last executing test programs: 3.391989377s ago: executing program 2 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB="00e0c6e4d9182ec69e599fd4d32ba9c5146fbc43a33914b2b1a5ce8843b193dc82dbc512b6fabfe6fbdd2a8bdeeda78e17b18f1b6e80c81cd67046e6a85e7160112d613e4c6dcab2404d58291ec130b9fd2785ce8dd5538f70998f2d50005813ba6c65cd3c25a8e730e1cd7b11cf7f6cc0fba6b670c64374abd09518ffba0c5eb2e602b1a64ac897fce7fae33878c0e57398a4cc6ce9bee1d70bef22f10c7776c2f5077cb1de63832b1bab15c6caf549a1cd58106494d92d1159033b2e27eceae339414a62aca9cf6a00c07e2a181dd9668a64b5eefc8e5ebc6564442a8d"], 0x1, 0x14fe, &(0x7f0000001580)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0xaab22d985b62672e, 0x0, 0x2, 0x0, 0x0) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a48c38, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x272) 2.962846207s ago: executing program 2 (id=285): syz_mount_image$f2fs(&(0x7f0000000780), &(0x7f0000000100)='./file0\x00', 0x2008410, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0], 0xfd, 0x5562, &(0x7f0000005a80)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2.247787873s ago: executing program 2 (id=296): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1080}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}]}}}]}, 0x40}}, 0x0) 2.018658834s ago: executing program 3 (id=306): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0xc0, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0xfffd, 0x2}, 0x8, 0x20400000, 0x0, 0x0, 0x0, 0x20000, 0x0}) 1.95579179s ago: executing program 3 (id=308): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000003c0)=ANY=[@ANYBLOB="4231bae27181e0c2e99eb3ffda2b642787128d231e2ed492cdafc83f6fe85cf2848e0a", @ANYRES16, @ANYRESDEC], 0x1, 0x2b6, &(0x7f00000000c0)="$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") r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = dup(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.664047197s ago: executing program 3 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x1, 0x0, 0xff34}) sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045503, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x2220081, 0x0, 0xfe, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) 1.594524853s ago: executing program 0 (id=322): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfff}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x264e33, 0x0) 1.182479121s ago: executing program 1 (id=326): r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f0000000140)=@udp=r2}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1.0834241s ago: executing program 1 (id=327): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='htcp\x00', 0x5) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 1.08299992s ago: executing program 0 (id=328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x8a}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.082422791s ago: executing program 0 (id=329): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\a\x00\x00\x00 \x00'}) close(r0) 932.356524ms ago: executing program 2 (id=297): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@user_xattr}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4000, 0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x3, 0xffffffffffffffff}) 775.445529ms ago: executing program 0 (id=332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newnexthop={0x30, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6}}]}, 0x30}}, 0x4000) 770.66031ms ago: executing program 0 (id=333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000004400000140001800600010002000000080005"], 0x28}}, 0x0) 764.94455ms ago: executing program 3 (id=334): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000feff17110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) 751.886071ms ago: executing program 2 (id=335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 718.227484ms ago: executing program 0 (id=337): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) timer_create(0x3, 0x0, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x10, 0x803, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2000000000000000}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x0, 0xb998, 0x7, "194f2f83c2e798c3584770116cddc8819592b1"}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x1, 0x300) socket$packet(0x11, 0x3, 0x300) lseek(0xffffffffffffffff, 0x8000000000000000, 0x4) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000040)=0x9e5b) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000010001) 634.630782ms ago: executing program 4 (id=338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x89) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) 632.967532ms ago: executing program 3 (id=339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 511.992743ms ago: executing program 2 (id=340): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000c8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000dfffffffb703000008000000b704000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 511.597843ms ago: executing program 4 (id=341): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 437.95337ms ago: executing program 4 (id=342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x80000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 357.830487ms ago: executing program 4 (id=343): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x2, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) close(r0) 351.672738ms ago: executing program 3 (id=344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x1, 0x0, 0xff34}) sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045503, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x2220081, 0x0, 0xfe, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) 285.207714ms ago: executing program 4 (id=345): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 273.171595ms ago: executing program 1 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 264.469046ms ago: executing program 1 (id=347): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 217.29044ms ago: executing program 4 (id=348): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 214.961261ms ago: executing program 1 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x89) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) 0s ago: executing program 1 (id=350): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x1018852, &(0x7f00000003c0)={[{@nodiscard}, {}, {@acl}, {@fsync_mode_strict}, {@inline_xattr}, {@disable_roll_forward}, {@checkpoint_diasble}, {@background_gc_on}, {@noinline_xattr}, {@discard_unit_block}, {@fsync_mode_strict}, {@age_extent_cache}, {@extent_cache}, {@fault_injection={'fault_injection', 0x3d, 0xffffffffffffffff}}], [{@subj_type={'subj_type', 0x3d, 'disable_roll_forward'}}, {@flag='dirsync'}]}, 0x1, 0x551c, &(0x7f00000079c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000040)='./file1\x00', 0x800806, 0x0, 0x3, 0x0, &(0x7f0000000040)) symlink(&(0x7f0000001000)='.