last executing test programs: 55.084510682s ago: executing program 4 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001180)=r0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 54.995816863s ago: executing program 4 (id=62): mkdir(&(0x7f0000000b80)='./file0\x00', 0xd6) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0x0, r1, {0x7}}, 0x18) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 54.144370685s ago: executing program 4 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 54.070236196s ago: executing program 4 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0) 54.051535136s ago: executing program 4 (id=75): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 53.921674018s ago: executing program 4 (id=76): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000030c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) sigaltstack(0x0, 0x0) 53.921539538s ago: executing program 32 (id=76): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000030c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) sigaltstack(0x0, 0x0) 23.685730847s ago: executing program 2 (id=721): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x196, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000280)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/60, 0x51}, 0x12b}], 0x1, 0x12000, 0x0) 23.670405637s ago: executing program 2 (id=722): r0 = socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) 23.471914581s ago: executing program 2 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 11.332281903s ago: executing program 7 (id=980): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000240)={{0x1, 0x0, 0xfffffffffffffcee, {0xdddd0000, 0x80af000}}, "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", "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"}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000480)={{0x0, 0x0, 0x80, {0x0, 0x4000}}}) 11.234021315s ago: executing program 7 (id=985): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 10.704899492s ago: executing program 7 (id=1001): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) tkill(r1, 0x7) 10.387639157s ago: executing program 7 (id=995): r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000002a00000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) inotify_rm_watch(r0, r1) 10.387494027s ago: executing program 35 (id=995): r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000002a00000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) inotify_rm_watch(r0, r1) 9.289698733s ago: executing program 1 (id=1016): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 9.271271263s ago: executing program 1 (id=1017): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) write$binfmt_format(r0, &(0x7f0000000800)='-1\x00', 0x3) 9.250518453s ago: executing program 1 (id=1018): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 9.228555663s ago: executing program 1 (id=1019): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100030e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) 9.213655204s ago: executing program 1 (id=1020): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 9.136245564s ago: executing program 1 (id=1021): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000002c0)=':') 2.285612175s ago: executing program 3 (id=1158): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 2.259795335s ago: executing program 3 (id=1160): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002f00000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0xfffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}}}}}}}}, 0x0) 2.182704487s ago: executing program 3 (id=1163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) close(r0) 2.066243589s ago: executing program 8 (id=1164): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x0, &(0x7f0000000180)) 2.041850679s ago: executing program 3 (id=1166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 2.02679611s ago: executing program 3 (id=1167): r0 = socket$inet6(0xa, 0x3, 0x3b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x5aa}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1.887385002s ago: executing program 8 (id=1169): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) read(r0, &(0x7f0000000180)=""/227, 0xe3) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0xfffffffe, 0x0, 0x2, 0x256}, &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) 1.549308117s ago: executing program 3 (id=1182): mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000694000/0x1000)=nil) r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000002c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x1, 0x7, 0x8, 0x2008, 0x9, 0x1, 0x2, 0x4, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.020464066s ago: executing program 8 (id=1194): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 919.139696ms ago: executing program 8 (id=1197): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x800010, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f696e6c696e655f78617474722c6e6f696e6c696e655f64656e7472792c70726a6a71756f74613d6163746976655f6c6f67733d342c6a71666d743d76667376312c6e6f696e6c696e655f646174612c6e6f5f686561702c636865636b706f696e743d64697361626c652c66617374626f6f742c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c00ac19de274efe59cc5334a78992c33160f2bb29d00ec19e86b62e10e9d54427a6838f1aff0ce27327b707feafcce74234d4abe846a4a55fd26c5918e2ac7a6aa2fd027fd0b881927cefce65dd3d73b0b9185466a67b", @ANYRES32], 0x21, 0x552d, &(0x7f0000000a00)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 294.816966ms ago: executing program 8 (id=1219): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x40c89}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x401}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 273.407947ms ago: executing program 5 (id=1220): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='./file0/file1\x00', 0x10) 226.893478ms ago: executing program 5 (id=1222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) 206.043308ms ago: executing program 6 (id=1223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 177.200459ms ago: executing program 5 (id=1224): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 157.048049ms ago: executing program 6 (id=1225): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x1300) 138.003159ms ago: executing program 6 (id=1226): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x14, r2, 0xb1b98c1e8c92f491, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) 130.532799ms ago: executing program 5 (id=1227): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fcntl$dupfd(r1, 0x0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x18) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) 74.69811ms ago: executing program 6 (id=1228): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f9"], 0x0) 43.53263ms ago: executing program 8 (id=1229): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='timer_start\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 42.9412ms ago: executing program 5 (id=1230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x798011ccc5908918, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffeffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0}, 0x0, &(0x7f00000013c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 42.59732ms ago: executing program 6 (id=1231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fstatfs(r3, &(0x7f0000000740)=""/199) 9.20189ms ago: executing program 36 (id=1229): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='timer_start\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 6.66849ms ago: executing program 6 (id=1233): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) fallocate(r1, 0x8, 0x4000, 0x4000) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 0s ago: executing program 5 (id=1234): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)="02", 0x1, 0x4499, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfd81, 0xc9100120, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T361] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 40.997232][ T1252] loop3: detected capacity change from 0 to 8192 [ 41.010760][ T1245] loop5: detected capacity change from 0 to 40427 [ 41.057408][ T1260] kvm [1259]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 41.067109][ T1260] kvm [1259]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 41.075658][ T1252] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 41.091258][ T1245] F2FS-fs (loop5): fault_injection options not supported [ 41.109715][ T1245] F2FS-fs (loop5): invalid crc value [ 41.115698][ T1263] loop0: detected capacity change from 0 to 128 [ 41.117542][ T1252] FAT-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value [ 41.137851][ T1260] kvm [1259]: vcpu2, guest rIP: 0x9114 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 41.149584][ T1245] F2FS-fs (loop5): Found nat_bits in checkpoint [ 41.151417][ T1260] kvm [1259]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0x187 data 0x1 [ 41.167401][ T1260] kvm [1259]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0x186 data 0x1 [ 41.209982][ T1263] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 41.229687][ T1263] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.264892][ T1245] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 41.300521][ T540] attempt to access beyond end of device [ 41.300521][ T540] loop5: rw=2049, want=45104, limit=40427 [ 41.486619][ T1285] Illegal XDP return value 4294967274, expect packet loss! [ 41.524161][ T56] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 41.635957][ T1304] incfs: Options parsing error. -22 [ 41.648580][ T1304] incfs: mount failed -22 [ 41.687026][ T1309] loop0: detected capacity change from 0 to 256 [ 41.712847][ T1309] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 41.858965][ T1321] loop0: detected capacity change from 0 to 512 [ 41.876674][ T1321] EXT4-fs (loop0): Test dummy encryption mode enabled [ 41.905121][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.930575][ T1321] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.403: inode #1: comm syz.0.403: iget: illegal inode # [ 41.954226][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.998193][ T56] usb 4-1: New USB device found, idVendor=056a, idProduct=00b7, bcdDevice= 0.00 [ 42.014360][ T1321] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.403: error while reading EA inode 1 err=-117 [ 42.029665][ T1321] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.403: inode #1: comm syz.0.403: iget: illegal inode # [ 42.048283][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.074460][ T56] usb 4-1: config 0 descriptor?? [ 42.104734][ T1321] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.403: error while reading EA inode 1 err=-117 [ 42.132719][ T1328] loop2: detected capacity change from 0 to 40427 [ 42.194830][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 42.207900][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.219563][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 42.229668][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.239760][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.250850][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.261570][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.273157][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.290553][ T1328] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 42.301304][ T1321] EXT4-fs (loop0): 1 orphan inode deleted [ 42.317554][ T1335] loop1: detected capacity change from 0 to 40427 [ 42.325829][ T1328] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 42.331491][ T1321] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue. Quota mode: none. [ 42.344952][ T1339] loop5: detected capacity change from 0 to 256 [ 42.363232][ T1328] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 42.378026][ T1328] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.385132][ T1335] F2FS-fs (loop1): fault_injection options not supported [ 42.392715][ T1335] F2FS-fs (loop1): fault_type options not supported [ 42.411606][ T1335] F2FS-fs (loop1): invalid crc value [ 42.425985][ T1339] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 42.447393][ T1335] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.463061][ T1328] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 42.472135][ T1328] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.511236][ T1335] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.565914][ T56] wacom 0003:056A:00B7.0008: Unknown device_type for 'HID 056a:00b7'. Assuming pen. [ 42.592756][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 42.592774][ T30] audit: type=1400 audit(1753768569.998:539): avc: denied { link } for pid=1327 comm="syz.2.406" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.593946][ T1351] loop0: detected capacity change from 0 to 128 [ 42.609290][ T1340] attempt to access beyond end of device [ 42.609290][ T1340] loop2: rw=2049, want=45104, limit=40427 [ 42.654373][ T56] wacom 0003:056A:00B7.0008: hidraw0: USB HID v0.00 Device [HID 056a:00b7] on usb-dummy_hcd.3-1/input0 [ 42.705687][ T30] audit: type=1326 audit(1753768570.118:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.5.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e840f9a9 code=0x7ffc0000 [ 42.711307][ T56] input: Wacom Intuos3 4x6 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B7.0008/input/input9 [ 42.731989][ T1351] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.742993][ T282] attempt to access beyond end of device [ 42.742993][ T282] loop1: rw=2049, want=45104, limit=40427 [ 42.753995][ T1351] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.767264][ T30] audit: type=1326 audit(1753768570.178:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.5.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e840f9a9 code=0x7ffc0000 [ 42.808505][ T30] audit: type=1326 audit(1753768570.178:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.5.