last executing test programs: 6.212499099s ago: executing program 3 (id=667): ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5523) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000081000040"]) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7d, 0x5d}}, &(0x7f0000000500)='GPL\x00', 0x5, 0x487, &(0x7f0000001700)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdfd, 0x10, 0x0, 0x47}, 0x48) 5.762238237s ago: executing program 3 (id=674): syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206b1d010140000102030109029a0003010000000904080000010100000a24010000000201020c24020000000000000000000c24020000000000000000000d2407000000004336d88b1a56090401000001020000090401010101020000090904020000010200000904020101010200000f240202000000000284d843d9f8110724010000000009058209200000000007250100000000"], 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @local}}}, 0x32) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x88, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x13) unshare(0x20400) r6 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname(r6, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x1, 0x2}}, 0x26) socket$inet_tcp(0x2, 0x1, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f00000000c0)=0x80, 0x80c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = socket(0x23, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x51) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) close(0xffffffffffffffff) 4.45129523s ago: executing program 1 (id=684): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffeffff}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 4.401172522s ago: executing program 1 (id=685): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @desc3}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xffd, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='track_foreign_dirty\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x393, 0x0) chdir(0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)={@desc={0x80000, 0x0, @desc2}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setfsuid(0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 3.970301119s ago: executing program 1 (id=690): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2008002, &(0x7f0000000240), 0x1, 0x553, &(0x7f00000009c0)="$eJzs3c9vHFcdAPDvjH8mTesEeoAKSIBCQFF2400bVb20uVChqhKi4oA4pJa9sUx2s8a7LrWxhPs3gAQSJ/gTOCBxQOqJAzeOSD0gpHJACmCBYiSQFs3s2Nna62bprneJ9/ORJjNv3sx837Mz+96+Xc8LYGJdiYjdiJiNiLciYqHYnxRLvNpZsuMe7u0s7+/tLCfRbr/5tyTPz/ZF1zmZp4przkfEN1+LSJLjcZtb2/eWarXqRpEut+rr5ebW9vW1+tJqdbV6v1K5tXjrxks3X6wMra6X67988LW117/1m19/9oPf7371B1mxLhR53fUYpk7VZw7jZKYj4vXTCDYGU8V6dszl4ONJI+ITEfGF/P5fiKn8fycAcJa12wvRXuhOAwBnXZqPgSVpKSLStOgElDpjeM/G+bTWaLau3W1s3l/pjJVdjJn07lqteuPS3Pvfyw+eSbL0Yp6X5+fpypH0zYi4FBE/njuXp0vLjdrKeLo8ADDxnupu/yPin3NpWiqdePj1rqGCHp/qAQBPjPlxFwAAGDntPwBMHu0/AEyePtr/4sP+3VMvCwAwGt7/A8Dk0f4DwOTR/gPARPnGG29kS3u/eP71yttbm/cab19fqTbvleqby6XlxsZ6abXRWM2f2VN/3PVqjcb64gux+U65VW22ys2t7Tv1xub91p38ud53qjMjqRUA8FEuXX7vD0lE7L58Ll+iay4HbTWcbem4CwCMzdQgJ+sgwBPNbF8wufpqwvNOwu9OvSzAePR8mPd8z80P++n/EMT3jOD/ytVP9z/+b45nOFuM/8Pk+njj/68MvRzA6Bn/h8nVbidH5/yfPcwCAM6kAb7C1/7hsDohwFg9bjLvoXz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfMhYj4biRpKZ8LPM3+TUuliKcj4mLMJHfXatUbEfFMXI6ImbksvTjuQgMAA0r/khTzf11deP7C0dzZ5F9z+Toivv+zN3/yzlKrtbGY7f/74f65g+nDKo/OG2BeQQBgyPL2u1Ksu97IP9zbWT5YRlmeB7fjP8VUxMv7ezv50smZjmxnxHzelzj/jySmi3PmI+K5iJgaQvzddyPiU73qn+RjIxeLmU+740cR++mRxk8/FD/N8zrrrPP1ySGUBSbNe7cj4tVe918aV/J17/t/Pn+FGtyD252LHbz27XfFny4iTR2J/35xz1/pN8YLv/36sZ3thU7euxHPTfeKnxzGT3rUP9v3fJ/x//iZz/3olRPy2j+PuBq943fHKrfq6+Xm1vb1tfrSanW1er9SubV468ZLN1+slPMx6vLBSPVxf3352jMnlS2r//kT4s/3rP/s4blf6rP+v/j3W9/5/KPk3NH4X/li79//sz3jd2Rt4pePhzrXK/7S+V+dOH13Fn/lhPo/7vd/rZ/KR8QHf95e6fNQAGAEmlvb95ZqterGQBvZu9BhXOfYRlbE/g4+6C4OFvRPMcjpr2WdreH9EGZO66c62EY+5vDRNZ0+7CsON/q3syuOuMrp0Gsx0MbDUcUa0wsSMDKPbvpxlwQAAAAAAAAAAAAAADjJKP50adx1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oz6bwAAAP//WNfIoA==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2a, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) 3.446676081s ago: executing program 4 (id=693): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000280)={0xf, 0x1f, 0x5}, 0xf) 3.385226764s ago: executing program 4 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x2ec, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x29c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x60, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x220, 0x6, [@m_ctinfo={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_connmark={0x138, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0xcd, 0x6, "66396e73dfd00bd4ca2cf6729e00b590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6b4d958bd18714cd4f89f48d039d7da0010095f6ad32634b6b66cf821e93079c15dda212b0b37b761850342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e64d73a30fc4e9a29d250104fa297e7a7f17405df935efe7e4806b65a797a850f6a8d8e2c8a8b9f56953d1262211f307b4af9617b04c9c48dea9e41ef304ac3365b6d8846ba792c335b4b2b956f85fa20fc312fee715e656cbb"}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x2ec}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x2}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2b63e16300000018000100b1f8611f0b0000000000000000af9e000d000000000500", @ANYRES32=0x0, @ANYBLOB="08001e00"], 0x30}}, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000002b80)=[{0x0}], 0x1, 0x0, 0xd8}}], 0x1, 0x90) bind$inet6(r5, &(0x7f00000004c0)={0xa, 0x8000002, 0x0, @empty, 0x1}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) accept(r2, &(0x7f0000000500)=@ethernet={0x0, @local}, &(0x7f0000000700)=0x80) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x89, 0x2e, 0x79, 0x10, 0x45e, 0x721, 0x9c25, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x2}, @format_type_i_discrete={0x8}]}]}}]}}]}}, 0x0) r6 = getpid() sched_setaffinity(r6, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000380)) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2040a, 0x0, 0x0, 0x0, &(0x7f0000000000)) 3.053162477s ago: executing program 0 (id=697): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x80) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x2030, &(0x7f0000000340)=ANY=[@ANYRES32], 0x42, 0x217, &(0x7f00000004c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_extract_tcp_res(&(0x7f00000001c0), 0x200, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000036cd007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000000000007111b40000000000850000850000002a00000095000000000000009500a5e40000000000800000000e95fbe48f212c9b2b0cc91d0d07dd4093ceaea008dfe681cefcd69f32f75f5f0a2ce9669b18b896763c7a5fb026625b2d4b7c3dd7afea2945829665dd3b2a3841"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x7, 0xb9, 0x1000, 0xc00000000000000, 0x7fffffffffffffff, 0x7fff, 0x7ffc}, &(0x7f0000000000)={0xfffffffffffffffb, 0x13, 0x1, 0x8, 0x9, 0x3, 0x0, 0x3}, &(0x7f0000000140)={0xe1, 0x8000, 0x9, 0x3a6a, 0x9, 0x7, 0x101, 0x80}, &(0x7f00000001c0)={0x0, 0x989680}, 0x0) sendto$inet(r0, 0x0, 0x2, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r6 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000), 0xffffffffffffff06) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_off}, {@index_on}]}) 3.002766058s ago: executing program 1 (id=698): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000280)='./bus\x00', 0x260001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="b5acade6a0fb"]) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') getxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f00000005c0)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002005c0001000058"], 0xac}}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) 2.637143833s ago: executing program 1 (id=699): r0 = dup(0xffffffffffffffff) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000080)="de83a510deeeb24d540fd27d76c2f4d08e358901214b045d5a642d60a43cffd0eeca4f1193ebc78b97f872d83989bf2f800086299be03e6775093899e304e412658ce0a957eec246cc03faa2c2139c32a46dabe34e1a1117eb81de687d1d05336da76f5dc423b71691", 0x69, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) fsopen(0x0, 0x0) getcwd(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getsockname(r2, &(0x7f0000000440)=@phonet, &(0x7f00000004c0)=0x80) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x813014, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x40000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) 2.266625288s ago: executing program 3 (id=701): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2008002, &(0x7f0000000240), 0x1, 0x553, &(0x7f00000009c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2a, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) 2.045334558s ago: executing program 0 (id=702): unshare(0x20000400) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000004c0)='./file0\x00', 0x6d159ffbcfa75265, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) 2.044987128s ago: executing program 0 (id=703): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss, @timestamp, @window], 0x21a5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setgroups(0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000540)={[{@usrjquota}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x181fffc}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@discard}, {@nobarrier}, {@dioread_nolock}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4d4, &(0x7f0000000a40)="$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") 1.615343975s ago: executing program 1 (id=704): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000001340)=[{&(0x7f0000001200)=""/158, 0x9e}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) unshare(0x22040400) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000000), &(0x7f0000001540)=""/155}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff0100000724", @ANYRES16=r7], 0x0) 1.510297759s ago: executing program 2 (id=705): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) madvise(&(0x7f0000c03000/0x2000)=nil, 0x2000, 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000040)) 1.393285954s ago: executing program 2 (id=706): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffeffff}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.393135594s ago: executing program 2 (id=707): syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000006280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ff"], 0x15) r2 = dup(r1) mount$9p_fd(0x3000000, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.392472094s ago: executing program 2 (id=708): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2008002, &(0x7f0000000240), 0x1, 0x553, &(0x7f00000009c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2a, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) 1.281431668s ago: executing program 3 (id=709): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvfrom(r0, 0x0, 0x5000000, 0x0, 0x0, 0x0) 1.045016098s ago: executing program 0 (id=710): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0xb, 0x0, &(0x7f0000000100)=0x4) 989.34185ms ago: executing program 3 (id=711): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x5608, &(0x7f0000000a40)) 989.08861ms ago: executing program 3 (id=712): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x3, 0x5, 0x480, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x5}, 0x48) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x98) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fallocate(r3, 0x63, 0x1, 0x0) r4 = open(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x53, 0x2}, @period={0x0, 0x0, 0x7f, 0x0, 0x0, {0x0, 0x80}, 0x0, 0x0}}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) write$char_usb(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x4aa7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ddd}, 0x90) socket$inet6(0xa, 0x2, 0x4) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCX_GETX(r6, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffa9, 0x0}, 0x44000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0xe3, 0x2007f, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000040), 0x0}, 0x20) 944.076242ms ago: executing program 0 (id=713): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = dup2(r2, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80205b, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) creat(&(0x7f0000000480)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x208e24b) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000300)='./file0\x00', r5, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00002e03000000aa1745001400b59500000000", @ANYRES32=r6, @ANYBLOB="14000100ff020000000000000000000000000001"], 0x2c}}, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000000c0)) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r7, &(0x7f0000000180)="cef99878e2beb4d867c9cb5095ee78e9629fded86583912723700a1a3c6d9fed09166e17fe0fef3ac29aa975e60524000000000000004a573a90cc3bc9c8488fe68e39427ba10fde63b14b04c7183be1c4c315a34839a5b5f6acd8f2199964a39bceaf2727c94f426ccac946ed28fb5cfa23d397eb4f07beee9c41ae03005965cec5bdd6f51cca2c399a2a6f73d9aff19b38ba5ed71870474b7a0f63513c1d4aceefc37a42f79147982e570cd044edb6a1d3a3058332e532435aa6aa1fdb86dbbc43c6721ff862438be02e00bfcc40e4d2ade8519743359d9e389b776a4f4759864ff3846d95d0547a4194fb2c9ff1df0914b2a9e4a0c015a38d843a8132d1cf5aa6aeafa871f749c9aab0af87df2717558f5a2d276391f47d83", 0xfdb8, 0x10000400005) r8 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) fallocate(r8, 0x3, 0x0, 0x4010000bfbe) 672.447153ms ago: executing program 0 (id=714): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x17b, &(0x7f0000000740)="$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") r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x6}]}, 0x30}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2, 0x2}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001c40)={0x2020}, 0x10) 512.505819ms ago: executing program 2 (id=715): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @desc3}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xffd, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='track_foreign_dirty\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x393, 0x0) chdir(0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)={@desc={0x80000, 0x0, @desc2}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setfsuid(0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 391.230034ms ago: executing program 4 (id=716): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebfffffe"]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) 630µs ago: executing program 2 (id=717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40101, 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x21, 0x80006, 0x4000000, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6000}}], 0x300, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000f2ff71"], 0x0}, 0x90) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) syz_usb_connect(0x0, 0x178, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0, 0x29}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) 373.81µs ago: executing program 4 (id=718): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffeffff}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 288.27µs ago: executing program 4 (id=719): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstatfs(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x8, 0x4, 0x100, 0xec0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x74005c00, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) fstatfs(r0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x8, 0x4, 0x100, 0xec0}) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x74005c00, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) (async) 0s ago: executing program 4 (id=720): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) keyctl$set_reqkey_keyring(0xe, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getegid() sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000120001000000000000000000ac141430000000003f0000000000000000000000000000000c001500000000000000000014000d"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): ck 32: comm syz.4.384: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 62.908884][ T1860] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 62.918450][ T1860] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,bsddf,acl,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,nodelalloc,auto_da_alloc,norecovery,,errors=continue [ 62.985513][ T1866] fscrypt (sda1, inode 2068): Direct key flag not allowed with different contents and filenames modes [ 63.032198][ T1860] [ 63.039606][ T1860] ********************************************************** [ 63.050380][ T1860] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 63.071541][ T1860] ** ** [ 63.096208][ T23] audit: type=1400 audit(1719731289.860:269): avc: denied { read } for pid=1881 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.115822][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.116077][ T1860] ** trace_printk() being used. Allocating extra memory. ** [ 63.134253][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.136638][ T1860] ** ** [ 63.150422][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.158453][ T1860] ** This means that this is a DEBUG kernel and it is ** [ 63.160898][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.165661][ T1860] ** unsafe for production use. ** [ 63.181028][ T1860] ** ** [ 63.185602][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.193021][ T1860] ** If you see this message and you are not debugging ** [ 63.195065][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.203196][ T1860] ** the kernel, report this immediately to your vendor! ** [ 63.225072][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.234374][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.241451][ T1860] ** ** [ 63.247663][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.250637][ T1860] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 63.256215][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.259174][ T1886] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrquota,noinit_itable,nojournal_checksum,lazytime,,errors=continue [ 63.264018][ T1860] ********************************************************** [ 63.285176][ T1886] ext4 filesystem being mounted at /root/syzkaller.XRl4ce/3/file0 supports timestamps until 2038 (0x7fffffff) [ 63.304877][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.320407][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.328925][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.359568][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.377436][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.389936][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.408670][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.423462][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.705599][ T23] audit: type=1400 audit(1719731290.470:270): avc: denied { ioctl } for pid=1905 comm="syz.4.400" path="socket:[24867]" dev="sockfs" ino=24867 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.818692][ T1901] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 63.862474][ T1907] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 63.876739][ T1907] ext4 filesystem being mounted at /root/syzkaller.gOnpwf/16/bus supports timestamps until 2038 (0x7fffffff) [ 63.957128][ T1907] EXT4-fs (loop1): Cannot change quota options when quota turned on [ 63.957342][ T23] audit: type=1400 audit(1719731290.730:271): avc: denied { bind } for pid=1925 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.966586][ T74] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 63.991656][ T1907] ext4 filesystem being remounted at /root/syzkaller.gOnpwf/16/bus supports timestamps until 2038 (0x7fffffff) [ 64.063543][ T1929] EXT4-fs error (device loop1): ext4_find_dest_de:2063: inode #12: block 32: comm syz.1.397: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 64.226536][ T373] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 64.276958][ T74] usb 1-1: device descriptor read/64, error 18 [ 64.307173][ T9] device bridge_slave_1 left promiscuous mode [ 64.308318][ T1935] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrquota,noinit_itable,nojournal_checksum,lazytime,,errors=continue [ 64.316628][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.330098][ T1935] ext4 filesystem being mounted at /root/syzkaller.gOnpwf/18/file0 supports timestamps until 2038 (0x7fffffff) [ 64.348841][ T9] device bridge_slave_0 left promiscuous mode [ 64.362166][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.375508][ T23] audit: type=1400 audit(1719731291.140:272): avc: denied { map } for pid=1948 comm="syz.2.409" path="socket:[24951]" dev="sockfs" ino=24951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.402001][ T23] audit: type=1400 audit(1719731291.140:273): avc: denied { read } for pid=1948 comm="syz.2.409" path="socket:[24951]" dev="sockfs" ino=24951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.506657][ T373] usb 4-1: Using ep0 maxpacket: 8 [ 64.646775][ T373] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 64.655233][ T373] usb 4-1: config 179 has no interface number 0 [ 64.676719][ T74] usb 1-1: device descriptor read/64, error 18 [ 64.684121][ T373] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 64.695162][ T373] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 64.706210][ T373] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 64.715992][ T373] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 64.716543][ T579] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 64.729332][ T373] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 64.745171][ T373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.766655][ T1901] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 64.946672][ T74] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 65.045584][ T1901] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 65.052899][ T1901] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 65.106628][ T579] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.117379][ T579] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.126891][ T579] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 65.135711][ T579] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.144277][ T579] usb 2-1: config 0 descriptor?? [ 65.178420][ T1901] futex_wake_op: syz.3.398 tries to shift op by 36; fix this program [ 65.226930][ T74] usb 1-1: device descriptor read/64, error 18 [ 65.241133][ T1901] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.253854][ T1901] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 65.261339][ T23] audit: type=1400 audit(1719731292.030:274): avc: denied { write } for pid=1960 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.357920][ T124] usb 4-1: USB disconnect, device number 3 [ 65.626669][ T74] usb 1-1: device descriptor read/64, error 18 [ 65.747391][ T74] usb usb1-port1: attempt power cycle [ 65.759314][ T1955] F2FS-fs (loop1): Found nat_bits in checkpoint [ 65.785046][ T1955] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 65.808065][ T579] logitech-hidpp-device 0003:046D:C086.0003: item fetching failed at offset 4/5 [ 65.817205][ T579] logitech-hidpp-device 0003:046D:C086.0003: hidpp_probe:parse failed [ 65.825210][ T579] logitech-hidpp-device: probe of 0003:046D:C086.0003 failed with error -22 [ 66.010030][ T1977] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 66.011247][ T579] usb 2-1: USB disconnect, device number 8 [ 66.024659][ T1977] ext4 filesystem being mounted at /root/syzkaller.xl97Lo/51/bus supports timestamps until 2038 (0x7fffffff) [ 66.057555][ T1977] EXT4-fs (loop3): Cannot change quota options when quota turned on [ 66.065537][ T1977] ext4 filesystem being remounted at /root/syzkaller.xl97Lo/51/bus supports timestamps until 2038 (0x7fffffff) [ 66.151037][ T1977] EXT4-fs error (device loop3): ext4_find_dest_de:2063: inode #12: block 32: comm syz.3.414: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.170418][ T74] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 66.208243][ T1983] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 66.222444][ T1983] ext4 filesystem being mounted at /root/syzkaller.XRl4ce/9/bus supports timestamps until 2038 (0x7fffffff) [ 66.256307][ T1983] EXT4-fs (loop2): Cannot change quota options when quota turned on [ 66.265560][ T1983] ext4 filesystem being remounted at /root/syzkaller.XRl4ce/9/bus supports timestamps until 2038 (0x7fffffff) [ 66.366620][ T74] usb 1-1: device descriptor read/8, error -61 [ 66.366648][ T1994] EXT4-fs error (device loop2): ext4_find_dest_de:2063: inode #12: block 32: comm syz.2.415: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.613108][ T121] cfg80211: failed to load regulatory.db [ 66.622508][ T1640] attempt to access beyond end of device [ 66.622508][ T1640] loop1: rw=524288, want=45072, limit=40427 [ 66.634495][ T1640] attempt to access beyond end of device [ 66.634495][ T1640] loop1: rw=0, want=45072, limit=40427 [ 66.677469][ T1640] attempt to access beyond end of device [ 66.677469][ T1640] loop1: rw=2049, want=45112, limit=40427 [ 66.726575][ T74] usb 1-1: device descriptor read/8, error -71 [ 66.966460][ T2009] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 66.989031][ T2009] blk_update_request: I/O error, dev loop75, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 67.000439][ T2009] EXT4-fs (loop2): couldn't read superblock of external journal [ 67.044394][ T2013] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.051475][ T2013] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.058761][ T2013] device bridge_slave_0 entered promiscuous mode [ 67.065387][ T2013] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.072553][ T2013] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.079809][ T2013] device bridge_slave_1 entered promiscuous mode [ 67.137714][ T2013] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.144576][ T2013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.151716][ T2013] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.158450][ T2013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.211532][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.219374][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.228220][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.244621][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.252995][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.259843][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.267604][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.275602][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.282437][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.296195][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.304840][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.321394][ T9] device bridge_slave_1 left promiscuous mode [ 67.327980][ T2024] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 67.328138][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.342394][ T2024] ext4 filesystem being mounted at /root/syzkaller.XRl4ce/12/bus supports timestamps until 2038 (0x7fffffff) [ 67.359951][ T9] device bridge_slave_0 left promiscuous mode [ 67.365922][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.378884][ T2024] EXT4-fs (loop2): Cannot change quota options when quota turned on [ 67.387502][ T2024] ext4 filesystem being remounted at /root/syzkaller.XRl4ce/12/bus supports timestamps until 2038 (0x7fffffff) [ 67.461537][ T2036] EXT4-fs error (device loop2): ext4_find_dest_de:2063: inode #12: block 32: comm syz.2.426: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 67.493852][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.506396][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.519897][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.532243][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.552492][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.576912][ T23] kauditd_printk_skb: 5 callbacks suppressed [ 67.576921][ T23] audit: type=1400 audit(1719731294.350:280): avc: denied { nlmsg_read } for pid=2043 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 67.592911][ T2044] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2044 comm=syz.0.430 [ 67.603251][ T579] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 67.630821][ T23] audit: type=1400 audit(1719731294.390:281): avc: denied { read } for pid=2043 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 67.674473][ T23] audit: type=1400 audit(1719731294.440:282): avc: denied { set_context_mgr } for pid=2052 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 67.773303][ T2050] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,acl,errors=remount-ro,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,commit=0x0000000000000005,jqfmt=vfsold,nogrpid, [ 67.805509][ T2050] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.433: bg 0: block 234: padding at end of block bitmap is not set [ 67.819941][ T2050] EXT4-fs (loop2): Remounting filesystem read-only [ 68.116388][ T2068] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.132115][ T2068] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.139228][ T2068] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3002: comm syz.1.439: Allocating blocks 41-42 which overlap fs metadata [ 68.152715][ T579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.164131][ T2068] Quota error (device loop1): write_blk: dquota write failed [ 68.171719][ T579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.181359][ T2068] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 68.191457][ T579] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 68.200685][ T2068] EXT4-fs (loop1): 1 truncate cleaned up [ 68.206169][ T579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.214842][ T2068] EXT4-fs (loop1): pa ffff8881e9614540: logic 1, phys. 41, len 23 [ 68.222479][ T2068] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:3899: group 0, free 22, pa_free 23 [ 68.232737][ T579] usb 4-1: config 0 descriptor?? [ 68.237733][ T2068] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,grpjquota=,nogrpid,errors=continue,noinit_itable,resgid=0x0000000000000000,resuid=0x00000000000000002,errors=continue [ 68.289884][ T2083] input: syz0 as /devices/virtual/input/input5 [ 68.303797][ T23] audit: type=1400 audit(1719731295.070:283): avc: denied { read } for pid=147 comm="acpid" name="event3" dev="devtmpfs" ino=25840 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.326335][ T23] audit: type=1400 audit(1719731295.070:284): avc: denied { open } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=25840 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.351796][ T2089] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 68.361722][ T23] audit: type=1400 audit(1719731295.070:285): avc: denied { ioctl } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=25840 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.387118][ T2089] EXT4-fs (loop1): re-mounted. Opts: (null) [ 68.450423][ T23] audit: type=1400 audit(1719731295.220:286): avc: denied { read write } for pid=2098 comm="syz.2.447" name="uhid" dev="devtmpfs" ino=9929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 68.474074][ T23] audit: type=1400 audit(1719731295.220:287): avc: denied { open } for pid=2098 comm="syz.2.447" path="/dev/uhid" dev="devtmpfs" ino=9929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 68.510451][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.517781][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.525019][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.533064][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.540357][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.547496][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.554708][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.562018][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.569258][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.576784][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.584013][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.591493][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.598729][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.605868][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.613105][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.620297][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.627713][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.635000][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.642361][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.649578][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.656854][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.664032][ T390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.671502][ T390] hid-generic 0000:0000:0000.0004: collection stack underflow [ 68.678836][ T390] hid-generic 0000:0000:0000.0004: item 0 0 0 12 parsing failed [ 68.686540][ T390] hid-generic: probe of 0000:0000:0000.0004 failed with error -22 [ 68.917765][ T2111] syz.0.449[2111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.918047][ T2111] syz.0.449[2111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.036579][ T2033] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 69.066697][ T579] hid-led: probe of 0003:0FC5:B080.0005 failed with error -71 [ 69.075760][ T579] usb 4-1: USB disconnect, device number 4 [ 69.212127][ T2116] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrquota,noinit_itable,nojournal_checksum,lazytime,,errors=continue [ 69.226258][ T2116] ext4 filesystem being mounted at /root/syzkaller.Vf4KnT/4/file0 supports timestamps until 2038 (0x7fffffff) [ 69.243634][ T2116] overlayfs: missing 'lowerdir' [ 70.339149][ T2147] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 70.353931][ T2147] ext4 filesystem being mounted at /root/syzkaller.xl97Lo/57/bus supports timestamps until 2038 (0x7fffffff) [ 70.515104][ T2147] EXT4-fs (loop3): Cannot change quota options when quota turned on [ 70.530368][ T2166] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrquota,noinit_itable,nojournal_checksum,lazytime,,errors=continue [ 70.554731][ T2147] ext4 filesystem being remounted at /root/syzkaller.xl97Lo/57/bus supports timestamps until 2038 (0x7fffffff) [ 70.573412][ T2126] F2FS-fs (loop1): Found nat_bits in checkpoint [ 70.578737][ T2166] ext4 filesystem being mounted at /root/syzkaller.SJmCAa/20/file0 supports timestamps until 2038 (0x7fffffff) [ 70.635665][ T2166] overlayfs: missing 'lowerdir' [ 70.675861][ T2183] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 70.693037][ T2183] ext4 filesystem being mounted at /root/syzkaller.Ai3sbi/13/file1 supports timestamps until 2038 (0x7fffffff) [ 70.706049][ T2188] EXT4-fs error (device loop3): ext4_find_dest_de:2063: inode #12: block 32: comm syz.3.460: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 70.736618][ T2126] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 70.767041][ T2191] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.043554][ T2199] syz.4.470[2199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.043817][ T2199] syz.4.470[2199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.205438][ T2195] EXT4-fs (loop0): Ignoring removed orlov option [ 71.223251][ T2170] F2FS-fs (loop2): Unrecognized mount option "00000000000000000000" or missing value [ 71.258397][ T2195] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,data_err=abort,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,orlov,bsdgroups,max_batch_time=0x0000000000000400,user_xattr,quota,,errors=continue [ 71.469029][ T2228] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrquota,noinit_itable,nojournal_checksum,lazytime,,errors=continue [ 71.495050][ T2228] ext4 filesystem being mounted at /root/syzkaller.XRl4ce/27/file0 supports timestamps until 2038 (0x7fffffff) [ 71.586278][ T2234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 71.605984][ T2228] overlayfs: missing 'lowerdir' [ 71.802355][ T2242] netlink: 104 bytes leftover after parsing attributes in process `syz.2.481'. [ 71.974724][ T2253] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.981602][ T2253] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.988903][ T2253] device bridge_slave_0 entered promiscuous mode [ 71.995569][ T2253] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.002421][ T2253] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.009651][ T2253] device bridge_slave_1 entered promiscuous mode [ 72.050593][ T2253] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.057539][ T2253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.065177][ T2253] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.072074][ T2253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.104512][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.113826][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.121657][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.136436][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.145866][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.152726][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.160736][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.175676][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.182538][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.202881][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.213215][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.216588][ T579] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 72.429260][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.438158][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.446572][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.454722][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.462940][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.476610][ T13] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 72.506817][ T579] usb 5-1: Using ep0 maxpacket: 8 [ 72.657000][ T579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.669144][ T579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.679410][ T579] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 72.718726][ T579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.762099][ T579] usb 5-1: config 0 descriptor?? [ 72.767157][ T390] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 72.796543][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 72.997721][ T2276] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 73.005319][ T2276] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 73.019830][ T2249] fuse: Bad value for 'fd' [ 73.025673][ T2276] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.072597][ T2276] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 73.076611][ T13] usb 2-1: New USB device found, idVendor=0e8d, idProduct=3329, bcdDevice=9c.d5 [ 73.079731][ T2276] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 73.096550][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.109035][ T13] usb 2-1: Product: syz [ 73.113026][ T13] usb 2-1: Manufacturer: syz [ 73.117516][ T13] usb 2-1: SerialNumber: syz [ 73.122795][ T13] usb 2-1: config 0 descriptor?? [ 73.127686][ T390] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.138804][ T390] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 73.148491][ T390] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 73.157367][ T390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.446574][ T579] usbhid 5-1:0.0: can't add hid device: -71 [ 73.452336][ T579] usbhid: probe of 5-1:0.0 failed with error -71 [ 73.467234][ T382] device bridge_slave_1 left promiscuous mode [ 73.477391][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.484870][ T382] device bridge_slave_0 left promiscuous mode [ 73.491119][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.494398][ T579] usb 5-1: USB disconnect, device number 7 [ 73.504106][ T23] kauditd_printk_skb: 13 callbacks suppressed [ 73.504115][ T23] audit: type=1400 audit(1719731300.270:301): avc: denied { name_bind } for pid=2288 comm="syz.3.493" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 73.710872][ T13] usb 2-1: USB disconnect, device number 9 [ 73.826847][ T2267] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 73.839785][ T2267] netlink: 80 bytes leftover after parsing attributes in process `syz.2.490'. [ 73.869064][ T2295] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 73.882758][ T2295] ext4 filesystem being mounted at /root/syzkaller.SJmCAa/27/bus supports timestamps until 2038 (0x7fffffff) [ 73.910554][ T2295] EXT4-fs (loop4): Cannot change quota options when quota turned on [ 73.918914][ T2295] ext4 filesystem being remounted at /root/syzkaller.SJmCAa/27/bus supports timestamps until 2038 (0x7fffffff) [ 73.993517][ T2303] EXT4-fs error (device loop4): ext4_find_dest_de:2063: inode #12: block 32: comm syz.4.497: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 74.086608][ T390] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 74.094212][ T390] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input6 [ 74.109963][ T390] input: failed to attach handler kbd to device input6, error: -5 [ 74.119485][ T390] usb 3-1: USB disconnect, device number 4 [ 74.131628][ T23] audit: type=1400 audit(1719731300.900:302): avc: denied { setopt } for pid=2305 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.306560][ T74] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 74.363367][ T2312] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 74.376738][ T2312] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 74.389887][ T2312] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.426865][ T124] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 74.439458][ T2312] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 74.446319][ T2312] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 74.556577][ T74] usb 1-1: Using ep0 maxpacket: 16 [ 74.648874][ T2322] EXT4-fs (loop2): 1 orphan inode deleted [ 74.654469][ T2322] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 74.673378][ T2322] ext4 filesystem being mounted at /root/syzkaller.XRl4ce/31/file1 supports timestamps until 2038 (0x7fffffff) [ 74.796696][ T124] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.842473][ T2314] F2FS-fs (loop3): Unrecognized mount option "00000000000000000000" or missing value [ 74.856868][ T74] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 74.871997][ T74] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.880706][ T74] usb 1-1: Product: syz [ 74.884674][ T74] usb 1-1: Manufacturer: syz [ 74.891083][ T74] usb 1-1: SerialNumber: syz [ 74.897006][ T74] usb 1-1: config 0 descriptor?? [ 74.907418][ T23] audit: type=1400 audit(1719731301.680:303): avc: denied { ioctl } for pid=2333 comm="syz.1.508" path="socket:[27497]" dev="sockfs" ino=27497 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.907982][ T2334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.508'. [ 74.945166][ T2334] netlink: 104 bytes leftover after parsing attributes in process `syz.1.508'. [ 74.957330][ T74] uvcvideo: Found UVC 0.00 device syz (045e:0721) [ 74.963571][ T74] uvcvideo: No valid video chain found. [ 74.996696][ T124] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.005540][ T124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.015877][ T124] usb 5-1: Product: syz [ 75.036664][ T124] usb 5-1: Manufacturer: syz [ 75.041731][ T124] usb 5-1: SerialNumber: syz [ 75.046968][ T23] audit: type=1400 audit(1719731301.820:304): avc: denied { unlink } for pid=144 comm="syslogd" name="messages.0" dev="tmpfs" ino=10038 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.084938][ T2338] attempt to access beyond end of device [ 75.084938][ T2338] loop2: rw=2049, want=130, limit=128 [ 75.095999][ T2338] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 75.105279][ T2338] attempt to access beyond end of device [ 75.105279][ T2338] loop2: rw=2049, want=130, limit=128 [ 75.107072][ T124] hub 5-1:1.0: bad descriptor, ignoring hub [ 75.116813][ T2338] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 75.136685][ T124] hub: probe of 5-1:1.0 failed with error -5 [ 75.246570][ T74] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 75.391353][ T2355] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 75.398453][ T2355] EXT4-fs (loop3): Ignoring removed orlov option [ 75.408195][ T2355] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,journal_dev=0x0000000000000401,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,orlov,errors=continue,barrier, [ 75.537482][ T2310] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.616668][ T18] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 75.696638][ T74] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 75.706707][ T74] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 48 [ 75.780750][ T2310] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 75.789099][ T2310] EXT4-fs (loop4): orphan cleanup on readonly fs [ 75.795549][ T2310] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 75.804280][ T2310] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 75.818573][ T2310] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 75.825604][ T2310] EXT4-fs (loop4): 1 truncate cleaned up [ 75.831225][ T2310] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 75.866616][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 75.876636][ T18] usb 3-1: Using ep0 maxpacket: 8 [ 75.886628][ T74] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.895522][ T74] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.903410][ T74] usb 2-1: Product: ᭺ᯃѕ폕蠷ⶂ징奛⥸䘳ずࢣ読ꓠ鍛ױ꘢捱ନơ㜰魬І缥荖ᔼ張洦쁇쮑㴽涄虭櫿◀洞쎧㮭ክ괵萈ꓩ鸃敃᪟摔阱騑覍껵꾉全繚롟惛紮ᰯ签䎽淘ꢟ抭鷧ᕰ呟惱ᠨ芒ﳇ匴낓ꉏ [ 75.928104][ T74] usb 2-1: Manufacturer: ؑ趯ꑣﮈჵ䘢ສꁤ䄬꼏ꁯﱽ‥꽑襬䕰璼츠寸涄㛣ꀞ낣ꀞ燶漱쓐䕢뫼劭駄喪ᚏᅖ죺ऋ杤匘磢礛⼬㓥餵❔븾ඕଔꏝ웭䱘츓捻냆遒䌢ꔩ⮏㤟曑ཻﶣ쮪雹靪ᯙ郼쏰镃⽄⟽鸃 [ 75.954550][ T74] usb 2-1: SerialNumber: Ь [ 76.006721][ T18] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 76.014875][ T18] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 76.025010][ T18] usb 3-1: config 135 has no interface number 0 [ 76.031135][ T18] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.146612][ T124] cdc_ncm 5-1:1.0: bind() failure [ 76.152152][ T124] hub 5-1:1.1: bad descriptor, ignoring hub [ 76.158113][ T124] hub: probe of 5-1:1.1 failed with error -5 [ 76.164018][ T124] cdc_ncm 5-1:1.1: bind() failure [ 76.176613][ T13] usb 4-1: device descriptor read/64, error 18 [ 76.196623][ T18] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 76.206065][ T124] usb 5-1: USB disconnect, device number 8 [ 76.212209][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.221173][ T18] usb 3-1: Product: syz [ 76.225135][ T18] usb 3-1: Manufacturer: syz [ 76.231373][ T18] usb 3-1: SerialNumber: syz [ 76.456595][ T74] cdc_ncm 2-1:1.0: bind() failure [ 76.462281][ T74] cdc_ncm 2-1:1.1: bind() failure [ 76.470804][ T74] usb 2-1: USB disconnect, device number 10 [ 76.556603][ T18] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 76.562967][ T18] uvcvideo: No valid video chain found. [ 76.570872][ T18] usb 3-1: USB disconnect, device number 5 [ 76.576699][ T13] usb 4-1: device descriptor read/64, error 18 [ 76.591493][ T23] audit: type=1400 audit(1719731303.360:305): avc: denied { mounton } for pid=2368 comm="syz.2.516" path="/root/syzkaller.XRl4ce/38/file0/bus" dev="tmpfs" ino=27598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.687871][ T2369] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 76.698121][ T2369] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,nombcache,auto_da_alloc=0x0000000000000002,nombcache,noinit_itable,nomblk_io_submit,init_itable=0x0000000000000009,usrquota,errors=continue,,errors=continue [ 76.803282][ T23] audit: type=1400 audit(1719731303.570:306): avc: denied { setopt } for pid=2368 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.847499][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 76.918787][ T2379] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 76.981010][ T18] usb 1-1: USB disconnect, device number 7 [ 77.003142][ T2381] FAT-fs (loop2): Directory bread(block 64) failed [ 77.009549][ T2381] FAT-fs (loop2): Directory bread(block 65) failed [ 77.015840][ T2381] FAT-fs (loop2): Directory bread(block 66) failed [ 77.022700][ T2381] FAT-fs (loop2): Directory bread(block 67) failed [ 77.029104][ T2381] FAT-fs (loop2): Directory bread(block 68) failed [ 77.035349][ T2381] FAT-fs (loop2): Directory bread(block 69) failed [ 77.041760][ T2381] FAT-fs (loop2): Directory bread(block 70) failed [ 77.048058][ T2381] FAT-fs (loop2): Directory bread(block 71) failed [ 77.050564][ T2384] EXT4-fs (loop0): Ignoring removed bh option [ 77.054376][ T2381] FAT-fs (loop2): Directory bread(block 72) failed [ 77.066804][ T2381] FAT-fs (loop2): Directory bread(block 73) failed [ 77.083182][ T2384] EXT4-fs error (device loop0): ext4_ext_check_inode:540: inode #16: comm syz.0.522: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 77.106479][ T2384] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.522: couldn't read orphan inode 16 (err -117) [ 77.120166][ T2384] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,resgid=0x0000000000000000,journal_dev=0x00000000000001ff,barrier,acl,bh,,errors=continue [ 77.138360][ T2384] ext4 filesystem being mounted at /root/syzkaller.2jxJ1m/4/file1 supports timestamps until 2038 (0x7fffffff) [ 77.146562][ T13] usb 4-1: device descriptor read/64, error 18 [ 77.190308][ T2384] EXT4-fs warning (device loop0): ext4_empty_dir:2996: inode #12: lblock 0: comm syz.0.522: error -12 reading directory block [ 77.203375][ T2384] syz.0.522 (pid 2384) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 77.216403][ T2384] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 77.228897][ T23] audit: type=1400 audit(1719731304.000:307): avc: denied { map } for pid=2383 comm="syz.0.522" path="/root/syzkaller.2jxJ1m/4/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.235138][ T2384] PF_BRIDGE: br_mdb_parse() with invalid attr [ 77.253535][ T23] audit: type=1400 audit(1719731304.000:308): avc: denied { execute } for pid=2383 comm="syz.0.522" path="/root/syzkaller.2jxJ1m/4/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.274258][ T2253] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz-executor: corrupted xattr block 19 [ 77.283768][ T74] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 77.297990][ T2253] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 77.312116][ T2253] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz-executor: corrupted xattr block 19 [ 77.324526][ T2253] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 77.336293][ T2253] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz-executor: corrupted xattr block 19 [ 77.349207][ T2253] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 77.358029][ T23] audit: type=1400 audit(1719731304.130:309): avc: denied { unlink } for pid=2253 comm="syz-executor" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.359053][ T2253] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:410: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 77.395451][ T2253] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2930: inode #15: comm syz-executor: corrupted xattr block 19 [ 77.408992][ T2253] EXT4-fs warning (device loop0): ext4_evict_inode:321: xattr delete (err -74) [ 77.418312][ T2253] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:410: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 77.433575][ T2253] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2930: inode #18: comm syz-executor: corrupted xattr block 41 [ 77.445913][ T2253] EXT4-fs warning (device loop0): ext4_evict_inode:321: xattr delete (err -74) [ 77.454744][ T2253] EXT4-fs error (device loop0): ext4_lookup:1818: inode #2: comm syz-executor: deleted inode referenced: 16 [ 77.466270][ T2253] EXT4-fs error (device loop0): ext4_lookup:1818: inode #2: comm syz-executor: deleted inode referenced: 16 [ 77.546679][ T13] usb 4-1: device descriptor read/64, error 18 [ 77.666736][ T74] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 77.666830][ T13] usb usb4-port1: attempt power cycle [ 77.683489][ T74] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 77.694692][ T74] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 77.703621][ T74] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.726650][ T2386] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 77.738592][ T2402] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.745404][ T2402] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.752751][ T2402] device bridge_slave_0 entered promiscuous mode [ 77.759391][ T2402] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.766202][ T2402] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.773543][ T2402] device bridge_slave_1 entered promiscuous mode [ 77.816322][ T2402] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.823442][ T2402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.830534][ T2402] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.837289][ T2402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.859955][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.867532][ T390] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.874566][ T390] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.883828][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.891911][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.898760][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.909632][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.917674][ T390] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.924500][ T390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.942682][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.951077][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.017084][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.025177][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.036177][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.052365][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.061202][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.184989][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 78.218352][ T74] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 78.226203][ T74] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input7 [ 78.243001][ T74] usb 2-1: USB disconnect, device number 11 [ 78.307299][ T429] device bridge_slave_1 left promiscuous mode [ 78.315289][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.322734][ T429] device bridge_slave_0 left promiscuous mode [ 78.328734][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.341980][ T2421] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (-1 log_block_size) [ 78.372711][ T2440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60082 sclass=netlink_route_socket pid=2440 comm=syz.4.530 [ 78.387043][ T13] usb 4-1: device descriptor read/8, error -71 [ 78.445617][ T2418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2418 comm=syz.4.530 [ 78.447099][ T2440] device bridge_slave_1 left promiscuous mode [ 78.466862][ T2440] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.474207][ T2440] device bridge_slave_0 left promiscuous mode [ 78.480449][ T2440] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.541138][ T2418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.530'. [ 78.646581][ T13] usb 4-1: device descriptor read/8, error -71 [ 79.332504][ T373] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 79.492989][ T2459] process 'syz.0.536' launched './file1' with NULL argv: empty string added [ 79.766547][ T373] usb 5-1: Using ep0 maxpacket: 8 [ 79.797614][ T23] kauditd_printk_skb: 5 callbacks suppressed [ 79.797623][ T23] audit: type=1400 audit(1719731306.570:315): avc: denied { create } for pid=2468 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 79.852380][ T23] audit: type=1400 audit(1719731306.620:316): avc: denied { create } for pid=2468 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.872932][ T2465] F2FS-fs (loop3): Found nat_bits in checkpoint [ 79.906932][ T373] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 79.912183][ T2465] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 79.922962][ T373] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.944364][ T373] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.955521][ T373] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 79.976625][ T2476] loop_set_block_size: loop0 () has still dirty pages (nrpages=16) [ 80.062565][ T974] attempt to access beyond end of device [ 80.062565][ T974] loop3: rw=2049, want=45104, limit=40427 [ 80.095274][ T125] blk_update_request: I/O error, dev loop0, sector 5760 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 80.106933][ T125] Buffer I/O error on dev loop0, logical block 720, lost async page write [ 80.117081][ T373] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.126640][ T373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.184253][ T373] usb 5-1: Product: syz [ 80.188351][ T373] usb 5-1: Manufacturer: syz [ 80.192678][ T373] usb 5-1: SerialNumber: syz [ 80.223170][ T23] audit: type=1400 audit(1719731306.990:317): avc: denied { create } for pid=2484 comm="syz.0.546" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 80.245274][ T125] blk_update_request: I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 80.266124][ T23] audit: type=1400 audit(1719731307.010:318): avc: denied { read } for pid=2484 comm="syz.0.546" name="file0" dev="sda1" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 80.315457][ T23] audit: type=1400 audit(1719731307.010:319): avc: denied { open } for pid=2484 comm="syz.0.546" path="/root/syzkaller.E4tDrT/file0" dev="sda1" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 80.591540][ T23] audit: type=1400 audit(1719731307.320:320): avc: denied { connect } for pid=2485 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.752258][ T373] usb 5-1: USB disconnect, device number 9 [ 80.879947][ T2501] loop3: p2 < > [ 80.894720][ T2505] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrquota,noinit_itable,nojournal_checksum,lazytime,,errors=continue [ 80.915263][ T23] audit: type=1400 audit(1719731307.680:321): avc: denied { append } for pid=2499 comm="syz.3.543" name="loop3" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.939172][ T2505] ext4 filesystem being mounted at /root/syzkaller.E4tDrT/9/file0 supports timestamps until 2038 (0x7fffffff) [ 80.979068][ T2505] overlayfs: missing 'workdir' [ 81.022934][ T162] loop3: p2 < > [ 81.172932][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 81.184808][ T974] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 81.280003][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.290857][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 81.298902][ T13] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 81.306358][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.312682][ T2522] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 81.344808][ T23] audit: type=1400 audit(1719731308.110:322): avc: denied { execute } for pid=2520 comm="syz.4.557" name="file2" dev="loop4" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.525483][ T2522] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress, in[46, 4050] out[9000] [ 81.535624][ T2522] ------------[ cut here ]------------ [ 81.540926][ T2522] WARNING: CPU: 1 PID: 2522 at fs/erofs/decompressor.c:170 z_erofs_lz4_decompress+0x910/0xc70 [ 81.550969][ T2522] Modules linked in: [ 81.554715][ T2522] CPU: 1 PID: 2522 Comm: syz.4.557 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 81.564252][ T2522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 81.574165][ T2522] RIP: 0010:z_erofs_lz4_decompress+0x910/0xc70 [ 81.580140][ T2522] Code: b6 04 03 84 c0 0f 85 da 02 00 00 45 8b 0f 48 89 ef 48 c7 c6 72 fd 5a 85 48 c7 c2 a0 c3 f7 84 44 89 e9 45 89 f0 e8 80 ec fe ff <0f> 0b 44 89 e8 48 c7 c7 00 c4 f7 84 48 c7 c6 20 c4 f7 84 ba 02 00 [ 81.599573][ T2522] RSP: 0018:ffff8881eaaeeb58 EFLAGS: 00010246 [ 81.605474][ T2522] RAX: 9cdb1a213000b100 RBX: 1ffff1103d55de28 RCX: 9cdb1a213000b100 [ 81.613283][ T2522] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 81.621097][ T2522] RBP: ffff8881e1392000 R08: ffffffff814d59b2 R09: ffffed103edea9b8 [ 81.628907][ T2522] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881e186ffd2 [ 81.636718][ T2522] R13: 000000000000002e R14: 0000000000000fd2 R15: ffff8881eaaef140 [ 81.644534][ T2522] FS: 00007f2a99d4e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 81.653411][ T2522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.659826][ T2522] CR2: 00007f9e9c733656 CR3: 00000001e48e0000 CR4: 00000000003406a0 [ 81.667641][ T2522] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.675449][ T2522] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.683255][ T2522] Call Trace: [ 81.686395][ T2522] ? __warn+0x162/0x250 [ 81.691467][ T2522] ? report_bug+0x3a1/0x4e0 [ 81.695808][ T2522] ? z_erofs_lz4_decompress+0x910/0xc70 [ 81.701174][ T2522] ? z_erofs_lz4_decompress+0x910/0xc70 [ 81.706549][ T2522] ? do_invalid_op+0x6e/0x110 [ 81.711061][ T2522] ? invalid_op+0x1e/0x30 [ 81.715226][ T2522] ? wake_up_klogd+0xb2/0xf0 [ 81.719756][ T2522] ? z_erofs_lz4_decompress+0x910/0xc70 [ 81.726349][ T2522] ? z_erofs_lz4_decompress+0x910/0xc70 [ 81.732323][ T2522] ? z_erofs_lz4_prepare_destpages+0x690/0x690 [ 81.738380][ T2522] z_erofs_decompress+0xba6/0xfc0 [ 81.744067][ T2522] z_erofs_vle_unzip_all+0x1147/0x1bf0 [ 81.749644][ T2522] ? z_erofs_onlinepage_endio+0x140/0x140 [ 81.755547][ T2522] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 81.761121][ T2522] ? _raw_spin_lock+0x1b0/0x1b0 [ 81.766056][ T2522] ? prepare_to_wait_event+0x3c1/0x420 [ 81.771589][ T2522] ? autoremove_wake_function+0xf0/0xf0 [ 81.779367][ T2522] ? finish_wait+0xa5/0x1a0 [ 81.784120][ T2522] z_erofs_submit_and_unzip+0x12d2/0x13d0 [ 81.789823][ T2522] ? z_erofs_attach_page+0x4d7/0x710 [ 81.794948][ T2522] ? z_erofs_do_read_page+0x2580/0x2580 [ 81.800315][ T2522] ? init_wait_entry+0xd0/0xd0 [ 81.804911][ T2522] ? z_erofs_vle_normalaccess_readpages+0xc70/0xc70 [ 81.811332][ T2522] z_erofs_vle_normalaccess_readpages+0x901/0xc70 [ 81.817608][ T2522] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 81.824000][ T2522] ? setup_fault_attr+0x3d0/0x3d0 [ 81.828856][ T2522] ? __rcu_read_unlock+0x110/0x110 [ 81.833804][ T2522] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 81.840153][ T2522] read_pages+0x119/0x400 [ 81.844314][ T2522] ? __do_page_cache_readahead+0x4f0/0x4f0 [ 81.853824][ T2522] ? preempt_schedule_irq+0xe7/0x140 [ 81.859413][ T2522] ? preempt_schedule_notrace+0x140/0x140 [ 81.865194][ T2522] __do_page_cache_readahead+0x448/0x4f0 [ 81.874376][ T2522] ? read_cache_pages_invalidate_pages+0x1b0/0x1b0 [ 81.881027][ T2522] generic_file_read_iter+0x673/0x21f0 [ 81.886339][ T2522] ? is_mmconf_reserved+0x430/0x430 [ 81.891628][ T2522] ? debug_smp_processor_id+0x20/0x20 [ 81.896841][ T2522] ? find_get_pages_range_tag+0xae0/0xae0 [ 81.902371][ T2522] ? retint_kernel+0x1b/0x1b [ 81.906798][ T2522] ? iov_iter_init+0x82/0x160 [ 81.911312][ T2522] __vfs_read+0x5cd/0x730 [ 81.915476][ T2522] ? rw_verify_area+0x360/0x360 [ 81.920165][ T2522] ? __fsnotify_update_child_dentry_flags+0x290/0x290 [ 81.926765][ T2522] ? security_file_permission+0x1dc/0x2f0 [ 81.932313][ T2522] vfs_read+0x148/0x360 [ 81.936312][ T2522] kernel_read+0xa2/0xf0 [ 81.940383][ T2522] prepare_binprm+0x5c5/0x780 [ 81.944895][ T2522] ? retint_kernel+0x1b/0x1b [ 81.949324][ T2522] ? install_exec_creds+0x130/0x130 [ 81.954368][ T2522] ? __do_execve_file+0x8a8/0x10d0 [ 81.959307][ T2522] __do_execve_file+0x8b9/0x10d0 [ 81.964074][ T2522] ? retint_kernel+0x1b/0x1b [ 81.968504][ T2522] ? do_execve_file+0x40/0x40 [ 81.973015][ T2522] ? strncpy_from_user+0x1c0/0x300 [ 81.977967][ T2522] ? getname_flags+0x1ec/0x4e0 [ 81.982564][ T2522] __x64_sys_execve+0x90/0xa0 [ 81.987519][ T2522] do_syscall_64+0xca/0x1c0 [ 81.991854][ T2522] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 81.997582][ T2522] RIP: 0033:0x7f2a9aaccb99 [ 82.001833][ T2522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.021631][ T2522] RSP: 002b:00007f2a99d4e048 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 82.029948][ T2522] RAX: ffffffffffffffda RBX: 00007f2a9ac5afa0 RCX: 00007f2a9aaccb99 [ 82.037763][ T2522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 82.045656][ T2522] RBP: 00007f2a9ab4d77e R08: 0000000000000000 R09: 0000000000000000 [ 82.053643][ T2522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.061627][ T2522] R13: 000000000000000b R14: 00007f2a9ac5afa0 R15: 00007ffe9edd49a8 [ 82.069443][ T2522] ---[ end trace a3093c39772141ab ]--- [ 82.075829][ T23] audit: type=1400 audit(1719731308.250:323): avc: denied { execute_no_trans } for pid=2520 comm="syz.4.557" path="/root/syzkaller.SJmCAa/35/file1/file2" dev="loop4" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.141653][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 82.156685][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.189356][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 82.198614][ T23] audit: type=1400 audit(1719731308.970:324): avc: denied { read } for pid=2531 comm="syz.3.558" name="rtc0" dev="devtmpfs" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.226433][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.238128][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 82.252999][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.264820][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 82.316646][ T13] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 82.329808][ T2535] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 82.346393][ T2535] EXT4-fs (loop2): write access will be enabled during recovery [ 82.356913][ T13] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 82.361254][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 82.376573][ T2535] JBD2: no valid journal superblock found [ 82.380197][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.395294][ T13] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 82.397221][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 82.406676][ T2535] EXT4-fs (loop2): error loading journal [ 82.418906][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 82.433489][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.436875][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 82.450730][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 82.466688][ T2514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 82.663977][ T2515] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(9728) blocks(1024) [ 82.678854][ T2515] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 82.689943][ T2515] F2FS-fs (loop0): invalid crc value [ 82.778729][ T2515] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.324194][ T13] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 83.331213][ T2515] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 83.332208][ T13] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input8 [ 83.346579][ T2515] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 83.356317][ T13] usb 2-1: USB disconnect, device number 12 [ 83.483382][ T2547] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrquota,noinit_itable,nojournal_checksum,lazytime,,errors=continue [ 83.500763][ T2547] ext4 filesystem being mounted at /root/syzkaller.xl97Lo/76/file0 supports timestamps until 2038 (0x7fffffff) [ 83.539200][ T2547] overlayfs: missing 'workdir' [ 83.741380][ T2565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60082 sclass=netlink_route_socket pid=2565 comm=syz.4.567 [ 83.756096][ T2565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2565 comm=syz.4.567 [ 83.768587][ T2565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.567'. [ 84.015415][ T2580] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 84.037404][ T974] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46 [ 84.046610][ T18] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 84.055198][ T974] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 84.063699][ T974] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 84.256557][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 84.278841][ T2596] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrquota,noinit_itable,nojournal_checksum,lazytime,,errors=continue [ 84.293972][ T2596] ext4 filesystem being mounted at /root/syzkaller.xl97Lo/85/file0 supports timestamps until 2038 (0x7fffffff) [ 84.311609][ T2596] overlayfs: missing 'workdir' [ 84.341888][ T18] usb 5-1: Using ep0 maxpacket: 8 [ 84.637198][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.648022][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.650670][ T18] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 84.657825][ T13] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 84.672941][ T2604] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 84.680849][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.696092][ T13] usb 1-1: config 0 descriptor?? [ 84.736673][ T18] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 84.746914][ T18] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.757655][ T18] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 84.987027][ T18] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.025629][ T18] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.258079][ T18] usb 5-1: Product: syz [ 85.262051][ T18] usb 5-1: Manufacturer: syz [ 85.266476][ T18] usb 5-1: SerialNumber: syz [ 85.267159][ T378] print_req_error: 58 callbacks suppressed [ 85.267171][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 85.303501][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.314882][ T378] buffer_io_error: 46 callbacks suppressed [ 85.314891][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 85.329705][ T13] usbhid 1-1:0.0: can't add hid device: -71 [ 85.335510][ T13] usbhid: probe of 1-1:0.0 failed with error -71 [ 85.343496][ T13] usb 1-1: USB disconnect, device number 8 [ 85.363263][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.375030][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 85.382910][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.393678][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 85.401678][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.419676][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 85.427913][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.440148][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 85.449817][ T2630] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 85.458887][ T2630] ext4 filesystem being mounted at /root/syzkaller.E4tDrT/12/file1 supports timestamps until 2038 (0x7fffffff) [ 85.477917][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 85.507426][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.522794][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 85.540854][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.554027][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 85.583377][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.606887][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 85.643292][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 85.667282][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 85.713207][ T2648] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrquota,noinit_itable,nojournal_checksum,lazytime,,errors=continue [ 85.731157][ T18] usb 5-1: USB disconnect, device number 10 [ 85.789440][ T378] udevd[378]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.818478][ T2648] ext4 filesystem being mounted at /root/syzkaller.XRl4ce/55/file0 supports timestamps until 2038 (0x7fffffff) [ 86.094077][ T1755] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /root/syzkaller.XRl4ce/55/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 86.142273][ T1755] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /root/syzkaller.XRl4ce/55/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 86.179947][ T2654] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 86.193439][ T2654] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 86.226801][ T1755] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /root/syzkaller.XRl4ce/55/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 86.250762][ T1755] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /root/syzkaller.XRl4ce/55/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 86.274139][ T1755] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /root/syzkaller.XRl4ce/55/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 86.296824][ T1755] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.XRl4ce/55/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 86.321942][ T1755] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /root/syzkaller.XRl4ce/55/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 86.344379][ T1755] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 86.368337][ T2646] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 86.382482][ T2646] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 86.391866][ T2646] F2FS-fs (loop3): invalid crc value [ 86.398894][ T2646] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.436903][ T2651] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 86.445543][ T2651] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 86.458359][ T2651] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.461179][ T2646] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 86.501110][ T2646] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 86.508853][ T2651] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 86.548160][ T2651] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 86.555053][ T2651] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 86.582235][ T23] kauditd_printk_skb: 6 callbacks suppressed [ 86.582244][ T23] audit: type=1400 audit(1719731313.350:331): avc: denied { bind } for pid=2680 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.630100][ T23] audit: type=1326 audit(1719731313.390:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2680 comm="syz.0.595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75e023eb99 code=0x0 [ 86.737905][ T2684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 86.747020][ T2684] device bridge_slave_0 left promiscuous mode [ 86.753494][ T2684] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.754433][ T2676] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 86.774155][ T2676] ext4 filesystem being mounted at /root/syzkaller.SJmCAa/42/bus supports timestamps until 2038 (0x7fffffff) [ 86.800877][ T2682] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.813141][ T2682] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.837768][ T2676] EXT4-fs (loop4): Cannot change quota options when quota turned on [ 86.910063][ T2676] ext4 filesystem being remounted at /root/syzkaller.SJmCAa/42/bus supports timestamps until 2038 (0x7fffffff) [ 86.928182][ T2682] device bridge_slave_0 entered promiscuous mode [ 86.991445][ T2682] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.010482][ T23] audit: type=1400 audit(1719731313.780:333): avc: denied { setopt } for pid=2645 comm="syz.3.