\x00', &(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): orphan_get:1397: inode #15: comm syz.1.15: casefold flag without casefold feature [ 24.040146][ T368] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 24.045110][ T373] EXT4-fs error (device loop4): ext4_quota_enable:6378: comm syz.4.17: inode #50331648: comm syz.4.17: iget: illegal inode # [ 24.057581][ T371] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.15: missing EA_INODE flag [ 24.078624][ T371] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.15: error while reading EA inode 12 err=-117 [ 24.091294][ T371] EXT4-fs (loop1): 1 orphan inode deleted [ 24.096980][ T371] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 24.105064][ T368] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 16: comm syz.3.14: bad entry in directory: inode out of bounds - offset=92, inode=32784, rec_len=16, size=2048 fake=0 [ 24.126904][ T373] EXT4-fs (loop4): Remounting filesystem read-only [ 24.133446][ T373] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.17: Bad quota inode: 50331648, type: 2 [ 24.147152][ T373] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=2, err=-117, ino=50331648). Please run e2fsck to fix. [ 24.162995][ T373] EXT4-fs (loop4): mount failed [ 24.216049][ T373] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.258067][ T394] 9pnet: Insufficient options for proto=fd [ 24.393130][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 24.393171][ T30] audit: type=1326 audit(1727888737.062:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=391 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f8b5bff9 code=0x7ffc0000 [ 24.757161][ T30] audit: type=1326 audit(1727888737.062:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=391 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f8b5bff9 code=0x7ffc0000 [ 24.781285][ T30] audit: type=1326 audit(1727888737.062:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=391 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33f8b5bff9 code=0x7ffc0000 [ 24.814043][ T30] audit: type=1326 audit(1727888737.062:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=391 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f8b5bff9 code=0x7ffc0000 [ 24.845888][ T30] audit: type=1326 audit(1727888737.062:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=391 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f8b5bff9 code=0x7ffc0000 [ 24.872353][ T30] audit: type=1326 audit(1727888737.062:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=391 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33f8b5bff9 code=0x7ffc0000 [ 24.906916][ T30] audit: type=1326 audit(1727888737.062:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=391 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f8b5bff9 code=0x7ffc0000 [ 24.930208][ T30] audit: type=1326 audit(1727888737.062:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=391 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f8b5bff9 code=0x7ffc0000 [ 24.953289][ T30] audit: type=1326 audit(1727888737.062:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=391 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f33f8b5bff9 code=0x7ffc0000 [ 24.981610][ T30] audit: type=1326 audit(1727888737.072:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=391 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f8b5bff9 code=0x7ffc0000 [ 25.226131][ T431] 9pnet: Insufficient options for proto=fd [ 25.669762][ T446] loop1: detected capacity change from 0 to 256 [ 25.719349][ T312] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.735321][ T446] FAT-fs (loop1): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 25.735321][ T446] 18446744073709551615" or missing value [ 25.904941][ T453] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 25.991627][ T312] usb 5-1: Using ep0 maxpacket: 16 [ 26.099330][ T443] syz.2.35 (443) used greatest stack depth: 22064 bytes left [ 26.250662][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.265341][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.276570][ T312] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.292032][ T312] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 26.301254][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.311524][ T312] usb 5-1: config 0 descriptor?? [ 26.600596][ T314] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.641921][ T476] 9pnet: Insufficient options for proto=fd [ 26.731782][ T481] loop0: detected capacity change from 0 to 1024 [ 26.794284][ T312] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0001/input/input4 [ 26.808445][ T481] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 26.825116][ T481] process 'syz.0.47' launched './file1' with NULL argv: empty string added [ 26.850644][ T314] usb 2-1: Using ep0 maxpacket: 16 [ 26.871672][ T312] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 26.970634][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.983044][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.992752][ T314] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.994889][ T26] usb 5-1: USB disconnect, device number 2 [ 27.005740][ T314] usb 2-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 27.026555][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.035571][ T314] usb 2-1: config 0 descriptor?? [ 27.123196][ T495] loop3: detected capacity change from 0 to 256 [ 27.200703][ T495] FAT-fs (loop3): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 27.200703][ T495] 18446744073709551615" or missing value [ 27.420949][ T508] 9pnet: Insufficient options for proto=fd [ 27.438465][ T510] loop2: detected capacity change from 0 to 2048 [ 27.528029][ T512] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 27.714688][ T510] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.742064][ T314] hid-generic 0003:045E:9994.0002: unknown main item tag 0x0 [ 27.749302][ T314] hid-generic 0003:045E:9994.0002: unknown main item tag 0x0 [ 27.756647][ T314] hid-generic 0003:045E:9994.0002: unknown main item tag 0x0 [ 27.763835][ T314] hid-generic 0003:045E:9994.0002: unknown main item tag 0x0 [ 27.765595][ T510] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, [ 27.771129][ T314] hid-generic 0003:045E:9994.0002: unknown main item tag 0x0 [ 27.771153][ T314] hid-generic 0003:045E:9994.0002: unknown main item tag 0x0 [ 27.771172][ T314] hid-generic 0003:045E:9994.0002: unknown main item tag 0x0 [ 27.771192][ T314] hid-generic 0003:045E:9994.0002: unknown main item tag 0x0 [ 27.771210][ T314] hid-generic 0003:045E:9994.0002: unknown main item tag 0x0 [ 27.779354][ T510] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.786582][ T314] hid-generic 0003:045E:9994.0002: unknown main item tag 0x0 [ 27.832175][ T314] hid-generic 0003:045E:9994.0002: unknown main item tag 0x0 [ 27.839387][ T314] hid-generic 0003:045E:9994.0002: unknown main item tag 0x0 [ 27.846630][ T314] hid-generic 0003:045E:9994.0002: unknown main item tag 0x0 [ 27.854420][ T314] hid-generic 0003:045E:9994.0002: unknown main item tag 0x0 [ 27.861879][ T314] hid-generic 0003:045E:9994.0002: ignoring exceeding usage max [ 27.869960][ T314] hid-generic 0003:045E:9994.0002: item fetching failed at offset 33/34 [ 27.878526][ T314] hid-generic: probe of 0003:045E:9994.0002 failed with error -22 [ 27.888124][ T314] usb 2-1: USB disconnect, device number 2 [ 30.183200][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 30.183227][ T30] audit: type=1400 audit(1727888742.872:177): avc: denied { read } for pid=526 comm="syz.4.63" name="ptp0" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.220944][ T30] audit: type=1400 audit(1727888742.872:178): avc: denied { open } for pid=526 