last executing test programs: 5.105609915s ago: executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.015677326s ago: executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_TXQLEN={0x8}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) 1.869036714s ago: executing program 3: personality(0x500006) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x20032, 0xffffffffffffffff, 0x0) 1.868401694s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000980)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000005000/0x1000)=nil}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0xfec00, 0x0}], 0x1, 0x0, 0x0, 0x0) 1.724480077s ago: executing program 3: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300081a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fef3eb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2", @ANYRES16], 0xd, 0x2a0, &(0x7f0000000840)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) chdir(&(0x7f0000000040)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.468899179s ago: executing program 3: r0 = memfd_create(&(0x7f0000000300), 0x0) fallocate(r0, 0x1, 0x0, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.366959877s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000400000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 1.333238962s ago: executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="000a0000000000000730000000000a000002000000000100000000000080000001000000000000000000000000000000000000000000000000000720000000000600000000000000000000000000000000000000fe"], 0x60) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r5}, 0x10) unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x0, 0x0, 0x103}, 0x20) write$P9_RVERSION(r3, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x84, 0x6, '9P2000'}, 0x13) setsockopt$inet6_int(r7, 0x29, 0x0, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r7, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e21, 0x80000, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1100fd000000000000000022009032012c6a8edb"], 0x18}, 0x0) r8 = gettid() r9 = eventfd2(0x0, 0x0) r10 = dup(r9) read$FUSE(r10, &(0x7f0000002140)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.330463652s ago: executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_TXQLEN={0x8}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) 1.181860106s ago: executing program 4: pipe2$9p(&(0x7f00000001c0), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b200008003950323030302e4c"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2040400) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @dev}, {}, 0x2a, {0x2, 0x0, @empty}, 'veth1_to_bridge\x00'}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'bridge_slave_0\x00'}, 0x18) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) 1.177398507s ago: executing program 1: sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x198, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x198}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="82"]) 1.049598538s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xb583c63ca7430066) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr}) 489.63734ms ago: executing program 2: personality(0x500006) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x20032, 0xffffffffffffffff, 0x0) 431.037079ms ago: executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[], 0x7) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r2}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='jbd2_handle_extend\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) 363.32601ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000400000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 302.26436ms ago: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)={[{@gid}, {@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x2c, 0x35]}}}}]}) 273.906655ms ago: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'veth0\x00', {0x1}, 0x1}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000002c0)={0x0, 'bond_slave_0\x00', {0x2}}) 255.456648ms ago: executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @private0}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001}}]}, 0x40}}, 0x0) 240.39174ms ago: executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 236.747701ms ago: executing program 4: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000440)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@nobh}, {@mblk_io_submit}, {@grpquota}, {@delalloc}, {@grpjquota}, {}]}, 0x45, 0x7ac, &(0x7f0000000f80)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000303010346a3ba7a00000000000070"], 0x20}}, 0x0) creat(&(0x7f0000002000)='./file3\x00', 0x0) 179.81374ms ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r2, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$KDSIGACCEPT(r1, 0x5607, 0x38) 176.789071ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 159.156814ms ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="b80b0000000f23c80f21f8350000e0000f23f8b9050200000f3226f20f213bf20f1c6e000f062e0f2d4bf80f01c80fc7b372400000d95f0066baf80cb89000778aef66bafc0c66ed", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 151.960445ms ago: executing program 0: personality(0x500006) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x20032, 0xffffffffffffffff, 0x0) 120.21499ms ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40086602, &(0x7f0000000540)={'\x00', @dev}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free_batched\x00', r3}, 0x10) write$cgroup_int(r2, &(0x7f0000000180), 0x12) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) 96.061704ms ago: executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 47.207922ms ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x33}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 21.854096ms ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000b00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 19.660757ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) io_setup(0x4, &(0x7f0000000380)=0x0) io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x7, [@ptr={0x6, 0x0, 0x0, 0x2, 0x3}, @datasec={0xc, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x401, 0x81}], "d05a"}, @enum={0x6, 0x5, 0x0, 0x6, 0x4, [{0x3}, {0x2, 0x87}, {0x3, 0x80000001}, {0xa}, {0xe, 0x8}]}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x26, 0x2}, @var={0x10, 0x0, 0x0, 0xe, 0x2, 0x1}, @const={0x10, 0x0, 0x0, 0xa, 0x1}, @datasec={0x5, 0x5, 0x0, 0xf, 0x2, [{0x3, 0x0, 0xfffffff7}, {0x5, 0x4, 0x10001}, {0x4, 0xffff80e4, 0xc5a}, {0x5, 0x8, 0x53}, {0x1, 0x0, 0x6}], "862c"}, @restrict={0x1, 0x0, 0x0, 0xb, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x20}}, @struct={0x6, 0x1, 0x0, 0x4, 0x0, 0x7, [{}]}]}, {0x0, [0x2e, 0x30, 0x30, 0x61, 0x61]}}, &(0x7f0000000940)=""/243, 0x12b, 0xf3, 0x0, 0x400}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0x20, &(0x7f0000000bc0)={&(0x7f0000000a40)=""/169, 0xa9, 0x0, &(0x7f0000000b00)=""/172, 0xac}}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x12, 0x20, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdb49}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x9, 0xc4, &(0x7f00000005c0)=""/196, 0x41000, 0x43, '\x00', 0x0, 0x13, r2, 0x8, &(0x7f0000000840)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x6, 0x3, 0x1}, 0x10, r3, r1, 0x4, &(0x7f00000010c0)=[r4], &(0x7f0000001100)=[{0x3, 0x1, 0x8, 0xa}, {0x5, 0x3, 0x7, 0x7}, {0x0, 0x2, 0x6, 0xa}, {0x4, 0x1, 0x1, 0x5}], 0x10, 0x8}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000380)={0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000380)={0x0, 0x2}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10e, &(0x7f0000000080), 0x3, 0x465, &(0x7f0000000c00)="$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") bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r8, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) shutdown(r8, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x41a100, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x5452, 0x5c0a01e2036fe26d) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T6494] ext4 filesystem being mounted at /root/syzkaller-testdir45490411/syzkaller.Gu7Si3/130/file0 supports timestamps until 2038 (0x7fffffff) [ 286.400205][ T6494] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz-executor.3: corrupted inode contents [ 286.432733][ T6494] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz-executor.3: mark_inode_dirty error [ 286.467567][ T6494] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz-executor.3: corrupted inode contents [ 286.507488][ T6494] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error [ 286.549767][ T5230] EXT4-fs (loop3): unmounting filesystem. [ 286.837594][ T5146] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 286.855397][ T6516] loop4: detected capacity change from 0 to 1024 [ 286.877034][ T6516] EXT4-fs: Ignoring removed orlov option [ 286.900680][ T6516] EXT4-fs (loop4): Test dummy encryption mode enabled [ 286.930474][ T6516] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 286.976108][ T6390] EXT4-fs (loop4): unmounting filesystem. [ 287.038203][ T6526] loop4: detected capacity change from 0 to 512 [ 287.079584][ T6526] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 287.097833][ T6526] ext4 filesystem being mounted at /root/syzkaller-testdir2886236063/syzkaller.FlIceh/7/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 287.121780][ T6526] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz-executor.4: corrupted inode contents [ 287.135866][ T6526] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz-executor.4: mark_inode_dirty error [ 287.147867][ T6526] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz-executor.4: corrupted inode contents [ 287.170856][ T6526] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 287.227549][ T5146] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 287.238729][ T6390] EXT4-fs (loop4): unmounting filesystem. [ 287.248283][ T5146] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.267499][ T5146] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 287.277145][ T5146] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.307512][ T5146] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 287.316383][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.388421][ T5146] usb 2-1: invalid MIDI out EP 0 [ 287.397064][ T5146] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 287.547559][ T5107] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 287.615433][ T6544] loop4: detected capacity change from 0 to 256 [ 287.680928][ T4315] usb 2-1: USB disconnect, device number 15 [ 287.787632][ T5107] usb 4-1: Using ep0 maxpacket: 16 [ 287.907612][ T5107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 287.923583][ T5107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 287.943428][ T5107] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 287.963086][ T5107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.980943][ T5107] usb 4-1: config 0 descriptor?? [ 288.232584][ T28] audit: type=1326 audit(1718536782.990:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f171367cea9 code=0x0 [ 288.348087][ T6551] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 288.370528][ T6553] loop4: detected capacity change from 0 to 1024 [ 288.388180][ T6553] EXT4-fs: Ignoring removed orlov option [ 288.404169][ T6553] EXT4-fs (loop4): Test dummy encryption mode enabled [ 288.428754][ T6553] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 288.457226][ T6536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.467988][ T6390] EXT4-fs (loop4): unmounting filesystem. [ 288.477701][ T6536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.507891][ T5107] hid (null): unknown global tag 0xd [ 288.513203][ T5107] hid (null): unknown global tag 0xe [ 288.524835][ T5107] hid (null): report_id 48784 is invalid [ 288.538191][ T5107] hid (null): unknown global tag 0xd [ 288.547539][ T5107] hid (null): report_id 0 is invalid [ 288.558425][ T5107] hid-generic 0003:0158:0100.001A: unknown main item tag 0x6 [ 288.587550][ T5107] hid-generic 0003:0158:0100.001A: unknown main item tag 0x0 [ 288.594870][ T5107] hid-generic 0003:0158:0100.001A: unknown main item tag 0x0 [ 288.627520][ T5107] hid-generic 0003:0158:0100.001A: unknown main item tag 0x0 [ 288.634774][ T5107] hid-generic 0003:0158:0100.001A: unknown main item tag 0x0 [ 288.642258][ T5107] hid-generic 0003:0158:0100.001A: unknown main item tag 0x0 [ 288.657989][ T5107] hid-generic 0003:0158:0100.001A: unknown main item tag 0x0 [ 288.675369][ T5107] hid-generic 0003:0158:0100.001A: unknown main item tag 0x3 [ 288.688382][ T5107] hid-generic 0003:0158:0100.001A: unknown main item tag 0xe [ 288.705763][ T5107] hid-generic 0003:0158:0100.001A: unknown global tag 0xd [ 288.715823][ T5107] hid-generic 0003:0158:0100.001A: item 0 2 1 13 parsing failed [ 288.736229][ T5107] hid-generic: probe of 0003:0158:0100.001A failed with error -22 [ 288.756290][ T5107] usb 4-1: USB disconnect, device number 26 [ 289.139822][ T6563] loop1: detected capacity change from 0 to 512 [ 289.178768][ T6563] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 289.196409][ T6563] ext4 filesystem being mounted at /root/syzkaller-testdir272247704/syzkaller.1kONrF/28/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 289.282267][ T6563] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #2: comm syz-executor.1: corrupted inode contents [ 289.327493][ T6563] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #2: comm syz-executor.1: mark_inode_dirty error [ 289.519128][ T6563] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #2: comm syz-executor.1: corrupted inode contents [ 289.617292][ T6573] fuse: Bad value for 'fd' [ 289.636343][ T6563] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error [ 289.703861][ T6573] 9pnet: p9_errstr2errno: server reported unknown error [ 289.713619][ T6317] EXT4-fs (loop1): unmounting filesystem. [ 290.111700][ T5107] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 290.407612][ T3332] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 290.477629][ T5107] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 290.497527][ T5107] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 290.517740][ T5107] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 290.527422][ T5107] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.557545][ T5107] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 290.566606][ T5107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.618421][ T5107] usb 2-1: invalid MIDI out EP 0 [ 290.629194][ T5107] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 290.797591][ T3332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.817499][ T3332] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.822584][ T5107] usb 2-1: USB disconnect, device number 16 [ 290.917623][ T3332] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 290.926509][ T3332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 290.944576][ T3332] usb 4-1: SerialNumber: syz [ 291.238335][ T3332] usb 4-1: 0:2 : does not exist [ 291.248124][ T3332] usb 4-1: USB disconnect, device number 27 [ 291.297502][ T5146] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 291.443481][ T6595] loop1: detected capacity change from 0 to 512 [ 291.472193][ T6595] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 291.498200][ T6595] ext4 filesystem being mounted at /root/syzkaller-testdir272247704/syzkaller.1kONrF/33/file0 supports timestamps until 2038 (0x7fffffff) [ 291.521792][ T6595] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #2: comm syz-executor.1: corrupted inode contents [ 291.547867][ T6595] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #2: comm syz-executor.1: mark_inode_dirty error [ 291.567537][ T5146] usb 5-1: Using ep0 maxpacket: 32 [ 291.573600][ T6595] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #2: comm syz-executor.1: corrupted inode contents [ 291.597639][ T6595] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error [ 291.639522][ T6317] EXT4-fs (loop1): unmounting filesystem. [ 291.726780][ T6601] loop3: detected capacity change from 0 to 512 [ 291.777522][ T6601] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 291.788642][ T6601] ext4 filesystem being mounted at /root/syzkaller-testdir45490411/syzkaller.Gu7Si3/145/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 291.830912][ T6601] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz-executor.3: corrupted inode contents [ 291.848816][ T6601] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz-executor.3: mark_inode_dirty error [ 291.867234][ T6601] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz-executor.3: corrupted inode contents [ 291.887608][ T5146] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 291.898797][ T6601] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error [ 291.906647][ T5146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.920254][ T5146] usb 5-1: Product: syz [ 291.924801][ T5146] usb 5-1: Manufacturer: syz [ 291.930410][ T5146] usb 5-1: SerialNumber: syz [ 291.936338][ T5146] usb 5-1: config 0 descriptor?? [ 291.969235][ T5230] EXT4-fs (loop3): unmounting filesystem. [ 291.987794][ T5146] hub 5-1:0.0: bad descriptor, ignoring hub [ 291.993764][ T5146] hub: probe of 5-1:0.0 failed with error -5 [ 292.651904][ T5107] usb 5-1: USB disconnect, device number 24 [ 293.571616][ T5107] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 293.708874][ T6640] loop1: detected capacity change from 0 to 256 [ 293.728599][ T6639] loop3: detected capacity change from 0 to 1024 [ 293.869547][ T6639] EXT4-fs: Ignoring removed nobh option [ 293.947023][ T6639] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 293.966130][ T5107] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.986279][ T5107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.006721][ T6639] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 11 (err -117) [ 294.028772][ T6639] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 294.051287][ T6639] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz-executor.3: Invalid block bitmap block 0 in block_group 0 [ 294.077919][ T5107] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 294.086875][ T6639] Quota error (device loop3): write_blk: dquota write failed [ 294.094084][ T5107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 294.096121][ T6639] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 294.107552][ T5107] usb 5-1: SerialNumber: syz [ 294.147287][ T5230] EXT4-fs (loop3): unmounting filesystem. [ 294.153293][ T10] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 294.418264][ T5107] usb 5-1: 0:2 : does not exist [ 294.459064][ T5107] usb 5-1: USB disconnect, device number 25 [ 295.066921][ T28] audit: type=1400 audit(1852754517.828:3970): avc: denied { read } for pid=6669 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.109171][ T28] audit: type=1400 audit(1852754517.828:3971): avc: denied { read } for pid=6664 comm="syz-executor.4" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 295.154490][ T28] audit: type=1400 audit(1852754517.828:3972): avc: denied { open } for pid=6664 comm="syz-executor.4" path="/root/syzkaller-testdir2886236063/syzkaller.FlIceh/22/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 295.215759][ T28] audit: type=1400 audit(1852754517.828:3973): avc: denied { mount } for pid=6664 comm="syz-executor.4" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 295.325440][ T28] audit: type=1400 audit(1852754517.828:3974): avc: denied { unmount } for pid=6390 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 295.436119][ T6680] loop3: detected capacity change from 0 to 256 [ 295.973542][ T6690] device ip6gretap0 entered promiscuous mode [ 295.990836][ T6690] device vlan2 entered promiscuous mode [ 296.012200][ T6690] device ip6gretap0 left promiscuous mode [ 296.107560][ T5107] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 296.467971][ T5107] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.514658][ T5107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.687677][ T5107] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 296.700742][ T5107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 296.716885][ T5107] usb 5-1: SerialNumber: syz [ 297.032483][ T5107] usb 5-1: 0:2 : does not exist [ 297.213986][ T5107] usb 5-1: USB disconnect, device number 26 [ 297.601287][ T6714] loop4: detected capacity change from 0 to 512 [ 297.698529][ T6714] EXT4-fs (loop4): 1 truncate cleaned up [ 297.710753][ T6714] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 297.769162][ T6390] EXT4-fs (loop4): unmounting filesystem. [ 298.502797][ T6729] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.512719][ T6729] : renamed from syztnl2 [ 298.528760][ T6732] loop1: detected capacity change from 0 to 1024 [ 298.585872][ T6729] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.649716][ T6732] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 298.662943][ T6732] EXT4-fs (loop1): barriers disabled [ 298.668110][ T6732] JBD2: no valid journal superblock found [ 298.673658][ T6732] EXT4-fs (loop1): error loading journal [ 298.997656][ T6743] loop4: detected capacity change from 0 to 512 [ 299.004657][ T6743] EXT4-fs: Ignoring removed bh option [ 299.010365][ T6743] EXT4-fs (loop4): Test dummy encryption mode enabled [ 299.046473][ T6743] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.4: inline data xattr refers to an external xattr inode [ 299.533530][ T6743] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 299.552864][ T6743] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 299.589935][ T6743] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 299.874081][ T6390] EXT4-fs (loop4): unmounting filesystem. [ 300.053825][ T6765] loop3: detected capacity change from 0 to 256 [ 300.198428][ T6771] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.218393][ T6771] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.576335][ T6781] loop4: detected capacity change from 0 to 512 [ 300.624573][ T6781] EXT4-fs (loop4): 1 truncate cleaned up [ 300.635304][ T6781] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 300.670708][ T6390] EXT4-fs (loop4): unmounting filesystem. [ 301.044319][ T6790] bridge0: port 3(vlan2) entered blocking state [ 301.057733][ T6790] bridge0: port 3(vlan2) entered disabled state [ 301.141628][ T6794] loop1: detected capacity change from 0 to 256 [ 301.165800][ T28] audit: type=1400 audit(1852754523.928:3975): avc: denied { setcurrent } for pid=6795 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 301.437922][ T6813] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 301.456189][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.472413][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.482941][ T6808] device bridge_slave_0 entered promiscuous mode [ 301.507866][ T6815] tmpfs: Bad value for 'nr_blocks' [ 301.633915][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.692117][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.701156][ T6817] loop3: detected capacity change from 0 to 256 [ 301.707968][ T6817] exfat: Deprecated parameter 'namecase' [ 301.714171][ T6808] device bridge_slave_1 entered promiscuous mode [ 301.730534][ T6817] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 301.787615][ T5107] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 301.843359][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.850240][ T6808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.857337][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.864146][ T6808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.885782][ T6823] bridge0: port 3(vlan2) entered blocking state [ 301.891966][ T6823] bridge0: port 3(vlan2) entered disabled state [ 301.913868][ T6825] loop4: detected capacity change from 0 to 512 [ 301.920868][ T6825] EXT4-fs (loop4): Test dummy encryption mode enabled [ 301.944974][ T6825] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #17: comm syz-executor.4: iget: bogus i_mode (0) [ 301.958419][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.965899][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.967797][ T6825] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 17 (err -117) [ 301.985033][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.997811][ T6825] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 302.008864][ T6825] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz-executor.4: bg 0: block 7: invalid block bitmap [ 302.028971][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.042341][ T6390] EXT4-fs (loop4): unmounting filesystem. [ 302.057605][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.064477][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.077642][ T5107] usb 2-1: no configurations [ 302.082176][ T5107] usb 2-1: can't read configurations, error -22 [ 302.089058][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.097849][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.104687][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.112764][ T1204] device bridge_slave_1 left promiscuous mode [ 302.126101][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.151326][ T1204] device bridge_slave_0 left promiscuous mode [ 302.157284][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.188611][ T1204] device veth1_macvtap left promiscuous mode [ 302.194468][ T1204] device veth0_vlan left promiscuous mode [ 302.237543][ T5107] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 302.428838][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.436699][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.458558][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 302.466944][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.480299][ T6808] device veth0_vlan entered promiscuous mode [ 302.493472][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 302.509573][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.527618][ T5107] usb 2-1: no configurations [ 302.532050][ T5107] usb 2-1: can't read configurations, error -22 [ 302.544223][ T6808] device veth1_macvtap entered promiscuous mode [ 302.555936][ T5107] usb usb2-port1: attempt power cycle [ 302.569281][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.586718][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.606927][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 302.627138][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.639095][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 302.646620][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.667989][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.692180][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.702822][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.784289][ T6845] loop0: detected capacity change from 0 to 512 [ 302.794376][ T6845] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 302.814926][ T6847] loop4: detected capacity change from 0 to 512 [ 302.822750][ T6850] loop3: detected capacity change from 0 to 256 [ 302.829556][ T6850] exfat: Deprecated parameter 'namecase' [ 302.832953][ T6845] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 302.853789][ T6845] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 302.868378][ T6845] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 302.876818][ T6845] ext2 filesystem being mounted at /root/syzkaller-testdir627416953/syzkaller.04dp2p/2/file0 supports timestamps until 2038 (0x7fffffff) [ 302.898565][ T6850] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 302.922303][ T28] audit: type=1400 audit(1852754525.688:3976): avc: denied { read } for pid=6853 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 302.950254][ T6808] EXT4-fs (loop0): unmounting filesystem. [ 302.987517][ T5107] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 303.117599][ T5107] usb 2-1: no configurations [ 303.122236][ T5107] usb 2-1: can't read configurations, error -22 [ 303.169368][ T6876] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.218487][ T6882] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 303.277515][ T5107] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 303.295772][ T6894] loop4: detected capacity change from 0 to 1024 [ 303.304702][ T6894] EXT4-fs: Ignoring removed i_version option [ 303.310818][ T6894] EXT4-fs: Mount option(s) incompatible with ext3 [ 303.417587][ T5107] usb 2-1: no configurations [ 303.422101][ T5107] usb 2-1: can't read configurations, error -22 [ 303.433100][ T5107] usb usb2-port1: unable to enumerate USB device [ 303.506769][ T6917] loop3: detected capacity change from 