last executing test programs: 6.439947092s ago: executing program 1 (id=3975): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') 6.403360675s ago: executing program 1 (id=3977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000050000000000", @ANYRES32, @ANYBLOB="1f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, 0x0, &(0x7f00000001c0)}, 0x20) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00'}, 0x10) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) waitid(0x1, r4, 0x0, 0x8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x74, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31f}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x74}}, 0x0) 5.357463372s ago: executing program 1 (id=3978): renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000b80)=ANY=[@ANYBLOB='\x00llow_utime=00000000000000000000006,umask=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=default,namecase=1,fmask=00000000000000000000406,fmask=00000000000000000000005,fmask=00000000000000000000006,fmask=00000000000000000000003,iocharset=cp864,\x00'], 0x1, 0x1524, &(0x7f00000037c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) tkill(r4, 0x2e) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) ptrace$peeksig(0x4209, r4, &(0x7f0000000340)={0x4000000000, 0x1}, 0x0) 4.486855015s ago: executing program 1 (id=3986): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xffffffff, 0x0, 0x4, 0xffffffff, 0x4f77}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 4.325212318s ago: executing program 1 (id=3987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 4.17743134s ago: executing program 0 (id=3988): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000007007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.635634086s ago: executing program 2 (id=3991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x18, r1, 0x701, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004cc1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) 3.613408788s ago: executing program 4 (id=3993): pipe(&(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xe, 0x103ba, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f0000000180), 0x0}, 0x20) 3.533771005s ago: executing program 2 (id=3994): r0 = userfaultfd(0x801) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$eJzs3c9vG1kdAPDvTOImm81usrASPwRsWRYKqmon7m602tNyAaHVSogVJw7ZkLhRFDuOYmdpQiXS/wGJSpzgT+CAxAGpJ+7c4MalHJAKVKAGiYPRjCdpSOMkbRMb7M9HGs28eeP5vldr3nO/SfwCGFlXI2IvIq5ExMcRMVOcT4ot3u9u2XWPH91Z3n90ZzmJTuejvyV5fXYujrwm83Jxz8mI+N63I36YPB23tbO7vlSv17aKcqXd2Ky0dnZvrDWWVmurtY1qdWF+Ye7dm+9UL6yvbzR+9fBbax98/7e/+eKD3+9948dZs6aLuqP9uEjdrpcO42TGI+KDywg2AGNFf64MuiE8lzQiPhURb+bP/0yM5e/m+ZzwWAMA/wc6nZnozBwtAwDDLs1zYElaLnIB05Gm5XI3h/d6TKX1Zqt9/VZze2OlmyubjVJ6a61emytyhbNRSrLyfH78pFw9Vr4ZEa9FxE8nXsrL5eXz5xkAgIv18rH5/58T3fkfABhyk2ddsNifdgAA/XPm/A8ADB3zPwCMHvM/AIwe8z8AjB7zPwCMnmL+Hxt0OwCAvvjuhx9mW2e/+P7rlU92ttebn9xYqbXWy43t5fJyc2uzvNpsrtZr5eVm46z71ZvNzfm3Y/t2pV1rtSutnd3FRnN7o72Yf6/3Yq3Ul14BAKd57Y37f0wiYu+9l/ItjqzlYK6G4ZYOugHAwMj5w+jyLdwwuvwfHzhrLc+evyJ87zmCdX7yHC8CLtq1z8n/w6iS/4fRJf8Po0v+H0ZXp5P0WvM/PbwEABgqcvxAX3/+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAENiOt+StFysBT4daVouR7wSEbNRSm6t1WtzEfFqRPxhojSRlecH3WgA4AWlf0mK9b+uzbw1fbz2SvKviXwfET/6+Uc/u73Ubm/NZ+f/fni+fa84Xx1E+wGAsxzM0wfz+IHHj+4sH2z9bM/Db3YXF83i7hdbt2Y8xvP9ZJQiYuofSVHuyj6vjF1A/L27EfHZk/qf5LmR2WLl0+Pxs9iv9DV++l/x07yuu8/+LT79DDHPWusVRsX9bPx5/6TnL42r+X7yxMWPJ/MR6sUdjH/7T41/6eH4N9Zj/Lt63hhv/+47PevuRnx+/KT4yWH8pEf8t84Z/09f+NKbveo6v4i4FifHPxqr0m5sVlo7uzfWGkurtdXaRrW6ML8w9+7Nd6qVPEddOchUP+2v711/9bT+T/WIP3lG/796aq87EwdHv/z3xz/48inxv/6Vk9//10+Jn82JXzs1/hNLU7/uuXx3Fn+l2/+7z/r+Xz9n/Ad/3l0556UAQB+0dnbXl+r12taFHpTigm945CC5pDY7GPKD7PP4i97nM0XK7H+gO5d9MOiRCbhsTx76QbcEAAAAAAAAAAAAAADo5dL/nCgddA8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYZv8JAAD//wqryik=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r1, 0x0) ftruncate(r1, 0x801da) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 3.533248934s ago: executing program 4 (id=3996): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 3.524563265s ago: executing program 4 (id=3997): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000500)) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x0, 0x10000}}, @TCA_TBF_RATE64={0xc, 0x4, 0xa92c8ccfe08dc33}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@deltclass={0x24, 0x2a, 0x1, 0x200, 0x0, {0x0, 0x0, 0x0, r3, {0xfffd}, {0x10}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 3.479527999s ago: executing program 4 (id=3998): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) getdents64(r0, &(0x7f0000000000)=""/156, 0x9c) 3.437469252s ago: executing program 2 (id=3999): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'vlan1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r2], 0x20}}, 0x0) 3.437148192s ago: executing program 4 (id=4000): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x550d, &(0x7f0000005dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1e3340, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4004f506, &(0x7f0000000240)) 3.215134221s ago: executing program 0 (id=4001): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a170060000000"]) 3.173081515s ago: executing program 2 (id=4002): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.993515593s ago: executing program 0 (id=4003): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="240000002d000100000000000000", @ANYRES32, @ANYBLOB="0b08a2ad346fb147e9e13002"], 0x24}], 0x1}, 0x0) getgroups(0x0, 0x0) setregid(0x0, 0x0) socket(0x2a, 0x3, 0x410001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$inet6(0xa, 0x2, 0x0) 1.765683422s ago: executing program 3 (id=4006): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r6}, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) 1.733798745s ago: executing program 2 (id=4007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1.733240255s ago: executing program 2 (id=4008): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) 1.565531669s ago: executing program 0 (id=4009): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000080)={0xa, 0x4e03, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000004140)={0xa, 0x4ea3, 0x8000, @mcast2, 0x2db}, 0x1c, 0x0}}], 0x2, 0x4004880) 1.55829078s ago: executing program 0 (id=4010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600001785000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='rpc_request\x00', r5}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x10, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.495566315s ago: executing program 3 (id=4011): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x8004587d, &(0x7f0000001ec0)={@id={0x2, 0x0, @auto="de60e4b8e8c640437d02438081fc0e47"}}) 1.153554303s ago: executing program 3 (id=4012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) clock_gettime(0x8, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200"], 0xfe44, 0x0) 1.012955725s ago: executing program 3 (id=4013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x60000, 0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10400}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x6c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 215.073442ms ago: executing program 0 (id=4014): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r6}, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f00000002c0)=@chain) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) 214.780992ms ago: executing program 4 (id=4015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 81.531772ms ago: executing program 3 (id=4016): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) sendto$inet(r0, &(0x7f0000000240)="7b00008924", 0x5, 0x0, 0x0, 0x0) 46.150796ms ago: executing program 3 (id=4017): socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000001740)=[{&(0x7f0000000100)="83", 0x1}], 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fstatfs(0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=3990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000028000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000000700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000e9ff56080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) kernel console output (not intermixed with test programs): comm="syz.2.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d4d7dff9 code=0x7ffc0000 [ 1172.092671][T18972] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1172.100179][ T8] device veth0_vlan left promiscuous mode [ 1172.121752][ T28] audit: type=1326 audit(2000000897.400:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18984 comm="syz.2.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe7d4d7dff9 code=0x7ffc0000 [ 1172.145170][T18972] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1172.179063][ T28] audit: type=1326 audit(2000000897.400:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18984 comm="syz.2.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d4d7dff9 code=0x7ffc0000 [ 1172.230097][ T28] audit: type=1326 audit(2000000897.400:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18984 comm="syz.2.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d4d7dff9 code=0x7ffc0000 [ 1172.253587][ T28] audit: type=1326 audit(2000000897.400:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18984 comm="syz.2.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe7d4d7dff9 code=0x7ffc0000 [ 1172.277373][ T28] audit: type=1326 audit(2000000897.400:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18984 comm="syz.2.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d4d7dff9 code=0x7ffc0000 [ 1172.327621][T18994] loop1: detected capacity change from 0 to 512 [ 1172.619056][T18994] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1172.635038][T15874] kworker/u4:9: attempt to access beyond end of device [ 1172.635038][T15874] loop4: rw=2049, sector=40960, nr_sectors = 48 limit=40427 [ 1173.658640][ T7731] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1173.818163][T18956] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 0 [ 1173.835247][T18956] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 1024 [ 1173.853892][T18956] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1173.869971][T18956] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 3072 [ 1173.884915][T18956] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 5120 [ 1173.900296][T18956] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 8192 [ 1173.915320][T18956] EXT4-fs error (device loop3): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory block failed checksum [ 1173.927621][T18956] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 0 [ 1173.942233][T18956] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 1024 [ 1173.957434][T18956] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1173.972842][T18956] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 3072 [ 1173.987647][T18956] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 5120 [ 1174.003060][T18956] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1174.020178][T18956] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1174.037522][T18956] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1174.054355][T18956] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1174.070782][T18956] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1174.100338][T19017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3671'. [ 1174.109270][T19017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3671'. [ 1174.109888][T18956] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1174.137765][T18956] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1174.161640][T18956] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1174.178515][T18549] EXT4-fs (loop1): unmounting filesystem. [ 1174.216819][ T7731] usb 3-1: not running at top speed; connect to a high speed hub [ 1174.306751][ T7731] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1174.315506][ T7731] usb 3-1: config 1 has no interface number 1 [ 1174.321506][ T7731] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1174.336123][T18956] EXT4-fs (loop3): unmounting filesystem. [ 1174.743080][T19023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.750165][T19023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.757503][T19023] device bridge_slave_0 entered promiscuous mode [ 1174.764271][T19023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.771298][ T7731] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1174.780360][T19023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.787292][ T7731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.795473][T19023] device bridge_slave_1 entered promiscuous mode [ 1174.801742][ T7731] usb 3-1: Product: á› [ 1174.807867][ T7731] usb 3-1: Manufacturer: ä» [ 1174.814057][ T7731] usb 3-1: SerialNumber: syz [ 1174.875677][T19025] loop4: detected capacity change from 0 to 40427 [ 1174.878467][T19023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.888811][T19023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.895856][T19023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.902685][T19023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.910658][T19025] F2FS-fs (loop4): invalid crc value [ 1174.916980][T19025] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1174.936470][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1174.944467][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.951682][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.960924][T19025] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1174.982002][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1174.990021][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.996958][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.004437][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1175.012689][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.019537][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1175.036003][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1175.043806][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1175.060204][T19023] device veth0_vlan entered promiscuous mode [ 1175.069333][T18998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.081693][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1175.116215][T18998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.331635][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1175.339468][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1175.346611][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1175.355598][ T2851] device bridge_slave_1 left promiscuous mode [ 1175.361641][ T2851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.369023][ T2851] device bridge_slave_0 left promiscuous mode [ 1175.375147][ T2851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.383037][ T2851] device veth1_macvtap left promiscuous mode [ 1175.388947][ T2851] device veth0_vlan left promiscuous mode [ 