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f10e840f9a9 code=0x7ffc0000 [ 42.851813][ T56] usb 4-1: USB disconnect, device number 4 [ 42.889676][ T1355] fido_id[1355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 42.932467][ T30] audit: type=1326 audit(1753768570.338:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1d8f89a9 code=0x7ffc0000 [ 42.972571][ T30] audit: type=1326 audit(1753768570.338:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1d8f89a9 code=0x7ffc0000 [ 43.009892][ T30] audit: type=1326 audit(1753768570.338:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efd1d8f89a9 code=0x7ffc0000 [ 43.064629][ T30] audit: type=1326 audit(1753768570.338:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1d8f89a9 code=0x7ffc0000 [ 43.092960][ T30] audit: type=1326 audit(1753768570.338:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1d8f89a9 code=0x7ffc0000 [ 43.196461][ T30] audit: type=1326 audit(1753768570.338:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7efd1d8f89a9 code=0x7ffc0000 [ 43.378275][ T1392] loop1: detected capacity change from 0 to 128 [ 43.401379][ T1392] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 43.410200][ T1392] FAT-fs (loop1): Filesystem has been set read-only [ 43.418592][ T1392] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 43.508288][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 43.521166][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.533220][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 43.544704][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.556593][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.570569][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.578233][ T1402] kvm [1400]: vcpu2, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc1 data 0x0 [ 43.582499][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.592466][ T1402] kvm [1400]: vcpu2, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc2 data 0x0 [ 43.602059][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.614513][ T1402] kvm [1400]: vcpu2, guest rIP: 0x9131 ignored wrmsr: 0x11e data 0x0 [ 43.651785][ T1408] device veth1_macvtap left promiscuous mode [ 43.658526][ T1408] device macsec0 entered promiscuous mode [ 43.824618][ T1433] netlink: 'syz.0.449': attribute type 3 has an invalid length. [ 43.974428][ T1435] loop0: detected capacity change from 0 to 40427 [ 44.014781][ T1435] F2FS-fs (loop0): invalid crc value [ 44.038271][ T1435] F2FS-fs (loop0): Found nat_bits in checkpoint [ 44.044304][ T56] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 44.064724][ T1437] kvm [1436]: vcpu2, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc1 data 0x0 [ 44.075271][ T1437] kvm [1436]: vcpu2, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc2 data 0x0 [ 44.087993][ T1437] kvm [1436]: vcpu2, guest rIP: 0x9131 ignored wrmsr: 0x11e data 0x0 [ 44.095723][ T1435] F2FS-fs (loop0): Start checkpoint disabled! [ 44.105830][ T1435] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 44.208011][ T1448] kvm: MWAIT instruction emulated as NOP! [ 44.258481][ T1453] loop2: detected capacity change from 0 to 256 [ 44.297658][ T1453] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 44.404505][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.416785][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.429246][ T56] usb 2-1: New USB device found, idVendor=056a, idProduct=00b7, bcdDevice= 0.00 [ 44.441683][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.459161][ T56] usb 2-1: config 0 descriptor?? [ 44.559986][ T1469] loop2: detected capacity change from 0 to 2048 [ 44.610525][ T1469] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 44.624161][ T1469] EXT4-fs (loop2): Ignoring removed bh option [ 44.659138][ T1469] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 44.686999][ T1469] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 44.710088][ T1469] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 44.724345][ T1469] EXT4-fs (loop2): This should not happen!! Data will be lost [ 44.724345][ T1469] [ 44.735300][ T1469] EXT4-fs (loop2): Total free blocks count 0 [ 44.741920][ T1469] EXT4-fs (loop2): Free/Dirty block details [ 44.742451][ T1493] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 44.749256][ T1469] EXT4-fs (loop2): free_blocks=2415919104 [ 44.764263][ T1493] EXT4-fs (loop2): This should not happen!! Data will be lost [ 44.764263][ T1493] [ 44.777572][ T1469] EXT4-fs (loop2): dirty_blocks=80 [ 44.787864][ T1493] EXT4-fs (loop2): Total free blocks count 0 [ 44.796674][ T1469] EXT4-fs (loop2): Block reservation details [ 44.936116][ T56] wacom 0003:056A:00B7.0009: Unknown device_type for 'HID 056a:00b7'. Assuming pen. [ 44.947033][ T1065] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 44.969448][ T1505] loop3: detected capacity change from 0 to 128 [ 44.969623][ T56] wacom 0003:056A:00B7.0009: hidraw0: USB HID v0.00 Device [HID 056a:00b7] on usb-dummy_hcd.1-1/input0 [ 44.990518][ T56] input: Wacom Intuos3 4x6 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B7.0009/input/input12 [ 45.016312][ T1505] EXT4-fs (loop3): Ignoring removed nobh option [ 45.030093][ T1509] loop2: detected capacity change from 0 to 512 [ 45.033250][ T1505] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 45.052115][ T1505] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.095508][ T1509] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 45.104220][ T1509] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 45.116455][ T1509] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 45.131753][ T1509] System zones: 1-12 [ 45.142252][ T1509] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.480: corrupted in-inode xattr [ 45.158257][ T1509] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.480: couldn't read orphan inode 15 (err -117) [ 45.158802][ T56] usb 2-1: USB disconnect, device number 3 [ 45.173083][ T1509] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,noauto_da_alloc,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 45.322089][ T1521] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 45.331740][ T1521] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 45.344252][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.358233][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.370917][ T1065] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 45.382432][ T1065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.394562][ T1065] usb 1-1: config 0 descriptor?? [ 45.515868][ T1537] SELinux: ebitmap: truncated map [ 45.527520][ T1537] SELinux: failed to load policy [ 45.584130][ T6] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 45.734187][ T337] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 45.964160][ T6] usb 3-1: device descriptor read/all, error -71 [ 47.138195][ T1547] loop1: detected capacity change from 0 to 40427 [ 47.150991][ T1547] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 47.159164][ T1547] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 47.174930][ T1547] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.205723][ T1065] hid-led 0003:1D34:0004.000A: item fetching failed at offset 5/7 [ 47.210366][ T1547] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 47.215247][ T1065] hid-led: probe of 0003:1D34:0004.000A failed with error -22 [ 47.221852][ T1547] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 47.254591][ T282] attempt to access beyond end of device [ 47.254591][ T282] loop1: rw=2049, want=45112, limit=40427 [ 47.430433][ T6] usb 1-1: USB disconnect, device number 4 [ 47.495614][ T1570] loop1: detected capacity change from 0 to 8192 [ 47.527145][ T1573] loop2: detected capacity change from 0 to 8192 [ 47.552485][ T1570] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 47.565114][ T1570] FAT-fs (loop1): Unrecognized mount option "appraise_type=imasig" or missing value [ 47.585433][ T1573] loop2: p1 p2 p4 < > [ 47.589858][ T1573] loop2: partition table partially beyond EOD, truncated [ 47.597203][ T1573] loop2: p1 start 16777216 is beyond EOD, truncated [ 47.604129][ T1573] loop2: p2 size 515840 extends beyond EOD, truncated [ 47.617724][ T1573] loop2: p4 start 16777216 is beyond EOD, truncated [ 47.716303][ T343] udevd[343]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 47.765123][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 47.765140][ T30] audit: type=1400 audit(1753768831.174:571): avc: denied { relabelfrom } for pid=1590 comm="syz.3.514" name="NETLINK" dev="sockfs" ino=20883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.811417][ T30] audit: type=1400 audit(1753768831.174:572): avc: denied { relabelto } for pid=1590 comm="syz.3.514" name="NETLINK" dev="sockfs" ino=20883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 48.043109][ T30] audit: type=1326 audit(1753768831.444:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1d8f89a9 code=0x7ffc0000 [ 48.044233][ T1614] mmap: syz.0.526 (1614) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 48.112001][ T30] audit: type=1326 audit(1753768831.444:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1d8f89a9 code=0x7ffc0000 [ 48.194340][ T30] audit: type=1326 audit(1753768831.444:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efd1d8f89a9 code=0x7ffc0000 [ 48.223252][ T1618] loop2: detected capacity change from 0 to 8192 [ 48.248688][ T30] audit: type=1326 audit(1753768831.444:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1d8f89a9 code=0x7ffc0000 [ 48.308322][ T30] audit: type=1326 audit(1753768831.444:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1d8f89a9 code=0x7ffc0000 [ 48.332399][ T30] audit: type=1326 audit(1753768831.454:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7efd1d8f89a9 code=0x7ffc0000 [ 48.356622][ T1618] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 48.381163][ T30] audit: type=1326 audit(1753768831.534:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1d8f89a9 code=0x7ffc0000 [ 48.412165][ T30] audit: type=1326 audit(1753768831.534:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1613 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1d8f89a9 code=0x7ffc0000 [ 48.444162][ T1633] netlink: 96 bytes leftover after parsing attributes in process `syz.5.533'. [ 48.454704][ T1618] FAT-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value [ 48.512664][ T1617] loop3: detected capacity change from 0 to 40427 [ 48.540198][ T1617] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 48.582423][ T1617] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 48.594145][ T337] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 48.608518][ T1617] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 48.622092][ T1617] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.703606][ T1617] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 48.722372][ T1617] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 48.801339][ T285] attempt to access beyond end of device [ 48.801339][ T285] loop3: rw=2049, want=45104, limit=40427 [ 48.854118][ T1065] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 48.895500][ T1669] loop5: detected capacity change from 0 to 256 [ 48.920142][ T1669] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 48.943342][ T1661] loop2: detected capacity change from 0 to 40427 [ 48.967025][ T1661] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 48.976106][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.994645][ T1661] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 49.005368][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.017056][ T337] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 49.029782][ T1661] F2FS-fs (loop2): invalid crc value [ 49.035867][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.045387][ T337] usb 2-1: config 0 descriptor?? [ 49.051905][ T1661] F2FS-fs (loop2): Found nat_bits in checkpoint [ 49.100119][ T1661] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 49.107989][ T1065] usb 1-1: Using ep0 maxpacket: 16 [ 49.108062][ T1661] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 49.234259][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.247239][ T1065] usb 1-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 49.258625][ T1065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.269543][ T1065] usb 1-1: config 0 descriptor?? [ 49.765506][ T1065] smartjoyplus 0003:6666:8801.000C: item fetching failed at offset 4/5 [ 49.781495][ T1065] smartjoyplus 0003:6666:8801.000C: parse failed [ 49.794171][ T1065] smartjoyplus: probe of 0003:6666:8801.000C failed with error -22 [ 49.921576][ T1699] loop5: detected capacity change from 0 to 128 [ 49.926175][ T1701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.559'. [ 49.946164][ T1701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.559'. [ 49.972752][ T6] usb 1-1: USB disconnect, device number 5 [ 49.994676][ T1699] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.014189][ T1699] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.055939][ T1699] EXT4-fs warning (device loop5): verify_group_input:147: Cannot add at group 24 (only 1 groups) [ 50.176353][ T1713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.564'. [ 50.186881][ T337] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000B/input/input15 [ 50.215787][ T337] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000B/input/input16 [ 50.251217][ T337] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 50.377909][ T1723] device ip6tnl2 entered promiscuous mode [ 50.393081][ T337] usb 2-1: USB disconnect, device number 4 [ 50.524153][ T39] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 50.601327][ T1735] loop0: detected capacity change from 0 to 2048 [ 50.647074][ T343] Alternate GPT is invalid, using primary GPT. [ 50.653609][ T343] loop0: p2 p3 p7 [ 50.665395][ T1735] Alternate GPT is invalid, using primary GPT. [ 50.671953][ T1735] loop0: p2 p3 p7 [ 50.694149][ T6] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 50.750024][ T1063] udevd[1063]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 50.757109][ T343] udevd[343]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 50.763473][ T334] udevd[334]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 50.774584][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 50.787965][ T343] udevd[343]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 50.789084][ T1063] udevd[1063]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 50.800672][ T334] udevd[334]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 50.914559][ T39] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 50.946533][ T39] usb 6-1: config 0 has no interface number 0 [ 50.955962][ T39] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 50.984589][ T39] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 50.996411][ T39] usb 6-1: config 0 interface 41 has no altsetting 0 [ 51.054183][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.065306][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.076330][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.091022][ T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.100311][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.113088][ T6] usb 4-1: config 0 descriptor?? [ 51.147964][ T1746] loop1: detected capacity change from 0 to 40427 [ 51.164334][ T39] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 51.173731][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.182432][ T39] usb 6-1: Product: syz [ 51.186984][ T39] usb 6-1: Manufacturer: syz [ 51.191619][ T39] usb 6-1: SerialNumber: syz [ 51.203610][ T1746] F2FS-fs (loop1): invalid crc value [ 51.222721][ T39] usb 6-1: config 0 descriptor?? [ 51.230085][ T1746] F2FS-fs (loop1): Found nat_bits in checkpoint [ 51.245491][ T1718] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 51.252706][ T1718] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 51.270953][ T1746] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 