comm="syz.4.63" path="/dev/ptp0" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.255692][ T30] audit: type=1400 audit(1727888742.872:179): avc: denied { ioctl } for pid=526 comm="syz.4.63" path="/dev/ptp0" dev="devtmpfs" ino=168 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.298290][ T539] 9pnet: Insufficient options for proto=fd [ 30.306341][ T541] loop3: detected capacity change from 0 to 256 [ 30.326026][ T30] audit: type=1400 audit(1727888743.012:180): avc: denied { create } for pid=543 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.349479][ T30] audit: type=1400 audit(1727888743.022:181): avc: denied { setopt } for pid=543 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.369200][ T30] audit: type=1400 audit(1727888743.032:182): avc: denied { connect } for pid=543 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.389743][ T541] FAT-fs (loop3): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 30.389743][ T541] 18446744073709551615" or missing value [ 30.404589][ T30] audit: type=1400 audit(1727888743.032:183): avc: denied { write } for pid=543 comm="syz.1.68" laddr=fe80::11 lport=1 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.446469][ T30] audit: type=1400 audit(1727888743.032:184): avc: denied { read } for pid=543 comm="syz.1.68" laddr=fe80::11 lport=1 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.477026][ T30] audit: type=1400 audit(1727888743.032:185): avc: denied { read write } for pid=549 comm="syz.1.71" name="uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.482726][ T554] loop2: detected capacity change from 0 to 256 [ 30.504185][ T30] audit: type=1400 audit(1727888743.032:186): avc: denied { open } for pid=549 comm="syz.1.71" path="/dev/uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.546028][ T558] loop1: detected capacity change from 0 to 256 [ 31.065184][ T554] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 31.132822][ T564] loop3: detected capacity change from 0 to 256 [ 31.666778][ T560] syz.4.69 (560) used greatest stack depth: 21456 bytes left [ 32.643196][ T578] 9pnet: Insufficient options for proto=fd [ 32.654777][ T564] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 32.814133][ T592] loop3: detected capacity change from 0 to 128 [ 32.869083][ T585] loop1: detected capacity change from 0 to 40427 [ 32.881893][ T597] loop2: detected capacity change from 0 to 512 [ 32.894829][ T592] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000001,nouid32,,errors=continue. Quota mode: none. [ 32.908892][ T592] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 32.944680][ T585] F2FS-fs (loop1): Unrecognized mount option "errors=continue" or missing value [ 32.956000][ T597] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.965618][ T587] loop0: detected capacity change from 0 to 40427 [ 32.972818][ T597] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.995435][ T597] EXT4-fs (loop2): 1 truncate cleaned up [ 33.002967][ T597] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,resgid=0x0000000000000000,data=journal,nombcache,block_validity,,errors=continue. Quota mode: none. [ 33.040202][ T597] syz.2.86 (pid 597) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 33.045312][ T587] F2FS-fs (loop0): fault_injection options not supported [ 33.057322][ T602] loop1: detected capacity change from 0 to 256 [ 33.074598][ T587] F2FS-fs (loop0): invalid crc value [ 33.080022][ T290] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /25/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 33.093496][ T587] F2FS-fs (loop0): Found nat_bits in checkpoint [ 33.103664][ T290] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 33.127637][ T290] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /25/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 33.133739][ T587] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 33.149646][ T290] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 33.176080][ T290] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /25/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 33.182297][ T291] F2FS-fs (loop0): access invalid blkaddr:2816 [ 33.198649][ T290] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 33.209180][ T291] CPU: 0 PID: 291 Comm: syz-executor Not tainted 5.15.161-syzkaller-00463-g8e36931104ac #0 [ 33.231635][ T290] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /25/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 33.232877][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 33.232890][ T291] Call Trace: [ 33.254480][ T290] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 33.263952][ T291] [ 33.263961][ T291] dump_stack_lvl+0x151/0x1c0 [ 33.267345][ T290] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /25/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 33.286603][ T291] ? io_uring_drop_tctx_refs+0x190/0x190 [ 33.286627][ T291] ? arch_stack_walk+0xf3/0x140 [ 33.286648][ T291] dump_stack+0x15/0x20 [ 33.286665][ T291] f2fs_is_valid_blkaddr+0xcc3/0x12d0 [ 33.286683][ T291] f2fs_map_blocks+0x1622/0x3ab0 [ 33.286701][ T291] ? __stack_depot_save+0x34/0x470 [ 33.345685][ T291] ? f2fs_do_map_lock+0x70/0x70 [ 33.350354][ T291] ? debug_smp_processor_id+0x17/0x20 [ 33.355726][ T291] ? try_charge_memcg+0x213/0x1550 [ 33.360763][ T291] f2fs_mpage_readpages+0xc9a/0x21a0 [ 33.365886][ T291] ? dquot_release_reservation_block+0xa0/0xa0 [ 33.372063][ T291] ? workingset_activation+0x3f0/0x3f0 [ 33.377348][ T291] f2fs_readahead+0xfd/0x250 [ 33.381856][ T291] ? blk_start_plug+0x5a/0x170 [ 33.386546][ T291] read_pages+0x15e/0xb00 [ 33.390716][ T291] ? lru_cache_add+0x279/0x540 [ 33.395305][ T291] ? page_cache_ra_unbounded+0x920/0x920 [ 33.400782][ T291] ? add_to_page_cache_lru+0x225/0x2c0 [ 33.406073][ T291] ? add_to_page_cache_locked+0x40/0x40 [ 33.411452][ T291] ? __stack_depot_save+0x34/0x470 [ 33.416832][ T291] page_cache_ra_unbounded+0x6cb/0x920 [ 33.422142][ T291] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 33.428553][ T291] ? _raw_spin_unlock+0x4d/0x70 [ 33.433253][ T291] ? wp_page_reuse+0xff/0x120 [ 33.437754][ T291] ondemand_readahead+0x9c8/0xfa0 [ 33.442627][ T291] ? page_cache_sync_ra+0x4d0/0x4d0 [ 33.447661][ T291] ? debug_smp_processor_id+0x17/0x20 [ 33.452861][ T291] ? selinux_inode_getattr+0x11f/0x3f0 [ 33.458150][ T291] ? fault_around_bytes_set+0xc0/0xc0 [ 33.463445][ T291] page_cache_sync_ra+0x2e9/0x4d0 [ 33.468310][ T291] ? force_page_cache_ra+0x420/0x420 [ 33.473425][ T291] ? do_handle_mm_fault+0x1807/0x2400 [ 33.478635][ T291] f2fs_readdir+0x52d/0xba0 [ 33.482976][ T291] ? f2fs_fill_dentries+0xd60/0xd60 [ 33.488092][ T291] ? avc_policy_seqno+0x1b/0x70 [ 33.492782][ T291] ? __kasan_check_read+0x11/0x20 [ 33.497640][ T291] ? security_file_permission+0x86/0xb0 [ 33.503022][ T291] iterate_dir+0x265/0x610 [ 33.507275][ T291] ? f2fs_fill_dentries+0xd60/0xd60 [ 33.512340][ T291] __se_sys_getdents64+0x1c1/0x460 [ 33.517274][ T291] ? __x64_sys_getdents64+0x90/0x90 [ 33.522295][ T291] ? filldir+0x680/0x680 [ 33.526658][ T291] __x64_sys_getdents64+0x7b/0x90 [ 33.531671][ T291] x64_sys_call+0x5ae/0x9a0 [ 33.536188][ T291] do_syscall_64+0x3b/0xb0 [ 33.540433][ T291] ? clear_bhb_loop+0x35/0x90 [ 33.545121][ T291] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.550851][ T291] RIP: 0033:0x7f50cc15f193 [ 33.555381][ T291] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 