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.029981][ T2682] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.039293][ T2682] device bridge_slave_1 entered promiscuous mode [ 87.040639][ T2013] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 87.040644][ T2013] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 87.054064][ T2013] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 87.061650][ T2013] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 87.076816][ T2013] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 87.084188][ T2013] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 87.108750][ T2695] EXT4-fs error (device loop4): ext4_find_dest_de:2063: inode #12: block 32: comm syz.4.592: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 87.117064][ T2013] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 87.214634][ T2682] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.228871][ T2682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.235969][ T2682] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.242756][ T2682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.304973][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.314919][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.323122][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.342861][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.352138][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.359005][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.367219][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.385495][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.392374][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.400449][ T429] device bridge_slave_1 left promiscuous mode [ 87.406385][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.442292][ T429] device bridge_slave_0 left promiscuous mode [ 87.461565][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.469628][ T974] attempt to access beyond end of device [ 87.469628][ T974] loop3: rw=2049, want=45104, limit=40427 [ 87.508046][ T2698] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrquota,noinit_itable,nojournal_checksum,lazytime,,errors=continue [ 87.570028][ T2698] ext4 filesystem being mounted at /root/syzkaller.E4tDrT/16/file0 supports timestamps until 2038 (0x7fffffff) [ 87.607456][ T2402] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /root/syzkaller.E4tDrT/16/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 87.632581][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.641908][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.657730][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.666064][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.679706][ T2402] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /root/syzkaller.E4tDrT/16/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 87.684031][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.711445][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.726849][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.734925][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.745337][ T2402] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /root/syzkaller.E4tDrT/16/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 87.756587][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.786690][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.794725][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.803457][ T2402] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /root/syzkaller.E4tDrT/16/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 87.816977][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.834921][ T2716] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 87.848666][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.855256][ T2716] EXT4-fs (loop4): group descriptors corrupted! [ 87.857314][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.887271][ T2402] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /root/syzkaller.E4tDrT/16/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 87.920122][ T2402] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.E4tDrT/16/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 87.924945][ T2721] netlink: 3 bytes leftover after parsing attributes in process `syz.3.605'. [ 87.948523][ T2402] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /root/syzkaller.E4tDrT/16/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 87.974402][ T2402] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 88.059508][ T2714] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 88.075808][ T2714] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 88.089804][ T2714] F2FS-fs (loop1): Found nat_bits in checkpoint [ 88.161013][ T2714] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 88.176560][ T2714] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 88.205416][ T2714] incfs: Options parsing error. -22 [ 88.210515][ T2714] incfs: mount failed -22 [ 88.245946][ T2736] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.252920][ T2736] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.261267][ T2736] device bridge_slave_0 entered promiscuous mode [ 88.270618][ T2013] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 88.270623][ T2013] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 88.278186][ T2013] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 88.287451][ T2736] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.301829][ T2736] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.309441][ T2736] device bridge_slave_1 entered promiscuous mode [ 88.355929][ T2737] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.362791][ T2737] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.370094][ T2737] device bridge_slave_0 entered promiscuous mode [ 88.379534][ T2737] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.386480][ T2737] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.393874][ T2737] device bridge_slave_1 entered promiscuous mode [ 88.479403][ T2736] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.486342][ T2736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.493471][ T2736] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.500264][ T2736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.509298][ T2737] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.516140][ T2737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.523268][ T2737] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.530021][ T2737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.583819][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.592731][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.612514][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.620138][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.631276][ T2747] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrquota,noinit_itable,nojournal_checksum,lazytime,,errors=continue [ 88.645446][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.645683][ T2747] ext4 filesystem being mounted at /root/syzkaller.xl97Lo/92/file0 supports timestamps until 2038 (0x7fffffff) [ 88.688946][ T974] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /root/syzkaller.xl97Lo/92/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 88.711731][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.717253][ T23] audit: type=1400 audit(1719731315.480:334): avc: denied { create } for pid=2766 comm="syz.1.615" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 88.720482][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.746242][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.752968][ T974] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /root/syzkaller.xl97Lo/92/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 88.756727][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.776709][ T974] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /root/syzkaller.xl97Lo/92/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 88.784818][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.807225][ T974] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /root/syzkaller.xl97Lo/92/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 88.813538][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.844283][ T974] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /root/syzkaller.xl97Lo/92/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 88.866883][ T974] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.xl97Lo/92/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 88.887547][ T2767] EXT4-fs (loop1): Ignoring removed orlov option [ 88.893249][ T974] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /root/syzkaller.xl97Lo/92/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 88.918681][ T974] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 88.923167][ T2767] EXT4-fs (loop1): Test dummy encryption mode enabled [ 88.940552][ T2767] EXT4-fs (loop1): Unrecognized mount option "euid>00000000000000000000" or missing value [ 88.940651][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.958178][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.965460][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.977006][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.979159][ T23] audit: type=1400 audit(1719731315.750:335): avc: denied { create } for pid=2770 comm="syz.2.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 88.985123][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.011195][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.018870][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.027263][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.035229][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.042055][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.049171][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.056969][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.064745][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.072677][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.080378][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.088478][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.096520][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.104113][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.120841][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.128920][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.148790][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.157269][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.165043][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.178893][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.211403][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.219512][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.228553][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.239467][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.249715][ T2778] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 89.271585][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.276601][ T2778] ext4 filesystem being mounted at /root/syzkaller.85T5xn/4/bus supports timestamps until 2038 (0x7fffffff) [ 89.280052][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.299221][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.309009][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.329620][ T429] device bridge_slave_1 left promiscuous mode [ 89.335568][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.352847][ T2778] EXT4-fs (loop2): Cannot change quota options when quota turned on [ 89.362207][ T2782] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 89.376090][ T2778] ext4 filesystem being remounted at /root/syzkaller.85T5xn/4/bus supports timestamps until 2038 (0x7fffffff) [ 89.377878][ T2782] ext4 filesystem being mounted at /root/syzkaller.Vf4KnT/27/file1 supports timestamps until 2038 (0x7fffffff) [ 89.401102][ T429] device bridge_slave_0 left promiscuous mode [ 89.423982][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.497516][ T2796] EXT4-fs error (device loop2): ext4_find_dest_de:2063: inode #12: block 32: comm syz.2.619: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 89.502509][ T2789] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 89.596861][ T2789] ext4 filesystem being mounted at /root/syzkaller.o7orv8/0/file1 supports timestamps until 2038 (0x7fffffff) [ 89.813596][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.059007][ T2801] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 90.068256][ T2801] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 90.090800][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.110506][ T2802] overlayfs: workdir and upperdir must be separate subtrees [ 90.137178][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.146306][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.154521][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.162597][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.235510][ T2805] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrquota,noinit_itable,nojournal_checksum,lazytime,,errors=continue [ 90.267185][ T2805] ext4 filesystem being mounted at /root/syzkaller.Vf4KnT/28/file0 supports timestamps until 2038 (0x7fffffff) [ 90.308521][ T2013] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /root/syzkaller.Vf4KnT/28/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 90.331877][ T2013] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /root/syzkaller.Vf4KnT/28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 90.367112][ T2790] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.374026][ T2790] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.381157][ T2013] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /root/syzkaller.Vf4KnT/28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 90.382345][ T2790] device bridge_slave_0 entered promiscuous mode [ 90.414744][ T2013] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /root/syzkaller.Vf4KnT/28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 90.421359][ T2790] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.531423][ T2790] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.587263][ T2013] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /root/syzkaller.Vf4KnT/28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 90.603836][ T2790] device bridge_slave_1 entered promiscuous mode [ 90.621782][ T2013] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.Vf4KnT/28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 90.652721][ T2826] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 90.654438][ T2013] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /root/syzkaller.Vf4KnT/28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 90.663925][ T2826] ext4 filesystem being mounted at /root/syzkaller.o7orv8/2/file1 supports timestamps until 2038 (0x7fffffff) [ 90.684906][ T2013] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 90.731080][ T23] audit: type=1400 audit(1719731317.500:336): avc: denied { relabelfrom } for pid=2810 comm="syz.4.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 90.759039][ T23] audit: type=1400 audit(1719731317.520:337): avc: denied { relabelto } for pid=2810 comm="syz.4.