51.348120][ T1746] attempt to access beyond end of device [ 51.348120][ T1746] loop1: rw=0, want=49160, limit=40427 [ 51.387068][ T1746] attempt to access beyond end of device [ 51.387068][ T1746] loop1: rw=2049, want=45104, limit=40427 [ 51.475776][ T1718] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 51.483597][ T1718] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 51.484293][ T26] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 51.575441][ T6] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 51.590587][ T6] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 51.734122][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 51.848823][ T337] usb 4-1: USB disconnect, device number 6 [ 51.889141][ T1790] loop1: detected capacity change from 0 to 16 [ 51.935423][ T1790] erofs: (device loop1): mounted with root inode @ nid 36. [ 51.947857][ T49] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 51.969508][ T1790] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 51.991081][ T1790] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 52.011896][ T1790] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 52.032606][ T26] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 52.042379][ T1790] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 52.062874][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.071043][ T26] usb 3-1: Product: syz [ 52.075404][ T26] usb 3-1: Manufacturer: syz [ 52.080169][ T26] usb 3-1: SerialNumber: syz [ 52.086064][ T26] usb 3-1: config 0 descriptor?? [ 52.164204][ T39] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 52.434182][ T39] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 52.445256][ T39] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 52.455733][ T39] CoreChips: probe of 6-1:0.41 failed with error -71 [ 52.463701][ T39] usb 6-1: USB disconnect, device number 3 [ 52.514508][ T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 52.644113][ T432] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 52.874218][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.885811][ T432] usb 2-1: Using ep0 maxpacket: 32 [ 52.891608][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.902452][ T26] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 52.912151][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.922444][ T26] usb 1-1: config 0 descriptor?? [ 53.004203][ T432] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.017164][ T432] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.028467][ T432] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 53.038224][ T432] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.048563][ T432] usb 2-1: config 0 descriptor?? [ 53.094904][ T432] hub 2-1:0.0: USB hub found [ 53.127016][ T1820] raw_sendmsg: syz.5.607 forgot to set AF_INET. Fix it! [ 53.286149][ T1826] loop3: detected capacity change from 0 to 512 [ 53.313713][ T1826] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.314865][ T432] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 53.366885][ T1826] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.610: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 53.389720][ T1826] EXT4-fs error (device loop3): ext4_quota_enable:6409: comm syz.3.610: Bad quota inode: 4, type: 1 [ 53.403496][ T1826] EXT4-fs warning (device loop3): ext4_enable_quotas:6450: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.423613][ T26] hid-steam 0003:28DE:1142.000E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 53.439470][ T1826] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 53.448664][ T26] hid-steam 0003:28DE:1142.000F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 53.460591][ T1826] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.480882][ T1826] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 53.503727][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 53.503744][ T30] audit: type=1326 audit(1753768836.904:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz.5.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e840f9a9 code=0x7ffc0000 [ 53.534197][ T26] hid-steam 0003:28DE:1142.000E: Steam wireless receiver connected [ 53.534318][ T30] audit: type=1326 audit(1753768836.914:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz.5.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e840f9a9 code=0x7ffc0000 [ 53.567405][ T1826] EXT4-fs warning (device loop3): ext4_multi_mount_protect:340: MMP startup interrupted, failing mount [ 53.567405][ T1826] [ 53.598375][ T30] audit: type=1326 audit(1753768836.914:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz.5.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e840f9a9 code=0x7ffc0000 [ 53.638819][ T337] usb 1-1: USB disconnect, device number 6 [ 53.646284][ T337] hid-steam 0003:28DE:1142.000E: Steam wireless receiver disconnected [ 53.658083][ T30] audit: type=1326 audit(1753768836.914:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz.5.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e840f9a9 code=0x7ffc0000 [ 53.684699][ T30] audit: type=1326 audit(1753768836.914:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz.5.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e840f9a9 code=0x7ffc0000 [ 53.722781][ T30] audit: type=1326 audit(1753768836.914:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz.5.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e840f9a9 code=0x7ffc0000 [ 53.738125][ T1847] syzkaller0: mtu less than device minimum [ 53.755453][ T432] hid-generic 0003:046D:C31C.0010: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 53.759325][ T30] audit: type=1326 audit(1753768836.914:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz.5.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e840f9a9 code=0x7ffc0000 [ 53.795346][ T30] audit: type=1326 audit(1753768836.934:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz.5.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e840f9a9 code=0x7ffc0000 [ 53.831383][ T30] audit: type=1326 audit(1753768836.954:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz.5.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e840f9a9 code=0x7ffc0000 [ 53.856443][ T30] audit: type=1326 audit(1753768836.964:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz.5.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e840f9a9 code=0x7ffc0000 [ 53.935421][ T1858] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 53.947533][ T1858] FAT-fs (loop7): unable to read boot sector [ 53.984978][ T292] usb 3-1: USB disconnect, device number 8 [ 54.023142][ T1860] loop3: detected capacity change from 0 to 512 [ 54.070448][ T1860] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.624: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 54.089767][ T1860] EXT4-fs error (device loop3): ext4_quota_enable:6409: comm syz.3.624: Bad quota inode: 3, type: 0 [ 54.094918][ T337] usb 2-1: USB disconnect, device number 5 [ 54.102498][ T1860] EXT4-fs warning (device loop3): ext4_enable_quotas:6450: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 54.134988][ T1860] EXT4-fs (loop3): mount failed [ 54.207498][ T1880] user requested TSC rate below hardware speed [ 54.365559][ T1902] syz.0.641[1902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.365674][ T1902] syz.0.641[1902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.389597][ T1902] loop0: detected capacity change from 0 to 512 [ 54.441236][ T1902] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.641: casefold flag without casefold feature [ 54.459289][ T1902] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.641: couldn't read orphan inode 15 (err -117) [ 54.471969][ T1902] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,abort,block_validity,,errors=continue. Quota mode: writeback. [ 54.543966][ T1916] loop1: detected capacity change from 0 to 512 [ 54.553775][ T1918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 54.563841][ T1918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'. [ 54.573666][ T1918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 54.587536][ T1918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 54.598532][ T1916] EXT4-fs (loop1): Ignoring removed oldalloc option [ 54.607025][ T1916] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.625525][ T1916] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.649: Parent and EA inode have the same ino 15 [ 54.644017][ T26] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 54.657204][ T1916] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.649: Parent and EA inode have the same ino 15 [ 54.680245][ T1916] EXT4-fs (loop1): 1 orphan inode deleted [ 54.681695][ T1929] loop3: detected capacity change from 0 to 128 [ 54.687318][ T1916] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nolazytime,debug_want_extra_isize=0x000000000000005c,dioread_nolock,usrjquota=,oldalloc,sysvgroups,,errors=continue. Quota mode: none. [ 54.717536][ T292] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 54.785467][ T1936] netlink: 44 bytes leftover after parsing attributes in process `syz.0.655'. [ 54.790417][ T1929] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.807130][ T1929] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.808757][ T432] kernel write not supported for file bpf-prog (pid: 432 comm: kworker/1:3) [ 54.843170][ T1929] syz.3.652 (pid 1929) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 54.873000][ T1943] incfs: Options parsing error. -22 [ 54.882372][ T1943] incfs: mount failed -22 [ 55.027888][ T1961] netlink: 'syz.1.666': attribute type 10 has an invalid length. [ 55.037988][ T1961] netlink: 'syz.1.666': attribute type 17 has an invalid length. [ 55.046865][ T1961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 55.084191][ T26] usb 3-1: unable to get BOS descriptor or descriptor too short [ 55.092640][ T1965] xt_hashlimit: size too large, truncated to 1048576 [ 55.101203][ T1967] xt_hashlimit: max too large, truncated to 1048576 [ 55.114279][ T292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.124318][ T26] usb 3-1: not running at top speed; connect to a high speed hub [ 55.132081][ T292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.146191][ T292] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 55.157634][ T292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.174322][ T292] usb 6-1: config 0 descriptor?? [ 55.214232][ T26] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 55.233392][ T26] usb 3-1: config 0 has no interface number 0 [ 55.239935][ T26] usb 3-1: config 0 interface 10 has no altsetting 0 [ 55.414204][ T26] usb 3-1: New USB device found, idVendor=0b05, idProduct=171f, bcdDevice=e4.c9 [ 55.434126][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.442331][ T26] usb 3-1: Product: syz [ 55.454109][ T26] usb 3-1: Manufacturer: syz [ 55.459758][ T26] usb 3-1: SerialNumber: syz [ 55.474847][ T26] usb 3-1: config 0 descriptor?? [ 55.557363][ T1974] loop3: detected capacity change from 0 to 40427 [ 55.645546][ T292] hid-steam 0003:28DE:1142.0011: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 55.658604][ T1974] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 55.666791][ T1974] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 55.676623][ T292] hid-steam 0003:28DE:1142.0012: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 55.690001][ T1974] F2FS-fs (loop3): invalid crc value [ 55.697077][ T1974] F2FS-fs (loop3): Found nat_bits in checkpoint [ 55.740179][ T1974] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 55.752694][ T1974] F2FS-fs (loop3): Start checkpoint disabled! [ 55.762674][ T1974] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 55.770329][ T292] hid-steam 0003:28DE:1142.0011: Steam wireless receiver connected [ 55.781548][ T1974] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 55.804111][ T26] usb 3-1: USB disconnect, device number 9 [ 55.862060][ T1065] usb 6-1: USB disconnect, device number 4 [ 55.870065][ T1065] hid-steam 0003:28DE:1142.0011: Steam wireless receiver disconnected [ 55.894665][ T1989] fido_id[1989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 55.967521][ T1998] hub 9-0:1.0: USB hub found [ 55.972607][ T1998] hub 9-0:1.0: 1 port detected [ 56.374107][ T1065] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 56.388718][ T2021] loop2: detected capacity change from 0 to 512 [ 56.444133][ T292] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 56.656978][ T2021] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #16: comm syz.2.692: corrupted inode contents [ 56.671173][ T2021] EXT4-fs error (device loop2): ext4_dirty_inode:6071: inode #16: comm syz.2.692: mark_inode_dirty error [ 56.684005][ T2021] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #16: comm syz.2.692: corrupted inode contents [ 56.697579][ T2021] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.692: mark_inode_dirty error [ 56.710335][ T2021] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #16: comm syz.2.692: corrupted inode contents [ 56.722963][ T2021] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 56.731798][ T2021] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #16: comm syz.2.692: corrupted inode contents [ 56.743950][ T2021] EXT4-fs error (device loop2): ext4_truncate:4304: inode #16: comm syz.2.692: mark_inode_dirty error [ 56.794365][ T2021] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 56.864975][ T2021] EXT4-fs (loop2): 1 truncate cleaned up [ 56.870759][ T2021] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 57.114195][ T2021] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.784328][ T2016] loop3: detected capacity change from 0 to 40427 [ 59.616414][ T2029] loop5: detected capacity change from 0 to 256 [ 59.648957][ T2029] exfat: Deprecated parameter 'namecase' [ 59.654235][ T1065] usb 1-1: device descriptor read/all, error -71 [ 59.662698][ T2031] IPv6: addrconf: prefix option has invalid lifetime [ 59.681828][ T2029] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 59.743541][ T2033] serio: Serial port ptm0 [ 59.814036][ T2045] loop3: detected capacity change from 0 to 128 [ 59.841835][ T2045] FAT-fs (loop3): Directory bread(block 32) failed [ 59.848739][ T2045] FAT-fs (loop3): Directory bread(block 33) failed [ 59.855651][ T2045] FAT-fs (loop3): Directory bread(block 34) failed [ 59.862445][ T2045] FAT-fs (loop3): Directory bread(block 35) failed [ 59.869461][ T2045] FAT-fs (loop3): Directory bread(block 36) failed [ 59.876660][ T2045] FAT-fs (loop3): Directory bread(block 37) failed [ 59.883743][ T2045] FAT-fs (loop3): Directory bread(block 38) failed [ 59.891024][ T2045] FAT-fs (loop3): Directory bread(block 39) failed [ 59.898210][ T2045] FAT-fs (loop3): Directory bread(block 40) failed [ 59.905378][ T2045] FAT-fs (loop3): Directory bread(block 41) failed [ 59.946047][ T2045] attempt to access beyond end of device [ 59.946047][ T2045] loop3: rw=0, want=4112, limit=128 [ 59.963745][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 59.963765][ T30] audit: type=1400 audit(1753768843.364:650): avc: denied { sys_admin } for pid=2048 comm="syz.2.704" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 59.976619][ T2045] FAT-fs (loop3): Filesystem has been set read-only [ 60.015056][ T2045] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 60.150067][ T2059] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 60.166835][ T2059] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 60.205218][ T2074] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 60.230198][ T2074] FAT-fs (loop1): unable to read boot sector [ 60.295106][ T30] audit: type=1326 audit(1753768843.704:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2082 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373d6a49a9 code=0x7ffc0000 [ 60.337018][ T2086] tipc: Started in network mode [ 60.351740][ T30] audit: type=1326 audit(1753768843.724:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2082 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f373d6a49a9 code=0x7ffc0000 [ 60.377584][ T2086] tipc: Node identity ac14140f, cluster identity 4711 [ 60.392351][ T2086] tipc: New replicast peer: 255.255.255.255 [ 60.410822][ T2086] tipc: Enabled bearer , priority 10 [ 60.434441][ T30] audit: type=1326 audit(1753769355.736:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2082 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373d6a49a9 code=0x7ffc0000 [ 60.497192][ T2095] loop3: detected capacity change from 0 to 2048 [ 60.607839][ T2095] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.638224][ T2077] loop1: detected capacity change from 0 to 40427 [ 60.661981][ T2109] loop2: detected capacity change from 0 to 1024 [ 60.673533][ T30] audit: type=1400 audit(1753769356.076:654): avc: denied { nlmsg_read } for pid=2110 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.678210][ T2111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 60.709286][ T2077] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 60.719651][ T2077] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 60.736646][ T2109] EXT4-fs (loop2): Ignoring removed bh option [ 60.744928][ T2077] F2FS-fs (loop1): invalid crc value [ 60.774251][ T2109] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 60.845956][ T2077] F2FS-fs (loop1): Found nat_bits in checkpoint [ 60.868309][ T284] EXT4-fs error (device loop2): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /140/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 60.902363][ T2119] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 60.919242][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 60.930521][ T2119] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 60.931711][ T284] EXT4-fs error (device loop2): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /140/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 60.973966][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 60.981831][ T284] EXT4-fs error (device loop2): empty_inline_dir:1869: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 61.005270][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 61.013034][ T2077] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 61.021583][ T284] EXT4-fs warning (device loop2): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.044371][ T2077] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 61.055820][ T284] EXT4-fs error (device loop2): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /140/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 61.121414][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 61.141610][ T284] EXT4-fs error (device loop2): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /140/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 61.188237][ T2136] loop3: detected capacity change from 0 to 1024 [ 61.205238][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 61.212101][ T284] EXT4-fs error (device loop2): empty_inline_dir:1869: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 61.237942][ T2077] attempt to access beyond end of device [ 61.237942][ T2077] loop1: rw=2049, want=45112, limit=40427 [ 61.266829][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 61.289630][ T284] EXT4-fs warning (device loop2): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.305794][ T361] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 61.306412][ T284] EXT4-fs error (device loop2): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /140/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 61.335979][ T361] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 61.350692][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 61.364324][ T284] EXT4-fs error (device loop2): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /140/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 61.388840][ T2136] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.404239][ T2136] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.434291][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 61.440973][ T284] EXT4-fs error (device loop2): empty_inline_dir:1869: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 61.464648][ T2136] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.738: Freeing blocks not in datazone - block = 0, count = 16 [ 61.525730][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 61.532355][ T284] EXT4-fs warning (device loop2): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.549681][ T6] tipc: Node number set to 2886997007 [ 61.558437][ T284] EXT4-fs error (device loop2): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /140/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 61.636126][ T2140] loop3: detected capacity change from 0 to 1024 [ 61.644018][ T284] EXT4-fs (loop2): Remounting filesystem read-only [ 61.651412][ T284] EXT4-fs warning (device loop2): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.684680][ T284] EXT4-fs warning (device loop2): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.721379][ T284] EXT4-fs warning (device loop2): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.758174][ T2140] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.769609][ T284] EXT4-fs warning (device loop2): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.795354][ T284] EXT4-fs warning (device loop2): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.834492][ T284] EXT4-fs warning (device loop2): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.856791][ T284] EXT4-fs warning (device loop2): empty_inline_dir:1876: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.953260][ T2163] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967286. macoff=82 [ 62.007117][ T2166] 9pnet: p9_errstr2errno: server reported unknown error [ 62.285023][ T30] audit: type=1107 audit(1753769357.696:655): pid=2174 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 62.304216][ T292] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 62.505220][ T2173] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.522972][ T2173] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.545645][ T2173] device bridge_slave_0 entered promiscuous mode [ 62.553962][ T2173] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.562182][ T2173] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.570061][ T2173] device bridge_slave_1 entered promiscuous mode [ 62.577821][ T1354] device bridge_slave_1 left promiscuous mode [ 62.590507][ T1354] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.598978][ T1354] device bridge_slave_0 left promiscuous mode [ 62.608593][ T1354] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.618670][ T1354] device veth1_macvtap left promiscuous mode [ 62.625543][ T1354] device veth0_vlan left promiscuous mode [ 62.642321][ T30] audit: type=1326 audit(1753769358.046:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8b2409a9 code=0x7ffc0000 [ 62.677421][ T30] audit: type=1326 audit(1753769358.046:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8b2409a9 code=0x7ffc0000 [ 62.706045][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.706736][ T30] audit: type=1326 audit(1753769358.086:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d8b2409a9 code=0x7ffc0000 [ 62.745732][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.757315][ T292] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 62.771737][ T292] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.782995][ T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.793816][ T292] usb 1-1: config 0 descriptor?? [ 62.799623][ T30] audit: type=1326 audit(1753769358.086:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8b2409a9 code=0x7ffc0000 [ 62.824280][ T337] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 63.030726][ T2173] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.038903][ T2173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.046623][ T2173] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.053692][ T2173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.074137][ T337] usb 4-1: Using ep0 maxpacket: 16 [ 63.079841][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.088470][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.127814][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.136311][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.154235][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.164822][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.173514][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.180903][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.189662][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.199825][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.209519][ T337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.221903][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.229681][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.237676][ T337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.255583][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.264118][ T337] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 63.279484][ T292] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 63.288775][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.298060][ T292] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 63.311974][ T337] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 63.321697][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.331696][ T337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.340461][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.355392][ T337] usb 4-1: config 0 descriptor?? [ 63.384902][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.395906][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.422510][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.436824][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.447492][ T2173] device veth0_vlan entered promiscuous mode [ 63.459640][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.469705][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.487460][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.496871][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.507794][ T2173] device veth1_macvtap entered promiscuous mode [ 63.523382][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.532852][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.542996][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.556501][ T292] usb 1-1: USB disconnect, device number 9 [ 63.569906][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.581427][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.825622][ T337] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 63.840390][ T337] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 63.852477][ T337] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 63.874153][ T337] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 63.881775][ T337] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 63.891650][ T337] microsoft 0003:045E:07DA.0014: No inputs registered, leaving [ 63.903697][ T337] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 63.916599][ T6] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 63.929489][ T337] microsoft 0003:045E:07DA.0014: no inputs found [ 63.936995][ T337] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway [ 64.026450][ T1065] usb 4-1: USB disconnect, device number 7 [ 64.224303][ T337] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 64.304190][ T6] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.319026][ T6] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 64.376189][ T2264] loop0: detected capacity change from 0 to 512 [ 64.484328][ T6] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.495153][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.504769][ T6] usb 7-1: Product: syz [ 64.509354][ T6] usb 7-1: Manufacturer: syz [ 64.514479][ T6] usb 7-1: SerialNumber: syz [ 64.584205][ T337] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 64.595929][ T337] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.605884][ T337] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 64.630823][ T337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.644283][ T337] usb 6-1: config 0 descriptor?? [ 64.707007][ T2280] input: syz1 as /devices/virtual/input/input17 [ 64.729363][ T2282] tmpfs: Unknown parameter 'nolazytimeÿÿ' [ 64.756266][ T2234] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 64.792251][ T2286] loop0: detected capacity change from 0 to 128 [ 65.114310][ T432] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 65.126338][ T337] konepure 0003:1E7D:2DBE.