33.574900][ T291] RSP: 002b:00007fffa8ccba28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 33.583147][ T291] RAX: ffffffffffffffda RBX: 000055555710e4e0 RCX: 00007f50cc15f193 [ 33.590980][ T291] RDX: 0000000000008000 RSI: 000055555710e4e0 RDI: 0000000000000005 [ 33.598768][ T291] RBP: 000055555710e4b4 R08: 0000000000000000 R09: 0000000000000000 [ 33.606585][ T291] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 33.614395][ T291] R13: 0000000000000010 R14: 000055555710e4b0 R15: 00007fffa8ccdcd0 [ 33.622212][ T291] [ 33.630956][ T290] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 33.631292][ T291] F2FS-fs (loop0): access invalid blkaddr:2816 [ 33.657812][ T291] CPU: 1 PID: 291 Comm: syz-executor Not tainted 5.15.161-syzkaller-00463-g8e36931104ac #0 [ 33.667706][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 33.677692][ T291] Call Trace: [ 33.680816][ T291] [ 33.683593][ T291] dump_stack_lvl+0x151/0x1c0 [ 33.688200][ T291] ? io_uring_drop_tctx_refs+0x190/0x190 [ 33.693668][ T291] dump_stack+0x15/0x20 [ 33.697651][ T291] f2fs_is_valid_blkaddr+0xcc3/0x12d0 [ 33.703131][ T291] f2fs_map_blocks+0x1622/0x3ab0 [ 33.707907][ T291] ? __stack_depot_save+0x34/0x470 [ 33.713029][ T291] ? f2fs_do_map_lock+0x70/0x70 [ 33.717713][ T291] f2fs_mpage_readpages+0xc9a/0x21a0 [ 33.723006][ T291] ? dquot_release_reservation_block+0xa0/0xa0 [ 33.729107][ T291] ? workingset_activation+0x3f0/0x3f0 [ 33.734408][ T291] f2fs_readahead+0xfd/0x250 [ 33.738836][ T291] ? blk_start_plug+0x5a/0x170 [ 33.743432][ T291] read_pages+0x15e/0xb00 [ 33.747596][ T291] ? lru_cache_add+0x279/0x540 [ 33.752196][ T291] ? page_cache_ra_unbounded+0x920/0x920 [ 33.757664][ T291] ? add_to_page_cache_lru+0x225/0x2c0 [ 33.762960][ T291] ? add_to_page_cache_locked+0x40/0x40 [ 33.768518][ T291] ? __stack_depot_save+0x34/0x470 [ 33.773469][ T291] page_cache_ra_unbounded+0x6cb/0x920 [ 33.778761][ T291] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 33.785095][ T291] ? _raw_spin_unlock+0x4d/0x70 [ 33.789788][ T291] ? wp_page_reuse+0xff/0x120 [ 33.794337][ T291] ondemand_readahead+0x9c8/0xfa0 [ 33.799254][ T291] ? page_cache_sync_ra+0x4d0/0x4d0 [ 33.804280][ T291] ? debug_smp_processor_id+0x17/0x20 [ 33.809491][ T291] ? selinux_inode_getattr+0x11f/0x3f0 [ 33.814780][ T291] ? fault_around_bytes_set+0xc0/0xc0 [ 33.820076][ T291] page_cache_sync_ra+0x2e9/0x4d0 [ 33.824936][ T291] ? force_page_cache_ra+0x420/0x420 [ 33.830067][ T291] ? do_handle_mm_fault+0x1807/0x2400 [ 33.835270][ T291] f2fs_readdir+0x52d/0xba0 [ 33.839606][ T291] ? f2fs_fill_dentries+0xd60/0xd60 [ 33.844641][ T291] ? avc_policy_seqno+0x1b/0x70 [ 33.849331][ T291] ? __kasan_check_read+0x11/0x20 [ 33.854194][ T291] ? security_file_permission+0x86/0xb0 [ 33.860193][ T291] iterate_dir+0x265/0x610 [ 33.865133][ T291] ? f2fs_fill_dentries+0xd60/0xd60 [ 33.871541][ T291] __se_sys_getdents64+0x1c1/0x460 [ 33.876763][ T291] ? __x64_sys_getdents64+0x90/0x90 [ 33.881877][ T291] ? filldir+0x680/0x680 [ 33.885942][ T291] __x64_sys_getdents64+0x7b/0x90 [ 33.890888][ T291] x64_sys_call+0x5ae/0x9a0 [ 33.895244][ T291] do_syscall_64+0x3b/0xb0 [ 33.899486][ T291] ? clear_bhb_loop+0x35/0x90 [ 33.903991][ T291] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.910107][ T291] RIP: 0033:0x7f50cc15f193 [ 33.914426][ T291] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 33.934022][ T291] RSP: 002b:00007fffa8ccba28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 33.942272][ T291] RAX: ffffffffffffffda RBX: 000055555710e4e0 RCX: 00007f50cc15f193 [ 33.950092][ T291] RDX: 0000000000008000 RSI: 000055555710e4e0 RDI: 0000000000000005 [ 33.957896][ T291] RBP: 000055555710e4b4 R08: 0000000000000000 R09: 0000000000000000 [ 33.965711][ T291] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 33.973524][ T291] R13: 0000000000000010 R14: 000055555710e4b0 R15: 00007fffa8ccdcd0 [ 33.981342][ T291] [ 33.986641][ T291] attempt to access beyond end of device [ 33.986641][ T291] loop0: rw=0, want=45072, limit=40427 [ 34.044764][ T447] attempt to access beyond end of device [ 34.044764][ T447] loop0: rw=2049, want=40984, limit=40427 [ 34.050487][ T611] loop3: detected capacity change from 0 to 40427 [ 34.080738][ T611] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 34.154569][ T290] syz-executor (290) used greatest stack depth: 19712 bytes left [ 34.658413][ T626] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.665683][ T626] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.673755][ T626] device bridge_slave_0 entered promiscuous mode [ 34.689442][ T626] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.696569][ T626] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.704575][ T626] device bridge_slave_1 entered promiscuous mode [ 34.757286][ T10] device bridge_slave_1 left promiscuous mode [ 34.760748][ T625] loop3: detected capacity change from 0 to 40427 [ 34.763460][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.776891][ T10] device bridge_slave_0 left promiscuous mode [ 34.783268][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.791942][ T625] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 34.798743][ T625] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 34.807012][ T10] device veth1_macvtap left promiscuous mode [ 34.807675][ T625] F2FS-fs (loop3): invalid crc value [ 34.812995][ T10] device veth0_vlan left promiscuous mode [ 34.824790][ T625] F2FS-fs (loop3): Found nat_bits in checkpoint [ 34.867210][ T625] F2FS-fs (loop3): Start checkpoint disabled! [ 34.891512][ T625] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 34.898386][ T625] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 34.925263][ T641] loop1: detected capacity change from 0 to 512 [ 34.986247][ T628] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.995956][ T628] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.003503][ T628] device bridge_slave_0 entered promiscuous mode [ 35.022148][ T320] attempt to access beyond end of device [ 35.022148][ T320] loop3: rw=2049, want=40992, limit=40427 [ 35.028492][ T641] EXT4-fs error (device loop1): ext4_quota_enable:6378: comm syz.1.99: inode #50331648: comm syz.1.99: iget: illegal inode # [ 35.053980][ T628] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.062848][ T641] EXT4-fs (loop1): Remounting filesystem read-only [ 35.069298][ T641] EXT4-fs error (device loop1): ext4_quota_enable:6381: comm syz.1.99: Bad quota inode: 50331648, type: 2 [ 35.082313][ T628] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.102234][ T647] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 35.141524][ T628] device bridge_slave_1 entered promiscuous mode [ 35.282418][ T641] EXT4-fs warning (device loop1): ext4_enable_quotas:6422: Failed to enable quota tracking (type=2, err=-117, ino=50331648). Please run e2fsck to fix. [ 35.308599][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 35.308616][ T30] audit: type=1400 audit(1727888747.992:214): avc: denied { read } for pid=626 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.347818][ T641] EXT4-fs (loop1): mount failed [ 