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 90.809347][ T2790] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.816259][ T2790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.823414][ T2790] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.830159][ T2790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.862192][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.907587][ T2832] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 90.916473][ T2832] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 91.004651][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.028542][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.035926][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.052583][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.060948][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.080452][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.087300][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.106643][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.128482][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.136823][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.143656][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.168728][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.187853][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.188454][ T2835] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 91.207870][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.219274][ T2835] ext4 filesystem being mounted at /root/syzkaller.85T5xn/7/bus supports timestamps until 2038 (0x7fffffff) [ 91.220649][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.258601][ T2835] EXT4-fs (loop2): Cannot change quota options when quota turned on [ 91.270309][ T2835] ext4 filesystem being remounted at /root/syzkaller.85T5xn/7/bus supports timestamps until 2038 (0x7fffffff) [ 91.296616][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.304776][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.313321][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.322733][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.343706][ T2840] EXT4-fs error (device loop2): ext4_find_dest_de:2063: inode #12: block 32: comm syz.2.631: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 91.346394][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.371041][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.397841][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.406176][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.414398][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.422615][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.497516][ T378] print_req_error: 20 callbacks suppressed [ 91.497528][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 91.515203][ T2837] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.533560][ T2837] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.544258][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.555912][ T2837] device bridge_slave_0 entered promiscuous mode [ 91.570261][ T378] buffer_io_error: 15 callbacks suppressed [ 91.570269][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 91.584080][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.595909][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 91.603923][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.617521][ T2848] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 91.626259][ T2848] ext4 filesystem being mounted at /root/syzkaller.85T5xn/8/file1 supports timestamps until 2038 (0x7fffffff) [ 91.638393][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 91.646610][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.658811][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 91.667000][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.677790][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 91.715363][ T2837] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.724586][ T2837] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.732555][ T2837] device bridge_slave_1 entered promiscuous mode [ 91.858948][ T2859] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 91.870072][ T2859] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 91.994648][ T2846] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 92.005276][ T2846] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 92.018371][ T2846] F2FS-fs (loop3): invalid crc value [ 92.036555][ T2846] F2FS-fs (loop3): Found nat_bits in checkpoint [ 92.043269][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.050857][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.068313][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.072938][ T2846] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 92.076845][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.083415][ T2846] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 92.091849][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.105416][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.113520][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.121727][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.129769][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.136613][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.143940][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.158277][ T2863] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrquota,noinit_itable,nojournal_checksum,lazytime,,errors=continue [ 92.161045][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.172618][ T2863] ext4 filesystem being mounted at /root/syzkaller.o7orv8/5/file0 supports timestamps until 2038 (0x7fffffff) [ 92.235366][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.307837][ T2737] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /root/syzkaller.o7orv8/5/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 92.336905][ T2737] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /root/syzkaller.o7orv8/5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 92.361612][ T2737] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /root/syzkaller.o7orv8/5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 92.800137][ T2737] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /root/syzkaller.o7orv8/5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 92.849450][ T2737] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /root/syzkaller.o7orv8/5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 92.874834][ T2880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.639'. [ 92.884651][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.892751][ T2737] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.o7orv8/5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 92.916917][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.923787][ T2737] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /root/syzkaller.o7orv8/5/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 92.936573][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.955084][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.955291][ T2737] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 92.963462][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.982645][ T2880] fuse: blksize only supported for fuseblk [ 92.985036][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.027505][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.035667][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.048781][ T2885] netlink: 32 bytes leftover after parsing attributes in process `syz.2.638'. [ 93.049144][ T74] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 93.153040][ T23] audit: type=1400 audit(1719731319.920:338): avc: denied { map } for pid=2893 comm="syz.1.630" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 93.212802][ T2889] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 93.251022][ T2889] ext4 filesystem being mounted at /root/syzkaller.85T5xn/10/bus supports timestamps until 2038 (0x7fffffff) [ 93.251060][ T429] device bridge_slave_1 left promiscuous mode [ 93.281037][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.294759][ T2889] EXT4-fs (loop2): Cannot change quota options when quota turned on [ 93.302958][ T2889] ext4 filesystem being remounted at /root/syzkaller.85T5xn/10/bus supports timestamps until 2038 (0x7fffffff) [ 93.350483][ T429] device bridge_slave_0 left promiscuous mode [ 93.360880][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.368316][ T429] device bridge_slave_1 left promiscuous mode [ 93.375198][ T2911] EXT4-fs error (device loop2): ext4_find_dest_de:2063: inode #12: block 32: comm syz.2.641: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 93.396515][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.479617][ T74] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.593663][ T2913] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 93.604539][ T74] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.621592][ T2913] ext4 filesystem being mounted at /root/syzkaller.Fg7xFU/7/file1 supports timestamps until 2038 (0x7fffffff) [ 93.633562][ T74] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 93.642976][ T74] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.704695][ T74] usb 4-1: config 0 descriptor?? [ 93.913467][ T2919] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 93.922259][ T2919] ext4 filesystem being mounted at /root/syzkaller.85T5xn/11/file1 supports timestamps until 2038 (0x7fffffff) [ 94.027322][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.034264][ T2902] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.041925][ T2902] device bridge_slave_0 entered promiscuous mode [ 94.053959][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.201577][ T2934] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 94.210705][ T2934] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 94.298942][ T2902] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.306784][ T2902] device bridge_slave_1 entered promiscuous mode [ 94.307365][ T74] belkin 0003:1020:0006.0006: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.3-1/input0 [ 94.335555][ T23] audit: type=1400 audit(1719731321.100:339): avc: denied { shutdown } for pid=2935 comm="syz.1.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.364739][ T2940] fuse: Unknown parameter '000000000000000000050x0000000000000008' [ 94.406174][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.413135][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.420248][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.427207][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.474477][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.481983][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.490199][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.497957][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.513885][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.522158][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.529010][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.536228][ T2876] syz.3.622 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.536349][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.554413][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.561252][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.601635][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.613262][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.635950][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.647489][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.660625][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.681053][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.696621][ T74] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 94.697182][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.770860][ T2950] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 94.818256][ T2955] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 94.832193][ T2955] ext4 filesystem being mounted at /root/syzkaller.X8wrKS/2/bus supports timestamps until 2038 (0x7fffffff) [ 94.861768][ T2955] EXT4-fs (loop0): Cannot change quota options when quota turned on [ 94.869826][ T2955] ext4 filesystem being remounted at /root/syzkaller.X8wrKS/2/bus supports timestamps until 2038 (0x7fffffff) [ 94.909724][ T2961] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 94.919214][ T2961] ext4 filesystem being mounted at /root/syzkaller.85T5xn/15/file1 supports timestamps until 2038 (0x7fffffff) [ 94.936533][ T74] usb 2-1: Using ep0 maxpacket: 16 [ 94.950269][ T2965] EXT4-fs error (device loop0): ext4_find_dest_de:2063: inode #12: block 32: comm syz.0.658: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 95.236638][ T74] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.247452][ T74] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.257355][ T74] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.270206][ T74] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 95.279430][ T74] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.293095][ T74] usb 2-1: config 0 descriptor?? [ 95.386401][ T23] audit: type=1400 audit(1719731322.150:340): avc: denied { read } for pid=2978 comm="syz.0.662" dev="sockfs" ino=32222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.411130][ T2980] 9pnet: Insufficient options for proto=fd [ 95.577101][ T429] device bridge_slave_1 left promiscuous mode [ 95.583129][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.590674][ T429] device bridge_slave_0 left promiscuous mode [ 95.596721][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.654572][ T18] usb 4-1: USB disconnect, device number 9 [ 95.663123][ T2790] attempt to access beyond end of device [ 95.663123][ T2790] loop3: rw=2049, want=45104, limit=40427 [ 95.762400][ T3002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.670'. [ 95.848537][ T3004] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 95.863882][ T3004] ext4 filesystem being mounted at /root/syzkaller.85T5xn/23/bus supports timestamps until 2038 (0x7fffffff) [ 95.891506][ T3004] EXT4-fs (loop2): Cannot change quota options when quota turned on [ 95.903876][ T3004] ext4 filesystem being remounted at /root/syzkaller.85T5xn/23/bus supports timestamps until 2038 (0x7fffffff) [ 95.984548][ T3016] EXT4-fs error (device loop2): ext4_find_dest_de:2063: inode #12: block 32: comm syz.2.671: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 96.014897][ T3013] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 96.035597][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 96.046974][ T3013] ext4 filesystem being mounted at /root/syzkaller.Fg7xFU/11/file1 supports timestamps until 2038 (0x7fffffff) [ 96.062494][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.073652][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 96.132510][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.146561][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 96.154958][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.167215][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 96.181019][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 96.189040][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 96.269960][ T3026] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 96.279131][ T3026] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 96.536627][ T13] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 96.643944][ T3027] F2FS-fs (loop0): invalid crc value [ 96.644254][ T23] audit: type=1400 audit(1719731323.410:341): avc: denied { mounton } for pid=3036 comm="syz.2.678" path="/root/syzkaller.85T5xn/26/file1/file0" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 96.655141][ T3027] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.674622][ T3037] incfs: Can't find or create .incomplete dir in ./file0 [ 96.688956][ T3037] incfs: mount failed -22 [ 96.722674][ T3027] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.786540][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 96.916979][ T13] usb 4-1: config 1 has an invalid interface number: 8 but max is 2 [ 96.925060][ T13] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 96.935000][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.945289][ T13] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 96.954894][ T13] usb 4-1: config 1 has no interface number 0 [ 96.961063][ T13] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.316659][ T13] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.325601][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.333367][ T13] usb 4-1: Product: syz [ 97.337741][ T13] usb 4-1: Manufacturer: syz [ 97.342340][ T13] usb 4-1: SerialNumber: syz [ 97.410824][ T3058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.683'. [ 97.436594][ T74] usbhid 2-1:0.0: can't add hid device: -71 [ 97.442477][ T74] usbhid: probe of 2-1:0.0 failed with error -71 [ 97.450656][ T74] usb 2-1: USB disconnect, device number 13 [ 97.487324][ T2902] attempt to access beyond end of device [ 97.487324][ T2902] loop0: rw=2049, want=45104, limit=40427 [ 97.535934][ T3063] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 97.550760][ T3063] ext4 filesystem being mounted at /root/syzkaller.LCKgya/7/bus supports timestamps until 2038 (0x7fffffff) [ 97.572435][ T3063] EXT4-fs (loop1): Cannot change quota options when quota turned on [ 97.580355][ T3063] ext4 filesystem being remounted at /root/syzkaller.LCKgya/7/bus supports timestamps until 2038 (0x7fffffff) [ 97.712866][ T23] audit: type=1400 audit(1719731324.480:342): avc: denied { getopt } for pid=3067 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.811066][ T23] audit: type=1400 audit(1719731324.570:343): avc: denied { create } for pid=3021 comm="syz.3.