1175.411982][T18998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.421329][T18998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.491557][T19023] device veth1_macvtap entered promiscuous mode [ 1175.498059][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1175.505994][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1175.513921][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1175.516881][ T7731] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1175.532317][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1175.540463][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1175.548626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1175.556574][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1175.561288][ T7731] usb 3-1: USB disconnect, device number 22 [ 1175.653427][T18847] syz-executor: attempt to access beyond end of device [ 1175.653427][T18847] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1175.716854][ T39] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1175.777870][ T863] udevd[863]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1175.986729][ T39] usb 2-1: device descriptor read/64, error -71 [ 1176.063653][T19048] loop4: detected capacity change from 0 to 40427 [ 1176.070343][T19048] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1176.078219][T19048] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1176.091778][T19048] F2FS-fs (loop4): invalid crc value [ 1176.137489][T19048] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1176.196933][T19048] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1176.203778][T19048] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1176.292349][T19051] loop2: detected capacity change from 0 to 40427 [ 1176.316572][T19051] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1176.323724][T19051] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1176.332898][T19051] F2FS-fs (loop2): invalid crc value [ 1176.339435][T19051] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1176.342639][T19053] loop3: detected capacity change from 0 to 40427 [ 1176.368842][T19053] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 1176.376799][ T39] usb 2-1: device descriptor read/64, error -71 [ 1176.381726][T19053] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1176.402728][T19053] F2FS-fs (loop3): invalid crc value [ 1176.404070][T19051] F2FS-fs (loop2): Start checkpoint disabled! [ 1176.422056][T19053] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1176.426146][T19051] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1176.435053][T19051] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1176.525110][T19053] F2FS-fs (loop3): Start checkpoint disabled! [ 1176.533082][T19053] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1176.540053][T19053] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1177.436382][ T39] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1177.495432][T13622] kworker/u4:8: attempt to access beyond end of device [ 1177.495432][T13622] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1177.509761][ T8] kworker/u4:0: attempt to access beyond end of device [ 1177.509761][ T8] loop2: rw=2049, sector=40960, nr_sectors = 48 limit=40427 [ 1177.736763][ T39] usb 2-1: device descriptor read/64, error -71 [ 1177.861447][T19076] loop2: detected capacity change from 0 to 40427 [ 1177.885453][T19076] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1177.906724][T19076] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1177.915698][T19076] F2FS-fs (loop2): invalid crc value [ 1177.967626][T19076] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1178.087131][T19076] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1178.094217][T19076] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1178.126749][ T39] usb 2-1: device descriptor read/64, error -71 [ 1178.207873][T19080] loop4: detected capacity change from 0 to 40427 [ 1178.214617][T19080] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1178.222526][T19080] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1178.231287][T19080] F2FS-fs (loop4): invalid crc value [ 1178.237854][T19080] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1178.246891][ T39] usb usb2-port1: attempt power cycle [ 1178.271701][T19080] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1178.278595][T19080] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1178.474402][T19091] loop1: detected capacity change from 0 to 512 [ 1178.514795][ T320] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1178.524033][ T320] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1178.631435][T19096] loop2: detected capacity change from 0 to 512 [ 1178.649064][T19093] loop3: detected capacity change from 0 to 40427 [ 1178.656758][ T39] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1178.662093][T19093] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1178.671877][T19093] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1178.674928][T13622] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1178.681143][T19093] F2FS-fs (loop3): invalid crc value [ 1178.694061][T13622] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1178.699978][T19096] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1178.713062][T19093] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1178.718492][T19096] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038 (0x7fffffff) [ 1178.805085][T19093] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1178.812011][T19093] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1178.989864][T19106] loop4: detected capacity change from 0 to 40427 [ 1179.046843][ T39] usb 2-1: device descriptor read/8, error -71 [ 1179.066798][T19106] F2FS-fs (loop4): invalid crc value [ 1179.111309][T19106] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1179.217977][T19106] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1179.348494][ T39] usb 2-1: device descriptor read/8, error -71 [ 1179.569958][T18200] EXT4-fs (loop2): unmounting filesystem. [ 1179.656816][ T39] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1179.778661][T19116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.785524][T19116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.793101][T19116] device bridge_slave_0 entered promiscuous mode [ 1179.799959][T19116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.806838][T19116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.814055][T19116] device bridge_slave_1 entered promiscuous mode [ 1179.850112][T18847] syz-executor: attempt to access beyond end of device [ 1179.850112][T18847] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1179.886799][ T39] usb 2-1: device descriptor read/8, error -71 [ 1179.927709][T19116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.934607][T19116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.941751][T19116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.948535][T19116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.973208][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1179.981975][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.993701][ T1341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.016798][ T388] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1180.025101][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1180.033115][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.040060][ T7731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1180.047246][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1180.055205][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.062054][ T7731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1180.070560][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1180.078805][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1180.092687][T19116] device veth0_vlan entered promiscuous mode [ 1180.102322][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1180.110688][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1180.118783][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1180.126012][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1180.136819][ T5991] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 1180.156760][ T39] usb 2-1: device descriptor read/8, error -71 [ 1180.162913][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1180.171950][T19116] device veth1_macvtap entered promiscuous mode [ 1180.184275][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1180.206809][T18604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1180.214280][T19128] loop4: detected capacity change from 0 to 40427 [ 1180.226012][T19128] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 1180.233179][T19128] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1180.242022][T19128] F2FS-fs (loop4): invalid crc value [ 1180.248719][T19128] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1180.256885][ T388] usb 3-1: Using ep0 maxpacket: 32 [ 1180.286964][ T39] usb usb2-port1: unable to enumerate USB device [ 1180.295329][T19128] F2FS-fs (loop4): Start checkpoint disabled! [ 1180.302173][T19128] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1180.309146][T19128] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1180.551565][T13622] device bridge_slave_1 left promiscuous mode [ 1180.566956][ T388] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1180.600866][T13622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.617614][ T388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.653197][T13622] device bridge_slave_0 left promiscuous mode [ 1180.670468][ T388] usb 3-1: Product: syz [ 1180.678451][T13622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.684315][ T388] usb 3-1: Manufacturer: syz [ 1180.689977][ T388] usb 3-1: SerialNumber: syz [ 1180.691712][T19137] loop0: detected capacity change from 0 to 40427 [ 1180.700871][ T388] usb 3-1: config 0 descriptor?? [ 1180.701910][T13622] device veth1_macvtap left promiscuous mode [ 1180.709024][T19137] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 1180.712590][T13622] device veth0_vlan left promiscuous mode [ 1180.718539][T19137] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1180.731667][T19137] F2FS-fs (loop0): Unrecognized mount option "ÇyÛÑ +¡/õñÇJ¨€÷Ì`µù' [ 1180.731667][T19137]  0Ž«® _¥ [ 1180.731667][T19137] ¾|)øM2{Âç+¿¡ÐñÞ1G >y26ֳܒiÄeéeØóü|)Ïç»â[›øÁ_™ðeéí’™ýY‘w®Zõ™O*é™m<†Uø +Æ|Îs" or missing value [ 1180.816882][ T5991] usb 4-1: not running at top speed; connect to a high speed hub [ 1180.892783][ T2851] kworker/u4:7: attempt to access beyond end of device [ 1180.892783][ T2851] loop4: rw=2049, sector=40960, nr_sectors = 48 limit=40427 [ 1180.921045][ T5991] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1180.936728][ T5991] usb 4-1: config 1 has no interface number 1 [ 1180.942613][ T5991] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1180.965313][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1180.965327][ T28] audit: type=1400 audit(2000000906.630:3824): avc: denied { unlink } for pid=19133 comm="syz.0.3693" name="#f" dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1181.186767][ T5991] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1181.198745][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.214742][ T5991] usb 4-1: Product: á› [ 1181.224141][ T5991] usb 4-1: Manufacturer: ä» [ 1181.233698][ T5991] usb 4-1: SerialNumber: syz [ 1181.396510][T19148] loop4: detected capacity change from 0 to 40427 [ 1181.403231][T19148] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1181.417448][T19148] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1181.426089][T19148] F2FS-fs (loop4): invalid crc value [ 1181.432393][T19148] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1181.474558][T19148] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1181.481446][T19148] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1181.497982][T19126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.506236][T19126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.686777][ T388] (unnamed net_device) (uninitialized): Assigned a random MAC address: 3e:89:e6:65:76:39 [ 1181.698425][ T388] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 1181.705096][ T388] usb 3-1: USB disconnect, device number 23 [ 1181.709920][ T28] audit: type=1400 audit(2000000907.370:3825): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1181.732854][T19126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.741545][T19126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.836802][ T5991] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1181.858825][ T5991] usb 4-1: USB disconnect, device number 122 [ 1182.077210][ T863] udevd[863]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1182.128429][ T320] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1182.137610][ T320] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1182.160743][T19159] loop0: detected capacity change from 0 to 1024 [ 1182.182727][T19159] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1182.192482][T19159] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1182.207548][T19159] EXT4-fs error (device loop0): ext4_get_journal_inode:5720: inode #5: comm syz.0.3699: unexpected bad inode w/o EXT4_IGET_BAD [ 1182.220660][T19159] EXT4-fs (loop0): no journal found [ 1182.225728][T19159] EXT4-fs (loop0): can't get journal size [ 1182.237269][T19159] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1182.266783][T19159] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3699: bg 0: block 32: padding at end of block bitmap is not set [ 1182.283373][T19165] loop3: detected capacity change from 0 to 512 [ 1182.355209][T19165] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1182.374262][T19165] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 1182.405212][T19162] loop2: detected capacity change from 0 to 40427 [ 1182.460908][T19162] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1182.478159][T19162] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1182.487136][T19162] F2FS-fs (loop2): invalid crc value [ 1182.493667][T19162] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1182.677335][T19162] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1182.707061][T19162] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1182.766814][T19167] loop4: detected capacity change from 0 to 40427 [ 1182.813580][T19167] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1182.826728][T19167] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1182.835521][T19167] F2FS-fs (loop4): invalid crc value [ 1182.847751][T19167] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1182.876779][ T5991] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1182.934026][T19167] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1182.940975][T19167] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1183.724939][T19023] EXT4-fs (loop3): unmounting filesystem. [ 1183.848359][T19187] loop3: detected capacity change from 0 to 40427 [ 