35.396704][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.404736][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.427106][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.435438][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.443595][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.450461][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.458211][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.466577][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.480836][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.487717][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.494546][ T649] loop3: detected capacity change from 0 to 40427 [ 35.495397][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.509734][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.515990][ T649] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 35.525558][ T649] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 35.537619][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.541377][ T649] F2FS-fs (loop3): invalid crc value [ 35.545423][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.551735][ T649] F2FS-fs (loop3): Found nat_bits in checkpoint [ 35.558196][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.590487][ T626] device veth0_vlan entered promiscuous mode [ 35.602467][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.611232][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.623382][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.631494][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.639844][ T649] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 35.648896][ T649] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 35.657039][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.667493][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.675525][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.683884][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.693893][ T626] device veth1_macvtap entered promiscuous mode [ 35.702994][ T320] attempt to access beyond end of device [ 35.702994][ T320] loop3: rw=2049, want=40976, limit=40427 [ 35.719623][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.725078][ T657] attempt to access beyond end of device [ 35.725078][ T657] loop3: rw=524288, want=45072, limit=40427 [ 35.728373][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.747553][ T657] attempt to access beyond end of device [ 35.747553][ T657] loop3: rw=0, want=45072, limit=40427 [ 35.748714][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.776329][ T649] VFS:Filesystem freeze failed [ 35.786831][ T658] attempt to access beyond end of device [ 35.786831][ T658] loop3: rw=0, want=45072, limit=40427 [ 35.805187][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.813768][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.830799][ T660] loop4: detected capacity change from 0 to 128 [ 35.848425][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.859450][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.874944][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.910957][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.919119][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.926130][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.032718][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.051156][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.059515][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.075485][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.082382][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.090761][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.099436][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.155626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.207100][ T628] device veth0_vlan entered promiscuous mode [ 36.230306][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.311691][ T672] loop4: detected capacity change from 0 to 512 [ 36.384370][ T672] EXT4-fs (loop4): Ignoring removed nobh option [ 36.390597][ T672] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.406623][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.413994][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.430691][ T628] device veth1_macvtap entered promiscuous mode [ 36.437013][ T672] EXT4-fs (loop4): 1 truncate cleaned up [ 36.438923][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.442836][ T672] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 36.450805][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.475316][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.500273][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.510724][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.519436][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.527634][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.575950][ T681] loop0: detected capacity change from 0 to 512 [ 36.592014][ T676] loop3: detected capacity change from 0 to 40427 [ 36.599443][ T10] device bridge_slave_1 left promiscuous mode [ 36.605319][ T681] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.607447][ T681] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.618890][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.635465][ T676] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 36.643003][ T681] EXT4-fs (loop0): 1 truncate cleaned up [ 36.645257][ T10] device bridge_slave_0 left promiscuous mode [ 36.648603][ T676] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 36.655020][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.662943][ T681] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,auto_da_alloc=0x0000000000000007,block_validity,quota,,errors=continue. Quota mode: writeback. [ 36.670422][ T676] F2FS-fs (loop3): fault_injection options not supported [ 36.699733][ T10] device veth1_macvtap left promiscuous mode [ 36.702309][ T676] F2FS-fs (loop3): fault_type options not supported [ 36.705905][ T10] device veth0_vlan left promiscuous mode [ 36.718608][ T676] F2FS-fs (loop3): invalid crc value [ 36.725330][ T676] F2FS-fs (loop3): Found nat_bits in checkpoint [ 36.850340][ T676] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 36.864055][ T684] loop4: detected capacity change from 0 to 2048 [ 36.871319][ T676] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 36.895018][ T292] attempt to access beyond end of device [ 36.895018][ T292] loop3: rw=2049, want=40992, limit=40427 [ 37.788560][ T30] audit: type=1400 audit(1727888749.782:215): avc: denied { write } for pid=691 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.975315][ T702] loop0: detected capacity change from 0 to 1024 [ 38.005697][ T684] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.010416][ T30] audit: type=1400 audit(1727888749.782:216): avc: denied { nlmsg_write } for pid=691 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.039814][ T684] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 38.050187][ T706] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.050343][ T706] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.069957][ T706] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.076966][ T706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.084272][ T706] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.091143][ T706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.098353][ T706] device bridge0 entered promiscuous mode [ 38.117570][ T702] EXT4-fs (loop0): required journal recovery suppressed and not mounted read-only [ 38.144418][ T715] loop2: detected