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.5-1/input0 [ 65.352990][ T337] usb 6-1: USB disconnect, device number 5 [ 65.364187][ T1065] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 65.424712][ T2234] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 65.484193][ T432] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.495457][ T432] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.505683][ T432] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.519325][ T432] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 65.529144][ T432] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.539488][ T432] usb 2-1: config 0 descriptor?? [ 65.644209][ T6] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 65.651806][ T6] cdc_ncm 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 65.662431][ T6] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 65.734358][ T1065] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 65.751119][ T1065] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 65.760718][ T1065] usb 1-1: config 220 interface 0 has no altsetting 0 [ 65.856085][ T6] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM, 42:42:42:42:42:42 [ 65.878758][ T6] usb 7-1: USB disconnect, device number 2 [ 65.890584][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 65.890603][ T30] audit: type=1400 audit(1753769361.296:689): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 65.896486][ T6] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM [ 65.907809][ T30] audit: type=1400 audit(1753769361.306:690): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.948980][ T1065] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 65.959062][ T1065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.967667][ T1065] usb 1-1: Product: syz [ 65.971953][ T1065] usb 1-1: Manufacturer: syz [ 65.977056][ T1065] usb 1-1: SerialNumber: syz [ 65.980587][ T30] audit: type=1400 audit(1753769361.306:691): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=5213 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.003699][ T30] audit: type=1400 audit(1753769361.306:692): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=5213 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.010166][ T432] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 66.029585][ T30] audit: type=1400 audit(1753769361.306:693): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=5213 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.059504][ T432] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 66.059759][ T337] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 66.074654][ T432] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 66.088081][ T30] audit: type=1400 audit(1753769361.376:694): avc: denied { read } for pid=2314 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.091004][ T432] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 66.129026][ T30] audit: type=1400 audit(1753769361.376:695): avc: denied { open } for pid=2314 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.140738][ T432] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 66.165349][ T432] acrux 0003:1A34:0802.0016: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 66.177977][ T30] audit: type=1400 audit(1753769361.376:696): avc: denied { getattr } for pid=2314 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.205790][ T432] acrux 0003:1A34:0802.0016: no inputs found [ 66.213094][ T432] acrux 0003:1A34:0802.0016: Failed to enable force feedback support, error: -19 [ 66.223745][ T30] audit: type=1400 audit(1753769361.616:697): avc: denied { write } for pid=2313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.248567][ T30] audit: type=1400 audit(1753769361.616:698): avc: denied { add_name } for pid=2313 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.281794][ T432] usb 2-1: USB disconnect, device number 7 [ 66.334110][ T337] usb 4-1: Using ep0 maxpacket: 32 [ 66.335912][ T2333] fido_id[2333]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 66.429015][ T2350] syz.5.816[2350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.429101][ T2350] syz.5.816[2350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.447296][ T1065] usb 1-1: USB disconnect, device number 10 [ 66.474210][ T337] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 66.487078][ T337] usb 4-1: config 0 has no interface number 0 [ 66.538123][ T2361] loop6: detected capacity change from 0 to 128 [ 66.560517][ T2359] SELinux: failed to load policy [ 66.572825][ T2361] FAT-fs (loop6): Directory bread(block 32) failed [ 66.582969][ T2361] FAT-fs (loop6): Directory bread(block 33) failed [ 66.590130][ T2361] FAT-fs (loop6): Directory bread(block 34) failed [ 66.597056][ T2361] FAT-fs (loop6): Directory bread(block 35) failed [ 66.606215][ T2361] FAT-fs (loop6): Directory bread(block 36) failed [ 66.613630][ T2361] FAT-fs (loop6): Directory bread(block 37) failed [ 66.621034][ T2361] FAT-fs (loop6): Directory bread(block 38) failed [ 66.628167][ T2361] FAT-fs (loop6): Directory bread(block 39) failed [ 66.634888][ T2363] kvm [2362]: vcpu2, guest rIP: 0x9133 ignored wrmsr: 0x11e data 0xbe702111 [ 66.635532][ T2361] FAT-fs (loop6): Directory bread(block 40) failed [ 66.651252][ T2361] FAT-fs (loop6): Directory bread(block 41) failed [ 66.664227][ T337] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 66.679778][ T337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.688721][ T337] usb 4-1: Product: syz [ 66.692923][ T337] usb 4-1: Manufacturer: syz [ 66.697724][ T337] usb 4-1: SerialNumber: syz [ 66.707707][ T337] usb 4-1: config 0 descriptor?? [ 66.721793][ T2361] attempt to access beyond end of device [ 66.721793][ T2361] loop6: rw=0, want=4112, limit=128 [ 66.735071][ T2361] FAT-fs (loop6): Filesystem has been set read-only [ 66.742999][ T2361] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 66.754640][ T337] smsc95xx v2.0.0 [ 66.868569][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 66.877564][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.891247][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 66.900035][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.908752][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.918494][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.927586][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.936246][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.963692][ T2381] incfs: Options parsing error. -22 [ 66.969127][ T2381] incfs: mount failed -22 [ 67.040480][ T2387] netlink: 96 bytes leftover after parsing attributes in process `syz.1.832'. [ 67.310879][ T2393] loop6: detected capacity change from 0 to 40427 [ 67.326594][ T2393] F2FS-fs (loop6): invalid crc value [ 67.348759][ T2393] F2FS-fs (loop6): Found nat_bits in checkpoint [ 67.412965][ T2393] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 67.457139][ T2393] attempt to access beyond end of device [ 67.457139][ T2393] loop6: rw=2049, want=77960, limit=40427 [ 67.471578][ T2418] loop0: detected capacity change from 0 to 1024 [ 67.500929][ T2173] attempt to access beyond end of device [ 67.500929][ T2173] loop6: rw=2049, want=45104, limit=40427 [ 67.513734][ T2418] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 67.625336][ T283] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 67.661834][ T283] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 67.750092][ T2436] loop6: detected capacity change from 0 to 512 [ 67.812910][ T2436] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 67.839248][ T2436] EXT4-fs (loop6): 1 truncate cleaned up [ 67.846636][ T2436] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 67.883928][ T2436] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.6.846: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 67.910984][ T2436] EXT4-fs (loop6): Remounting filesystem read-only [ 67.924796][ T2436] EXT4-fs error (device loop6) in ext4_delete_entry:2800: Corrupt filesystem [ 67.935953][ T2436] EXT4-fs (loop6): Remounting filesystem read-only [ 67.943157][ T2436] EXT4-fs warning (device loop6): ext4_rename_delete:3792: inode #2: comm syz.6.846: Deleting old file: nlink 5, error=-117 [ 68.054196][ T337] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 68.066273][ T337] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 68.104199][ T337] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 68.134213][ T337] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 68.157026][ T337] usb 4-1: USB disconnect, device number 8 [ 68.234224][ T2457] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.267967][ T2457] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.280874][ T2481] syz.5.871[2481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.280969][ T2481] syz.5.871[2481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.295054][ T2457] device bridge_slave_0 entered promiscuous mode [ 68.317738][ T2457] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.325507][ T2457] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.334219][ T2457] device bridge_slave_1 entered promiscuous mode [ 68.411777][ T2486] loop5: detected capacity change from 0 to 128 [ 68.479685][ T2486] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.494981][ T361] device bridge_slave_1 left promiscuous mode [ 68.501499][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.505865][ T2486] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.521637][ T361] device bridge_slave_0 left promiscuous mode [ 68.530671][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.544730][ T361] device veth1_macvtap left promiscuous mode [ 68.551537][ T361] device veth0_vlan left promiscuous mode [ 68.681447][ T2509] loop3: detected capacity change from 0 to 128 [ 68.700524][ T2509] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.714380][ T2509] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.775660][ T2457] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.783105][ T2457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.791522][ T2457] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.799483][ T2457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.826282][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.836538][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.846116][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.862454][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.880082][ T1354] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.887391][ T1354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.899446][ T2522] netlink: 64 bytes leftover after parsing attributes in process `syz.3.884'. [ 68.915194][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.935000][ T1354] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.943310][ T1354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.960639][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.969842][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.980803][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.001981][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.025749][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.039324][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.054980][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.064194][ T337] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.066472][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.082035][ T2457] device veth0_vlan entered promiscuous mode [ 69.091433][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.100211][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.116914][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.126068][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.135577][ T2457] device veth1_macvtap entered promiscuous mode [ 69.151244][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.160798][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.172990][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.192044][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.202613][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.304315][ T337] usb 7-1: Using ep0 maxpacket: 8 [ 69.341285][ T2534] loop7: detected capacity change from 0 to 512 [ 69.422593][ T2539] loop3: detected capacity change from 0 to 512 [ 69.430114][ T337] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.443935][ T2534] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 69.460842][ T2534] EXT4-fs (loop7): orphan cleanup on readonly fs [ 69.461739][ T2539] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 69.469765][ T2534] EXT4-fs error (device loop7): ext4_acquire_dquot:6198: comm syz.7.889: Failed to acquire dquot type 1 [ 69.488189][ T2539] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 69.492605][ T2534] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.889: bg 0: block 40: padding at end of block bitmap is not set [ 69.516907][ T2534] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 69.527290][ T2539] System zones: 1-12 [ 69.532809][ T2539] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.541179][ T2534] EXT4-fs (loop7): 1 truncate cleaned up [ 69.548409][ T2539] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.891: Inode bitmap for bg 0 marked uninitialized [ 69.555716][ T2534] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.565369][ T2539] EXT4-fs (loop3): Remounting filesystem read-only [ 69.585447][ T2539] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 69.624254][ T337] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.641799][ T337] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.650836][ T337] usb 7-1: Product: syz [ 69.656202][ T337] usb 7-1: Manufacturer: syz [ 69.661502][ T337] usb 7-1: SerialNumber: syz [ 69.813043][ T2560] netlink: 24 bytes leftover after parsing attributes in process `syz.7.898'. [ 69.824423][ T6] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 70.016595][ T2566] loop7: detected capacity change from 0 to 40427 [ 70.059462][ T2566] F2FS-fs (loop7): Unrecognized mount option "age_extent_cache" or missing value [ 70.070336][ T2566] syz.7.901[2566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.070418][ T2566] syz.7.901[2566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.184659][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.207447][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.217499][ T6] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 70.227187][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.236542][ T6] usb 6-1: config 0 descriptor?? [ 70.344000][ T2584] loop7: detected capacity change from 0 to 512 [ 70.390054][ T2584] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.910: bg 0: block 393: padding at end of block bitmap is not set [ 70.405177][ T2584] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 70.414708][ T2584] EXT4-fs (loop7): 2 truncates cleaned up [ 70.420802][ T2584] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.621973][ T2597] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.634154][ T2597] FAT-fs (loop15): unable to read boot sector [ 70.789312][ T2615] kvm [2613]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x0 [ 70.798804][ T2615] kvm [2613]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x0 [ 70.808035][ T337] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 70.818113][ T337] cdc_ncm 7-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 70.834565][ T337] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 70.890978][ T2615] kvm [2613]: vcpu0, guest rIP: 0x9114 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x98b7, nop [ 70.910310][ T2615] kvm [2613]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0x187 data 0x7a2 [ 70.921297][ T2615] kvm [2613]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0x186 data 0x768e [ 70.935117][ T2615] kvm [2613]: vcpu0, guest rIP: 0x9114 ignored wrmsr: 0x11e data 0xa128 [ 70.947537][ T2615] kvm [2613]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x1014 [ 70.958352][ T2615] kvm [2613]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7f00 [ 71.046115][ T337] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM, 42:42:42:42:42:42 [ 71.102952][ T337] usb 7-1: USB disconnect, device number 3 [ 71.115780][ T337] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM [ 71.196324][ T2651] netlink: 'syz.1.944': attribute type 4 has an invalid length. [ 71.236799][ T2651] netlink: 