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 97.830481][ T3071] EXT4-fs error (device loop1): ext4_find_dest_de:2063: inode #12: block 32: comm syz.1.685: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 97.871263][ T23] audit: type=1400 audit(1719731324.630:344): avc: denied { ioctl } for pid=3076 comm="syz.4.689" path="socket:[33611]" dev="sockfs" ino=33611 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.916712][ T3073] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 97.935578][ T3073] EXT4-fs error (device loop2): ext4_orphan_get:1236: inode #15: comm syz.2.688: iget: bad i_size value: -67835469387268086 [ 97.948420][ T3073] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz.2.688: couldn't read orphan inode 15 (err -117) [ 97.974216][ T3073] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 97.983231][ T3073] ext2 filesystem being mounted at /root/syzkaller.85T5xn/29/file0 supports timestamps until 2038 (0x7fffffff) [ 98.003569][ T3073] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 98.054829][ T3085] 9pnet: Insufficient options for proto=fd [ 98.071771][ T3083] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 98.082544][ T3083] ext4 filesystem being mounted at /root/syzkaller.LCKgya/8/file1 supports timestamps until 2038 (0x7fffffff) [ 98.359045][ T3094] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 98.368260][ T3094] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 98.641956][ T3106] F2FS-fs (loop2): invalid crc value [ 98.649183][ T3106] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.676152][ T3106] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 98.786562][ T355] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 99.003411][ T3117] overlayfs: missing 'workdir' [ 99.166022][ T3120] 9pnet: Insufficient options for proto=fd [ 99.172053][ T23] audit: type=1400 audit(1719731325.940:345): avc: denied { mount } for pid=3119 comm="syz.1.698" name="/" dev="configfs" ino=9902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 99.194558][ T355] usb 5-1: Using ep0 maxpacket: 16 [ 99.405362][ T2682] attempt to access beyond end of device [ 99.405362][ T2682] loop2: rw=2049, want=45104, limit=40427 [ 99.641656][ T355] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 99.650775][ T355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.659045][ T355] usb 5-1: Product: syz [ 99.668739][ T378] print_req_error: 8 callbacks suppressed [ 99.668752][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 99.685622][ T13] usb 4-1: 8:2 : does not exist [ 99.694848][ T355] usb 5-1: Manufacturer: syz [ 99.699825][ T13] usb 4-1: USB disconnect, device number 10 [ 99.708575][ T355] usb 5-1: SerialNumber: syz [ 99.709798][ T3126] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 99.714343][ T355] usb 5-1: config 0 descriptor?? [ 99.726635][ T3126] ext4 filesystem being mounted at /root/syzkaller.tfpKtU/3/file1 supports timestamps until 2038 (0x7fffffff) [ 99.777407][ T355] uvcvideo: Found UVC 0.00 device syz (045e:0721) [ 99.785061][ T355] uvcvideo: No valid video chain found. [ 99.901294][ T3134] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 99.915590][ T3134] ext4 filesystem being mounted at /root/syzkaller.85T5xn/34/bus supports timestamps until 2038 (0x7fffffff) [ 99.942288][ T3134] EXT4-fs (loop2): Cannot change quota options when quota turned on [ 99.950770][ T3134] ext4 filesystem being remounted at /root/syzkaller.85T5xn/34/bus supports timestamps until 2038 (0x7fffffff) [ 100.249135][ T3142] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 100.258268][ T3142] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 100.266598][ T3143] EXT4-fs error (device loop2): ext4_find_dest_de:2063: inode #12: block 32: comm syz.2.700: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 100.488190][ T3156] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 100.497318][ T3156] ext4 filesystem being mounted at /root/syzkaller.85T5xn/38/file1 supports timestamps until 2038 (0x7fffffff) [ 100.656604][ T121] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 100.704771][ T3161] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 100.721997][ T3161] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 100.839951][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 100.853815][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.864900][ T378] buffer_io_error: 5 callbacks suppressed [ 100.864909][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 100.878956][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.890032][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 100.898046][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.909417][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 100.917579][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.929889][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 100.938939][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.949918][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 100.990396][ T23] audit: type=1400 audit(1719731327.760:346): avc: denied { ioctl } for pid=3168 comm="syz.3.712" path="/dev/usbmon7" dev="devtmpfs" ino=194 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 101.023260][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 101.034444][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.035401][ T3173] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 101.045372][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 101.054275][ T3173] ext4 filesystem being mounted at /root/syzkaller.X8wrKS/11/file0 supports timestamps until 2038 (0x7fffffff) [ 101.061668][ T378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.083939][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 101.092118][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 101.094833][ T3173] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 101.105144][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 101.108459][ T3173] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 101.115784][ T378] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 101.138786][ T3173] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 22: comm syz.0.713: lblock 0 mapped to illegal pblock 22 (length 1) [ 101.153753][ T23] audit: type=1400 audit(1719731327.920:347): avc: denied { setattr } for pid=3172 comm="syz.0.713" path="/root/syzkaller.X8wrKS/11/file0/bus" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.166597][ T121] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.191227][ T121] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 101.198953][ T2902] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 22: comm syz-executor: lblock 0 mapped to illegal pblock 22 (length 1) [ 101.201539][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.215953][ T2902] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 3: comm syz-executor: lblock 8 mapped to illegal pblock 3 (length 1) [ 101.227941][ T121] usb 2-1: config 0 descriptor?? [ 101.237155][ T2902] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 4: comm syz-executor: lblock 9 mapped to illegal pblock 4 (length 1) [ 101.255957][ T2902] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 5: comm syz-executor: lblock 10 mapped to illegal pblock 5 (length 1) [ 101.269970][ T2902] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 6: comm syz-executor: lblock 11 mapped to illegal pblock 6 (length 1) [ 101.283927][ T2902] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 7: comm syz-executor: lblock 12 mapped to illegal pblock 7 (length 1) [ 101.288613][ T121] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 101.297906][ T2902] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 8: comm syz-executor: lblock 13 mapped to illegal pblock 8 (length 1) [ 101.307737][ T121] uvcvideo: No valid video chain found. [ 101.482486][ T13] usb 5-1: USB disconnect, device number 11 [ 101.505411][ T3180] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 101.519805][ T3180] ext4 filesystem being mounted at /root/syzkaller.85T5xn/39/bus supports timestamps until 2038 (0x7fffffff) [ 101.572123][ T3180] EXT4-fs (loop2): Cannot change quota options when quota turned on [ 101.589209][ T3180] ext4 filesystem being remounted at /root/syzkaller.85T5xn/39/bus supports timestamps until 2038 (0x7fffffff) [ 101.760572][ T3189] EXT4-fs error (device loop2): ext4_find_dest_de:2063: inode #12: block 32: comm syz.2.715: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 101.955818][ T23] audit: type=1400 audit(1719731328.720:348): avc: denied { create } for pid=3196 comm="syz.2.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.088950][ T23] audit: type=1400 audit(1719731328.850:349): avc: denied { create } for pid=3201 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.163583][ T23] audit: type=1400 audit(1719731328.850:350): avc: denied { write } for pid=3201 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.183699][ T23] audit: type=1400 audit(1719731328.850:351): avc: denied { nlmsg_read } for pid=3201 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.266548][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.435154][ T9] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 102.444524][ T3175] ------------[ cut here ]------------ [ 102.449772][ T3175] kernel BUG at fs/buffer.c:3027! [ 102.454796][ T3175] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 102.460652][ T3175] CPU: 1 PID: 3175 Comm: kmmpd-loop0 Tainted: G W 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 102.471755][ T3175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 102.481663][ T3175] RIP: 0010:submit_bh_wbc+0x831/0x850 [ 102.486859][ T3175] Code: 10 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 48 8b 7c 24 10 e8 00 8d ea ff e9 05 fe ff ff e8 e6 a7 ba ff 0f 0b e8 df a7 ba ff <0f> 0b e8 d8 a7 ba ff 0f 0b e8 d1 a7 ba ff 0f 0b e8 ca a7 ba ff 0f [ 102.506298][ T3175] RSP: 0018:ffff8881d125fbf0 EFLAGS: 00010293 [ 102.512204][ T3175] RAX: ffffffff81a99121 RBX: 0000000000000000 RCX: ffff8881e7b8de80 [ 102.520011][ T3175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.527824][ T3175] RBP: 0000000000003800 R08: ffffffff81a98994 R09: ffffed103a199b51 [ 102.535640][ T3175] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 102.543446][ T3175] R13: ffff8881d0ccda80 R14: 0000000000000001 R15: 0000000000000000 [ 102.551257][ T3175] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 102.560022][ T3175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.566447][ T3175] CR2: 0000000000000900 CR3: 00000001e4203000 CR4: 00000000003426a0 [ 102.574259][ T3175] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.582066][ T3175] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.589876][ T3175] Call Trace: [ 102.593012][ T3175] ? __die+0xb4/0x100 [ 102.596825][ T3175] ? die+0x26/0x50 [ 102.600389][ T3175] ? do_trap+0x1e7/0x340 [ 102.604463][ T3175] ? submit_bh_wbc+0x831/0x850 [ 102.609061][ T3175] ? submit_bh_wbc+0x831/0x850 [ 102.613662][ T3175] ? do_invalid_op+0xfb/0x110 [ 102.618173][ T3175] ? submit_bh_wbc+0x831/0x850 [ 102.622793][ T3175] ? invalid_op+0x1e/0x30 [ 102.626941][ T3175] ? submit_bh_wbc+0xa4/0x850 [ 102.631461][ T3175] ? submit_bh_wbc+0x831/0x850 [ 102.636063][ T3175] ? submit_bh_wbc+0x831/0x850 [ 102.640658][ T3175] ? debug_smp_processor_id+0x20/0x20 [ 102.645866][ T3175] submit_bh+0x21/0x30 [ 102.649780][ T3175] write_mmp_block+0x3ff/0x5b0 [ 102.654370][ T3175] ? console_conditional_schedule+0x10/0x10 [ 102.660097][ T3175] ? read_mmp_block+0x8a0/0x8a0 [ 102.664785][ T3175] kmmpd+0x7de/0xa10 [ 102.668529][ T3175] ? write_mmp_block+0x5b0/0x5b0 [ 102.673296][ T3175] ? __wake_up_locked+0xb7/0x110 [ 102.678074][ T3175] ? __kthread_parkme+0xb0/0x1b0 [ 102.682836][ T3175] kthread+0x2da/0x360 [ 102.686745][ T3175] ? write_mmp_block+0x5b0/0x5b0 [ 102.691517][ T3175] ? kthread_blkcg+0xd0/0xd0 [ 102.695943][ T3175] ret_from_fork+0x1f/0x30 [ 102.700192][ T3175] Modules linked in: [ 102.704685][ T3175] ---[ end trace a3093c39772141ac ]--- [ 102.710024][ T3175] RIP: 0010:submit_bh_wbc+0x831/0x850 [ 102.715233][ T3175] Code: 10 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 48 8b 7c 24 10 e8 00 8d ea ff e9 05 fe ff ff e8 e6 a7 ba ff 0f 0b e8 df a7 ba ff <0f> 0b e8 d8 a7 ba ff 0f 0b e8 d1 a7 ba ff 0f 0b e8 ca a7 ba ff 0f [ 102.736777][ T3175] RSP: 0018:ffff8881d125fbf0 EFLAGS: 00010293 [ 102.742734][ T3175] RAX: ffffffff81a99121 RBX: 0000000000000000 RCX: ffff8881e7b8de80 [ 102.750812][ T3175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.758838][ T3175] RBP: 0000000000003800 R08: ffffffff81a98994 R09: ffffed103a199b51 [ 102.766817][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 102.771954][ T3175] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 102.781103][ T3175] R13: ffff8881d0ccda80 R14: 0000000000000001 R15: 0000000000000000 [ 102.791117][ T3175] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 102.800128][ T3175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.806440][ T3175] CR2: 000000110c2fe394 CR3: 00000001edb03000 CR4: 00000000003426a0 [ 102.814310][ T3175] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.822183][ T3175] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.829946][ T3175] Kernel panic - not syncing: Fatal exception [ 102.835942][ T3175] Kernel Offset: disabled [ 102.840060][ T3175] Rebooting in 86400 seconds..