0 to 256 [ 303.761549][ T6925] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.768658][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.775939][ T6925] device bridge_slave_0 entered promiscuous mode [ 303.789461][ T6925] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.803958][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.818015][ T6925] device bridge_slave_1 entered promiscuous mode [ 303.966138][ T6925] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.973037][ T6925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.980128][ T6925] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.986894][ T6925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.035397][ T6944] loop4: detected capacity change from 0 to 512 [ 304.042065][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.049856][ T6944] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 304.049872][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.067946][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.086064][ T6944] EXT4-fs error (device loop4): mb_free_blocks:1813: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 304.098456][ T28] audit: type=1400 audit(1852754526.868:3977): avc: denied { ioctl } for pid=6947 comm="syz-executor.0" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 304.101843][ T6944] EXT4-fs (loop4): Remounting filesystem read-only [ 304.134096][ T6944] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 1 (level 1) [ 304.148364][ T6944] EXT4-fs (loop4): 1 truncate cleaned up [ 304.153935][ T6944] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 304.154178][ T1192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.172564][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.179425][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.189163][ T1192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.197816][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.204740][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.212034][ T1192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.225463][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.225929][ T6944] kvm: pic: non byte write [ 304.237499][ T6944] kvm: pic: non byte read [ 304.241800][ T6944] kvm: pic: non byte write [ 304.246197][ T6944] kvm: pic: non byte write [ 304.298546][ T6944] kvm: pic: non byte write [ 304.313548][ T6957] loop3: detected capacity change from 0 to 1024 [ 304.391982][ T6957] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 304.404669][ T6957] EXT4-fs (loop3): barriers disabled [ 304.409821][ T6957] JBD2: no valid journal superblock found [ 304.415354][ T6957] EXT4-fs (loop3): error loading journal [ 304.486943][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.541344][ T6944] kvm: pic: non byte write [ 304.565583][ T1204] device bridge_slave_1 left promiscuous mode [ 304.575754][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.601938][ T6944] kvm: pic: non byte write [ 304.623404][ T1204] device bridge_slave_0 left promiscuous mode [ 304.648927][ T6944] kvm: pic: non byte write [ 304.667859][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.674858][ T6944] kvm: pic: non byte write [ 304.679350][ T6944] kvm: pic: non byte write [ 304.683640][ T6944] kvm: pic: non byte write [ 304.688013][ T1204] device veth1_macvtap left promiscuous mode [ 304.697226][ T1204] device veth0_vlan left promiscuous mode [ 304.841626][ T6390] EXT4-fs (loop4): unmounting filesystem. [ 304.906047][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 304.914791][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.923674][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.931428][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.940210][ T6925] device veth0_vlan entered promiscuous mode [ 304.969767][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 304.979793][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.996261][ T6925] device veth1_macvtap entered promiscuous mode [ 305.227040][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 305.234828][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 305.243722][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 305.254135][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.271425][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.281180][ T28] audit: type=1400 audit(1852754528.048:3978): avc: denied { getopt } for pid=6978 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 305.328317][ T6983] loop1: detected capacity change from 0 to 1024 [ 305.336713][ T6983] EXT4-fs: Ignoring removed i_version option [ 305.345295][ T6985] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 305.351173][ T6985] pim6reg0: linktype set to 827 [ 305.354995][ T6983] EXT4-fs: Mount option(s) incompatible with ext3 [ 305.420755][ T6987] loop2: detected capacity change from 0 to 512 [ 305.427518][ T6987] EXT4-fs: Ignoring removed bh option [ 305.433349][ T6987] EXT4-fs (loop2): Test dummy encryption mode enabled [ 305.444574][ T6987] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.2: inline data xattr refers to an external xattr inode [ 305.460391][ T6987] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 305.472560][ T6987] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 305.530305][ T6925] EXT4-fs (loop2): unmounting filesystem. [ 305.818240][ T28] audit: type=1326 audit(1852754528.588:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e92a7cea9 code=0x7ffc0000 [ 305.874821][ T28] audit: type=1326 audit(1852754528.588:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e92a7cea9 code=0x7ffc0000 [ 305.916476][ T6977] loop3: detected capacity change from 0 to 131072 [ 305.923076][ T28] audit: type=1326 audit(1852754528.608:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e92a7cea9 code=0x7ffc0000 [ 305.939435][ T6977] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 305.956196][ T28] audit: type=1326 audit(1852754528.608:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e92a7cea9 code=0x7ffc0000 [ 305.981375][ T7002] loop0: detected capacity change from 0 to 512 [ 305.988889][ T7002] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 305.992465][ T28] audit: type=1326 audit(1852754528.608:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e92a7cea9 code=0x7ffc0000 [ 306.001122][ T6977] F2FS-fs (loop3): invalid crc value [ 306.030665][ T28] audit: type=1326 audit(1852754528.608:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e92a7cea9 code=0x7ffc0000 [ 306.044349][ T7002] EXT4-fs error (device loop0): mb_free_blocks:1813: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 306.068811][ T7002] EXT4-fs (loop0): Remounting filesystem read-only [ 306.075342][ T7002] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 1 (level 1) [ 306.078602][ T6977] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 306.103407][ T7002] EXT4-fs (loop0): 1 truncate cleaned up [ 306.108928][ T7002] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 306.160901][ T6977] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 306.168418][ T28] kauditd_printk_skb: 193 callbacks suppressed [ 306.168432][ T28] audit: type=1326 audit(1852754528.938:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e92a7a627 code=0x7ffc0000 [ 306.202868][ T28] audit: type=1326 audit(1852754528.968:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e92a40309 code=0x7ffc0000 [ 306.228626][ T28] audit: type=1326 audit(1852754528.968:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e92a7cea9 code=0x7ffc0000 [ 306.252453][ T28] audit: type=1326 audit(1852754528.968:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e92a7a627 code=0x7ffc0000 [ 306.276288][ T28] audit: type=1326 audit(1852754528.968:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e92a40309 code=0x7ffc0000 [ 306.834976][ T28] audit: type=1326 audit(1852754528.968:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e92a7cea9 code=0x7ffc0000 [ 306.865562][ T28] audit: type=1326 audit(1852754528.968:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e92a7a627 code=0x7ffc0000 [ 306.890360][ T28] audit: type=1326 audit(1852754528.968:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e92a40309 code=0x7ffc0000 [ 306.923649][ T28] audit: type=1326 audit(1852754528.968:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e92a7cea9 code=0x7ffc0000 [ 306.952121][ T7017] loop1: detected capacity change from 0 to 1024 [ 306.959543][ T7017] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 306.969006][ T28] audit: type=1326 audit(1852754528.968:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e92a7a627 code=0x7ffc0000 [ 306.970024][ T7017] EXT4-fs (loop1): barriers disabled [ 306.998139][ T7017] JBD2: no valid journal superblock found [ 307.003652][ T7017] EXT4-fs (loop1): error loading journal [ 307.024533][ T7025] loop4: detected capacity change from 0 to 512 [ 307.031788][ T7025] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 307.043867][ T7025] EXT4-fs (loop4): 1 truncate cleaned up [ 307.071849][ T7025] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 307.076429][ T7028] loop1: detected capacity change from 0 to 512 [ 307.094209][ T7025] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 307.137615][ T7025] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 307.173872][ T6808] EXT4-fs (loop0): unmounting filesystem. [ 307.181701][ T7028] EXT4-fs (loop1): 1 orphan inode deleted [ 307.187410][ T7028] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 307.196703][ T7028] ext4 filesystem being mounted at /root/syzkaller-testdir272247704/syzkaller.1kONrF/68/file0 supports timestamps until 2038 (0x7fffffff) [ 307.214455][ T6390] EXT4-fs (loop4): unmounting filesystem. [ 307.261526][ T7043] loop4: detected capacity change from 0 to 128 [ 307.267978][ T7028] loop1: detected capacity change from 512 to 0 [ 307.274661][ T7028] EXT4-fs warning (device loop1): ext4_group_extend:1893: will only finish group (71 blocks, 7 new) [ 307.343011][ T7044] loop2: detected capacity change from 0 to 256 [ 307.562019][ T7048] loop4: detected capacity change from 0 to 1024 [ 307.586596][ T7048] EXT4-fs: Ignoring removed i_version option [ 307.594090][ T6317] EXT4-fs warning (device loop1): __ext4_unlink:3289: inode #16: comm syz-executor.1: Deleting file 'file3' with no links [ 307.606751][ T7048] EXT4-fs: Mount option(s) incompatible with ext3 [ 307.613101][ T6317] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #17: comm syz-executor.1: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 307.630561][ T6317] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #17: comm syz-executor.1: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 307.659603][ T6317] EXT4-fs (loop1): unmounting filesystem. [ 307.743060][ T7067] tun0: tun_chr_ioctl cmd 2147767521 [ 307.845765][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.852750][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.860922][ T7071] device bridge_slave_0 entered promiscuous mode [ 307.873998][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.881066][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.889620][ T7071] device bridge_slave_1 entered promiscuous mode [ 307.949782][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.956677][ T7071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.963790][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.970664][ T7071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.008857][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.016556][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.040359][ T7095] loop4: detected capacity change from 0 to 1024 [ 308.041040][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.047235][ T7095] EXT4-fs: Ignoring removed i_version option [ 308.060006][ T7095] EXT4-fs: Mount option(s) incompatible with ext3 [ 308.080558][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.089054][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.095913][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.103506][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.111907][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.118789][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.126237][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.147725][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 308.155597][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.163611][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 308.171823][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.186607][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.194410][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.202459][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.209811][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.217744][ T7071] device veth0_vlan entered promiscuous mode [ 308.237383][ T1192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.246512][ T1192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.260031][ T7071] device veth1_macvtap entered promiscuous mode [ 308.273550][ T1192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 308.281475][ T1192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.289623][ T1192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.299988][ T7101] device ip6gretap0 entered promiscuous mode [ 308.305805][ T7101] device vlan2 entered promiscuous mode [ 308.312387][ T7101] device ip6gretap0 left promiscuous mode [ 308.330696][ T1192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.344600][ T1192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.363631][ T7103] tun0: tun_chr_ioctl cmd 2147767521 [ 308.395578][ T7105] loop1: detected capacity change from 0 to 512 [ 308.402290][ T10] device bridge_slave_1 left promiscuous mode [ 308.408870][ T7105] EXT4-fs: Ignoring removed bh option [ 308.414577][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.421665][ T7105] EXT4-fs (loop1): Test dummy encryption mode enabled [ 308.428836][ T10] device bridge_slave_0 left promiscuous mode [ 308.434775][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.444447][ T7105] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.1: inline data xattr refers to an external xattr inode [ 308.460537][ T10] device veth1_macvtap left promiscuous mode [ 308.466380][ T10] device veth0_vlan left promiscuous mode [ 308.474994][ T7105] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 308.487384][ T7105] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 308.539966][ T7071] EXT4-fs (loop1): unmounting filesystem. [ 308.744480][ T7136] loop3: detected capacity change from 0 to 512 [ 308.816791][ T7139] loop4: detected capacity change from 0 to 256 [ 308.865242][ T7136] EXT4-fs: Ignoring removed bh option [ 308.880702][ T7136] EXT4-fs (loop3): Test dummy encryption mode enabled [ 309.042264][ T7136] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.3: inline data xattr refers to an external xattr inode [ 309.069904][ T7136] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 12 (err -117) [ 309.103352][ T7136] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 309.173829][ T5230] EXT4-fs (loop3): unmounting filesystem. [ 309.317734][ T1192] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 309.467531][ T5146] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 309.502010][ T7160] loop4: detected capacity change from 0 to 256 [ 309.514277][ T7160] FAT-fs (loop4): Directory bread(block 64) failed [ 309.520654][ T7160] FAT-fs (loop4): Directory bread(block 65) failed [ 309.526957][ T7160] FAT-fs (loop4): Directory bread(block 66) failed [ 309.533440][ T7160] FAT-fs (loop4): Directory bread(block 67) failed [ 309.539903][ T7160] FAT-fs (loop4): Directory bread(block 68) failed [ 309.546230][ T7160] FAT-fs (loop4): Directory bread(block 69) failed [ 309.552642][ T7160] FAT-fs (loop4): Directory bread(block 70) failed [ 309.559035][ T1192] usb 1-1: Using ep0 maxpacket: 8 [ 309.559136][ T7160] FAT-fs (loop4): Directory bread(block 71) failed [ 309.570283][ T7160] FAT-fs (loop4): Directory bread(block 72) failed [ 309.576610][ T7160] FAT-fs (loop4): Directory bread(block 73) failed [ 309.718168][ T1192] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.728245][ T5146] usb 3-1: Using ep0 maxpacket: 8 [ 309.733104][ T1192] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 309.742175][ T1192] usb 1-1: config 1 has no interface number 1 [ 309.867696][ T5146] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.878012][ T5146] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.887770][ T5146] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 309.927567][ T1192] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.936661][ T1192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.944606][ T1192] usb 1-1: Product: syz [ 309.948731][ T1192] usb 1-1: Manufacturer: syz [ 309.953166][ T1192] usb 1-1: SerialNumber: syz [ 309.977570][ T5146] usb 3-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 309.986660][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 309.994597][ T5146] usb 3-1: SerialNumber: syz [ 310.007660][ T7177] Invalid ELF section name index: 32768 || e_shstrndx (32768) >= e_shnum (0) [ 310.048488][ T5146] hub 3-1:1.0: bad descriptor, ignoring hub [ 310.054249][ T5146] hub: probe of 3-1:1.0 failed with error -5 [ 310.060607][ T5146] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 310.071681][ T7185] device syzkaller0 entered promiscuous mode [ 310.073562][ T7187] loop3: detected capacity change from 0 to 256 [ 310.105334][ T7187] FAT-fs (loop3): Directory bread(block 64) failed [ 310.121937][ T7187] FAT-fs (loop3): Directory bread(block 65) failed [ 310.129116][ T7187] FAT-fs (loop3): Directory bread(block 66) failed [ 310.135516][ T7187] FAT-fs (loop3): Directory bread(block 67) failed [ 310.145222][ T7187] FAT-fs (loop3): Directory bread(block 68) failed [ 310.157517][ T7187] FAT-fs (loop3): Directory bread(block 69) failed [ 310.166242][ T7187] FAT-fs (loop3): Directory bread(block 70) failed [ 310.172668][ T7187] FAT-fs (loop3): Directory bread(block 71) failed [ 310.179082][ T7187] FAT-fs (loop3): Directory bread(block 72) failed [ 310.185449][ T7187] FAT-fs (loop3): Directory bread(block 73) failed [ 310.287781][ T1192] usb 1-1: MIDIStreaming interface descriptor not found [ 310.321454][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.324753][ T1192] usb 1-1: USB disconnect, device number 16 [ 310.474027][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.588833][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.742751][ T7208] Invalid ELF section name index: 32768 || e_shstrndx (32768) >= e_shnum (0) [ 310.856111][ T7213] loop4: detected capacity change from 0 to 256 [ 311.801683][ T7231] loop1: detected capacity change from 0 to 40427 [ 311.817819][ T7231] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 311.828709][ T7231] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 311.838236][ T7231] F2FS-fs (loop1): invalid crc value [ 311.844891][ T7231] F2FS-fs (loop1): Found nat_bits in checkpoint [ 311.890590][ T7231] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 311.906017][ T7231] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 311.918894][ T7250] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 311.925481][ T7250] pim6reg0: linktype set to 827 [ 312.149708][ T7263] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 312.382825][ T24] usb 3-1: USB disconnect, device number 19 [ 312.418155][ T7272] loop4: detected capacity change from 0 to 256 [ 312.523107][ T7278] loop0: detected capacity change from 0 to 512 [ 312.547014][ T7278] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 312.796398][ T7278] EXT4-fs (loop0): 1 truncate cleaned up [ 312.811420][ T7278] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 312.869985][ T7278] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 312.886930][ T7278] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 312.929323][ T6808] EXT4-fs (loop0): unmounting filesystem. [ 312.972018][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.994780][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 313.008837][ T7298] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 313.017928][ T7298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.220064][ T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0) [ 313.281738][ T7319] loop0: detected capacity change from 0 to 512 [ 313.312858][ T7319] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 313.315075][ T7300] loop1: detected capacity change from 0 to 40427 [ 313.337846][ T7300] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 313.345715][ T7300] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 313.355053][ T7300] F2FS-fs (loop1): invalid crc value [ 313.356942][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 313.360924][ T7319] EXT4-fs (loop0): 1 truncate cleaned up [ 313.375279][ T7319] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 313.380111][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 313.391124][ T7319] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 313.407774][ T7300] F2FS-fs (loop1): Found nat_bits in checkpoint [ 313.424944][ T7319] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 313.479768][ T6808] EXT4-fs (loop0): unmounting filesystem. [ 313.488874][ T7300] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 313.495789][ T7300] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 313.711957][ T7336] overlayfs: unrecognized mount option "obj_role=" or missing value [ 314.185134][ T7338] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 314.495751][ T7274] loop2: detected capacity change from 0 to 131072 [ 314.538024][ T7274] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 314.557555][ T7274] F2FS-fs (loop2): invalid crc value [ 314.584217][ T7274] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 314.620109][ T7274] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 316.003625][ T7377] overlayfs: unrecognized mount option "obj_role=" or missing value [ 316.019896][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 316.019912][ T28] audit: type=1400 audit(1852754538.788:4266): avc: denied { setopt } for pid=7379 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 316.075227][ T7385] serio: Serial port pts0 [ 316.100535][ T7374] loop4: detected capacity change from 0 to 40427 [ 316.109195][ T7374] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 316.116795][ T7374] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 316.136556][ T7374] F2FS-fs (loop4): invalid crc value [ 316.148579][ T7374] F2FS-fs (loop4): Found nat_bits in checkpoint [ 316.210435][ T7374] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 316.217363][ T7374] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 316.983533][ T7411] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 317.334347][ T7419] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 99999999 (only 8 groups) [ 317.347621][ T28] audit: type=1400 audit(1852754540.108:4267): avc: denied { bind } for pid=7416 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 317.547874][ T7423] overlayfs: unrecognized mount option "obj_role=" or missing value [ 317.695718][ T7435] syz-executor.4[7435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.695767][ T7435] syz-executor.4[7435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.479494][ T7478] hub 6-0:1.0: USB hub found [ 318.496726][ T7478] hub 6-0:1.0: 1 port detected [ 318.713424][ T7489] overlayfs: unrecognized mount option "obj_role=" or missing value [ 319.166334][ T7491] syz-executor.4[7491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.167710][ T7491] syz-executor.4[7491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.693417][ T7508] loop4: detected capacity change from 0 to 512 [ 319.721396][ T7508] EXT4-fs: Ignoring removed oldalloc option [ 319.727799][ T7508] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.737010][ T7508] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 319.748293][ T7508] EXT4-fs (loop4): Test dummy encryption mode enabled [ 319.819856][ T7508] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 319.829938][ T7508] System zones: 1-12 [ 319.835253][ T7508] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 320.428025][ T7508] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: missing EA_INODE flag [ 320.543560][ T7525] overlayfs: unrecognized mount option "obj_role=" or missing value [ 320.834677][ T7508] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117 [ 320.861480][ T7527] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 99999999 (only 8 groups) [ 320.872624][ T7508] EXT4-fs (loop4): 1 orphan inode deleted [ 320.880820][ T7508] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 320.894560][ T28] audit: type=1400 audit(1852754543.658:4268): avc: denied { execute_no_trans } for pid=7507 comm="syz-executor.4" path="/root/syzkaller-testdir2886236063/syzkaller.FlIceh/125/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 320.944162][ T6390] EXT4-fs (loop4): unmounting filesystem. [ 320.994110][ T7544] loop1: detected capacity change from 0 to 128 [ 321.745439][ T7566] syz-executor.2[7566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.745522][ T7566] syz-executor.2[7566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.778438][ T28] audit: type=1400 audit(1852754544.548:4269): avc: denied { setopt } for pid=7567 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 321.815887][ T7572] loop2: detected capacity change from 0 to 512 [ 321.823103][ T7572] EXT4-fs: Ignoring removed oldalloc option [ 321.843421][ T7572] EXT4-fs: Ignoring removed mblk_io_submit option [ 321.871313][ T7556] loop0: detected capacity change from 0 to 40427 [ 321.882514][ T7556] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 321.890156][ T7556] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 321.899321][ T7556] F2FS-fs (loop0): invalid crc value [ 321.904583][ T7572] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 321.915777][ T7572] EXT4-fs (loop2): Test dummy encryption mode enabled [ 321.940067][ T7556] F2FS-fs (loop0): Found nat_bits in checkpoint [ 321.944509][ T7572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 321.960421][ T7572] System zones: 1-12 [ 321.974229][ T7572] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 321.998002][ T7572] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag [ 322.015972][ T7572] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 322.019763][ T7556] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 322.030045][ T7572] EXT4-fs (loop2): 1 orphan inode deleted [ 322.040810][ T7556] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 322.049318][ T7572] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 322.159852][ T6925] EXT4-fs (loop2): unmounting filesystem. [ 322.162106][ T7601] syz-executor.4[7601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.165771][ T7601] syz-executor.4[7601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.367591][ T7603] loop2: detected capacity change from 0 to 256 [ 322.387739][ T7597] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 322.400186][ T7603] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 322.454948][ T7610] loop4: detected capacity change from 0 to 128 [ 322.575983][ T7615] loop2: detected capacity change from 0 to 512 [ 323.386331][ T7615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 323.552842][ T7615] ext4 filesystem being mounted at /root/syzkaller-testdir893674701/syzkaller.ZfpCun/41/file0 supports timestamps until 2038 (0x7fffffff) [ 324.050187][ T6925] EXT4-fs (loop2): unmounting filesystem. [ 324.067415][ T7642] loop4: detected capacity change from 0 to 1024 [ 324.074081][ T7642] ext4: Bad value for 'commit' [ 324.151182][ T7651] loop2: detected capacity change from 0 to 256 [ 324.250025][ T7651] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 324.659186][ T7677] loop3: detected capacity change from 0 to 1024 [ 324.666059][ T7677] ext4: Bad value for 'commit' [ 324.722741][ T7685] loop2: detected capacity change from 0 to 256 [ 324.732494][ T7685] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 324.761148][ T7692] syz-executor.3[7692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.761276][ T7692] syz-executor.3[7692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.150594][ T7713] loop3: detected capacity change from 0 to 256 [ 325.175058][ T7713] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea07c, utbl_chksum : 0x7319d30d) [ 325.232414][ T7731] loop3: detected capacity change from 0 to 256 [ 325.241898][ T7731] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 