'syz.1.944': attribute type 4 has an invalid length. [ 71.268535][ T2651] syz.1.944 (2651) used greatest stack depth: 20864 bytes left [ 71.330938][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 71.330957][ T30] audit: type=1400 audit(1753769366.736:735): avc: denied { append } for pid=2669 comm="syz.7.937" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.366441][ T6] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0017/input/input18 [ 71.396613][ T6] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0017/input/input19 [ 71.435368][ T6] uclogic 0003:256C:006D.0017: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 71.493650][ T2686] loop1: detected capacity change from 0 to 512 [ 71.556504][ T2689] netlink: 104 bytes leftover after parsing attributes in process `syz.6.943'. [ 71.565330][ T2691] loop7: detected capacity change from 0 to 512 [ 71.583462][ T2686] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.597067][ T1065] usb 6-1: USB disconnect, device number 6 [ 71.603609][ T2686] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.619543][ T2691] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 71.633446][ T2691] EXT4-fs (loop7): Test dummy encryption mode enabled [ 71.644157][ T2691] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 71.659579][ T2691] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 71.682796][ T2691] EXT4-fs (loop7): 1 truncate cleaned up [ 71.690794][ T2691] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 71.748041][ T2706] loop6: detected capacity change from 0 to 256 [ 71.793533][ T2706] FAT-fs (loop6): Directory bread(block 64) failed [ 71.810407][ T2706] FAT-fs (loop6): Directory bread(block 65) failed [ 71.817981][ T2706] FAT-fs (loop6): Directory bread(block 66) failed [ 71.824831][ T2706] FAT-fs (loop6): Directory bread(block 67) failed [ 71.831685][ T2706] FAT-fs (loop6): Directory bread(block 68) failed [ 71.839099][ T2706] FAT-fs (loop6): Directory bread(block 69) failed [ 71.846922][ T2706] FAT-fs (loop6): Directory bread(block 70) failed [ 71.853811][ T2706] FAT-fs (loop6): Directory bread(block 71) failed [ 71.861033][ T2706] FAT-fs (loop6): Directory bread(block 72) failed [ 71.868118][ T2706] FAT-fs (loop6): Directory bread(block 73) failed [ 71.909648][ T2706] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 71.930351][ T361] attempt to access beyond end of device [ 71.930351][ T361] loop6: rw=1, want=1228, limit=256 [ 71.970514][ T30] audit: type=1326 audit(1753769367.376:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2718 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e92ef29a9 code=0x7ffc0000 [ 71.996463][ T30] audit: type=1326 audit(1753769367.406:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2718 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e92ef29a9 code=0x7ffc0000 [ 72.037902][ T30] audit: type=1326 audit(1753769367.406:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2718 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e92ef29a9 code=0x7ffc0000 [ 72.094138][ T30] audit: type=1326 audit(1753769367.406:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2718 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e92ef29a9 code=0x7ffc0000 [ 72.177399][ T30] audit: type=1326 audit(1753769367.406:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2718 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e92ef29a9 code=0x7ffc0000 [ 72.223552][ T2738] loop5: detected capacity change from 0 to 512 [ 72.251249][ T30] audit: type=1326 audit(1753769367.406:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2718 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e92ef29a9 code=0x7ffc0000 [ 72.277721][ T2743] loop7: detected capacity change from 0 to 512 [ 72.304127][ T30] audit: type=1326 audit(1753769367.406:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2718 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e92ef29a9 code=0x7ffc0000 [ 72.363040][ T2743] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 72.372601][ T30] audit: type=1326 audit(1753769367.426:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2718 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e92ef29a9 code=0x7ffc0000 [ 72.374615][ T2738] EXT4-fs error (device loop5): ext4_do_update_inode:5235: inode #3: comm syz.5.963: corrupted inode contents [ 72.418143][ T2743] System zones: 0-2, 18-18, 34-35 [ 72.432336][ T2743] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.446855][ T2743] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.459098][ T2738] EXT4-fs error (device loop5): ext4_dirty_inode:6071: inode #3: comm syz.5.963: mark_inode_dirty error [ 72.471205][ T2738] EXT4-fs error (device loop5): ext4_do_update_inode:5235: inode #3: comm syz.5.963: corrupted inode contents [ 72.483926][ T2738] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #3: comm syz.5.963: mark_inode_dirty error [ 72.484357][ T30] audit: type=1326 audit(1753769367.446:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2718 comm="syz.7.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e92ef29a9 code=0x7ffc0000 [ 72.495950][ T2738] EXT4-fs error (device loop5): ext4_acquire_dquot:6198: comm syz.5.963: Failed to acquire dquot type 0 [ 72.535005][ T2738] EXT4-fs (loop5): 1 orphan inode deleted [ 72.541487][ T2738] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.553233][ T2738] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.621505][ T2765] loop1: detected capacity change from 0 to 2048 [ 72.638290][ T2765] EXT4-fs (loop1): Ignoring removed bh option [ 72.670879][ T2765] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 72.704108][ T6] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 72.720516][ T2765] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #12: comm syz.1.974: corrupted in-inode xattr [ 72.753512][ T2765] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #12: comm syz.1.974: corrupted in-inode xattr [ 72.846072][ T2792] loop7: detected capacity change from 0 to 1024 [ 72.893735][ T2792] EXT4-fs error (device loop7): ext4_acquire_dquot:6198: comm syz.7.985: Failed to acquire dquot type 0 [ 72.910853][ T2792] EXT4-fs error (device loop7): mb_free_blocks:1865: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 72.933547][ T2792] EXT4-fs error (device loop7): ext4_do_update_inode:5235: inode #13: comm syz.7.985: corrupted inode contents [ 72.974556][ T2792] EXT4-fs error (device loop7): ext4_dirty_inode:6071: inode #13: comm syz.7.985: mark_inode_dirty error [ 72.996141][ T2792] EXT4-fs error (device loop7): ext4_do_update_inode:5235: inode #13: comm syz.7.985: corrupted inode contents [ 73.010148][ T2792] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #13: comm syz.7.985: mark_inode_dirty error [ 73.040717][ T2788] loop5: detected capacity change from 0 to 40427 [ 73.048174][ T2792] EXT4-fs error (device loop7): ext4_do_update_inode:5235: inode #13: comm syz.7.985: corrupted inode contents [ 73.060404][ T2792] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 73.069368][ T2792] EXT4-fs error (device loop7): ext4_do_update_inode:5235: inode #13: comm syz.7.985: corrupted inode contents [ 73.082489][ T2792] EXT4-fs error (device loop7): ext4_truncate:4304: inode #13: comm syz.7.985: mark_inode_dirty error [ 73.098698][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.100921][ T2792] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 73.112014][ T2788] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 73.134621][ T2788] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 73.143450][ T2792] EXT4-fs (loop7): 1 truncate cleaned up [ 73.149298][ T2792] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.151945][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.162197][ T2788] F2FS-fs (loop5): invalid crc value [ 73.186200][ T6] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 73.196087][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.211684][ T6] usb 7-1: config 0 descriptor?? [ 73.218282][ T2788] F2FS-fs (loop5): Found nat_bits in checkpoint [ 73.234476][ T2792] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: writeback. [ 73.257711][ T2792] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 73.268654][ T2792] EXT4-fs error (device loop7): ext4_acquire_dquot:6198: comm syz.7.985: Failed to acquire dquot type 0 [ 73.275584][ T2788] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 73.282013][ T2792] EXT4-fs (loop7): re-mounted. Opts: . Quota mode: writeback. [ 73.288717][ T2788] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 73.336362][ T2457] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /48/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 73.338311][ T2809] loop1: detected capacity change from 0 to 512 [ 73.359260][ T2457] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 73.385460][ T2457] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /48/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 73.408558][ T2457] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 73.429639][ T2457] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /48/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 73.452348][ T2457] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 73.452634][ T540] attempt to access beyond end of device [ 73.452634][ T540] loop5: rw=2049, want=40968, limit=40427 [ 73.473885][ T2457] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /48/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 73.506094][ T1354] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 73.516725][ T2457] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 73.521208][ T1354] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 73.547347][ T2457] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /48/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 73.781637][ T2823] netlink: 664 bytes leftover after parsing attributes in process `syz.5.998'. [ 73.814306][ T2819] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.821647][ T2819] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.829972][ T2819] device bridge_slave_0 entered promiscuous mode [ 73.837596][ T2819] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.845599][ T2819] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.853256][ T2819] device bridge_slave_1 entered promiscuous mode [ 73.948392][ T2819] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.955655][ T2819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.963368][ T2819] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.970486][ T2819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.003040][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.013427][ T1354] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.022696][ T1354] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.044708][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.053606][ T1354] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.061392][ T1354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.070626][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.080535][ T1354] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.087853][ T1354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.113372][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.123042][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.132012][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.149965][ T2819] device veth0_vlan entered promiscuous mode [ 74.158916][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.178261][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.186526][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.207543][ T2819] device veth1_macvtap entered promiscuous mode [ 74.215014][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.229649][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.252194][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.272953][ T361] device bridge_slave_1 left promiscuous mode [ 74.281524][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.296221][ T361] device bridge_slave_0 left promiscuous mode [ 74.302525][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.310969][ T361] device veth1_macvtap left promiscuous mode [ 74.327340][ T361] device veth0_vlan left promiscuous mode [ 74.375827][ T6] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0018/input/input20 [ 74.388732][ T6] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0018/input/input21 [ 74.401621][ T6] uclogic 0003:256C:006D.0018: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 74.495574][ T2864] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 74.507210][ T2864] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 74.539981][ T2866] loop1: detected capacity change from 0 to 256 [ 74.574917][ T2866] FAT-fs (loop1): Directory bread(block 64) failed [ 74.585870][ T2866] FAT-fs (loop1): Directory bread(block 65) failed [ 74.602418][ T2866] FAT-fs (loop1): Directory bread(block 66) failed [ 74.606073][ T26] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 74.621900][ T2866] FAT-fs (loop1): Directory bread(block 67) failed [ 74.628027][ T432] usb 7-1: USB disconnect, device number 4 [ 74.629275][ T2866] FAT-fs (loop1): Directory bread(block 68) failed [ 74.645014][ T2866] FAT-fs (loop1): Directory bread(block 69) failed [ 74.652651][ T2866] FAT-fs (loop1): Directory bread(block 70) failed [ 74.661549][ T2866] FAT-fs (loop1): Directory bread(block 71) failed [ 74.669455][ T2866] FAT-fs (loop1): Directory bread(block 72) failed [ 74.677802][ T2866] FAT-fs (loop1): Directory bread(block 73) failed [ 74.704556][ T2866] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 74.723335][ T1354] attempt to access beyond end of device [ 74.723335][ T1354] loop1: rw=1, want=1228, limit=256 [ 74.884196][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 74.948402][ T361] Bluetooth: hci1: Frame reassembly failed (-84) [ 75.004265][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.017846][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.029315][ T26] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.045456][ T26] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 75.055885][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.066891][ T26] usb 6-1: config 0 descriptor?? [ 75.369647][ T2905] device sit0 entered promiscuous mode [ 75.378159][ T2905] netlink: 'syz.6.1031': attribute type 1 has an invalid length. [ 75.387034][ T2905] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1031'. [ 75.442161][ T2912] device batadv_slave_1 entered promiscuous mode [ 75.474621][ T2917] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1037'. [ 75.535957][ T26] logitech 0003:046D:C29C.0019: unbalanced delimiter at end of report description [ 75.547855][ T26] logitech 0003:046D:C29C.0019: parse failed [ 75.552296][ T2910] device batadv_slave_1 left promiscuous mode [ 75.555480][ T26] logitech: probe of 0003:046D:C29C.0019 failed with error -22 [ 75.591087][ T2926] x_tables: duplicate underflow at hook 4 [ 75.706712][ T2943] loop6: detected capacity change from 0 to 2048 [ 75.747655][ T6] usb 6-1: USB disconnect, device number 7 [ 75.805007][ T2943] EXT4-fs (loop6): failed to initialize system zone (-117) [ 75.824210][ T2943] EXT4-fs (loop6): mount failed [ 76.422361][ T30] kauditd_printk_skb: 122 callbacks suppressed [ 76.422381][ T30] audit: type=1400 audit(1753769371.826:861): avc: denied { name_bind } for pid=2960 comm="syz.8.1055" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 76.475665][ T30] audit: type=1400 audit(1753769371.826:862): avc: denied { node_bind } for pid=2960 comm="syz.8.1055" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 76.658261][ T2975] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1061'. [ 76.773540][ T2967] loop5: detected capacity change from 0 to 40427 [ 76.785990][ T30] audit: type=1400 audit(1753769372.196:863): avc: denied { connect } for pid=2982 comm="syz.8.1065" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.829664][ T2967] F2FS-fs (loop5): Mismatch start address, segment0(0) cp_blkaddr(512) [ 76.838987][ T30] audit: type=1400 audit(1753769372.226:864): avc: denied { read write } for pid=2984 comm="syz.6.1066" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 76.851529][ T2967] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 76.876494][ T2967] F2FS-fs (loop5): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 76.886553][ T30] audit: type=1400 audit(1753769372.226:865): avc: denied { open } for pid=2984 comm="syz.6.1066" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 76.898324][ T2967] F2FS-fs (loop5): Found nat_bits in checkpoint [ 76.912115][ T30] audit: type=1400 audit(1753769372.236:866): avc: denied { mount } for pid=2984 comm="syz.6.1066" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 76.953955][ T2967] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 76.961205][ T2967] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 76.994131][ T26] Bluetooth: hci1: command 0x1003 tx timeout [ 77.003459][ T30] audit: type=1400 audit(1753769372.406:867): avc: denied { write } for pid=2966 comm="syz.5.1058" name="/" dev="loop5" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.027150][ T2883] Bluetooth: hci1: sending frame failed (-49) [ 77.027145][ T30] audit: type=1400 audit(1753769372.406:868): avc: denied { add_name } for pid=2966 comm="syz.5.1058" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.027186][ T30] audit: type=1400 audit(1753769372.406:869): avc: denied { create } for pid=2966 comm="syz.5.1058" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.048464][ T2992] loop8: detected capacity change from 0 to 512 [ 77.072412][ T30] audit: type=1400 audit(1753769372.406:870): avc: denied { remove_name } for pid=2966 comm="syz.5.1058" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.151187][ T540] attempt to access beyond end of device [ 77.151187][ T540] loop5: rw=2049, want=45104, limit=40427 [ 77.175157][ T2992] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 77.200255][ T2992] EXT4-fs (loop8): 1 truncate cleaned up [ 77.206309][ T2992] EXT4-fs (loop8): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 77.349999][ T56] kernel read not supported for file /vcs (pid: 56 comm: kworker/1:2) [ 77.383792][ T3003] loop5: detected capacity change from 0 to 512 [ 77.436740][ T3003] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.1071: bad orphan inode 13 [ 77.448644][ T3003] ext4_test_bit(bit=12, block=4) = 1 [ 77.454885][ T3003] is_bad_inode(inode)=0 [ 77.459481][ T3003] NEXT_ORPHAN(inode)=0 [ 77.464355][ T3003] max_ino=32 [ 77.467775][ T3003] i_nlink=1 [ 77.471478][ T3003] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.496963][ T3003] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.1071: Unrecognised inode hash code 20 [ 77.510990][ T3003] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1071: Corrupt directory, running e2fsck is recommended [ 77.524718][ T3003] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.1071: Unrecognised inode hash code 20 [ 77.537050][ T3003] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1071: Corrupt directory, running e2fsck is recommended [ 77.680399][ T3022] loop6: detected capacity change from 0 to 512 [ 77.716245][ T3022] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 77.732332][ T3022] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.796884][ T3033] xt_hashlimit: size too large, truncated to 1048576 [ 77.834097][ T56] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 78.000968][ T3038] loop6: detected capacity change from 0 to 4096 [ 78.051667][ T3038] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 78.084161][ T56] usb 9-1: Using ep0 maxpacket: 16 [ 78.135043][ T3042] loop5: detected capacity change from 0 to 16 [ 78.161905][ T3042] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 17700) [ 78.204312][ T56] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 78.213967][ T56] usb 9-1: config 1 has no interface number 0 [ 78.229587][ T56] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 78.240556][ T56] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 78.251301][ T56] usb 9-1: config 1 interface 105 has no altsetting 0 [ 78.414225][ T56] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 78.425123][ T56] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.434400][ T6] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 78.434435][ T56] usb 9-1: Product: syz [ 78.453284][ T56] usb 9-1: Manufacturer: syz [ 78.458542][ T56] usb 9-1: SerialNumber: syz [ 78.494192][ T3012] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.501421][ T3012] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.578466][ T3068] loop5: detected capacity change from 0 to 40427 [ 78.635798][ T3068] F2FS-fs (loop5): invalid crc value [ 78.642807][ T3068] F2FS-fs (loop5): Found nat_bits in checkpoint [ 78.676070][ T3068] F2FS-fs (loop5): Start checkpoint disabled! [ 78.683583][ T3068] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 78.700596][ T3068] attempt to access beyond end of device [ 78.700596][ T3068] loop5: rw=2049, want=77960, limit=40427 [ 78.734935][ T1354] attempt to access beyond end of device [ 78.734935][ T1354] loop5: rw=1, want=77832, limit=40427 [ 78.747282][ T1354] attempt to access beyond end of device [ 78.747282][ T1354] loop5: rw=1, want=77896, limit=40427 [ 78.760678][ T1354] attempt to access beyond end of device [ 78.760678][ T1354] loop5: rw=2049, want=40976, limit=40427 [ 78.814275][ T6] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.826510][ T6] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.919559][ T6] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 78.934709][ T3012] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.942615][ T3012] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.950254][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 78.959042][ T6] usb 7-1: SerialNumber: syz [ 79.069327][ T3082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1103'. [ 79.074252][ T20] Bluetooth: hci1: command 0x1001 tx timeout [ 79.079265][ T3082] bridge: RTM_NEWNEIGH with invalid ether address [ 79.086156][ T2883] Bluetooth: hci1: sending frame failed (-49) [ 79.113789][ T3084] loop5: detected capacity change from 0 to 256 [ 79.155893][ T3084] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 79.235930][ T6] usb 7-1: 0:2 : does not exist [ 79.286705][ T6] usb 7-1: USB disconnect, device number 5 [ 79.404248][ T56] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 79.494705][ T1063] udevd[1063]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.674233][ T56] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 79.688749][ T56] aqc111 9-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f2:1e:60:f5:1d:2d [ 79.705009][ T56] usb 9-1: USB disconnect, device number 2 [ 79.711440][ T56] aqc111 9-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 79.775309][ T56] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 79.790534][ T56] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 79.792898][ T3097] loop6: detected capacity change from 0 to 8192 [ 79.806295][ T56] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 79.850180][ T2173] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 79.858330][ T2173] FAT-fs (loop6): Filesystem has been set read-only [ 79.894824][ T3111] loop6: detected capacity change from 0 to 128 [ 79.905482][ T3111] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.916359][ T3111] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.155049][ T3138] loop5: detected capacity change from 0 to 1024 [ 80.180943][ T3140] loop6: detected capacity change from 0 to 256 [ 80.205089][ T3138] EXT4-fs (loop5): Ignoring removed orlov option [ 80.233539][ T3140] exfat: Deprecated parameter 'utf8' [ 80.242419][ T3138] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 80.264974][ T3140] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 80.302621][ T3136] loop3: detected capacity change from 0 to 40427 [ 80.314478][ T3136] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 80.332051][ T3136] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 80.343060][ T3136] F2FS-fs (loop3): invalid crc value [ 80.356086][ T3136] F2FS-fs (loop3): Found nat_bits in checkpoint [ 80.384368][ T3153] loop6: detected capacity change from 0 to 512 [ 80.410617][ T3136] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 80.412825][ T3147] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.423551][ T3136] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 80.461366][ T3157] syz.8.1122[3157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.461446][ T3157] syz.8.1122[3157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.498675][ T3153] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1121: casefold flag without casefold feature [ 80.546542][ T3153] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1121: couldn't read orphan inode 15 (err -117) [ 80.594607][ T3153] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.628160][ T3136] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 80.668035][ T3136] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 80.927242][ T3181] Disabled LAPIC found during irq injection [ 81.028954][ T3192] loop3: detected capacity change from 0 to 512 [ 81.153938][ T3192] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1137: casefold flag without casefold feature [ 81.168219][ T337] Bluetooth: hci1: command 0x1009 tx timeout [ 81.223491][ T3192] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1137: couldn't read orphan inode 15 (err -117) [ 81.256064][ T3192] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.337437][ T3190] loop6: detected capacity change from 0 to 40427 [ 81.339961][ T3192] overlayfs: failed to resolve './file0': -2 [ 81.386100][ T3190] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 81.398786][ T3190] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 81.416473][ T3190] F2FS-fs (loop6): invalid crc value [ 81.433627][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 81.433647][ T30] audit: type=1400 audit(1753769376.836:972): avc: denied { create } for pid=3212 comm="syz.8.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.462487][ T3190] F2FS-fs (loop6): Found nat_bits in checkpoint [ 81.494656][ T3220] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1149'. [ 81.504186][ T30] audit: type=1400 audit(1753769376.896:973): avc: denied { mounton } for pid=3218 comm="syz.8.1148" path="/46/file0" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.561527][ T30] audit: type=1400 audit(1753769376.906:974): avc: denied { nlmsg_read } for pid=3215 comm="syz.5.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.596708][ T3190] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 81.603027][ T30] audit: type=1400 audit(1753769377.006:975): avc: denied { audit_write } for pid=3223 comm="syz.5.1150" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.626271][ T3190] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 81.705069][ T30] audit: type=1107 audit(1753769377.006:976): pid=3223 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 81.729825][ T30] audit: type=1400 audit(1753769377.086:977): avc: denied { create } for pid=3229 comm="syz.5.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.814350][ T30] audit: type=1400 audit(1753769377.086:978): avc: denied { write } for pid=3229 comm="syz.5.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.847737][ T30] audit: type=1400 audit(1753769377.146:979): avc: denied { block_suspend } for pid=3235 comm="syz.5.1156" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.896329][ T30] audit: type=1400 audit(1753769377.306:980): avc: denied { rmdir } for pid=2173 comm="syz-executor" name="work" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 81.907007][ T3240] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 81.935265][ T3250] device pim6reg1 entered promiscuous mode [ 81.944375][ T3240] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 82.049400][ T3259] xt_hashlimit: size too large, truncated to 1048576 [ 82.067266][ T30] audit: type=1326 audit(1753769377.476:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3253 comm="syz.8.