1183.879014][T19187] F2FS-fs (loop3): invalid crc value [ 1183.884330][ T5991] usb 1-1: Using ep0 maxpacket: 8 [ 1183.890242][T19187] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1183.925140][ T2851] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1183.934243][ T2851] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1183.943378][T19187] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1184.372939][T19202] loop2: detected capacity change from 0 to 1024 [ 1184.386322][T19202] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1184.395942][T19202] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1184.406445][T19202] EXT4-fs error (device loop2): ext4_get_journal_inode:5720: inode #5: comm syz.2.3706: unexpected bad inode w/o EXT4_IGET_BAD [ 1184.419717][T19202] EXT4-fs (loop2): no journal found [ 1184.424750][T19202] EXT4-fs (loop2): can't get journal size [ 1184.431036][T19202] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1184.496795][ T5991] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 1184.505210][T19200] loop4: detected capacity change from 0 to 40427 [ 1184.505867][ T5991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.519823][ T5991] usb 1-1: Product: syz [ 1184.523741][ T5991] usb 1-1: Manufacturer: syz [ 1184.528216][ T5991] usb 1-1: SerialNumber: syz [ 1184.533260][ T5991] usb 1-1: config 0 descriptor?? [ 1184.537158][T19200] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 1184.544790][T19200] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1184.553917][T19200] F2FS-fs (loop4): invalid crc value [ 1184.560423][T19200] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1184.587311][ T5991] usb_ehset_test: probe of 1-1:0.0 failed with error -32 [ 1184.596307][T19200] F2FS-fs (loop4): Start checkpoint disabled! [ 1184.603001][T19200] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1184.609907][T19200] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1184.676527][T19023] syz-executor: attempt to access beyond end of device [ 1184.676527][T19023] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1184.736841][ T39] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1184.912154][ T7728] usb 1-1: USB disconnect, device number 39 [ 1184.996725][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 1185.008467][T19212] loop3: detected capacity change from 0 to 1024 [ 1185.015195][T19212] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1185.025408][T19212] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1185.035508][T19212] EXT4-fs error (device loop3): ext4_get_journal_inode:5720: inode #5: comm syz.3.3707: unexpected bad inode w/o EXT4_IGET_BAD [ 1185.048773][T19212] EXT4-fs (loop3): no journal found [ 1185.053779][T19212] EXT4-fs (loop3): can't get journal size [ 1185.060799][T19212] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1185.079344][ T320] kworker/u4:3: attempt to access beyond end of device [ 1185.079344][ T320] loop4: rw=2049, sector=40960, nr_sectors = 48 limit=40427 [ 1185.235000][T19216] loop4: detected capacity change from 0 to 40427 [ 1185.241797][T19216] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1185.249468][T19216] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1185.258092][T19216] F2FS-fs (loop4): invalid crc value [ 1185.264334][T19216] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1185.286775][ T39] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 1185.295633][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.299802][T19216] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1185.303459][ T39] usb 3-1: Product: syz [ 1185.310795][T19216] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1185.314407][ T39] usb 3-1: Manufacturer: syz [ 1185.326270][ T39] usb 3-1: SerialNumber: syz [ 1185.331620][ T39] usb 3-1: config 0 descriptor?? [ 1185.366762][ T5991] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1185.384734][ T39] usb_ehset_test: probe of 3-1:0.0 failed with error -32 [ 1185.518740][T19116] EXT4-fs (loop0): unmounting filesystem. [ 1185.617376][ T39] usb 3-1: USB disconnect, device number 24 [ 1185.646768][ T5991] usb 4-1: Using ep0 maxpacket: 8 [ 1185.681401][T19226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.688551][T19226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.695835][T19226] device bridge_slave_0 entered promiscuous mode [ 1185.703176][T19226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.710242][T19226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.717615][T19226] device bridge_slave_1 entered promiscuous mode [ 1185.920224][T19226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.927096][T19226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.934187][T19226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.940983][T19226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.949235][ T5991] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 1185.958339][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.966197][ T5991] usb 4-1: Product: syz [ 1185.970424][ T5991] usb 4-1: Manufacturer: syz [ 1185.974919][ T5991] usb 4-1: SerialNumber: syz [ 1185.989324][ T5991] usb 4-1: config 0 descriptor?? [ 1186.008521][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1186.027289][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.028336][ T2851] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1186.043070][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.043645][ T2851] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1186.051188][ T5991] usb_ehset_test: probe of 4-1:0.0 failed with error -32 [ 1186.101737][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1186.110197][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1186.119508][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.126345][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.156795][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1186.164749][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.171594][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1186.183580][T18200] EXT4-fs (loop2): unmounting filesystem. [ 1186.214557][T19233] loop2: detected capacity change from 0 to 128 [ 1186.222315][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1186.233437][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1186.256538][ T39] usb 4-1: USB disconnect, device number 123 [ 1186.271572][T19226] device veth0_vlan entered promiscuous mode [ 1186.287966][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1186.295879][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1186.304284][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1186.309568][T19233] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1186.337342][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1186.342314][T19233] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038 (0x7fffffff) [ 1186.361301][T19226] device veth1_macvtap entered promiscuous mode [ 1186.387881][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1186.410244][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1186.486732][T19235] loop4: detected capacity change from 0 to 40427 [ 1186.494216][T19235] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1186.502230][T19235] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1186.511239][T19235] F2FS-fs (loop4): invalid crc value [ 1186.537433][ T320] device bridge_slave_1 left promiscuous mode [ 1186.543358][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.557216][ T320] device bridge_slave_0 left promiscuous mode [ 1186.566770][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.579798][T19235] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1186.594411][ T320] device veth1_macvtap left promiscuous mode [ 1186.610440][ T320] device veth0_vlan left promiscuous mode [ 1186.696082][T19247] loop1: detected capacity change from 0 to 512 [ 1186.707517][T19245] loop0: detected capacity change from 0 to 1024 [ 1186.827052][T19245] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1186.877950][T19245] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1186.877985][T19235] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1186.888476][T19245] EXT4-fs error (device loop0): ext4_get_journal_inode:5720: inode #5: comm syz.0.3713: unexpected bad inode w/o EXT4_IGET_BAD [ 1186.895213][T19023] EXT4-fs (loop3): unmounting filesystem. [ 1186.912976][T19235] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1186.920739][T19245] EXT4-fs (loop0): no journal found [ 1186.933089][T19247] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1186.940186][T19247] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 1186.944590][T19245] EXT4-fs (loop0): can't get journal size [ 1186.948965][T19247] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 1186.964542][T19247] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.3710: Failed to acquire dquot type 0 [ 1186.976055][T19247] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 1186.984856][T19247] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 1186.994389][T19247] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.3710: Failed to acquire dquot type 0 [ 1187.009312][T19247] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3710: bg 0: block 64: padding at end of block bitmap is not set [ 1187.026770][T19247] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 1187.035509][T19247] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 1187.044304][T19247] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 1187.053845][T19247] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.3710: Failed to acquire dquot type 0 [ 1187.067280][T19247] EXT4-fs (loop1): 1 orphan inode deleted [ 1187.073011][T19247] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1187.097453][T19245] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1187.134403][T19245] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3713: bg 0: block 32: padding at end of block bitmap is not set [ 1187.333835][T19252] loop3: detected capacity change from 0 to 40427 [ 1187.341057][T19252] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1187.373485][T19252] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1187.385916][T19226] EXT4-fs (loop1): unmounting filesystem. [ 1187.512810][T19252] F2FS-fs (loop3): invalid crc value [ 1187.586152][T19252] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1187.667586][T18200] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /44/file1/lost+found: directory fails checksum at offset 0 [ 1187.686787][ T1341] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1187.694409][T18200] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /44/file1/lost+found: directory fails checksum at offset 1024 [ 1187.724281][T18200] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1187.750018][T19252] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1187.756718][T18200] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /44/file1/lost+found: directory fails checksum at offset 3072 [ 1187.759894][T19252] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1187.787491][T18200] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /44/file1/lost+found: directory fails checksum at offset 5120 [ 1187.816316][T18200] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /44/file1/lost+found: directory fails checksum at offset 8192 [ 1187.832148][T18200] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory block failed checksum [ 1187.844558][T18200] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /44/file1/lost+found: directory fails checksum at offset 0 [ 1187.859477][T18200] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /44/file1/lost+found: directory fails checksum at offset 1024 [ 1187.874449][T18200] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1187.900105][T18200] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /44/file1/lost+found: directory fails checksum at offset 3072 [ 1187.937083][T18200] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /44/file1/lost+found: directory fails checksum at offset 5120 [ 1187.954919][T18200] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1187.970541][ T1341] usb 1-1: Using ep0 maxpacket: 8 [ 1187.987872][T18200] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1188.017895][T19264] loop1: detected capacity change from 0 to 40427 [ 1188.027015][T18200] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1188.043325][T19264] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1188.055029][T19264] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1188.063773][T18200] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1188.064279][T19264] F2FS-fs (loop1): invalid crc value [ 1188.116055][T18200] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1188.131783][T15877] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1188.141029][T15877] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1188.150798][T18200] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1188.177683][T19264] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1188.182837][T18200] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1188.200039][T18200] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1188.316208][T19264] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1188.316920][ T1341] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 1188.326787][T19264] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1188.338270][T19275] loop3: detected capacity change from 0 to 512 [ 1188.345490][ T1341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.355039][T19269] loop4: detected capacity change from 0 to 40427 [ 1188.369004][ T1341] usb 1-1: Product: syz [ 1188.373104][ T1341] usb 1-1: Manufacturer: syz [ 1188.378692][ T1341] usb 1-1: SerialNumber: syz [ 1188.386881][ T1341] usb 1-1: config 0 descriptor?? [ 1188.395180][T19269] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 1188.415195][T19269] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1188.424880][T19269] F2FS-fs (loop4): invalid crc value [ 1188.432454][T19269] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1188.439610][ T1341] usb_ehset_test: probe of 1-1:0.0 failed with error -32 [ 1188.463719][T18200] EXT4-fs (loop2): unmounting filesystem. [ 1188.469908][T19275] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #16: comm syz.3.3719: iget: bad extended attribute block 128 [ 1188.479340][T19269] F2FS-fs (loop4): Start checkpoint disabled! [ 1188.491619][T19275] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.3719: couldn't read orphan inode 16 (err -117) [ 1188.503610][T19275] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1188.512960][T19269] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1188.519948][T19269] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1188.527533][T19275] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038 (0x7fffffff) [ 1188.598469][T19283] incfs: Error accessing: ./file0. [ 1188.603504][T19283] incfs: mount failed -20 [ 