325.764690][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 325.820036][ T7754] loop3: detected capacity change from 0 to 256 [ 325.832043][ T7754] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea07c, utbl_chksum : 0x7319d30d) [ 326.545534][ T7764] loop0: detected capacity change from 0 to 256 [ 326.569225][ T7729] loop2: detected capacity change from 0 to 131072 [ 326.576041][ T7764] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 326.588104][ T7729] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 326.589014][ T7771] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 326.606020][ T7729] F2FS-fs (loop2): invalid crc value [ 326.612487][ T7729] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 326.645007][ T7729] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 326.883131][ T7804] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 327.237111][ T7815] loop0: detected capacity change from 0 to 256 [ 327.254807][ T7815] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 327.662042][ T7837] device ip6erspan0 entered promiscuous mode [ 327.949095][ T7850] loop0: detected capacity change from 0 to 256 [ 327.968434][ T7849] overlayfs: statfs failed on './file0' [ 327.988740][ T7856] loop1: detected capacity change from 0 to 256 [ 327.998136][ T7856] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 328.456635][ T7873] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 328.464655][ T4315] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 328.693718][ T7885] incfs: Can't find or create .index dir in ./file0 [ 328.700631][ T7885] incfs: mount failed -14 [ 328.749130][ T7897] syz-executor.1[7897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.749216][ T7897] syz-executor.1[7897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.897584][ T4315] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 328.921139][ T4315] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 328.946631][ T4315] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 329.019807][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.294297][ T7918] loop1: detected capacity change from 0 to 1024 [ 329.301907][ T7918] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 329.320203][ T7918] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e018, mo2=0000] [ 329.339736][ T7918] System zones: 0-1, 3-12 [ 329.344562][ T7918] EXT4-fs (loop1): orphan cleanup on readonly fs [ 329.351074][ T7918] EXT4-fs error (device loop1): ext4_free_blocks:6197: comm syz-executor.1: Freeing blocks not in datazone - block = 0, count = 4096 [ 329.366830][ T7918] EXT4-fs (loop1): 1 orphan inode deleted [ 329.373474][ T7918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 329.417674][ T7071] EXT4-fs (loop1): unmounting filesystem. [ 329.425176][ T7931] loop2: detected capacity change from 0 to 256 [ 329.907507][ T5027] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 330.193042][ T5027] usb 1-1: Using ep0 maxpacket: 8 [ 330.244618][ T7961] incfs: Can't find or create .index dir in ./file0 [ 330.251856][ T7961] incfs: mount failed -14 [ 330.587618][ T5027] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.597761][ T5027] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 330.606567][ T5027] usb 1-1: config 1 has no interface number 1 [ 330.693352][ T7978] overlayfs: statfs failed on './file0' [ 330.767618][ T5027] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 330.776577][ T5027] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.798867][ T5027] usb 1-1: Product: syz [ 330.802861][ T5027] usb 1-1: Manufacturer: syz [ 330.807289][ T5027] usb 1-1: SerialNumber: syz [ 330.927633][ T4315] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 330.935348][ T4315] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input49 [ 330.944526][ T4315] input: failed to attach handler kbd to device input49, error: -5 [ 330.997482][ T5664] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 331.267635][ T5027] usb 1-1: MIDIStreaming interface descriptor not found [ 331.276212][ T5027] usb 1-1: USB disconnect, device number 17 [ 331.427586][ T5664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.438463][ T5664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.448026][ T5664] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 331.456826][ T5664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.465256][ T5664] usb 2-1: config 0 descriptor?? [ 331.507738][ T24] usb 5-1: USB disconnect, device number 27 [ 331.658848][ T8001] loop0: detected capacity change from 0 to 512 [ 331.665809][ T8001] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 331.675459][ T8001] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 331.685467][ T8001] EXT4-fs (loop0): group descriptors corrupted! [ 331.749203][ T8007] loop3: detected capacity change from 0 to 1024 [ 332.202806][ T28] audit: type=1400 audit(1852754554.948:4270): avc: denied { checkpoint_restore } for pid=8017 comm="syz-executor.3" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 332.239724][ T5664] logitech-hidpp-device 0003:046D:C086.001B: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 332.242451][ T28] audit: type=1400 audit(1852754554.998:4271): avc: denied { write } for pid=8019 comm="syz-executor.3" path="socket:[54536]" dev="sockfs" ino=54536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 332.437281][ T8030] loop3: detected capacity change from 0 to 256 [ 332.444879][ T4315] usb 2-1: USB disconnect, device number 21 [ 332.454066][ T8030] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 332.608971][ T8010] loop2: detected capacity change from 0 to 131072 [ 332.616177][ T8010] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 332.636489][ T8010] F2FS-fs (loop2): invalid crc value [ 332.663942][ T8010] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 332.716104][ T8010] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 332.852840][ T8053] loop3: detected capacity change from 0 to 40427 [ 332.890501][ T8053] F2FS-fs (loop3): Found nat_bits in checkpoint [ 332.995975][ T8053] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 333.069705][ T8079] loop4: detected capacity change from 0 to 256 [ 333.084081][ T8079] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 333.096571][ T5230] syz-executor.3: attempt to access beyond end of device [ 333.096571][ T5230] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 333.328921][ T4315] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 333.438588][ T8111] cgroup: Unexpected value for 'cpuset_v2_mode' [ 333.617081][ T28] audit: type=1400 audit(1852754556.378:4272): avc: denied { nlmsg_read } for pid=8126 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 333.757845][ T4315] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.847867][ T4315] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.863855][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 333.874357][ T4315] usb 3-1: SerialNumber: syz [ 333.957973][ T4315] usb 3-1: bad CDC descriptors [ 333.967516][ T1192] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 334.094696][ T8136] loop1: detected capacity change from 0 to 40427 [ 334.101689][ T8136] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 334.109446][ T8136] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 334.119891][ T8136] F2FS-fs (loop1): Found nat_bits in checkpoint [ 334.155795][ T8136] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 334.161538][ T5027] usb 3-1: USB disconnect, device number 20 [ 334.162837][ T8136] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 334.199888][ T28] audit: type=1400 audit(1852754556.968:4273): avc: denied { link } for pid=8135 comm="syz-executor.1" name="#18" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 334.220714][ T7071] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 334.221714][ T7071] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 334.229220][ T7071] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 334.236667][ T7071] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 334.244071][ T7071] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 334.251520][ T7071] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 334.259095][ T7071] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 334.350076][ T1192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.368620][ T1192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.379475][ T1192] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 334.388407][ T1192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.396822][ T1192] usb 5-1: config 0 descriptor?? [ 334.504344][ T8150] loop3: detected capacity change from 0 to 512 [ 334.515161][ T8152] cgroup: Unexpected value for 'cpuset_v2_mode' [ 334.535081][ T8150] EXT4-fs (loop3): 1 orphan inode deleted [ 334.540936][ T8150] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 334.549789][ T8150] ext4 filesystem being mounted at /root/syzkaller-testdir45490411/syzkaller.Gu7Si3/304/file1 supports timestamps until 2038 (0x7fffffff) [ 334.573447][ T8150] EXT4-fs error (device loop3): ext4_free_blocks:6197: comm syz-executor.3: Freeing blocks not in datazone - block = 41, count = 1 [ 334.587063][ T8150] EXT4-fs (loop3): Remounting filesystem read-only [ 334.593541][ T8150] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 334.606885][ T8150] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 334.617384][ T8150] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz-executor.3: mark_inode_dirty error [ 334.631776][ T8150] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 334.644893][ T8150] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 334.654460][ T8150] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz-executor.3: mark_inode_dirty error [ 334.666365][ T8150] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 334.679830][ T8150] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 334.689462][ T8150] EXT4-fs error (device loop3): ext4_punch_hole:4142: inode #16: comm syz-executor.3: mark_inode_dirty error [ 334.729478][ T5230] EXT4-fs (loop3): unmounting filesystem. [ 334.820672][ T28] audit: type=1400 audit(1852754557.588:4274): avc: denied { connect } for pid=8167 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.859520][ T1192] hid (null): bogus close delimiter [ 335.006005][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.013007][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.020318][ T8174] device bridge_slave_0 entered promiscuous mode [ 335.027211][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.034238][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.041696][ T8174] device bridge_slave_1 entered promiscuous mode [ 335.077567][ T1192] usb 5-1: language id specifier not provided by device, defaulting to English [ 335.111115][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.118005][ T8174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.125059][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.131959][ T8174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.155936][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.163507][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.170690][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.181190][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.189273][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.196266][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.214304][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.222340][ T3332] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.229208][ T3332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.236476][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.244294][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.263836][ T8174] device veth0_vlan entered promiscuous mode [ 335.270191][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.278628][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.286525][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 335.293791][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.304065][ T1204] device bridge_slave_1 left promiscuous mode [ 335.310579][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.318820][ T1204] device bridge_slave_0 left promiscuous mode [ 335.324823][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.333146][ T1204] device veth1_macvtap left promiscuous mode [ 335.339099][ T1204] device veth0_vlan left promiscuous mode [ 335.461739][ T8122] loop4: detected capacity change from 0 to 40427 [ 335.470718][ T8122] F2FS-fs (loop4): Mismatch valid blocks 5 vs. 7 [ 335.477274][ T8122] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 335.495535][ T8174] device veth1_macvtap entered promiscuous mode [ 335.503325][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 335.515942][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.524179][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.549065][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.564988][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.719422][ T28] audit: type=1400 audit(1852754558.488:4275): avc: denied { create } for pid=8189 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 335.749586][ T8188] loop1: detected capacity change from 0 to 40427 [ 335.754687][ T8193] loop2: detected capacity change from 0 to 256 [ 335.756704][ T8188] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 335.769622][ T8188] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 335.774133][ T8193] FAT-fs (loop2): Directory bread(block 64) failed [ 335.778745][ T8188] F2FS-fs (loop1): invalid crc value [ 335.783993][ T8193] FAT-fs (loop2): Directory bread(block 65) failed [ 335.791252][ T8188] F2FS-fs (loop1): Found nat_bits in checkpoint [ 335.795625][ T8193] FAT-fs (loop2): Directory bread(block 66) failed [ 335.808427][ T8193] FAT-fs (loop2): Directory bread(block 67) failed [ 335.814774][ T8193] FAT-fs (loop2): Directory bread(block 68) failed [ 335.821336][ T8193] FAT-fs (loop2): Directory bread(block 69) failed [ 335.827744][ T8193] FAT-fs (loop2): Directory bread(block 70) failed [ 335.834032][ T8193] FAT-fs (loop2): Directory bread(block 71) failed [ 335.844582][ T8193] FAT-fs (loop2): Directory bread(block 72) failed [ 335.851170][ T8193] FAT-fs (loop2): Directory bread(block 73) failed [ 335.857873][ T8188] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 335.865791][ T8188] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 335.977562][ T1192] uclogic 0003:256C:006D.001C: failed retrieving string descriptor #200: -71 [ 335.986384][ T1192] uclogic 0003:256C:006D.001C: failed retrieving pen parameters: -71 [ 335.994450][ T1192] uclogic 0003:256C:006D.001C: failed probing pen v2 parameters: -71 [ 336.002360][ T1192] uclogic 0003:256C:006D.001C: failed probing parameters: -71 [ 336.009732][ T1192] uclogic: probe of 0003:256C:006D.001C failed with error -71 [ 336.113773][ T8202] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 336.306407][ T1192] usb 5-1: USB disconnect, device number 28 [ 336.315905][ T28] audit: type=1400 audit(1852754559.058:4276): avc: denied { write } for pid=8205 comm="syz-executor.2" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 336.371390][ T8211] loop0: detected capacity change from 0 to 256 [ 337.493846][ T28] audit: type=1400 audit(1852754560.258:4277): avc: denied { map } for pid=8237 comm="syz-executor.1" path="socket:[55479]" dev="sockfs" ino=55479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 338.086382][ T3332] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 338.327502][ T3332] usb 4-1: Using ep0 maxpacket: 8 [ 338.437792][ T1204] Bluetooth: hci0: Frame reassembly failed (-84) [ 338.467577][ T3332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.487489][ T3332] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.497044][ T3332] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 338.511462][ T8253] loop0: detected capacity change from 0 to 40427 [ 338.519579][ T8253] F2FS-fs (loop0): invalid crc value [ 338.526311][ T8253] F2FS-fs (loop0): Found nat_bits in checkpoint [ 338.562361][ T8253] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 338.573487][ T8253] syz-executor.0: attempt to access beyond end of device [ 338.573487][ T8253] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 338.908795][ T3332] usb 4-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 338.917908][ T3332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 338.925720][ T3332] usb 4-1: SerialNumber: syz [ 338.968106][ T3332] hub 4-1:1.0: bad descriptor, ignoring hub [ 338.973873][ T3332] hub: probe of 4-1:1.0 failed with error -5 [ 338.979832][ T3332] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 339.106256][ T8276] loop4: detected capacity change from 0 to 256 [ 339.370684][ T8283] loop1: detected capacity change from 0 to 512 [ 339.388744][ T8283] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 339.396514][ T8283] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 339.405088][ T8283] System zones: 0-1, 15-15, 18-18, 34-34 [ 339.411281][ T8283] EXT4-fs (loop1): orphan cleanup on readonly fs [ 339.417635][ T8283] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 339.426817][ T8283] EXT4-fs warning (device loop1): ext4_enable_quotas:6987: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 339.441236][ T8283] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 339.447871][ T8283] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz-executor.1: bad orphan inode 16 [ 339.458291][ T8283] ext4_test_bit(bit=15, block=18) = 1 [ 339.463517][ T8283] is_bad_inode(inode)=0 [ 339.467591][ T8283] NEXT_ORPHAN(inode)=0 [ 339.471480][ T8283] max_ino=32 [ 339.474449][ T8283] i_nlink=2 [ 339.477427][ T8283] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 339.489570][ T8283] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 339.489580][ T28] audit: type=1400 audit(1852754562.258:4278): avc: denied { read } for pid=8282 comm="syz-executor.1" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 339.520488][ T7071] EXT4-fs (loop1): unmounting filesystem. [ 340.944829][ T8318] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 340.953823][ T8318] FAT-fs (loop9): unable to read boot sector [ 340.960264][ T8259] Bluetooth: hci0: command 0x1003 tx timeout [ 340.995546][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 341.220995][ T8326] loop1: detected capacity change from 0 to 256 [ 341.248066][ T8326] FAT-fs (loop1): Directory bread(block 64) failed [ 341.254457][ T8326] FAT-fs (loop1): Directory bread(block 65) failed [ 341.261161][ T8326] FAT-fs (loop1): Directory bread(block 66) failed [ 341.267575][ T8326] FAT-fs (loop1): Directory bread(block 67) failed [ 341.274005][ T8326] FAT-fs (loop1): Directory bread(block 68) failed [ 341.280550][ T8326] FAT-fs (loop1): Directory bread(block 69) failed [ 341.286972][ T8326] FAT-fs (loop1): Directory bread(block 70) failed [ 341.293322][ T8326] FAT-fs (loop1): Directory bread(block 71) failed [ 341.299870][ T8326] FAT-fs (loop1): Directory bread(block 72) failed [ 341.306265][ T8326] FAT-fs (loop1): Directory bread(block 73) failed [ 341.313989][ T1192] usb 4-1: USB disconnect, device number 28 [ 341.425739][ T8341] loop0: detected capacity change from 0 to 256 [ 341.769633][ T689] Bluetooth: hci0: Frame reassembly failed (-84) [ 341.812951][ T8349] loop3: detected capacity change from 0 to 40427 [ 342.071797][ T8349] F2FS-fs (loop3): Found nat_bits in checkpoint [ 342.130834][ T8349] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 342.497093][ T8174] syz-executor.3: attempt to access beyond end of device [ 342.497093][ T8174] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 342.752042][ T8377] loop4: detected capacity change from 0 to 40427 [ 342.758978][ T8377] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 342.767251][ T8377] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 342.777824][ T8377] F2FS-fs (loop4): Found nat_bits in checkpoint [ 342.822469][ T8377] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 342.829808][ T8377] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 342.977754][ T28] audit: type=1400 audit(1852754565.738:4279): avc: denied { read } for pid=8400 comm="syz-executor.4" name="file0" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 343.007502][ T3332] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 343.164002][ T8411] loop0: detected capacity change from 0 to 512 [ 343.178252][ T8411] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 343.186112][ T8411] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 343.194167][ T8411] System zones: 0-1, 15-15, 18-18, 34-34 [ 343.200325][ T8411] EXT4-fs (loop0): orphan cleanup on readonly fs [ 343.206546][ T8411] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 343.215918][ T8411] EXT4-fs warning (device loop0): ext4_enable_quotas:6987: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 343.230575][ T8411] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 343.237253][ T8411] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz-executor.0: bad orphan inode 16 [ 343.247698][ T8411] ext4_test_bit(bit=15, block=18) = 1 [ 343.252948][ T8411] is_bad_inode(inode)=0 [ 343.256884][ T8411] NEXT_ORPHAN(inode)=0 [ 343.261028][ T8411] max_ino=32 [ 343.264043][ T8411] i_nlink=2 [ 343.267028][ T8411] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 343.278806][ T8411] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 343.294400][ T6808] EXT4-fs (loop0): unmounting filesystem. [ 343.373283][ T8426] loop0: detected capacity change from 0 to 512 [ 343.379551][ T3332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.390959][ T3332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.400677][ T3332] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 343.409603][ T3332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.418339][ T3332] usb 4-1: config 0 descriptor?? [ 343.423374][ T8426] EXT4-fs (loop0): bad s_want_extra_isize: 11962 [ 343.700698][ T8430] loop0: detected capacity change from 0 to 128 [ 343.797525][ T8258] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 343.803583][ T8259] Bluetooth: hci0: command 0x1003 tx timeout [ 343.850341][ T8435] loop2: detected capacity change from 0 to 256 [ 343.859324][ T8435] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 343.873419][ T8435] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 344.188055][ T3332] hid (null): bogus close delimiter [ 344.231626][ T3332] usb 4-1: language id specifier not provided by device, defaulting to English [ 344.407562][ T5664] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 344.687524][ T5664] usb 2-1: Using ep0 maxpacket: 16 [ 344.744322][ T28] audit: type=1400 audit(1852754567.508:4280): avc: denied { ioctl } for pid=8456 comm="syz-executor.0" path="socket:[55937]" dev="sockfs" ino=55937 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.771751][ T8457] device syz_tun entered promiscuous mode [ 344.778481][ T8457] device syz_tun left promiscuous mode [ 344.823615][ T8382] loop3: detected capacity change from 0 to 40427 [ 344.832495][ T8382] F2FS-fs (loop3): Mismatch valid blocks 5 vs. 7 [ 344.838872][ T5664] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.850509][ T8382] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 344.857565][ T19] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 344.858405][ T5664] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 344.875518][ T5664] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 344.885238][ T5664] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 344.950297][ T8466] loop7: detected capacity change from 0 to 16384 [ 344.997587][ T5664] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.006805][ T5664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 345.014705][ T5664] usb 2-1: SerialNumber: syz [ 345.057890][ T5664] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 345.065786][ T5664] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 345.099552][ T28] audit: type=1400 audit(1852754567.868:4281): avc: denied { ioctl } for pid=8465 comm="syz-executor.0" path="socket:[56655]" dev="sockfs" ino=56655 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 345.121652][ T8466] I/O error, dev loop7, sector 5376 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 345.237602][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.257658][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.274185][ T24] usb 2-1: USB disconnect, device number 22 [ 345.283105][ T19] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 345.297548][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.306023][ T19] usb 3-1: config 0 descriptor?? [ 345.384681][ T8473] loop0: detected capacity change from 0 to 40427 [ 345.392365][ T8473] F2FS-fs (loop0): invalid crc value [ 345.397541][ T3332] uclogic 0003:256C:006D.001D: failed retrieving string descriptor #200: -71 [ 345.398761][ T8473] F2FS-fs (loop0): Found nat_bits in checkpoint [ 345.406163][ T3332] uclogic 0003:256C:006D.001D: failed retrieving pen parameters: -71 [ 345.420628][ T3332] uclogic 0003:256C:006D.001D: failed probing pen v2 parameters: -71 [ 345.428745][ T3332] uclogic 0003:256C:006D.001D: failed probing parameters: -71 [ 345.436107][ T3332] uclogic: probe of 0003:256C:006D.001D failed with error -71 [ 345.444406][ T3332] usb 4-1: USB disconnect, device number 29 [ 345.454244][ T8473] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 345.946663][ T8486] loop1: detected capacity change from 0 to 40427 [ 345.953884][ T8486] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 345.961694][ T8486] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 345.972048][ T8486] F2FS-fs (loop1): Found nat_bits in checkpoint [ 346.011072][ T8486] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 346.012492][ T8494] loop4: detected capacity change from 0 to 128 [ 346.017983][ T8486] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 346.134988][ T8499] loop3: detected capacity change from 0 to 256 [ 346.141582][ T8499] exfat: Deprecated parameter 'namecase' [ 346.147091][ T8499] exfat: Deprecated parameter 'namecase' [ 346.152640][ T8499] exfat: Deprecated parameter 'namecase' [ 346.169577][ T8499] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 346.456213][ T19] usb 3-1: string descriptor 0 read error: -71 [ 346.477610][ T19] uclogic 0003:256C:006D.001E: failed retrieving string descriptor #200: -71 [ 346.488207][ T19] uclogic 0003:256C:006D.001E: failed retrieving pen parameters: -71 [ 346.496201][ T19] uclogic 0003:256C:006D.001E: failed probing pen v2 parameters: -71 [ 346.504473][ T19] uclogic 0003:256C:006D.001E: failed probing parameters: -71 [ 346.511839][ T19] uclogic: probe of 0003:256C:006D.001E failed with error -71 [ 346.519973][ T19] usb 3-1: USB disconnect, device number 21 [ 346.757642][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 346.929021][ T28] audit: type=1326 audit(1852754569.698:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb0e7cea9 code=0x7ffc0000 [ 346.952964][ T28] audit: type=1326 audit(1852754569.698:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb0e7cea9 code=0x7ffc0000 [ 346.976956][ T28] audit: type=1326 audit(1852754569.698:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f3fb0e7cea9 code=0x7ffc0000 [ 347.000940][ T28] audit: type=1326 audit(1852754569.698:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb0e7cea9 code=0x7ffc0000 [ 347.021641][ T8524] loop2: detected capacity change from 0 to 128 [ 347.025009][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 347.032829][ T28] audit: type=1326 audit(1852754569.698:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fb0e7cea9 code=0x7ffc0000 [ 347.037591][ T8524] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 347.060313][ T28] audit: type=1326 audit(1852754569.698:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb0e7cea9 code=0x7ffc0000 [ 347.069169][ T8524] ext4 filesystem being mounted at /root/syzkaller-testdir893674701/syzkaller.ZfpCun/86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 347.188604][ T6925] EXT4-fs (loop2): unmounting filesystem. [ 347.207509][ T19] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 347.217548][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.227650][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.237216][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 347.312764][ T8528] loop2: detected capacity change from 0 to 40427 [ 347.319832][ T8528] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 347.327916][ T8528] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 347.358497][ T8535] loop1: detected capacity