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241746f9a9 code=0x7ffc0000 [ 82.103393][ T3260] loop3: detected capacity change from 0 to 128 [ 82.465661][ T3286] loop6: detected capacity change from 0 to 1024 [ 82.526863][ T3286] EXT4-fs (loop6): Ignoring removed oldalloc option [ 82.548085][ T3286] EXT4-fs (loop6): Ignoring removed bh option [ 82.555129][ T3286] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.575987][ T3286] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,abort,oldalloc,grpquota,noload,nobarrier,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 82.614605][ T3286] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3876: comm syz.6.1178: Allocating blocks 497-513 which overlap fs metadata [ 82.631500][ T3286] EXT4-fs (loop6): pa ffff888131d11888: logic 128, phys. 385, len 8 [ 82.640912][ T3286] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 82.663335][ T3286] EXT4-fs error (device loop6): mb_free_blocks:1865: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 82.716144][ T3300] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.765563][ T3305] SELinux: failed to load policy [ 82.784615][ T3307] virtiofs: Unknown parameter 'always 1 V3 [ 82.784615][ T3307] 010000E0 1 0:00000000 0 [ 82.784615][ T3307] 18 wg1 : 1 V3 [ 82.784615][ T3307] 010000E0 1 0:00000000 0 [ 82.784615][ T3307] 19 wg2 : 1 V3 [ 82.784615][ T3307] 010000E0 1 0:00000000 0 [ 82.784615][ T3307] 20 veth0_to_bridge: 1 V3 [ 82.784615][ T3307] 010000E0 1 0:00000000 0 [ 82.784615][ T3307] 21 bridge_slave_0: 1 V3 [ 82.784615][ T3307] 010000E0 1 0:00000000 0 [ 82.784615][ T3307] 22 veth1_to_bridge: 1 V3 [ 82.784615][ T3307] 010000E0 1 0:00000000 0 [ 82.784615][ T3307] 23 bridge_slave_1: 1 V3 [ 82.784615][ T3307] 010000E0 1 0:00000000 0 [ 82.784615][ T3307] 24 veth0_to_bond: 1 V3 [ 82.784615][ T3307] 010000E0 1 0:00000000 0 [ 82.784615][ T3307] 25 bond_slave_0: 1 V3 [ 82.784615][ T3307] 010000E0 1 0:00000000 0 [ 82.784949][ T3307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1186'. [ 82.888325][ T1065] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 82.907585][ T3309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1187'. [ 82.987797][ T3319] loop5: detected capacity change from 0 to 128 [ 83.024468][ T3319] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.050017][ T3319] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.105659][ T3321] syz.6.1193 (3321) used greatest stack depth: 20768 bytes left [ 83.227716][ T3336] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1201'. [ 83.294236][ T1065] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 83.322740][ T1065] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 83.334628][ T1065] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 83.346530][ T1065] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 83.439315][ T3330] loop8: detected capacity change from 0 to 40427 [ 83.471334][ T3353] loop5: detected capacity change from 0 to 4096 [ 83.490070][ T3330] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 83.514252][ T1065] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.531359][ T3330] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 83.532330][ T1065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.550185][ T3353] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.561836][ T3330] F2FS-fs (loop8): invalid crc value [ 83.578203][ T1065] usb 4-1: Product: syz [ 83.582959][ T1065] usb 4-1: Manufacturer: syz [ 83.600976][ T3330] F2FS-fs (loop8): Found nat_bits in checkpoint [ 83.607821][ T1065] usb 4-1: SerialNumber: syz [ 83.644308][ T3295] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 83.652116][ T3330] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2 [ 83.659395][ T3330] F2FS-fs (loop8): Start checkpoint disabled! [ 83.666206][ T1065] cdc_mbim 4-1:1.0: skipping garbage [ 83.689191][ T3330] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 83.700405][ T3330] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 83.762612][ T2819] attempt to access beyond end of device [ 83.762612][ T2819] loop8: rw=524288, want=45072, limit=40427 [ 83.778295][ T2819] attempt to access beyond end of device [ 83.778295][ T2819] loop8: rw=0, want=45072, limit=40427 [ 83.821581][ T361] attempt to access beyond end of device [ 83.821581][ T361] loop8: rw=2049, want=40984, limit=40427 [ 83.866936][ T3295] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 83.874018][ T3295] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.076136][ T3404] loop6: detected capacity change from 0 to 1024 [ 84.116019][ T3404] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.136207][ T3404] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 84.184617][ T3404] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3876: comm syz.6.1233: Allocating blocks 497-513 which overlap fs metadata [ 84.199665][ T3404] EXT4-fs (loop6): pa ffff8881119c7bd0: logic 128, phys. 385, len 8 [ 84.209627][ T3404] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 84.229284][ T3407] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.240480][ T3407] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.250687][ T3407] device bridge_slave_0 entered promiscuous mode [ 84.261610][ T3407] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.270942][ T3407] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.271424][ T361] ================================================================== [ 84.279890][ T3407] device bridge_slave_1 entered promiscuous mode [ 84.288126][ T361] BUG: KASAN: use-after-free in ext4_find_extent+0xbeb/0xe20 [ 84.288162][ T361] Read of size 4 at addr ffff888134617018 by task kworker/u4:4/361 [ 84.288182][ T361] [ 84.288194][ T361] CPU: 1 PID: 361 Comm: kworker/u4:4 Not tainted 5.15.189-syzkaller-00079-ga71626bd56a5 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 84.329183][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.340167][ T361] Workqueue: writeback wb_workfn (flush-7:6) [ 84.347178][ T361] Call Trace: [ 84.350856][ T361] [ 84.354124][ T361] __dump_stack+0x21/0x30 [ 84.358762][ T361] dump_stack_lvl+0xee/0x150 [ 84.363690][ T361] ? show_regs_print_info+0x20/0x20 [ 84.369127][ T361] ? load_image+0x3a0/0x3a0 [ 84.373945][ T361] print_address_description+0x7f/0x2c0 [ 84.379622][ T361] ? ext4_find_extent+0xbeb/0xe20 [ 84.386357][ T361] kasan_report+0xf1/0x140 [ 84.391409][ T361] ? __read_extent_tree_block+0x1e8/0x790 [ 84.397594][ T361] ? ext4_find_extent+0xbeb/0xe20 [ 84.402814][ T361] __asan_report_load4_noabort+0x14/0x20 [ 84.409294][ T361] ext4_find_extent+0xbeb/0xe20 [ 84.414990][ T361] ext4_ext_map_blocks+0x1de/0x6280 [ 84.420359][ T361] ? __stack_depot_save+0x34/0x480 [ 84.425597][ T361] ? __mem_cgroup_uncharge_list+0x39/0xc0 [ 84.431446][ T361] ? __kasan_slab_alloc+0xcf/0xf0 [ 84.436496][ T361] ? __kasan_slab_alloc+0xbd/0xf0 [ 84.441631][ T361] ? slab_post_alloc_hook+0x4f/0x2b0 [ 84.447098][ T361] ? kmem_cache_alloc+0xf7/0x260 [ 84.452494][ T361] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 84.458345][ T361] ? ext4_writepages+0xec8/0x2f90 [ 84.463851][ T361] ? do_writepages+0x48a/0x6c0 [ 84.468950][ T361] ? wb_workfn+0x38f/0xe20 [ 84.473679][ T361] ? process_one_work+0x6be/0xba0 [ 84.479001][ T361] ? worker_thread+0xa59/0x1200 [ 84.483980][ T361] ? ext4_ext_release+0x10/0x10 [ 84.490176][ T361] ? ext4_es_lookup_extent+0x32d/0x8c0 [ 84.496076][ T361] ext4_map_blocks+0x97b/0x1b20 [ 84.501136][ T361] ? slab_post_alloc_hook+0x6d/0x2b0 [ 84.506836][ T361] ? should_failslab+0x9/0x20 [ 84.511914][ T361] ? ext4_issue_zeroout+0x250/0x250 [ 84.517735][ T361] ? ext4_inode_journal_mode+0x19a/0x480 [ 84.523744][ T361] ext4_writepages+0x11e7/0x2f90 [ 84.529145][ T361] ? __kasan_check_read+0x11/0x20 [ 84.534480][ T361] ? mark_page_accessed+0x3b6/0x8d0 [ 84.540075][ T361] ? __activate_page+0xd40/0xd40 [ 84.545344][ T361] ? ext4_readpage+0x220/0x220 [ 84.550232][ T361] ? memcpy+0x56/0x70 [ 84.554392][ T361] ? copy_page_from_iter_atomic+0x784/0x1350 [ 84.560714][ T361] ? __kasan_check_read+0x11/0x20 [ 84.566025][ T361] ? __set_page_dirty_no_writeback+0xff/0x130 [ 84.572312][ T361] ? ext4_readpage+0x220/0x220 [ 84.577203][ T361] do_writepages+0x48a/0x6c0 [ 84.582266][ T361] ? update_curr+0x2f3/0x5b0 [ 84.587365][ T361] ? __writepage+0x130/0x130 [ 84.592733][ T361] ? update_load_avg+0x410/0x1110 [ 84.598483][ T361] ? __kasan_check_write+0x14/0x20 [ 84.604372][ T361] ? _raw_spin_lock+0x8e/0xe0 [ 84.609362][ T361] __writeback_single_inode+0xd5/0x9c0 [ 84.615152][ T361] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 84.621637][ T361] writeback_sb_inodes+0x9c0/0x1590 [ 84.626880][ T361] ? __switch_to_asm+0x3a/0x60 [ 84.631829][ T361] ? queue_io+0x4c0/0x4c0 [ 84.636646][ T361] ? __kasan_check_read+0x11/0x20 [ 84.641697][ T361] ? queue_io+0x382/0x4c0 [ 84.646237][ T361] wb_writeback+0x3f1/0x980 [ 84.651032][ T361] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 84.657644][ T361] ? set_worker_desc+0x155/0x1c0 [ 84.662624][ T361] ? __kasan_check_write+0x14/0x20 [ 84.668403][ T361] wb_workfn+0x38f/0xe20 [ 84.673385][ T361] ? inode_wait_for_writeback+0x200/0x200 [ 84.679398][ T361] ? compat_start_thread+0x20/0x20 [ 84.684631][ T361] ? _raw_spin_unlock+0x4d/0x70 [ 84.689802][ T361] ? finish_task_switch+0x16b/0x780 [ 84.695438][ T361] ? __switch_to_asm+0x3a/0x60 [ 84.700424][ T361] ? __schedule+0xb76/0x14c0 [ 84.705116][ T361] process_one_work+0x6be/0xba0 [ 84.710582][ T361] worker_thread+0xa59/0x1200 [ 84.715808][ T361] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 84.721393][ T361] kthread+0x411/0x500 [ 84.726028][ T361] ? worker_clr_flags+0x190/0x190 [ 84.731373][ T361] ? kthread_blkcg+0xd0/0xd0 [ 84.736194][ T361] ret_from_fork+0x1f/0x30 [ 84.740957][ T361] [ 84.743997][ T361] [ 84.746414][ T361] Allocated by task 2819: [ 84.750828][ T361] __kasan_slab_alloc+0xbd/0xf0 [ 84.755923][ T361] slab_post_alloc_hook+0x4f/0x2b0 [ 84.761145][ T361] kmem_cache_alloc+0xf7/0x260 [ 84.766144][ T361] copy_signal+0x54/0x600 [ 84.770500][ T361] copy_process+0x1130/0x3210 [ 84.775556][ T361] kernel_clone+0x23f/0x940 [ 84.780194][ T361] __x64_sys_clone+0x176/0x1d0 [ 84.785069][ T361] x64_sys_call+0x41f/0x9a0 [ 84.789670][ T361] do_syscall_64+0x4c/0xa0 [ 84.794434][ T361] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.800441][ T361] [ 84.803028][ T361] Freed by task 13: [ 84.806841][ T361] kasan_set_track+0x4a/0x70 [ 84.811549][ T361] kasan_set_free_info+0x23/0x40 [ 84.816788][ T361] ____kasan_slab_free+0x125/0x160 [ 84.822137][ T361] __kasan_slab_free+0x11/0x20 [ 84.827013][ T361] slab_free_freelist_hook+0xc2/0x190 [ 84.832888][ T361] kmem_cache_free+0x100/0x320 [ 84.837909][ T361] __put_task_struct+0x24e/0x3e0 [ 84.843325][ T361] delayed_put_task_struct+0x6c/0x1a0 [ 84.849355][ T361] rcu_do_batch+0x51d/0xba0 [ 84.854150][ T361] rcu_core+0x5e4/0xf80 [ 84.858518][ T361] rcu_core_si+0x9/0x10 [ 84.862971][ T361] handle_softirqs+0x250/0x560 [ 84.867765][ T361] run_ksoftirqd+0x28/0x40 [ 84.872386][ T361] smpboot_thread_fn+0x45a/0x8c0 [ 84.878133][ T361] kthread+0x411/0x500 [ 84.882433][ T361] ret_from_fork+0x1f/0x30 [ 84.887033][ T361] [ 84.889378][ T361] The buggy address belongs to the object at ffff888134616d00 [ 84.889378][ T361] which belongs to the cache signal_cache of size 1120 [ 84.904764][ T361] The buggy address is located 792 bytes inside of [ 84.904764][ T361] 1120-byte region [ffff888134616d00, ffff888134617160) [ 84.919420][ T361] The buggy address belongs to the page: [ 84.925092][ T361] page:ffffea0004d18500 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888134615e00 pfn:0x134614 [ 84.937107][ T361] head:ffffea0004d18500 order:2 compound_mapcount:0 compound_pincount:0 [ 84.945464][ T361] flags: 0x4000000000010200(slab|head|zone=1) [ 84.951612][ T361] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100186300 [ 84.960606][ T361] raw: ffff888134615e00 00000000800c000b 00000001ffffffff 0000000000000000 [ 84.969295][ T361] page dumped because: kasan: bad access detected [ 84.975734][ T361] page_owner tracks the page as allocated [ 84.981802][ T361] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 540, ts 67961951281, free_ts 67612915796 [ 85.002438][ T361] post_alloc_hook+0x192/0x1b0 [ 85.007218][ T361] prep_new_page+0x1c/0x110 [ 85.011740][ T361] get_page_from_freelist+0x2cc5/0x2d50 [ 85.017292][ T361] __alloc_pages+0x18f/0x440 [ 85.021885][ T361] new_slab+0xa1/0x4d0 [ 85.025957][ T361] ___slab_alloc+0x381/0x810 [ 85.030546][ T361] __slab_alloc+0x49/0x90 [ 85.034876][ T361] kmem_cache_alloc+0x138/0x260 [ 85.039726][ T361] copy_signal+0x54/0x600 [ 85.044062][ T361] copy_process+0x1130/0x3210 [ 85.048753][ T361] kernel_clone+0x23f/0x940 [ 85.053345][ T361] __x64_sys_clone+0x176/0x1d0 [ 85.058242][ T361] x64_sys_call+0x41f/0x9a0 [ 85.062850][ T361] do_syscall_64+0x4c/0xa0 [ 85.067272][ T361] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.073359][ T361] page last free stack trace: [ 85.078139][ T361] free_unref_page_prepare+0x542/0x550 [ 85.083613][ T361] free_unref_page+0xa2/0x550 [ 85.088291][ T361] __free_pages+0x6c/0x100 [ 85.092707][ T361] pcpu_depopulate_chunk+0x481/0x5a0 [ 85.097992][ T361] pcpu_balance_workfn+0x2a7/0x1150 [ 85.103200][ T361] process_one_work+0x6be/0xba0 [ 85.108056][ T361] worker_thread+0xa59/0x1200 [ 85.112736][ T361] kthread+0x411/0x500 [ 85.116804][ T361] ret_from_fork+0x1f/0x30 [ 85.121233][ T361] [ 85.123979][ T361] Memory state around the buggy address: [ 85.129799][ T361] ffff888134616f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.140139][ T361] ffff888134616f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.148513][ T361] >ffff888134617000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.156809][ T361] ^ [ 85.161945][ T361] ffff888134617080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.170634][ T361] ffff888134617100: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 85.179001][ T361] ================================================================== [ 85.187460][ T361] Disabling lock debugging due to kernel taint [ 85.264984][ T361] EXT4-fs error (device loop6): ext4_ext_split:1074: inode #15: comm kworker/u4:4: p_ext > EXT_MAX_EXTENT! [ 85.279224][ T361] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 85.291581][ T361] EXT4-fs (loop6): This should not happen!! Data will be lost [ 85.291581][ T361] [ 85.414263][ T1065] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 85.420426][ T1065] cdc_mbim 4-1:1.0: bind() failure [ 85.427877][ T1065] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 85.434738][ T1065] cdc_ncm 4-1:1.1: bind() failure [ 85.455585][ T1065] usb 4-1: USB disconnect, device number 9 [ 85.524859][ T45] device bridge_slave_1 left promiscuous mode [ 85.531151][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.540015][ T45] device bridge_slave_0 left promiscuous mode [ 85.546696][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.555296][ T45] device veth1_macvtap left promiscuous mode [ 85.561435][ T45] device veth0_vlan left promiscuous mode [ 86.278519][ T45] tipc: Disabling bearer [ 86.284208][ T45] tipc: Left network mode [ 87.115172][ T45] device bridge_slave_1 left promiscuous mode [ 87.121606][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.129556][ T45] device bridge_slave_0 left promiscuous mode [ 87.136865][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.145583][ T45] device bridge_slave_1 left promiscuous mode [ 87.152109][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.160402][ T45] device bridge_slave_0 left promiscuous mode [ 87.166955][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.175753][ T45] device bridge_slave_1 left promiscuous mode [ 87.182106][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.190980][ T45] device bridge_slave_0 left promiscuous mode [ 87.198931][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.207592][ T45] device bridge_slave_1 left promiscuous mode [ 87.214768][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.222573][ T45] device bridge_slave_0 left promiscuous mode [ 87.229272][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.237541][ T45] device bridge_slave_1 left promiscuous mode [ 87.244472][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.252922][ T45] device bridge_slave_0 left promiscuous mode [ 87.260062][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.269044][ T45] device veth1_macvtap left promiscuous mode [ 87.275906][ T45] device veth0_vlan left promiscuous mode [ 87.282764][ T45] device veth1_macvtap left promiscuous mode [ 87.290120][ T45] device veth0_vlan left promiscuous mode [ 87.297371][ T45] device veth0_vlan left promiscuous mode [ 87.303365][ T45] device veth1_macvtap left promiscuous mode [ 87.309701][ T45] device veth0_vlan left promiscuous mode