1188.682809][ T39] usb 1-1: USB disconnect, device number 40 [ 1188.845772][T19281] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 352: padding at end of block bitmap is not set [ 1188.862272][T15874] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1188.879723][T19286] Quota error (device loop3): do_check_range: Getting dqdh_entries 964 out of range 0-14 [ 1188.889613][T19286] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1188.900130][T19286] EXT4-fs error (device loop3): ext4_acquire_dquot:6764: comm syz.3.3719: Failed to acquire dquot type 1 [ 1188.941680][T15874] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1188.963423][T19023] EXT4-fs (loop3): unmounting filesystem. [ 1189.262204][ T28] audit: type=1400 audit(2000000914.920:3826): avc: denied { create } for pid=19294 comm="syz.1.3722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1189.286789][ T39] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1189.296926][T15874] kworker/u4:9: attempt to access beyond end of device [ 1189.296926][T15874] loop4: rw=2049, sector=40960, nr_sectors = 48 limit=40427 [ 1189.325391][T19289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.332276][T19289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.339792][T19289] device bridge_slave_0 entered promiscuous mode [ 1189.346617][T19289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.353655][T19289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.361141][T19289] device bridge_slave_1 entered promiscuous mode [ 1189.434759][T19289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.441730][T19289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.448824][T19289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.455603][T19289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.463120][T19116] EXT4-fs (loop0): unmounting filesystem. [ 1189.475307][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.482411][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.987133][ T39] usb 4-1: too many configurations: 241, using maximum allowed: 8 [ 1190.559975][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1190.570914][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1190.571867][T19316] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3728'. [ 1190.578997][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1190.603726][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1190.616557][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.623428][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.633481][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1190.649648][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1190.659433][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.666273][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.707645][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1190.719396][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1190.739558][T15877] device bridge_slave_1 left promiscuous mode [ 1190.745499][T15877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.753087][T15877] device bridge_slave_0 left promiscuous mode [ 1190.760038][T15877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.772713][T15877] device veth1_macvtap left promiscuous mode [ 1190.779278][ T28] audit: type=1400 audit(2000000916.460:3827): avc: denied { create } for pid=19317 comm="syz.0.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1190.779533][T15877] device veth0_vlan left promiscuous mode [ 1191.083561][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1191.092353][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1191.575001][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1191.578273][T19330] loop0: detected capacity change from 0 to 512 [ 1191.591709][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1191.608145][T19330] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1191.611108][T19289] device veth0_vlan entered promiscuous mode [ 1191.622392][T19330] EXT4-fs (loop0): 1 truncate cleaned up [ 1191.629793][T19330] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1191.637220][T19289] device veth1_macvtap entered promiscuous mode [ 1191.713369][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1191.716886][T19330] request_module fs-ubifs succeeded, but still no fs? [ 1191.736955][ T39] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1191.887762][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1191.895292][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.904777][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1191.912609][ T39] usb 4-1: Product: syz [ 1191.916536][ T39] usb 4-1: Manufacturer: syz [ 1191.922617][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1191.930456][ T39] usb 4-1: SerialNumber: syz [ 1192.336779][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1192.766891][ T39] usb 4-1: can't set config #1, error -71 [ 1192.775154][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1192.782546][ T39] usb 4-1: USB disconnect, device number 124 [ 1192.788882][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1192.796160][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1192.796246][T19339] loop1: detected capacity change from 0 to 2048 [ 1192.805772][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1192.818410][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1192.826481][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1192.869060][T19116] EXT4-fs (loop0): unmounting filesystem. [ 1192.896220][T19339] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1192.955438][T19226] EXT4-fs (loop1): unmounting filesystem. [ 1193.552865][T19365] loop4: detected capacity change from 0 to 16 [ 1193.562184][T19365] erofs: (device loop4): mounted with root inode @ nid 36. [ 1194.657892][ T28] audit: type=1400 audit(2000000920.330:3828): avc: denied { read } for pid=19375 comm="syz.4.3747" path="socket:[116404]" dev="sockfs" ino=116404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1194.661537][T19380] loop2: detected capacity change from 0 to 1024 [ 1194.690776][T19380] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 1194.707670][T19380] EXT4-fs (loop2): write access will be enabled during recovery [ 1194.741585][T19387] loop1: detected capacity change from 0 to 1024 [ 1194.748153][T19387] EXT4-fs: Ignoring removed orlov option [ 1194.753620][T19387] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1194.756538][T19380] JBD2: no valid journal superblock found [ 1194.781805][T19387] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1194.805091][T19380] EXT4-fs (loop2): error loading journal [ 1194.827539][T19399] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3754'. [ 1195.184809][T19412] input: syz1 as /devices/virtual/input/input261 [ 1195.822115][ T28] audit: type=1400 audit(2000000921.490:3829): avc: denied { setattr } for pid=19386 comm="syz.1.3750" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1195.954111][T19383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.961052][T19383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.969470][T19383] device bridge_slave_0 entered promiscuous mode [ 1195.976425][T19383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.040404][T19383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.057129][T19383] device bridge_slave_1 entered promiscuous mode [ 1196.278818][T15877] device bridge_slave_1 left promiscuous mode [ 1196.310334][T15877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.419636][T15877] device bridge_slave_0 left promiscuous mode [ 1196.457356][T15877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.505144][T15877] device veth1_macvtap left promiscuous mode [ 1196.558897][T19226] EXT4-fs (loop1): unmounting filesystem. [ 1196.570096][T15877] device veth0_vlan left promiscuous mode [ 1197.151042][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x7 [ 1197.162105][ T6] hid-generic 0000:0000:0000.004A: ignoring exceeding usage max [ 1197.171242][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.179218][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.186457][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.193728][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.201525][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.237621][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.268768][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.294894][T19457] loop4: detected capacity change from 0 to 128 [ 1197.296295][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.301416][T19457] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1197.329126][T19457] EXT4-fs: error: could not find journal device path [ 1197.358200][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.375579][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.385875][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.405526][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.420519][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.438988][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.455154][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.470062][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.481567][T19383] device veth0_vlan entered promiscuous mode [ 1197.555077][T19459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1197.562315][T19459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1197.759538][T19383] device veth1_macvtap entered promiscuous mode [ 1197.763013][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.782751][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.790030][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.802369][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.817125][ T6] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1197.833129][ T6] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1197.853882][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1197.862475][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1197.870938][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1197.878954][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1197.886232][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1197.897459][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1197.906440][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1197.914458][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1197.929601][T19474] loop3: detected capacity change from 0 to 512 [ 1197.968763][T19474] EXT4-fs: Invalid want_extra_isize 3 [ 1198.223573][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1198.393357][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1198.423081][T19456] loop2: detected capacity change from 0 to 40427 [ 1198.441275][T19484] loop3: detected capacity change from 0 to 128 [ 1198.497521][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.504410][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1198.566507][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1198.567465][T19456] F2FS-fs (loop2): Image doesn't support compression [ 1198.575176][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1198.593900][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.600801][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1198.608342][T19484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1198.617200][T19484] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038 (0x7fffffff) [ 1198.630374][T19480] syz.3.3776 (pid 19480) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1198.644020][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1198.669441][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1198.674348][T19488] loop4: detected capacity change from 0 to 512 [ 1198.686227][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1198.696992][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1198.708657][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1198.709398][T19488] EXT4-fs: Ignoring removed bh option [ 1198.725387][T19456] F2FS-fs (loop2): invalid crc value [ 1198.725796][T19488] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1198.742862][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1198.744977][T19488] EXT4-fs (loop4): 1 orphan inode deleted [ 1199.159837][T19488] EXT4-fs (loop4): 1 truncate cleaned up [ 1199.165319][T19488] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1199.174586][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1199.195922][T19488] EXT4-fs error (device loop4): ext4_check_all_de:655: inode #12: block 7: comm syz.4.3779: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0 [ 1199.214907][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1199.224935][T19456] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1199.235195][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1199.253843][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1199.262092][T19488] EXT4-fs (loop4): Remounting filesystem read-only [ 1199.277087][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1199.291581][T18847] EXT4-fs (loop4): unmounting filesystem. [ 1199.307069][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1199.319475][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1199.327867][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1199.336279][T19023] EXT4-fs (loop3): unmounting filesystem. [ 1199.337500][T19456] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1199.349204][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1201.016758][ T6] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1201.121228][T19524] loop4: detected capacity change from 0 to 512 [ 1201.130499][T19526] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3790'. [ 1201.177811][T19524] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1201.189065][T19524] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1201.207165][T19524] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1201.213957][T19524] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.3789: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1201.231986][T19524] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.3789: couldn't read orphan inode 13 (err -117) [ 1201.260500][T19524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1201.369971][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 1201.384118][T18847] EXT4-fs (loop4): unmounting filesystem. [ 1201.833626][T19540] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1201.860820][ T6] usb 2-1: device descriptor read/all, error -71 [ 1202.052648][T19548] device syzkaller0 entered promiscuous mode [ 1202.307923][T19552] loop1: detected capacity change from 0 to 512 [ 1202.340323][T19552] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1202.382135][T19552] EXT4-fs (loop1): 1 truncate cleaned up [ 1202.388304][T19552] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1202.422282][T19563] loop2: detected capacity change from 0 to 128 [ 1202.506990][T19563] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1202.515580][T19563] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038 (0x7fffffff) [ 1202.955107][ T388] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1203.040358][ T28] audit: type=1400 audit(2000000928.710:3830): avc: denied { append } for pid=19559 comm="syz.2.3801" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1203.546350][T19289] EXT4-fs (loop2): unmounting filesystem. [ 1203.559757][T19226] EXT4-fs (loop1): unmounting filesystem. [ 1203.659307][ T28] audit: type=1400 audit(2000000929.330:3831): avc: denied { setopt } for pid=19580 comm="syz.2.