change from 0 to 256 [ 347.365209][ T8535] FAT-fs (loop1): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 347.365209][ T8535] 18446744073709551615" or missing value [ 347.372540][ T24] usb 4-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 347.384655][ T8528] F2FS-fs (loop2): Found nat_bits in checkpoint [ 347.390264][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 347.405175][ T24] usb 4-1: SerialNumber: syz [ 347.439089][ T8540] loop0: detected capacity change from 0 to 256 [ 347.445943][ T8540] exfat: Deprecated parameter 'namecase' [ 347.451677][ T8540] exfat: Deprecated parameter 'namecase' [ 347.457268][ T8540] exfat: Deprecated parameter 'namecase' [ 347.457812][ T24] hub 4-1:1.0: bad descriptor, ignoring hub [ 347.465808][ T8540] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 347.477464][ T24] hub: probe of 4-1:1.0 failed with error -5 [ 347.486098][ T8528] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 347.496170][ T8528] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 347.503795][ T24] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 347.567661][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.578757][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.601421][ T19] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 347.617473][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.626019][ T19] usb 5-1: config 0 descriptor?? [ 347.895930][ T8556] loop2: detected capacity change from 0 to 128 [ 348.345019][ T19] hid (null): bogus close delimiter [ 348.387532][ T19] usb 5-1: language id specifier not provided by device, defaulting to English [ 348.604468][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 348.695369][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.702437][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.709983][ T8563] device bridge_slave_0 entered promiscuous mode [ 348.723959][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.754338][ T8523] loop4: detected capacity change from 0 to 40427 [ 348.762973][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.770687][ T8563] device bridge_slave_1 entered promiscuous mode [ 348.786545][ T8523] F2FS-fs (loop4): Mismatch valid blocks 5 vs. 7 [ 348.793385][ T8523] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 348.857104][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.864002][ T8563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.871228][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.878095][ T8563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.915567][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.923463][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.932837][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.960210][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.969958][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.976799][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.984810][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.993426][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.000281][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.029790][ T8574] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 349.038893][ T8574] FAT-fs (loop5): unable to read boot sector [ 349.084412][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.155698][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.185962][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.197843][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.205761][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.213053][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.221261][ T8563] device veth0_vlan entered promiscuous mode [ 349.232379][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.243054][ T8563] device veth1_macvtap entered promiscuous mode [ 349.253245][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.263037][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.302177][ T8578] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.397697][ T19] uclogic 0003:256C:006D.001F: failed retrieving string descriptor #200: -71 [ 349.408770][ T19] uclogic 0003:256C:006D.001F: failed retrieving pen parameters: -71 [ 349.421072][ T19] uclogic 0003:256C:006D.001F: failed probing pen v2 parameters: -71 [ 349.439352][ T19] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 349.446711][ T19] uclogic: probe of 0003:256C:006D.001F failed with error -71 [ 349.464931][ T19] usb 5-1: USB disconnect, device number 29 [ 349.487041][ T8589] loop0: detected capacity change from 0 to 256 [ 349.494522][ T1204] device bridge_slave_1 left promiscuous mode [ 349.501348][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.504828][ T8591] loop3: detected capacity change from 0 to 256 [ 349.514746][ T1204] device bridge_slave_0 left promiscuous mode [ 349.521696][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.530377][ T8589] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 349.597604][ T5027] usb 4-1: USB disconnect, device number 30 [ 349.613071][ T1204] device veth1_macvtap left promiscuous mode [ 349.619052][ T1204] device veth0_vlan left promiscuous mode [ 349.816604][ T28] kauditd_printk_skb: 734 callbacks suppressed [ 349.816631][ T28] audit: type=1400 audit(1852754572.578:5022): avc: denied { unlink } for pid=8588 comm="syz-executor.0" name="file1" dev="loop0" ino=1048885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 350.091803][ T8602] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 350.101099][ T8602] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 351.338784][ T8632] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 351.408731][ T8644] loop2: detected capacity change from 0 to 128 [ 351.446334][ T8646] loop4: detected capacity change from 0 to 256 [ 351.456749][ T1204] Bluetooth: hci0: Frame reassembly failed (-84) [ 351.965015][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 352.825682][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.851587][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.867489][ T24] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 352.887496][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.907679][ T24] usb 1-1: config 0 descriptor?? [ 353.048228][ T8684] loop2: detected capacity change from 0 to 2048 [ 353.048564][ T8686] loop4: detected capacity change from 0 to 256 [ 353.054906][ T8684] EXT4-fs: Ignoring removed nobh option [ 353.064967][ T8686] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 353.065915][ T8684] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.084950][ T28] audit: type=1400 audit(1852754575.848:5023): avc: denied { mounton } for pid=8685 comm="syz-executor.4" path="/root/syzkaller-testdir2886236063/syzkaller.FlIceh/212/file0/bus" dev="loop4" ino=1048889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 353.108208][ T8686] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 353.115622][ T8684] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 353.122004][ T8686] exFAT-fs (loop4): Filesystem has been set read-only [ 353.134365][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 353.147415][ T8684] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 353.149773][ T6390] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005) [ 353.162214][ T8684] EXT4-fs (loop2): Remounting filesystem read-only [ 353.172801][ T6390] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005) [ 353.177402][ T8684] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 353.201790][ T6925] EXT4-fs (loop2): unmounting filesystem. [ 353.365991][ T8695] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.374917][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.384360][ T8695] device bridge_slave_0 entered promiscuous mode [ 353.392714][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.399883][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.407141][ T8695] device bridge_slave_1 entered promiscuous mode [ 353.417738][ T24] hid (null): bogus close delimiter [ 353.462639][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.469495][ T8695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.476578][ T8695] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.477967][ T8258] Bluetooth: hci0: command 0x1003 tx timeout [ 353.483390][ T8695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.489252][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 353.518457][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.525922][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.533064][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.552826][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.561044][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.567922][ T5664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.578106][ T8714] loop3: detected capacity change from 0 to 2048 [ 353.584746][ T8714] EXT4-fs: Ignoring removed nobh option [ 353.585579][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.590170][ T8714] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.599324][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.611071][ T5664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.629700][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.637577][ T24] usb 1-1: language id specifier not provided by device, defaulting to English [ 353.638299][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.658186][ T8714] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 353.683963][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.696827][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.713716][ T8695] device veth0_vlan entered promiscuous mode [ 353.720418][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.728338][ T8714] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 234: padding at end of block bitmap is not set [ 353.728684][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.750393][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.753229][ T8714] EXT4-fs (loop3): Remounting filesystem read-only [ 353.768949][ T8714] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 353.785809][ T8695] device veth1_macvtap entered promiscuous mode [ 353.795786][ T2418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.814824][ T8174] EXT4-fs (loop3): unmounting filesystem. [ 353.828437][ T2418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.837023][ T2418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 353.871579][ T8728] input: syz1 as /devices/virtual/input/input50 [ 353.901065][ T10] device bridge_slave_1 left promiscuous mode [ 353.921049][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.988816][ T10] device bridge_slave_0 left promiscuous mode [ 354.032531][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.132527][ T10] device veth1_macvtap left promiscuous mode [ 354.175174][ T10] device veth0_vlan left promiscuous mode [ 354.299857][ T8630] loop0: detected capacity change from 0 to 40427 [ 354.310040][ T8630] F2FS-fs (loop0): Mismatch valid blocks 5 vs. 7 [ 354.316730][ T8630] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 354.418088][ T8742] loop4: detected capacity change from 0 to 256 [ 354.594047][ T8746] loop3: detected capacity change from 0 to 256 [ 354.897566][ T24] uclogic 0003:256C:006D.0020: failed retrieving string descriptor #200: -71 [ 354.908288][ T24] uclogic 0003:256C:006D.0020: failed retrieving pen parameters: -71 [ 354.922345][ T24] uclogic 0003:256C:006D.0020: failed probing pen v2 parameters: -71 [ 354.932808][ T24] uclogic 0003:256C:006D.0020: failed probing parameters: -71 [ 354.940570][ T24] uclogic: probe of 0003:256C:006D.0020 failed with error -71 [ 354.948805][ T24] usb 1-1: USB disconnect, device number 18 [ 355.084614][ T8777] loop2: detected capacity change from 0 to 256 [ 355.510167][ T28] audit: type=1326 audit(1852754578.278:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaa07cea9 code=0x7ffc0000 [ 355.534082][ T28] audit: type=1326 audit(1852754578.278:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaa07cea9 code=0x7ffc0000 [ 355.558386][ T28] audit: type=1326 audit(1852754578.278:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fcdaa07cea9 code=0x7ffc0000 [ 355.583456][ T28] audit: type=1326 audit(1852754578.278:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaa07cea9 code=0x7ffc0000 [ 355.609283][ T8793] loop0: detected capacity change from 0 to 128 [ 355.609980][ T28] audit: type=1326 audit(1852754578.278:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaa07cea9 code=0x7ffc0000 [ 355.646752][ T8793] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 355.655582][ T8793] ext4 filesystem being mounted at /root/syzkaller-testdir627416953/syzkaller.04dp2p/143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 355.662277][ T28] audit: type=1326 audit(1852754578.278:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdaa07cea9 code=0x7ffc0000 [ 355.715158][ T28] audit: type=1326 audit(1852754578.278:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaa07cea9 code=0x7ffc0000 [ 355.748904][ T28] audit: type=1326 audit(1852754578.278:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaa07cea9 code=0x7ffc0000 [ 355.778988][ T28] audit: type=1326 audit(1852754578.278:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdaa07cea9 code=0x7ffc0000 [ 355.803708][ T28] audit: type=1326 audit(1852754578.298:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdaa07cea9 code=0x7ffc0000 [ 355.855347][ T6808] EXT4-fs (loop0): unmounting filesystem. [ 355.867279][ T8807] loop3: detected capacity change from 0 to 256 [ 355.905465][ T8815] loop2: detected capacity change from 0 to 512 [ 355.919808][ T8815] EXT4-fs (loop2): orphan cleanup on readonly fs [ 355.927098][ T8815] EXT4-fs (loop2): 1 orphan inode deleted [ 355.936022][ T8815] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 355.945181][ T8815] EXT4-fs (loop2): unmounting filesystem. [ 356.005638][ T8815] loop2: detected capacity change from 0 to 512 [ 356.013964][ T8815] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 356.036691][ T8815] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 356.049345][ T8815] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 356.057765][ T8815] ext4 filesystem being mounted at /root/syzkaller-testdir893674701/syzkaller.ZfpCun/124/file0 supports timestamps until 2038 (0x7fffffff) [ 356.072378][ T8815] EXT4-fs (loop2): unmounting filesystem. [ 356.195698][ T8844] loop1: detected capacity change from 0 to 256 [ 356.255046][ T39] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 356.407556][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 356.517536][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 356.647566][ T39] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 356.656531][ T39] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 356.666061][ T39] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 356.675673][ T39] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 356.685299][ T39] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 356.694934][ T39] usb 1-1: config 1 interface 0 has no altsetting 0 [ 356.702122][ T39] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 356.711152][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.778087][ T39] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 356.827546][ T24] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 356.841939][ T24] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 356.855985][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 356.864941][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.982151][ T8860] loop2: detected capacity change from 0 to 40427 [ 356.989238][ T39] scsi host1: usb-storage 1-1:1.0 [ 356.990289][ T8860] F2FS-fs (loop2): invalid crc value [ 357.001013][ T8860] F2FS-fs (loop2): Found nat_bits in checkpoint [ 357.041236][ T8860] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 357.062203][ T8860] syz-executor.2: attempt to access beyond end of device [ 357.062203][ T8860] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 357.068646][ T8867] tmpfs: Unsupported parameter 'mpol' [ 357.296813][ T8883] loop2: detected capacity change from 0 to 2048 [ 357.465812][ T8883] EXT4-fs: Ignoring removed nobh option [ 357.485613][ T8883] EXT4-fs: Ignoring removed mblk_io_submit option [ 357.497649][ T8887] loop4: detected capacity change from 0 to 512 [ 357.518781][ T8887] EXT4-fs (loop4): orphan cleanup on readonly fs [ 357.528752][ T8887] EXT4-fs (loop4): 1 orphan inode deleted [ 357.546244][ T8883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 357.560298][ T8883] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 357.569622][ T8887] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 357.581063][ T8887] EXT4-fs (loop4): unmounting filesystem. [ 357.589449][ T8883] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 357.613812][ T8883] EXT4-fs (loop2): Remounting filesystem read-only [ 357.624603][ T8883] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 357.638583][ T6925] EXT4-fs (loop2): unmounting filesystem. [ 357.654625][ T8887] loop4: detected capacity change from 0 to 512 [ 357.671875][ T8887] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz-executor.4: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 357.704395][ T8887] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 357.723666][ T8887] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 357.733176][ T8887] ext4 filesystem being mounted at /root/syzkaller-testdir4075160874/syzkaller.nK6bvR/16/file0 supports timestamps until 2038 (0x7fffffff) [ 357.750849][ T8887] EXT4-fs (loop4): unmounting filesystem. [ 357.873238][ T8911] loop1: detected capacity change from 0 to 256 [ 357.937520][ T8911] loop1: detected capacity change from 256 to 0 [ 357.944390][ C1] I/O error, dev loop1, sector 80 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 357.954272][ C1] I/O error, dev loop1, sector 84 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 357.963677][ C1] I/O error, dev loop1, sector 88 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 357.973071][ C1] I/O error, dev loop1, sector 92 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 357.982427][ C1] I/O error, dev loop1, sector 96 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 357.991919][ C1] I/O error, dev loop1, sector 100 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 358.001377][ C1] I/O error, dev loop1, sector 104 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 358.010824][ C1] I/O error, dev loop1, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 358.020288][ C1] I/O error, dev loop1, sector 80 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.029541][ T8911] FAT-fs (loop1): Directory bread(block 20) failed [ 358.036285][ C0] I/O error, dev loop1, sector 84 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.045374][ T8911] FAT-fs (loop1): Directory bread(block 21) failed [ 358.052005][ T39] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 358.052127][ T8911] FAT-fs (loop1): Directory bread(block 22) failed [ 358.067212][ T8911] FAT-fs (loop1): Directory bread(block 23) failed [ 358.073573][ T8911] FAT-fs (loop1): Directory bread(block 24) failed [ 358.080006][ T8911] FAT-fs (loop1): Directory bread(block 25) failed [ 358.086533][ T8911] FAT-fs (loop1): Directory bread(block 26) failed [ 358.092968][ T8911] FAT-fs (loop1): Directory bread(block 27) failed [ 358.107536][ T8563] FAT-fs (loop1): Directory bread(block 3) failed [ 358.116321][ T8563] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 358.284549][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.291558][ T8917] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.298860][ T8917] device bridge_slave_0 entered promiscuous mode [ 358.305629][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.312546][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.319884][ T8917] device bridge_slave_1 entered promiscuous mode [ 358.327934][ T19] usb 1-1: USB disconnect, device number 19 [ 358.337489][ T8861] sddr09: could not read card info [ 358.342540][ T10] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 358.350668][ T10] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 358.356520][ T10] sd 1:0:0:0: [sdb] Write Protect is off [ 358.362184][ T10] sd 1:0:0:0: [sdb] Asking for cache data failed [ 358.369453][ T10] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 358.387516][ T24] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 358.389082][ T10] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 358.400207][ T8922] loop4: detected capacity change from 0 to 2048 [ 358.407345][ T24] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input51 [ 358.411969][ T8922] ext4: Unknown parameter 'euid' [ 358.423509][ T24] input: failed to attach handler kbd to device input51, error: -5 [ 358.456288][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.463169][ T8917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.470244][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.477019][ T8917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.504745][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 358.512680][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.519844][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.541534][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 358.561950][ T3332] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.568908][ T3332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.576774][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 358.585896][ T3332] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.592738][ T3332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.599939][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.937291][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.956625][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.979497][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.994855][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 359.011821][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 359.028223][ T8917] device veth0_vlan entered promiscuous mode [ 359.150230][ T19] usb 4-1: USB disconnect, device number 31 [ 359.403711][ T8917] device veth1_macvtap entered promiscuous mode [ 359.428013][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 359.442069][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 359.462294][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 359.490783][ T8942] loop3: detected capacity change from 0 to 256 [ 359.548710][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 359.556823][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 359.565905][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 359.577593][ T8942] loop3: detected capacity change from 256 to 0 [ 359.585557][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 359.602858][ T8945] FAT-fs (loop3): Directory bread(block 20) failed [ 359.610320][ T1204] device bridge_slave_1 left promiscuous mode [ 359.616408][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.627502][ T8945] FAT-fs (loop3): Directory bread(block 21) failed [ 359.637956][ T1204] device bridge_slave_0 left promiscuous mode [ 359.643928][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.657612][ T8945] FAT-fs (loop3): Directory bread(block 22) failed [ 359.664032][ T8945] FAT-fs (loop3): Directory bread(block 23) failed [ 359.671938][ T8945] FAT-fs (loop3): Directory bread(block 24) failed [ 359.678406][ T8945] FAT-fs (loop3): Directory bread(block 25) failed [ 359.685558][ T1204] device veth1_macvtap left promiscuous mode [ 359.691428][ T1204] device veth0_vlan left promiscuous mode [ 359.701388][ T8945] FAT-fs (loop3): Directory bread(block 26) failed [ 359.712130][ T8945] FAT-fs (loop3): Directory bread(block 27) failed [ 359.732055][ T8174] FAT-fs (loop3): Directory bread(block 3) failed [ 359.742229][ T8174] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [ 359.856351][ T8967] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 359.890306][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 359.918468][ T8967] device vlan2 entered promiscuous mode [ 359.931483][ T8967] device veth3 entered promiscuous mode [ 359.945586][ T8967] device veth3 left promiscuous mode [ 359.971325][ T8973] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 360.195221][ T8981] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.207680][ T8981] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.229349][ T8981] device bridge_slave_0 entered promiscuous mode [ 360.275460][ T8981] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.300516][ T8981] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.356206][ T8981] device bridge_slave_1 entered promiscuous mode [ 360.723843][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 360.733630][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 360.752304][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 360.762770][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 360.780250][ T3332] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.787232][ T3332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.814335][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 360.827269][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 360.842531][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 360.851991][ T3332] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.858866][ T3332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.867857][ T9007] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 360.886590][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 360.896757][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 360.907945][ T9010] tmpfs: Unsupported parameter 'mpol' [ 360.914118][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 360.934037][ T9007] device vlan2 entered promiscuous mode [ 360.939613][ T9007] device veth3 entered promiscuous mode [ 360.946168][ T9007] device veth3 left promiscuous mode [ 360.971350][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.985023][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.992178][ T9018] loop4: detected capacity change from 0 to 2048 [ 360.999449][ T9018] EXT4-fs: Ignoring removed nobh option [ 361.004952][ T9018] EXT4-fs: Ignoring removed mblk_io_submit option [ 361.024486][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 361.040716][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 361.049629][ T1204] device bridge_slave_1 left promiscuous mode [ 361.057957][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.058274][ T9018] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 361.073813][ T1204] device bridge_slave_0 left promiscuous mode [ 361.084099][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.089169][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 361.104211][ T9018] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set [ 361.107927][ T1204] device veth1_macvtap left promiscuous mode [ 361.122097][ T9018] EXT4-fs (loop4): Remounting filesystem read-only [ 361.131805][ T9018] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 361.140812][ T1204] device veth0_vlan left promiscuous mode [ 361.167742][ T8695] EXT4-fs (loop4): unmounting filesystem. [ 361.187394][ T9037] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 361.199031][ T9037] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 361.207275][ T9037] CPU: 0 PID: 9037 Comm: syz-executor.2 Not tainted 6.1.78-syzkaller-00009-g25216be1ac5e #0 2028/09/16 22:03:03 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 361.217165][ T9037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 361.227073][ T9037] RIP: 0010:dev_map_enqueue+0x31/0x340 [ 361.232357][ T9037] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 55 c0 49 89 f7 48 89 fb 49 bc 00 00 00 00 00 fc ff df e8 c6 1f de ff 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 10 1d 25 00 4c 8b 33 48 83 c3 20 [ 361.251801][ T9037] RSP: 0018:ffffc90000777648 EFLAGS: 00010246 [ 361.257698][ T9037] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 361.265511][ T9037] RDX: ffffc9000c8b7000 RSI: 000000000000010a RDI: 000000000000010b [ 361.273321][ T9037] RBP: ffffc90000777688 R08: 0000000000000005 R09: ffffffff8411ded5 [ 361.281131][ T9037] R10: 0000000000000004 R11: ffff8881120f8000 R12: dffffc0000000000 [ 361.288947][ T9037] R13: 0000000000000000 R14: ffff8881f70364a0 R15: ffff88811e586070 [ 361.296755][ T9037] FS: 00007f3fb1ce36c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 361.305522][ T9037] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.311941][ T9037] CR2: 0000001b2c222000 CR3: 00000001125a8000 CR4: 0000