capacity change from 0 to 512 [ 38.189185][ T715] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.265704][ T715] EXT4-fs (loop2): 1 truncate cleaned up [ 38.275178][ T715] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.379768][ T723] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 38.490854][ T30] audit: type=1400 audit(1727888751.082:217): avc: denied { mounton } for pid=711 comm="syz.2.116" path="/5/bus/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.609633][ T713] loop1: detected capacity change from 0 to 40427 [ 38.641549][ T713] F2FS-fs (loop1): fault_injection options not supported [ 38.648702][ T713] F2FS-fs (loop1): fault_type options not supported [ 38.656476][ T713] F2FS-fs (loop1): invalid crc value [ 38.662915][ T713] F2FS-fs (loop1): Found nat_bits in checkpoint [ 38.706764][ T713] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 38.773747][ T293] attempt to access beyond end of device [ 38.773747][ T293] loop1: rw=2049, want=45104, limit=40427 [ 38.811086][ T730] loop0: detected capacity change from 0 to 256 [ 38.881043][ T730] FAT-fs (loop0): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 38.881043][ T730] 18446744073709551615" or missing value [ 38.966753][ T734] loop1: detected capacity change from 0 to 512 [ 39.080256][ T734] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.115375][ T734] EXT4-fs (loop1): 1 truncate cleaned up [ 39.124079][ T734] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,auto_da_alloc=0x0000000000000007,block_validity,quota,,errors=continue. Quota mode: writeback. [ 39.298318][ T753] loop1: detected capacity change from 0 to 256 [ 39.319521][ T756] loop3: detected capacity change from 0 to 256 [ 39.354655][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.361707][ T750] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.370690][ T750] device bridge_slave_0 entered promiscuous mode [ 39.379785][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.387325][ T750] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.452303][ T750] device bridge_slave_1 entered promiscuous mode [ 39.652882][ T765] loop1: detected capacity change from 0 to 256 [ 39.678561][ T30] audit: type=1400 audit(1727888752.362:218): avc: denied { mounton } for pid=764 comm="syz.1.132" path="/26/file0/bus" dev="loop1" ino=1048609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 39.728724][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.735724][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.743142][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.749995][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.760598][ T765] loop_set_status: loop1 () has still dirty pages (nrpages=3) [ 39.780003][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.788488][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.792608][ T763] loop3: detected capacity change from 0 to 40427 [ 39.802838][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.813061][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.821384][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.825150][ T763] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 39.828458][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.842062][ T763] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 39.843188][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.851543][ T763] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 39.868188][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.875059][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.891556][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.899373][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.909045][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.920762][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.928594][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.943581][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.952280][ T750] device veth0_vlan entered promiscuous mode [ 39.968372][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.978343][ T750] device veth1_macvtap entered promiscuous mode [ 40.002001][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.011051][ T769] loop3: detected capacity change from 0 to 512 [ 40.022989][ T571] device bridge_slave_1 left promiscuous mode [ 40.028946][ T571] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.033620][ T769] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.045698][ T571] device bridge_slave_0 left promiscuous mode [ 40.047795][ T769] EXT4-fs (loop3): 1 truncate cleaned up [ 40.051946][ T571] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.057381][ T769] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,auto_da_alloc=0x0000000000000007,block_validity,quota,,errors=continue. Quota mode: writeback. [ 40.087116][ T571] device veth1_macvtap left promiscuous mode [ 40.099767][ T571] device veth0_vlan left promiscuous mode [ 40.175416][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.200485][ T777] loop2: detected capacity change from 0 to 256 [ 40.250449][ T777] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.316690][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.323754][ T780] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.331768][ T780] device bridge_slave_0 entered promiscuous mode [ 40.338905][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.346643][ T780] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.354357][ T780] device bridge_slave_1 entered promiscuous mode [ 40.398935][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.400588][ T469] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.406170][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.406290][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.427444][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.445018][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.452312][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.459401][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.471534][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.479795][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.486965][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.501603][ T792] loop2: detected capacity change from 0 to 128 [ 40.516162][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.525193][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.533229][ T673] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.540049][ T673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.547861][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.548248][ T792] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.555834][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.567827][ T792] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.583185][ T780] device veth0_vlan entered promiscuous mode [ 40.598346][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.606814][ T30] audit: type=1400 audit(1727888753.292:219): avc: denied { mounton } for pid=791 comm="syz.2.140" path="/2/file0/file0" dev="loop2" ino=1048622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 40.607261][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.641204][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.649859][ T750] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 40.654379][ T780] device