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1203.679554][ T28] audit: type=1400 audit(2000000929.350:3832): avc: denied { read } for pid=19580 comm="syz.2.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1203.746739][ T388] usb 1-1: Using ep0 maxpacket: 8 [ 1203.757206][T19585] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3807'. [ 1203.896975][ T388] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1203.913215][ T388] usb 1-1: config 179 has no interface number 0 [ 1203.947569][ T388] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1204.014271][ T28] audit: type=1400 audit(2000000929.680:3833): avc: denied { wake_alarm } for pid=19587 comm="syz.3.3809" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1204.039469][ T388] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1204.050861][ T388] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1204.062134][ T388] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1204.073534][ T388] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1204.086942][ T388] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1204.095817][ T388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.126775][T19555] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1204.362865][ T388] usb 1-1: USB disconnect, device number 41 [ 1204.368668][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1204.368737][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1204.449716][ T6] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1204.498850][T19599] loop4: detected capacity change from 0 to 128 [ 1204.518155][ T863] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1204.700729][ T28] audit: type=1326 audit(2000000930.360:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.4.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fdad7dff9 code=0x7ffc0000 [ 1204.724148][ T28] audit: type=1326 audit(2000000930.360:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.4.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fdad7dff9 code=0x7ffc0000 [ 1204.747992][ T28] audit: type=1326 audit(2000000930.360:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.4.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2fdad7c897 code=0x7ffc0000 [ 1204.748080][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 1204.777965][ T28] audit: type=1326 audit(2000000930.360:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.4.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fdad7dff9 code=0x7ffc0000 [ 1204.801385][ T28] audit: type=1326 audit(2000000930.360:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.4.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fdad7dff9 code=0x7ffc0000 [ 1204.824853][ T28] audit: type=1326 audit(2000000930.360:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.4.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f2fdad7dff9 code=0x7ffc0000 [ 1204.926801][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.936874][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1204.949697][ T6] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1204.958854][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.969329][ T6] usb 2-1: config 0 descriptor?? [ 1205.038987][ T6] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1205.875621][T19583] device bridge_slave_1 left promiscuous mode [ 1205.901307][T19583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.908990][T19583] device bridge_slave_0 left promiscuous mode [ 1205.914927][T19583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.081790][T19611] loop0: detected capacity change from 0 to 40427 [ 1206.180521][T19611] F2FS-fs (loop0): invalid crc value [ 1206.196011][ T24] usb 2-1: USB disconnect, device number 31 [ 1206.277847][T19611] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1206.367502][T19611] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1206.710945][T19638] loop3: detected capacity change from 0 to 2048 [ 1206.777179][T19638] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1206.823631][T19647] F2FS-fs (loop0): switch extent_cache option is not allowed [ 1206.933259][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3825'. [ 1206.990682][T19383] syz-executor: attempt to access beyond end of device [ 1206.990682][T19383] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1207.040795][T19658] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1207.055527][T19658] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 1207.067704][T19658] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1207.067704][T19658] [ 1207.077214][T19658] EXT4-fs (loop3): Total free blocks count 0 [ 1207.083083][T19658] EXT4-fs (loop3): Free/Dirty block details [ 1207.088835][T19658] EXT4-fs (loop3): free_blocks=2415919104 [ 1207.094370][T19658] EXT4-fs (loop3): dirty_blocks=16 [ 1207.099338][T19658] EXT4-fs (loop3): Block reservation details [ 1207.105138][T19658] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 1207.113271][T19658] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 1207.310115][T19657] loop2: detected capacity change from 0 to 256 [ 1207.950328][T19682] netlink: 'syz.3.3836': attribute type 4 has an invalid length. [ 1208.830558][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 1208.830588][ T28] audit: type=1400 audit(2000000934.480:3896): avc: denied { bind } for pid=19691 comm="syz.3.3838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1208.911717][T19699] loop2: detected capacity change from 0 to 128 [ 1209.004289][ T28] audit: type=1400 audit(2000000934.530:3897): avc: denied { write } for pid=19691 comm="syz.3.3838" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1209.024863][T19699] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1209.052796][T19699] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff) [ 1210.438756][T19721] loop3: detected capacity change from 0 to 128 [ 1210.553582][T19289] EXT4-fs (loop2): unmounting filesystem. [ 1211.779890][T19754] loop0: detected capacity change from 0 to 8192 [ 1211.847561][T19754] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1211.899571][ T28] audit: type=1400 audit(2000000937.570:3898): avc: denied { module_load } for pid=19755 comm="syz.1.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1211.961240][T19757] loop4: detected capacity change from 0 to 256 [ 1211.967587][T19757] exfat: Bad value for 'uid' [ 1212.518937][ T384] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1215.086844][T19810] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3870'. [ 1215.447849][T19818] loop1: detected capacity change from 0 to 512 [ 1215.459955][T19818] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1215.507695][T19818] EXT4-fs (loop1): 1 truncate cleaned up [ 1215.513149][T19818] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1215.750173][T19808] loop2: detected capacity change from 0 to 40427 [ 1215.760061][T19808] F2FS-fs (loop2): fault_injection options not supported [ 1215.767642][T19808] F2FS-fs (loop2): invalid crc value [ 1215.778649][T19808] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1215.913485][ T388] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1215.925739][T19808] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1215.945014][T19808] syz.2.3874: attempt to access beyond end of device [ 1215.945014][T19808] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1215.967556][T19289] F2FS-fs (loop2): access invalid blkaddr:2816 [ 1215.973882][T19831] loop0: detected capacity change from 0 to 40427 [ 1215.974016][T19289] CPU: 1 PID: 19289 Comm: syz-executor Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1215.989918][T19289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1215.998527][T19831] F2FS-fs (loop0): fault_injection options not supported [ 1215.999812][T19289] Call Trace: [ 1215.999820][T19289] [ 1216.007304][T19831] F2FS-fs (loop0): invalid crc value [ 1216.009793][T19289] dump_stack_lvl+0x151/0x1b7 [ 1216.014011][T19831] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1216.017696][T19289] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1216.017721][T19289] ? f2fs_get_next_page_offset+0x770/0x770 [ 1216.017750][T19289] dump_stack+0x15/0x1b [ 1216.043214][T19289] __f2fs_is_valid_blkaddr+0xda6/0x1450 [ 1216.048592][T19289] f2fs_is_valid_blkaddr+0x25/0x30 [ 1216.053537][T19289] f2fs_map_blocks+0xd22/0x4340 [ 1216.058254][T19289] ? f2fs_map_lock+0x260/0x260 [ 1216.062834][T19289] ? xa_load+0x1a1/0x210 [ 1216.064841][T19831] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1216.066901][T19289] ? xas_find_conflict+0x8c0/0x8c0 [ 1216.066931][T19289] f2fs_mpage_readpages+0xc65/0x20f0 [ 1216.084268][T19289] ? get_page_from_freelist+0x27ea/0x2870 [ 1216.089824][T19289] ? xas_load+0x39d/0x3b0 [ 1216.094103][T19289] ? dquot_release_reservation_block+0xa0/0xa0 [ 1216.100083][T19289] ? __this_cpu_preempt_check+0x13/0x20 [ 1216.105466][T19289] ? memcg_rstat_updated+0x4f/0x110 [ 1216.106152][T19383] F2FS-fs (loop0): access invalid blkaddr:2816 [ 1216.110501][T19289] f2fs_readahead+0xfd/0x250 [ 1216.120911][T19289] ? blk_start_plug+0x9c/0x130 [ 1216.125515][T19289] read_pages+0x1be/0xd40 [ 1216.129675][T19289] ? workingset_activation+0x430/0x430 [ 1216.134971][T19289] ? folio_add_lru+0x280/0x3f0 [ 1216.139570][T19289] ? page_cache_ra_unbounded+0x690/0x690 [ 1216.145042][T19289] ? filemap_add_folio+0x18f/0x200 [ 1216.149986][T19289] ? __filemap_add_folio+0xd10/0xd10 [ 1216.155107][T19289] page_cache_ra_unbounded+0x4c1/0x690 [ 1216.160404][T19289] ? readahead_gfp_mask+0x190/0x190 [ 1216.165439][T19289] ? __kernel_text_address+0xd/0x40 [ 1216.170467][T19289] ? unwind_get_return_address+0x4d/0x90 [ 1216.175941][T19289] page_cache_ra_order+0x987/0xc40 [ 1216.180906][T19289] ? do_page_cache_ra+0x110/0x110 [ 1216.185746][T19289] ? __stack_depot_save+0x36/0x480 [ 1216.190696][T19289] ? putname+0xfa/0x150 [ 1216.194691][T19289] ondemand_readahead+0x91a/0xee0 [ 1216.199546][T19289] ? kasan_set_track+0x4b/0x70 [ 1216.204144][T19289] ? kasan_save_free_info+0x2b/0x40 [ 1216.209180][T19289] ? ____kasan_slab_free+0x131/0x180 [ 1216.214314][T19289] ? do_syscall_64+0x3b/0xb0 [ 1216.218731][T19289] ? page_cache_sync_ra+0x450/0x450 [ 1216.223761][T19289] ? blk_cgroup_congested+0x132/0x150 [ 1216.228969][T19289] page_cache_sync_ra+0x3d6/0x450 [ 1216.233832][T19289] f2fs_readdir+0x599/0xc10 [ 1216.238187][T19289] ? f2fs_fill_dentries+0xd00/0xd00 [ 1216.243203][T19289] ? __this_cpu_preempt_check+0x13/0x20 [ 1216.248583][T19289] ? memcg_rstat_updated+0x4f/0x110 [ 1216.253624][T19289] ? security_file_permission+0x86/0xb0 [ 1216.258999][T19289] iterate_dir+0x265/0x600 [ 1216.263250][T19289] ? f2fs_fill_dentries+0xd00/0xd00 [ 1216.268304][T19289] __se_sys_getdents64+0x1c1/0x460 [ 1216.273236][T19289] ? __x64_sys_getdents64+0x90/0x90 [ 1216.278268][T19289] ? filldir+0x670/0x670 [ 1216.282346][T19289] ? debug_smp_processor_id+0x17/0x20 [ 1216.287551][T19289] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1216.293455][T19289] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1216.298924][T19289] __x64_sys_getdents64+0x7b/0x90 [ 1216.303805][T19289] x64_sys_call+0x5ae/0x9a0 [ 1216.308123][T19289] do_syscall_64+0x3b/0xb0 [ 1216.312376][T19289] ? clear_bhb_loop+0x55/0xb0 [ 1216.316890][T19289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1216.322618][T19289] RIP: 0033:0x7fca2ebb0193 [ 1216.326889][T19289] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 1216.346313][T19289] RSP: 002b:00007fffdc9a4cc8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 1216.354557][T19289] RAX: ffffffffffffffda RBX: 00005555567e44e0 RCX: 00007fca2ebb0193 [ 1216.362368][T19289] RDX: 0000000000008000 RSI: 00005555567e44e0 RDI: 0000000000000005 [ 1216.370179][T19289] RBP: 00005555567e44b4 R08: 0000000000000000 R09: 0000000000000000 [ 1216.377995][T19289] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 1216.385804][T19289] R13: 0000000000000010 R14: 00005555567e44b0 R15: 00007fffdc9a6f70 [ 1216.393621][T19289] [ 1216.396482][T19383] CPU: 0 PID: 19383 Comm: syz-executor Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1216.404527][T19289] F2FS-fs (loop2): access invalid blkaddr:2816 [ 1216.406286][T19383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1216.422172][T19383] Call Trace: [ 1216.425296][T19383] [ 1216.428073][T19383] dump_stack_lvl+0x151/0x1b7 [ 1216.432588][T19383] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1216.437878][T19383] ? f2fs_get_next_page_offset+0x770/0x770 [ 1216.443574][T19383] dump_stack+0x15/0x1b [ 1216.447517][T19383] __f2fs_is_valid_blkaddr+0xda6/0x1450 [ 1216.452895][T19383] f2fs_is_valid_blkaddr+0x25/0x30 [ 1216.457841][T19383] f2fs_map_blocks+0xd22/0x4340 [ 1216.462537][T19383] ? f2fs_map_lock+0x260/0x260 [ 1216.467131][T19383] ? xa_load+0x1a1/0x210 [ 1216.471219][T19383] ? xas_find_conflict+0x8c0/0x8c0 [ 1216.476160][T19383] f2fs_mpage_readpages+0xc65/0x20f0 [ 1216.481277][T19383] ? get_page_from_freelist+0x27ea/0x2870 [ 1216.486831][T19383] ? xas_load+0x39d/0x3b0 [ 1216.490999][T19383] ? dquot_release_reservation_block+0xa0/0xa0 [ 1216.496990][T19383] ? __this_cpu_preempt_check+0x13/0x20 [ 1216.502366][T19383] ? memcg_rstat_updated+0x4f/0x110 [ 1216.507413][T19383] f2fs_readahead+0xfd/0x250 [ 1216.511828][T19383] ? blk_start_plug+0x9c/0x130 [ 1216.516432][T19383] read_pages+0x1be/0xd40 [ 1216.516708][ T388] usb 4-1: Using ep0 maxpacket: 8 [ 1216.520592][T19383] ? workingset_activation+0x430/0x430 [ 1216.530750][T19383] ? folio_add_lru+0x280/0x3f0 [ 1216.535354][T19383] ? page_cache_ra_unbounded+0x690/0x690 [ 1216.540818][T19383] ? filemap_add_folio+0x18f/0x200 [ 1216.545766][T19383] ? __filemap_add_folio+0xd10/0xd10 [ 1216.550887][T19383] page_cache_ra_unbounded+0x4c1/0x690 [ 1216.556193][T19383] ? readahead_gfp_mask+0x190/0x190 [ 1216.561215][T19383] ? __kernel_text_address+0xd/0x40 [ 1216.566247][T19383] ? unwind_get_return_address+0x4d/0x90 [ 1216.571717][T19383] page_cache_ra_order+0x987/0xc40 [ 1216.576668][T19383] ? do_page_cache_ra+0x110/0x110 [ 1216.581521][T19383] ? __stack_depot_save+0x36/0x480 [ 1216.586469][T19383] ? putname+0xfa/0x150 [ 1216.590465][T19383] ondemand_readahead+0x91a/0xee0 [ 1216.595351][T19383] ? kasan_set_track+0x4b/0x70 [ 1216.599921][T19383] ? kasan_save_free_info+0x2b/0x40 [ 1216.604960][T19383] ? ____kasan_slab_free+0x131/0x180 [ 1216.610078][T19383] ? do_syscall_64+0x3b/0xb0 [ 1216.614509][T19383] ? page_cache_sync_ra+0x450/0x450 [ 1216.619540][T19383] ? blk_cgroup_congested+0x132/0x150 [ 1216.624745][T19383] page_cache_sync_ra+0x3d6/0x450 [ 1216.629610][T19383] f2fs_readdir+0x599/0xc10 [ 1216.633949][T19383] ? f2fs_fill_dentries+0xd00/0xd00 [ 1216.638982][T19383] ? __this_cpu_preempt_check+0x13/0x20 [ 1216.644360][T19383] ? memcg_rstat_updated+0x4f/0x110 [ 1216.649401][T19383] ? security_file_permission+0x86/0xb0 [ 1216.654777][T19383] iterate_dir+0x265/0x600 [ 1216.659029][T19383] ? f2fs_fill_dentries+0xd00/0xd00 [ 1216.664063][T19383] __se_sys_getdents64+0x1c1/0x460 [ 1216.669012][T19383] ? __x64_sys_getdents64+0x90/0x90 [ 1216.674042][T19383] ? filldir+0x670/0x670 [ 1216.678123][T19383] ? debug_smp_processor_id+0x17/0x20 [ 1216.683330][T19383] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1216.689234][T19383] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1216.694701][T19383] __x64_sys_getdents64+0x7b/0x90 [ 1216.699564][T19383] x64_sys_call+0x5ae/0x9a0 [ 1216.703902][T19383] do_syscall_64+0x3b/0xb0 [ 1216.708152][T19383] ? clear_bhb_loop+0x55/0xb0 [ 1216.712666][T19383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1216.718398][T19383] RIP: 0033:0x7fed81bb0193 [ 1216.722648][T19383] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 1216.742090][T19383] RSP: 002b:00007ffc6e13bf18 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 1216.750337][T19383] RAX: ffffffffffffffda RBX: 00005555565144e0 RCX: 00007fed81bb0193 [ 1216.758146][T19383] RDX: 0000000000008000 RSI: 00005555565144e0 RDI: 0000000000000005 [ 1216.765958][T19383] RBP: 00005555565144b4 R08: 0000000000000000 R09: 0000000000000000 [ 1216.773771][T19383] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 1216.781579][T19383] R13: 0000000000000010 R14: 00005555565144b0 R15: 00007ffc6e13e1c0 [ 1216.789397][T19383] [ 1216.792259][T19289] CPU: 1 PID: 19289 Comm: syz-executor Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1216.802066][T19289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1216.811958][T19289] Call Trace: [ 1216.815083][T19289] [ 1216.817861][T19289] dump_stack_lvl+0x151/0x1b7 [ 1216.822373][T19289] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1216.827666][T19289] ? f2fs_get_next_page_offset+0x770/0x770 [ 1216.833313][T19289] dump_stack+0x15/0x1b [ 1216.837301][T19289] __f2fs_is_valid_blkaddr+0xda6/0x1450 [ 1216.842684][T19289] f2fs_is_valid_blkaddr+0x25/0x30 [ 1216.847630][T19289] f2fs_map_blocks+0xd22/0x4340 [ 1216.852325][T19289] ? f2fs_map_lock+0x260/0x260 [ 1216.856919][T19289] ? xa_load+0x1a1/0x210 [ 1216.860995][T19289] ? xas_find_conflict+0x8c0/0x8c0 [ 1216.865947][T19289] ? folio_unlock+0x5c/0x70 [ 1216.870286][T19289] f2fs_mpage_readpages+0xc65/0x20f0 [ 1216.875409][T19289] ? get_page_from_freelist+0x27ea/0x2870 [ 1216.880962][T19289] ? xas_load+0x39d/0x3b0 [ 1216.885128][T19289] ? dquot_release_reservation_block+0xa0/0xa0 [ 1216.891113][T19289] ? __this_cpu_preempt_check+0x13/0x20 [ 1216.896496][T19289] ? memcg_rstat_updated+0x4f/0x110 [ 1216.901534][T19289] f2fs_readahead+0xfd/0x250 [ 1216.905956][T19289] ? blk_start_plug+0x9c/0x130 [ 1216.910555][T19289] read_pages+0x1be/0xd40 [ 1216.914722][T19289] ? workingset_activation+0x430/0x430 [ 1216.920016][T19289] ? folio_add_lru+0x280/0x3f0 [ 1216.924630][T19289] ? page_cache_ra_unbounded+0x690/0x690 [ 1216.930083][T19289] ? filemap_add_folio+0x18f/0x200 [ 1216.935031][T19289] ? __filemap_add_folio+0xd10/0xd10 [ 1216.940153][T19289] page_cache_ra_unbounded+0x4c1/0x690 [ 1216.945454][T19289] ? readahead_gfp_mask+0x190/0x190 [ 1216.950481][T19289] ? __kernel_text_address+0xd/0x40 [ 1216.955517][T19289] ? unwind_get_return_address+0x4d/0x90 [ 1216.960983][T19289] page_cache_ra_order+0x987/0xc40 [ 1216.965939][T19289] ? do_page_cache_ra+0x110/0x110 [ 1216.970789][T19289] ? __stack_depot_save+0x36/0x480 [ 1216.975740][T19289] ? putname+0xfa/0x150 [ 1216.979852][T19289] ondemand_readahead+0x91a/0xee0 [ 1216.984709][T19289] ? kasan_set_track+0x4b/0x70 [ 1216.989311][T19289] ? kasan_save_free_info+0x2b/0x40 [ 1216.994346][T19289] ? ____kasan_slab_free+0x131/0x180 [ 1216.999467][T19289] ? do_syscall_64+0x3b/0xb0 [ 1217.003892][T19289] ? page_cache_sync_ra+0x450/0x450 [ 1217.008929][T19289] ? blk_cgroup_congested+0x132/0x150 [ 1217.014132][T19289] page_cache_sync_ra+0x3d6/0x450 [ 1217.018993][T19289] f2fs_readdir+0x599/0xc10 [ 1217.023337][T19289] ? f2fs_fill_dentries+0xd00/0xd00 [ 1217.028374][T19289] ? __this_cpu_preempt_check+0x13/0x20 [ 1217.033766][T19289] ? memcg_rstat_updated+0x4f/0x110 [ 1217.038873][T19289] ? security_file_permission+0x86/0xb0 [ 1217.044249][T19289] iterate_dir+0x265/0x600 [ 1217.048503][T19289] ? f2fs_fill_dentries+0xd00/0xd00 [ 1217.053541][T19289] __se_sys_getdents64+0x1c1/0x460 [ 1217.058487][T19289] ? __x64_sys_getdents64+0x90/0x90 [ 1217.063519][T19289] ? filldir+0x670/0x670 [ 1217.067598][T19289] ? debug_smp_processor_id+0x17/0x20 [ 1217.072806][T19289] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1217.078708][T19289] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1217.084174][T19289] __x64_sys_getdents64+0x7b/0x90 [ 1217.089038][T19289] x64_sys_call+0x5ae/0x9a0 [ 1217.093383][T19289] do_syscall_64+0x3b/0xb0 [ 1217.097626][T19289] ? clear_bhb_loop+0x55/0xb0 [ 1217.102145][T19289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1217.108043][T19289] RIP: 0033:0x7fca2ebb0193 [ 1217.112309][T19289] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 1217.131742][T19289] RSP: 002b:00007fffdc9a4cc8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 1217.139981][T19289] RAX: ffffffffffffffda RBX: 00005555567e44e0 RCX: 00007fca2ebb0193 [ 1217.147793][T19289] RDX: 0000000000008000 RSI: 00005555567e44e0 RDI: 0000000000000005 [ 1217.155611][T19289] RBP: 00005555567e44b4 R08: 0000000000000000 R09: 0000000000000000 [ 1217.163416][T19289] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 1217.171230][T19289] R13: 0000000000000010 R14: 00005555567e44b0 R15: 00007fffdc9a6f70 [ 1217.179042][T19289] [ 1217.212303][ T388] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1217.221942][T19383] F2FS-fs (loop0): access invalid blkaddr:2816 [ 1217.226021][T19226] EXT4-fs (loop1): unmounting filesystem. [ 1217.232677][T19383] CPU: 0 PID: 19383 Comm: syz-executor Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1217.235883][ T388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.243264][T19383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1217.243278][T19383] Call Trace: [ 1217.243285][T19383] [ 1217.243291][T19383] dump_stack_lvl+0x151/0x1b7 [ 1217.243314][T19383] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1217.243332][T19383] ? f2fs_get_next_page_offset+0x770/0x770 [ 1217.243361][T19383] dump_stack+0x15/0x1b [ 1217.243377][T19383] __f2fs_is_valid_blkaddr+0xda6/0x1450 [ 1217.253263][ T388] usb 4-1: Product: syz [ 1217.260974][T19383] f2fs_is_valid_blkaddr+0x25/0x30 [ 1217.260997][T19383] f2fs_map_blocks+0xd22/0x4340 [ 1217.264151][ T388] usb 4-1: Manufacturer: syz [ 1217.266886][T19383] ? f2fs_map_lock+0x260/0x260 [ 1217.271390][ T388] usb 4-1: SerialNumber: syz [ 1217.276685][T19383] ? xa_load+0x1a1/0x210 [ 1217.276709][T19383] ? xas_find_conflict+0x8c0/0x8c0 [ 1217.276731][T19383] ? folio_unlock+0x5c/0x70 [ 1217.276754][T19383] f2fs_mpage_readpages+0xc65/0x20f0 [ 1217.276783][T19383] ? get_page_from_freelist+0x27ea/0x2870 [ 1217.276805][T19383] ? xas_load+0x39d/0x3b0 [ 1217.276826][T19383] ? dquot_release_reservation_block+0xa0/0xa0 [ 1217.283695][ T388] usb 4-1: config 0 descriptor?? [ 1217.286441][T19383] ? __this_cpu_preempt_check+0x13/0x20 [ 1217.292236][T19289] syz-executor: attempt to access beyond end of device [ 1217.292236][T19289] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1217.295805][T19383] ? memcg_rstat_updated+0x4f/0x110 [ 1217.295838][T19383] f2fs_readahead+0xfd/0x250 [ 1217.386162][T19383] ? blk_start_plug+0x9c/0x130 [ 1217.390758][T19383] read_pages+0x1be/0xd40 [ 1217.394922][T19383] ? workingset_activation+0x430/0x430 [ 1217.400215][T19383] ? folio_add_lru+0x280/0x3f0 [ 1217.404817][T19383] ? page_cache_ra_unbounded+0x690/0x690 [ 1217.410284][T19383] ? filemap_add_folio+0x18f/0x200 [ 1217.415233][T19383] ? __filemap_add_folio+0xd10/0xd10 [ 1217.420354][T19383] page_cache_ra_unbounded+0x4c1/0x690 [ 1217.425650][T19383] ? readahead_gfp_mask+0x190/0x190 [ 1217.430680][T19383] ? __kernel_text_address+0xd/0x40 [ 1217.435715][T19383] ? unwind_get_return_address+0x4d/0x90 [ 1217.441201][T19383] page_cache_ra_order+0x987/0xc40 [ 1217.446133][T19383] ? do_page_cache_ra+0x110/0x110 [ 1217.450990][T19383] ? __stack_depot_save+0x36/0x480 [ 1217.455937][T19383] ? putname+0xfa/0x150 [ 1217.459928][T19383] ondemand_readahead+0x91a/0xee0 [ 1217.464790][T19383] ? kasan_set_track+0x4b/0x70 [ 1217.469391][T19383] ? kasan_save_free_info+0x2b/0x40 [ 1217.474425][T19383] ? ____kasan_slab_free+0x131/0x180 [ 1217.479546][T19383] ? do_syscall_64+0x3b/0xb0 [ 1217.483974][T19383] ? page_cache_sync_ra+0x450/0x450 [ 1217.489007][T19383] ? blk_cgroup_congested+0x132/0x150 [ 1217.494214][T19383] page_cache_sync_ra+0x3d6/0x450 [ 1217.499073][T19383] f2fs_readdir+0x599/0xc10 [ 1217.503417][T19383] ? f2fs_fill_dentries+0xd00/0xd00 [ 1217.508449][T19383] ? __this_cpu_preempt_check+0x13/0x20 [ 1217.513829][T19383] ? memcg_rstat_updated+0x4f/0x110 [ 1217.518865][T19383] ? security_file_permission+0x86/0xb0 [ 1217.524244][T19383] iterate_dir+0x265/0x600 [ 1217.528496][T19383] ? f2fs_fill_dentries+0xd00/0xd00 [ 1217.533531][T19383] __se_sys_getdents64+0x1c1/0x460 [ 1217.538481][T19383] ? __x64_sys_getdents64+0x90/0x90 [ 1217.543513][T19383] ? filldir+0x670/0x670 [ 1217.547594][T19383] ? debug_smp_processor_id+0x17/0x20 [ 1217.552798][T19383] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1217.558701][T19383] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1217.564172][T19383] __x64_sys_getdents64+0x7b/0x90 [ 1217.569031][T19383] x64_sys_call+0x5ae/0x9a0 [ 1217.573383][T19383] do_syscall_64+0x3b/0xb0 [ 1217.577621][T19383] ? clear_bhb_loop+0x55/0xb0 [ 1217.582135][T19383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1217.587862][T19383] RIP: 0033:0x7fed81bb0193 [ 1217.592115][T19383] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 1217.611556][T19383] RSP: 002b:00007ffc6e13bf18 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 1217.619800][T19383] RAX: ffffffffffffffda RBX: 00005555565144e0 RCX: 00007fed81bb0193 [ 1217.627614][T19383] RDX: 0000000000008000 RSI: 00005555565144e0 RDI: 0000000000000005 [ 1217.635425][T19383] RBP: 00005555565144b4 R08: 0000000000000000 R09: 0000000000000000 [ 1217.643236][T19383] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 1217.651049][T19383] R13: 0000000000000010 R14: 00005555565144b0 R15: 00007ffc6e13e1c0 [ 1217.658864][T19383] [ 1217.676778][T19383] syz-executor: attempt to access beyond end of device [ 1217.676778][T19383] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1217.699116][ T2851] kworker/u4:7: attempt to access beyond end of device [ 1217.699116][ T2851] loop2: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 1217.713527][ T2851] kworker/u4:7: attempt to access beyond end of device [ 1217.713527][ T2851] loop2: rw=2049, sector=40960, nr_sectors = 48 limit=40427 [ 1217.716552][T15877] kworker/u4:10: attempt to access beyond end of device [ 1217.716552][T15877] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1218.211487][ T28] audit: type=1400 audit(2000000943.880:3899): avc: denied { create } for pid=19854 comm="syz.4.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1218.285381][T19856] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3886'. [ 1218.595700][T19866] loop4: detected capacity change from 0 to 128 [ 1218.605970][T19860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.626810][T19866] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1218.633462][T19860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.641006][T19860] device bridge_slave_0 entered promiscuous mode [ 1218.641968][T19866] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1218.655590][T19866] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038 (0x7fffffff) [ 1218.678882][T19860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.685758][T19860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.693513][T19860] device bridge_slave_1 entered promiscuous mode [ 1218.756648][T19868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.763523][T19868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.771196][T19868] device bridge_slave_0 entered promiscuous mode [ 1218.780473][T15877] device bridge_slave_1 left promiscuous mode [ 1218.786738][T15877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.795025][T15877] device bridge_slave_0 left promiscuous mode [ 1218.801287][T15877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.811580][T15877] device veth1_macvtap left promiscuous mode [ 1218.817610][T15877] device veth0_vlan left promiscuous mode [ 1219.053271][T19868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.066748][T19868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.170076][T19868] device bridge_slave_1 entered promiscuous mode [ 1219.174963][ T7731] usb 4-1: USB disconnect, device number 125 [ 1220.372546][T18847] EXT4-fs (loop4): unmounting filesystem. [ 1220.455005][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1220.463001][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1220.470596][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1220.480062][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1220.488307][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.495163][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.502832][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1220.510984][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1220.519154][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.525998][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1220.563125][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1220.570908][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1220.579041][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1220.587397][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1220.595245][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1220.602970][T19889] loop1: detected capacity change from 0 to 40427 [ 1220.615010][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1220.623471][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1220.632740][T19889] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1220.639045][T19860] device veth0_vlan entered promiscuous mode [ 1220.640625][T19889] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1220.653817][T19860] device veth1_macvtap entered promiscuous mode [ 