e8 22 01 ce ff 48 8b 3b 48 8b 74 24 28 48 8b 54 24 30 44 89 e9 45 89 f0 e8 6a 9b 07 00 eb 51 e8 23 86 8f ff <0f> 0b e8 1c 86 8f ff eb 2f e8 15 86 8f ff eb 5f e8 0e 86 8f ff 31 [ 99.750796][ T10] RSP: 0018:ffffc900000a7100 EFLAGS: 00010293 [ 99.756865][ T10] RAX: ffffffff81d929ad RBX: ffff88812e87aa40 RCX: ffff888100274f00 [ 99.764834][ T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.772962][ T10] RBP: ffffc900000a7470 R08: dffffc0000000000 R09: ffffed1025d0f541 [ 99.781008][ T10] R10: ffffed1025d0f541 R11: 1ffff11025d0f540 R12: dffffc0000000000 [ 99.788987][ T10] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.796953][ T10] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 99.805876][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.812461][ T10] CR2: 0000001b2e00dff8 CR3: 000000010d32e000 CR4: 00000000003506a0 [ 99.820447][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.828422][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.836393][ T10] Call Trace: [ 99.839671][ T10] [ 99.842606][ T10] ? ext4_readpage+0x220/0x220 [ 99.847369][ T10] ? enqueue_task_fair+0xaa7/0x2120 [ 99.852567][ T10] ? sched_group_set_idle+0x5f0/0x5f0 [ 99.857937][ T10] ? psi_task_change+0x212/0x370 [ 99.862894][ T10] ? ext4_readpage+0x220/0x220 [ 99.867657][ T10] do_writepages+0x48a/0x6c0 [ 99.872245][ T10] ? yield_to_task_fair+0x1a0/0x1a0 [ 99.877441][ T10] ? sched_clock_cpu+0x18/0x3c0 [ 99.882290][ T10] ? __writepage+0x130/0x130 [ 99.886877][ T10] ? __kasan_check_write+0x14/0x20 [ 99.891983][ T10] ? _raw_spin_lock+0x8e/0xe0 [ 99.896658][ T10] __writeback_single_inode+0xd5/0x9c0 [ 99.902140][ T10] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 99.908126][ T10] writeback_sb_inodes+0x9c0/0x1590 [ 99.913325][ T10] ? __switch_to_asm+0x3a/0x60 [ 99.918085][ T10] ? queue_io+0x4c0/0x4c0 [ 99.922416][ T10] ? __kasan_check_read+0x11/0x20 [ 99.927440][ T10] ? queue_io+0x382/0x4c0 [ 99.931769][ T10] wb_writeback+0x3f1/0x980 [ 99.936273][ T10] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 99.942251][ T10] ? set_worker_desc+0x155/0x1c0 [ 99.947203][ T10] ? kvm_sched_clock_read+0x18/0x40 [ 99.952407][ T10] ? __kasan_check_write+0x14/0x20 [ 99.957526][ T10] wb_workfn+0x38f/0xe20 [ 99.961769][ T10] ? inode_wait_for_writeback+0x200/0x200 [ 99.967489][ T10] ? compat_start_thread+0x20/0x20 [ 99.972599][ T10] ? _raw_spin_unlock+0x4d/0x70 [ 99.977459][ T10] ? finish_task_switch+0x16b/0x780 [ 99.982655][ T10] ? __switch_to_asm+0x3a/0x60 [ 99.987423][ T10] ? __schedule+0xb76/0x14c0 [ 99.992020][ T10] process_one_work+0x6be/0xba0 [ 99.996894][ T10] worker_thread+0xa59/0x1200 [ 100.001579][ T10] kthread+0x411/0x500 [ 100.005654][ T10] ? worker_clr_flags+0x190/0x190 [ 100.010678][ T10] ? kthread_blkcg+0xd0/0xd0 [ 100.015273][ T10] ret_from_fork+0x1f/0x30 [ 100.019694][ T10] [ 100.022718][ T10] Modules linked in: [ 100.027581][ T10] ---[ end trace d51f710e507c56bf ]--- [ 100.033137][ T10] RIP: 0010:ext4_writepages+0x2eed/0x2f90 [ 100.039487][ T10] Code: 00 74 08 48 89 df e8 22 01 ce ff 48 8b 3b 48 8b 74 24 28 48 8b 54 24 30 44 89 e9 45 89 f0 e8 6a 9b 07 00 eb 51 e8 23 86 8f ff <0f> 0b e8 1c 86 8f ff eb 2f e8 15 86 8f ff eb 5f e8 0e 86 8f ff 31 [ 100.059773][ T10] RSP: 0018:ffffc900000a7100 EFLAGS: 00010293 [ 100.066009][ T10] RAX: ffffffff81d929ad RBX: ffff88812e87aa40 RCX: ffff888100274f00 [ 100.074369][ T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.082606][ T10] RBP: ffffc900000a7470 R08: dffffc0000000000 R09: ffffed1025d0f541 [ 100.090892][ T10] R10: ffffed1025d0f541 R11: 1ffff11025d0f540 R12: dffffc0000000000 [ 100.099110][ T10] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.107654][ T10] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 100.116736][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.123400][ T10] CR2: 0000001b2e00dff8 CR3: 000000010d32e000 CR4: 00000000003506a0 [ 100.131451][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000008000000f [ 100.139838][ T10] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 100.147868][ T10] Kernel panic - not syncing: Fatal exception [ 100.154214][ T10] Kernel Offset: disabled [ 100.158537][ T10] Rebooting in 86400 seconds..