1220.657515][T19889] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1220.668914][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1220.677473][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1220.685283][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1220.693476][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1220.701589][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1220.704565][T19889] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1220.715649][ T7731] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1220.718912][T19889] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1220.764983][T19868] device veth0_vlan entered promiscuous mode [ 1220.778643][T19868] device veth1_macvtap entered promiscuous mode [ 1220.798462][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1220.806576][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1220.814902][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1220.823136][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1220.831304][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1220.838552][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1220.845771][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1220.854515][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1220.862526][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1220.870366][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1220.878121][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1220.885908][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1220.895419][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1220.908716][T19895] syz.1.3895: attempt to access beyond end of device [ 1220.908716][T19895] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1220.972875][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.979734][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.988248][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1221.000613][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1221.009198][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.016054][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.023373][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1221.031171][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1221.039026][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1221.053546][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1221.061633][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1221.074142][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1221.087000][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1221.319036][T19226] syz-executor: attempt to access beyond end of device [ 1221.319036][T19226] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1221.477228][ T7731] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 1221.510369][ T7731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.516842][T19899] loop2: detected capacity change from 0 to 40427 [ 1221.518813][ T7731] usb 4-1: Product: syz [ 1221.531360][ T7731] usb 4-1: Manufacturer: syz [ 1221.535824][ T7731] usb 4-1: SerialNumber: syz [ 1221.544673][ T7731] usb 4-1: config 0 descriptor?? [ 1221.554049][T19899] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1221.575167][T19899] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1221.593268][T19899] F2FS-fs (loop2): invalid crc value [ 1221.604128][T19899] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1221.629266][T15877] device bridge_slave_1 left promiscuous mode [ 1221.639448][T15877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.789280][T19910] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3899'. [ 1221.798614][T15877] device bridge_slave_0 left promiscuous mode [ 1221.812612][T15877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.819861][T19899] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1221.828775][T19899] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1221.830242][T15877] device veth1_macvtap left promiscuous mode [ 1221.909679][T15877] device veth0_vlan left promiscuous mode [ 1221.922200][ T6] usb 4-1: USB disconnect, device number 126 [ 1222.604760][T19928] loop2: detected capacity change from 0 to 8192 [ 1222.643456][T19918] loop1: detected capacity change from 0 to 40427 [ 1222.669014][T19918] F2FS-fs (loop1): invalid crc value [ 1222.677668][T19918] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1222.917689][ T28] audit: type=1400 audit(2000000948.590:3900): avc: denied { write } for pid=19936 comm="syz.2.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1222.940363][T19918] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1223.073917][T19941] loop0: detected capacity change from 0 to 512 [ 1223.362425][ T28] audit: type=1400 audit(2000000948.940:3901): avc: denied { create } for pid=19917 comm="syz.1.3900" name="#1d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1223.646599][T19226] syz-executor: attempt to access beyond end of device [ 1223.646599][T19226] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1223.687818][T19941] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1223.716500][T19226] syz-executor: attempt to access beyond end of device [ 1223.716500][T19226] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1223.798101][T19941] EXT4-fs (loop0): 1 truncate cleaned up [ 1223.803643][T19941] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1223.813718][ T28] audit: type=1400 audit(2000000948.940:3902): avc: denied { link } for pid=19917 comm="syz.1.3900" name="#1d" dev="loop1" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1224.053545][T19957] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3909'. [ 1224.243281][ T28] audit: type=1400 audit(2000000948.940:3903): avc: denied { rename } for pid=19917 comm="syz.1.3900" name="#1e" dev="loop1" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1224.276379][T15877] kworker/u4:10: attempt to access beyond end of device [ 1224.276379][T15877] loop1: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 1224.617353][T19860] EXT4-fs (loop0): unmounting filesystem. [ 1224.623898][ T28] audit: type=1400 audit(2000000950.290:3904): avc: denied { getopt } for pid=19964 comm="syz.2.3914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1224.699176][T19968] loop2: detected capacity change from 0 to 1024 [ 1224.780844][T19968] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1224.808400][T19974] loop4: detected capacity change from 0 to 512 [ 1224.814822][T19974] journal_path: Non-blockdev passed as '' [ 1224.819743][T19968] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f014c01c, mo2=0002] [ 1224.820643][T19974] EXT4-fs: error: could not find journal device path [ 1224.846760][T19968] System zones: 0-1, 3-36 [ 1224.873706][T19968] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1224.883597][T19976] xt_hashlimit: invalid interval [ 1225.277072][T19981] loop2: detected capacity change from 1024 to 11 [ 1225.296196][T19968] syz.2.3916: attempt to access beyond end of device [ 1225.296196][T19968] loop2: rw=14337, sector=44, nr_sectors = 2 limit=11 [ 1225.320152][T19968] Buffer I/O error on dev loop2, logical block 22, lost sync page write [ 1225.329756][T19968] EXT4-fs error (device loop2): ext4_write_inode:5324: inode #18: block 22: comm syz.2.3916: IO error syncing inode [ 1225.450603][T19985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.458088][T19868] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Out of memory [ 1225.466729][T19985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.467094][T19868] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 1225.474234][T19985] device bridge_slave_0 entered promiscuous mode [ 1225.486161][T19868] EXT4-fs (loop2): unmounting filesystem. [ 1225.491837][T19985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.503569][T19985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.506796][ T39] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1225.510998][T19985] device bridge_slave_1 entered promiscuous mode [ 1225.569541][ T8] device veth1_macvtap left promiscuous mode [ 1225.575796][ T8] device veth0_vlan left promiscuous mode [ 1225.740174][T19985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.747057][T19985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.754129][T19985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.760939][T19985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.797107][ T28] audit: type=1400 audit(2000000951.440:3905): avc: denied { read } for pid=19997 comm="syz.4.3925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1225.833641][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.841606][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.851433][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1225.858938][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1225.888738][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1225.897274][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1225.905087][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1225.912865][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1225.920331][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1225.929124][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.935964][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.943354][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1225.951351][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.958199][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.965751][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1225.973923][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1225.981676][ T39] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1225.994376][T19985] device veth0_vlan entered promiscuous mode [ 1226.006705][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1226.021280][ T39] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1226.030337][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.040137][ T39] usb 4-1: config 0 descriptor?? [ 1226.047759][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1226.060235][T19985] device veth1_macvtap entered promiscuous mode [ 1226.077271][ T39] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1226.094416][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1226.102975][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1226.128348][T20005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.135309][T20005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.144798][T20005] device bridge_slave_0 entered promiscuous mode [ 1226.152510][T20005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.159567][T20005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.167208][T20005] device bridge_slave_1 entered promiscuous mode [ 1226.205383][T20017] loop1: detected capacity change from 0 to 256 [ 1226.214439][T20017] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1226.291242][T20005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.298103][T20005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.305198][T20005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.311983][T20005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.332456][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1226.430618][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.587595][T20022] xt_hashlimit: invalid interval [ 1226.605387][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.626758][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1226.636550][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1226.644793][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.651667][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.659815][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1226.668029][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1226.676057][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.682924][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.695740][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1226.704744][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1226.729362][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1226.747123][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1226.774802][T20005] device veth0_vlan entered promiscuous mode [ 1226.781263][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1226.791032][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1226.799219][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1226.809447][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1226.830855][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1226.838281][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1226.847200][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1226.855243][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1226.864148][T20005] device veth1_macvtap entered promiscuous mode [ 1226.880357][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1226.887897][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1226.896002][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1226.914472][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1226.922631][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1226.989501][ T8] device bridge_slave_1 left promiscuous mode [ 1226.995707][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.003183][ T8] device bridge_slave_0 left promiscuous mode [ 1227.009214][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.017129][ T8] device veth1_macvtap left promiscuous mode [ 1227.023016][ T8] device veth0_vlan left promiscuous mode [ 1227.048436][ T28] audit: type=1400 audit(2000000952.720:3906): avc: denied { remove_name } for pid=19985 comm="syz-executor" name="file0" dev="loop1" ino=1049399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1227.076889][ T28] audit: type=1400 audit(2000000952.720:3907): avc: denied { unlink } for pid=19985 comm="syz-executor" name="file0" dev="loop1" ino=1049399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1227.106992][ T28] audit: type=1400 audit(2000000952.750:3908): avc: denied { rmdir } for pid=19985 comm="syz-executor" name="file0" dev="loop1" ino=1049397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1227.296679][T20038] loop0: detected capacity change from 0 to 40427 [ 1227.303549][T20038] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1227.314134][T20038] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1227.324538][T20038] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1227.377480][T20038] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1227.384519][T20038] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1227.409965][T20038] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 1227.418044][T20038] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 1227.425898][T20038] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 1227.433994][T20038] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 1227.449317][T20038] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 1227.463934][T20038] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 1227.471990][T20038] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 1227.494475][T20046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.501496][T20046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.509048][T20046] device bridge_slave_0 entered promiscuous mode [ 1227.515925][T20046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.516738][ T39] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1227.522908][T20046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.537680][T20046] device bridge_slave_1 entered promiscuous mode [ 1227.598314][T20046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.605247][T20046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.612387][T20046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.619152][T20046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.627206][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.634600][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.679653][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1227.686991][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1227.694172][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1227.702366][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1227.710440][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.717307][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.724509][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1227.732922][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1227.740829][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.747665][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.754780][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1227.762565][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1227.770251][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1227.778099][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1227.797526][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1227.805715][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1227.813844][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1227.821514][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1227.830065][T20046] device veth0_vlan entered promiscuous mode [ 1227.839837][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1227.847268][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1227.859209][T20046] device veth1_macvtap entered promiscuous mode [ 1227.867746][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1227.875654][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1227.883681][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1227.895522][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1227.903455][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1227.913278][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1227.921316][ T39] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1227.931241][ T39] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1227.933248][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1227.946788][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.948937][ T6] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1227.959999][ T39] usb 3-1: config 0 descriptor?? [ 1227.964496][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1228.007349][ T39] usb 3-1: MIDIStreaming interface descriptor not found [ 1228.197260][ T8] device bridge_slave_1 left promiscuous mode [ 1228.203205][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.210550][ T8] device bridge_slave_0 left promiscuous mode [ 1228.216476][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.224209][ T8] device veth1_macvtap left promiscuous mode [ 1228.230155][ T8] device veth0_vlan left promiscuous mode [ 1228.349608][ T5991] usb 4-1: USB disconnect, device number 127 [ 1228.366760][ T6] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1228.381643][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1228.395000][ T6] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1228.404569][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.415709][ T6] usb 1-1: config 0 descriptor?? [ 1228.467408][ T6] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1228.534968][T20069] loop4: detected capacity change from 0 to 512 [ 1228.547963][T20069] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1228.558593][T20069] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 1228.568606][T20069] EXT4-fs (loop4): group descriptors corrupted! [ 1229.412994][T20080] loop1: detected capacity change from 0 to 512 [ 1229.445097][T20080] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1229.469288][T20080] EXT4-fs (loop1): 1 truncate cleaned up [ 1229.474819][T20080] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1229.504478][T20046] EXT4-fs (loop1): unmounting filesystem. [ 1232.134016][ T296] usb 1-1: USB disconnect, device number 42 [ 1232.140687][ T39] usb 3-1: USB disconnect, device number 25 [ 1232.636742][ T28] audit: type=1400 audit(2000000958.290:3909): avc: denied { mount } for pid=20117 comm="syz.3.3959" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1232.833938][ T28] audit: type=1400 audit(2000000958.390:3910): avc: denied { unmount } for pid=19023 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1232.978142][T20134] loop1: detected capacity change from 0 to 512 [ 1232.988646][T20133] netlink: 'syz.4.3964': attribute type 3 has an invalid length. [ 1233.005193][T20134] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1233.030256][T20134] EXT4-fs (loop1): 1 truncate cleaned up [ 1233.035767][T20134] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1233.564545][T20147] block device autoloading is deprecated and will be removed. [ 1233.572550][T20147] I/O error, dev loop128, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1233.958041][T20046] EXT4-fs (loop1): unmounting filesystem. [ 1233.965800][T20155] loop0: detected capacity change from 0 to 512 [ 1233.991997][T20155] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1234.010579][T20155] EXT4-fs (loop0): 1 truncate cleaned up [ 1234.016137][T20155] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1234.037928][T19860] EXT4-fs (loop0): unmounting filesystem. [ 1234.058878][ T7731] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1234.066173][ T28] audit: type=1400 audit(2000000959.730:3911): avc: denied { read } for pid=20156 comm="syz.1.3969" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1234.088353][ T28] audit: type=1400 audit(2000000959.730:3912): avc: denied { open } for pid=20156 comm="syz.1.3969" path="/4/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1234.396704][ T7731] usb 4-1: Using ep0 maxpacket: 32 [ 1234.532479][T20177] loop4: detected capacity change from 0 to 40427 [ 1234.540955][T20177] F2FS-fs (loop4): fault_injection options not supported [ 1234.554307][T20177] F2FS-fs (loop4): Image doesn't support compression [ 1234.563097][T20177] F2FS-fs (loop4): Image doesn't support compression [ 1234.570260][T20177] F2FS-fs (loop4): fault_type options not supported [ 1234.576906][ T7731] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1234.577746][T20177] F2FS-fs (loop4): invalid crc value [ 1234.585309][ T7731] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1234.601429][ T7731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1234.602605][T20177] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1234.610395][ T7731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1234.630113][T20182] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1234.658874][ T7731] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1234.668414][ T7731] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1234.681568][ T7731] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1234.683798][T20177] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1234.698397][ T7731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.846807][ T7731] usb 4-1: config 0 descriptor?? [ 1235.465071][ T7731] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1235.552967][T20189] loop1: detected capacity change from 0 to 256 [ 1235.567837][T20191] loop0: detected capacity change from 0 to 512 [ 1235.587677][T20189] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1235.645729][ T7731] usb 4-1: USB disconnect, device number 2 [ 1235.657843][ T7731] usblp0: removed [ 1235.662712][T18847] syz-executor: attempt to access beyond end of device [ 1235.662712][T18847] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1235.675752][T20191] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1235.691423][T20191] ext4 filesystem being mounted at /13/bus supports timestamps until 2038 (0x7fffffff) [ 1235.716588][T19860] EXT4-fs (loop0): unmounting filesystem. [ 1236.437880][T20213] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3985'. [ 1237.259969][T20232] loop2: detected capacity change from 0 to 512 [ 1237.307128][T20232] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1237.315923][T20232] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 1237.333406][T20222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.340474][T20222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.349608][T20005] EXT4-fs (loop2): unmounting filesystem. [ 1237.366922][T20222] device bridge_slave_0 entered promiscuous mode [ 1237.397923][T20222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.404866][T20222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.415263][T20222] device bridge_slave_1 entered promiscuous mode [ 1237.475307][T20253] loop3: detected capacity change from 0 to 1024 [ 1237.482934][T20253] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1237.499256][T20253] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1237.840053][ T2851] device bridge_slave_1 left promiscuous mode [ 1237.880637][ T2851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.008798][ T2851] device bridge_slave_0 left promiscuous mode [ 1238.806833][ T2851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.820785][T19023] EXT4-fs (loop3): unmounting filesystem. [ 1238.833993][ T2851] device veth1_macvtap left promiscuous mode [ 1238.840603][ T2851] device veth0_vlan left promiscuous mode [ 1238.909180][ T28] audit: type=1400 audit(2000000964.580:3913): avc: denied { create } for pid=20266 comm="syz.3.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1239.289033][T20249] loop4: detected capacity change from 0 to 40427 [ 1239.336330][T20286] EXT4-fs (sda1): shut down requested (2) [ 1239.343858][T20286] Aborting journal on device sda1-8. [ 1239.350193][T20249] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1239.360120][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1239.367893][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1239.377360][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1239.448802][T20289] loop0: detected capacity change from 0 to 128 [ 1239.604038][ T1515] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1239.649062][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1239.651337][T20249] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1239.658596][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.671037][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.678514][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1239.695010][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1239.707032][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1239.715012][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.721878][ T7731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.794541][T20222] device veth0_vlan entered promiscuous mode [ 1239.806966][T20222] device veth1_macvtap entered promiscuous mode [ 1239.815054][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1239.824203][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1239.908941][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1239.917174][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1239.925410][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1239.934486][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1239.949002][ T1515] usb 3-1: Using ep0 maxpacket: 32 [ 1240.612094][T18847] syz-executor: attempt to access beyond end of device [ 1240.612094][T18847] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1240.612111][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1240.636380][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1240.646485][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1240.856933][ T1515] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1240.881513][ T1515] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.909872][ T1515] usb 3-1: Product: syz [ 1240.916827][ T1515] usb 3-1: Manufacturer: syz [ 1240.926986][ T1515] usb 3-1: SerialNumber: syz [ 1240.942058][ T1515] usb 3-1: config 0 descriptor?? SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 1240.972115][ T28] audit: type=1400 audit(2000000966.640:3914): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[14380]" dev="pipefs" ino=14380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1241.346875][ T1515] usb 3-1: USB disconnect, device number 26 [ 1241.367102][T15874] device bridge_slave_1 left promiscuous mode [ 1241.373003][T15874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.380277][T15874] device bridge_slave_0 left promiscuous mode [ 1241.386182][T15874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.393870][T15874] device veth1_macvtap left promiscuous mode [ 1241.399758][T15874] device veth0_vlan left promiscuous mode [ 1242.167688][T15874] device bridge_slave_1 left promiscuous mode [ 1242.173595][T15874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.181011][T15874] device bridge_slave_0 left promiscuous mode [ 1242.186975][T15874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.194439][T15874] device bridge_slave_1 left promiscuous mode [ 1242.200413][T15874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.207579][T15874] device bridge_slave_0 left promiscuous mode [ 1242.213469][T15874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.221118][T15874] device bridge_slave_1 left promiscuous mode [ 1242.227087][T15874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.234370][T15874] device bridge_slave_0 left promiscuous mode [ 1242.240360][T15874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.247909][T15874] device bridge_slave_1 left promiscuous mode [ 1242.253812][T15874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.261089][T15874] device bridge_slave_0 left promiscuous mode [ 1242.266998][T15874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.275148][T15874] device veth1_macvtap left promiscuous mode [ 1242.280998][T15874] device veth0_vlan left promiscuous mode [ 1242.286720][T15874] device veth1_macvtap left promiscuous mode [ 1242.292511][T15874] device veth0_vlan left promiscuous mode [ 1242.298311][T15874] device veth1_macvtap left promiscuous mode [ 1242.304107][T15874] device veth0_vlan left promiscuous mode [ 1242.309899][T15874] device veth1_macvtap left promiscuous mode [ 1242.315795][T15874] device veth0_vlan left promiscuous mode