veth1_macvtap entered promiscuous mode [ 40.657680][ T750] FAT-fs (loop2): Filesystem has been set read-only [ 40.663559][ T469] usb 1-1: Using ep0 maxpacket: 8 [ 40.670402][ T750] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 40.676248][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.699189][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.711535][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.790612][ T469] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 40.799501][ T469] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.829094][ T794] loop1: detected capacity change from 0 to 40427 [ 40.838135][ T469] usb 1-1: config 0 descriptor?? [ 40.850989][ T794] F2FS-fs (loop1): Mismatch start address, segment0(134218240) cp_blkaddr(0) [ 40.859596][ T794] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 40.872472][ T794] F2FS-fs (loop1): Found nat_bits in checkpoint [ 40.911714][ T794] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 40.918584][ T794] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 40.935353][ T796] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.942411][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.949935][ T796] device bridge_slave_0 entered promiscuous mode [ 40.957355][ T796] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.964318][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.972196][ T796] device bridge_slave_1 entered promiscuous mode [ 41.101822][ T469] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 41.112116][ T469] asix: probe of 1-1:0.0 failed with error -32 [ 41.131717][ T571] device bridge_slave_1 left promiscuous mode [ 41.137988][ T571] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.148268][ T571] device bridge_slave_0 left promiscuous mode [ 41.154943][ T571] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.169788][ T571] device veth1_macvtap left promiscuous mode [ 41.175865][ T571] device veth0_vlan left promiscuous mode [ 41.433353][ T812] loop4: detected capacity change from 0 to 256 [ 41.464833][ T808] loop1: detected capacity change from 0 to 40427 [ 41.522843][ T808] F2FS-fs (loop1): fault_injection options not supported [ 41.534994][ T808] F2FS-fs (loop1): invalid crc value [ 41.542007][ T808] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.558911][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.566597][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.577188][ T808] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 41.582792][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.593672][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.602007][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.607544][ T808] attempt to access beyond end of device [ 41.607544][ T808] loop1: rw=16812033, want=78672, limit=40427 [ 41.608889][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.627564][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.627821][ T780] attempt to access beyond end of device [ 41.627821][ T780] loop1: rw=2049, want=45120, limit=40427 [ 41.635763][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.655148][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.662036][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.671296][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.679005][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.687206][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.702354][ T796] device veth0_vlan entered promiscuous mode [ 41.708340][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.716279][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.724211][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.743539][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.752066][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.759935][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.768287][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.775751][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.786880][ T818] loop1: detected capacity change from 0 to 512 [ 41.795541][ T818] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.800713][ T796] device veth1_macvtap entered promiscuous mode [ 41.811940][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.814875][ T818] EXT4-fs (loop1): 1 truncate cleaned up [ 41.819947][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.825949][ T818] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,auto_da_alloc=0x0000000000000007,block_validity,quota,,errors=continue. Quota mode: writeback. [ 41.833389][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.901254][ T822] loop3: detected capacity change from 0 to 256 [ 41.909725][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.917900][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.929095][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.929959][ T824] loop4: detected capacity change from 0 to 256 [ 41.937257][ T673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.975898][ T822] FAT-fs (loop3): Directory bread(block 64) failed [ 41.993717][ T822] FAT-fs (loop3): Directory bread(block 65) failed [ 42.000387][ T822] FAT-fs (loop3): Directory bread(block 66) failed [ 42.011327][ T824] FAT-fs (loop4): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 42.011327][ T824] 18446744073709551615" or missing value [ 42.012507][ T822] FAT-fs (loop3): Directory bread(block 67) failed [ 42.050916][ T822] FAT-fs (loop3): Directory bread(block 68) failed [ 42.070600][ T822] FAT-fs (loop3): Directory bread(block 69) failed [ 42.080931][ T822] FAT-fs (loop3): Directory bread(block 70) failed [ 42.090710][ T822] FAT-fs (loop3): Directory bread(block 71) failed [ 42.097147][ T822] FAT-fs (loop3): Directory bread(block 72) failed [ 42.120577][ T822] FAT-fs (loop3): Directory bread(block 73) failed [ 42.188296][ T830] loop1: detected capacity change from 0 to 40427 [ 42.213051][ T837] loop3: detected capacity change from 0 to 256 [ 42.251035][ T837] exfat: Deprecated parameter 'utf8' [ 42.257399][ T837] exfat: Deprecated parameter 'utf8' [ 42.264026][ T830] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 42.274089][ T830] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 42.284085][ T837] exfat: Unknown parameter 'keep_last_dots' [ 42.303138][ T830] F2FS-fs (loop1): invalid crc value [ 42.325412][ T830] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.343316][ T832] loop2: detected capacity change from 0 to 40427 [ 42.401770][ T830] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 42.408794][ T830] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.424472][ T832] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 42.431225][ T30] audit: type=1400 audit(1727888755.112:220): avc: denied { read } for pid=829 comm="syz.1.150" name="file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 42.432527][ T832] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 42.467691][ T832] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.508822][ T832] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 42.517935][ T832] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.549220][ T832] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 42.559444][ T571] device bridge_slave_1 left promiscuous mode [ 42.566290][ T832] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 42.575158][ T571] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.582961][ T571] device bridge_slave_0 left promiscuous mode [ 42.592495][ T571] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.604759][ T858] loop1: detected capacity change from 0 to 1024 [ 42.611085][ T571] device veth1_macvtap left promiscuous mode [ 42.617107][ T571] device veth0_vlan left promiscuous mode [ 42.624653][ T858] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.640804][ T30] audit: type=1400 audit(1727888755.332:221): avc: denied { remount } for pid=831 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.682129][ T858] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,noauto_da_alloc,dioread_lock,i_version,resuid=0x0000000000000000,dioread_nolock,usrjquota=,discard,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 42.737852][ T858] netlink: 36 bytes leftover after parsing attributes in process `syz.1.156'. [ 42.793281][ T864] loop2: detected capacity change from 0 to 2048 [ 42.896457][ T864] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 43.074339][ T871] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.092120][ T871] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 101 with error 28 [ 43.105208][ T871] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.105208][ T871] [ 43.115201][ T871] EXT4-fs (loop2): Total free blocks count 0 [ 43.121246][ T871] EXT4-fs (loop2): Free/Dirty block details [ 43.127188][ T871] EXT4-fs (loop2): free_blocks=2415919104 [ 43.133159][ T871] EXT4-fs (loop2): dirty_blocks=112 [ 43.145745][ T871] EXT4-fs (loop2): Block reservation details [ 43.152175][ T673] usb 1-1: USB disconnect, device number 2 [ 43.165235][ T871] EXT4-fs (loop2): i_reserved_data_blocks=7 [ 43.291842][ T876] loop4: detected capacity change from 0 to 1024 [ 43.313311][ T878] loop3: detected capacity change from 0 to 512 [ 45.477664][ T878] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.547995][ T876] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 45.573240][ T878] EXT4-fs (loop3): 1 truncate cleaned up [ 45.578732][ T878] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,auto_da_alloc=0x0000000000000007,block_validity,quota,,errors=continue. Quota mode: writeback. [ 45.612228][ T876] overlayfs: conflicting lowerdir path [ 45.626766][ T30] audit: type=1400 audit(1727888758.312:222): avc: denied { create } for pid=875 comm="syz.4.159" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 45.713523][ T893] loop2: detected capacity change from 0 to 256 [ 45.714815][ T883] loop0: detected capacity change from 0 to 40427 [ 45.731229][ T883] F2FS-fs (loop0): fault_injection options not supported [ 45.732000][ T893] FAT-fs (loop2): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 45.732000][ T893] 18446744073709551615" or missing value [ 45.753567][ T883] F2FS-fs (loop0): invalid crc value [ 45.791499][ T883] F2FS-fs (loop0): Found nat_bits in checkpoint [ 45.810085][ T897] loop3: detected capacity change from 0 to 1024 [ 45.831192][ T30] audit: type=1400 audit(1727888758.522:223): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.882906][ T30] audit: type=1400 audit(1727888758.522:224): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.926447][ T30] audit: type=1400 audit(1727888758.522:225): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.930820][ T897] EXT4-fs (loop3): Test dummy encryption mode enabled [ 45.953867][ T883] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 46.002591][ T628] F2FS-fs (loop0): access invalid blkaddr:2816 [ 46.018934][ T628] CPU: 0 PID: 628 Comm: syz-executor Not tainted 5.15.161-syzkaller-00463-g8e36931104ac #0 [ 46.028774][ T628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 46.038760][ T628] Call Trace: [ 46.041881][ T628] [ 46.044664][ T628] dump_stack_lvl+0x151/0x1c0 [ 46.049216][ T628] ? io_uring_drop_tctx_refs+0x190/0x190 [ 46.054641][ T628] ? arch_stack_walk+0xf3/0x140 [ 46.059331][ T628] dump_stack+0x15/0x20 [ 46.060769][ T897] EXT4-fs (loop3): Ignoring removed orlov option [ 46.063317][ T628] f2fs_is_valid_blkaddr+0xcc3/0x12d0 [ 46.074692][ T628] f2fs_map_blocks+0x1622/0x3ab0 [ 46.079467][ T628] ? __stack_depot_save+0x34/0x470 [ 46.084515][ T628] ? f2fs_do_map_lock+0x70/0x70 [ 46.089200][ T628] ? debug_smp_processor_id+0x17/0x20 [ 46.094457][ T628] ? try_charge_memcg+0x213/0x1550 [ 46.099346][ T628] f2fs_mpage_readpages+0xc9a/0x21a0 [ 46.104466][ T628] ? dquot_release_reservation_block+0xa0/0xa0 [ 46.110451][ T628] ? workingset_activation+0x3f0/0x3f0 [ 46.114773][ T889] loop1: detected capacity change from 0 to 40427 [ 46.115743][ T628] f2fs_readahead+0xfd/0x250 [ 46.126508][ T628] ? blk_start_plug+0x5a/0x170 [ 46.131113][ T628] read_pages+0x15e/0xb00 [ 46.135275][ T628] ? lru_cache_add+0x279/0x540 [ 46.139957][ T628] ? page_cache_ra_unbounded+0x920/0x920 [ 46.141631][ T889] F2FS-fs (loop1): fault_injection options not supported [ 46.145426][ T628] ? add_to_page_cache_lru+0x225/0x2c0 [ 46.145455][ T628] ? add_to_page_cache_locked+0x40/0x40 [ 46.158044][ T889] F2FS-fs (loop1): fault_type options not supported [ 46.163154][ T628] ? __stack_depot_save+0x34/0x470 [ 46.163185][ T628] page_cache_ra_unbounded+0x6cb/0x920 [ 46.163207][ T628] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 46.171295][ T889] F2FS-fs (loop1): invalid crc value [ 46.174503][ T628] ? _raw_spin_unlock+0x4d/0x70 [ 46.180949][ T889] F2FS-fs (loop1): Found nat_bits in checkpoint [ 46.186134][ T628] ? wp_page_reuse+0xff/0x120 [ 46.206536][ T628] ondemand_readahead+0x9c8/0xfa0 [ 46.211400][ T628] ? page_cache_sync_ra+0x4d0/0x4d0 [ 46.216427][ T628] ? debug_smp_processor_id+0x17/0x20 [ 46.217444][ T889] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 46.221638][ T628] ? kasan_quarantine_put+0x34/0x1a0 [ 46.221662][ T628] ? selinux_inode_getattr+0x11f/0x3f0 [ 46.221682][ T628] ? fault_around_bytes_set+0xc0/0xc0 [ 46.221702][ T628] page_cache_sync_ra+0x2e9/0x4d0 [ 46.221719][ T628] ? force_page_cache_ra+0x420/0x420 [ 46.221736][ T628] ? do_handle_mm_fault+0x1807/0x2400 [ 46.221754][ T628] f2fs_readdir+0x52d/0xba0 [ 46.221775][ T628] ? f2fs_fill_dentries+0xd60/0xd60 [ 46.221792][ T628] ? avc_policy_seqno+0x1b/0x70 [ 46.221810][ T628] ? __kasan_check_read+0x11/0x20 [ 46.221831][ T628] ? security_file_permission+0x86/0xb0 [ 46.221853][ T628] iterate_dir+0x265/0x610 [ 46.221870][ T628] ? f2fs_fill_dentries+0xd60/0xd60 [ 46.221888][ T628] __se_sys_getdents64+0x1c1/0x460 [ 46.221906][ T628] ? __x64_sys_getdents64+0x90/0x90 [ 46.261255][ T897] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 46.264579][ T628] ? filldir+0x680/0x680 [ 46.312738][ T891] loop4: detected capacity change from 0 to 40427 [ 46.333375][ T628] __x64_sys_getdents64+0x7b/0x90 [ 46.333413][ T628] x64_sys_call+0x5ae/0x9a0 [ 46.333431][ T628] do_syscall_64+0x3b/0xb0 [ 46.333450][ T628] ? clear_bhb_loop+0x35/0x90 [ 46.333467][ T628] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.367605][ T628] RIP: 0033:0x7facf14d9193 [ 46.371853][ T628] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 46.391296][ T628] RSP: 002b:00007ffe6a97c5c8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 46.399537][ T628] RAX: ffffffffffffffda RBX: 0000555556f954e0 RCX: 00007facf14d9193 [ 46.407353][ T628] RDX: 0000000000008000 RSI: 0000555556f954e0 RDI: 0000000000000005 [ 46.415174][ T628] RBP: 0000555556f954b4 R08: 0000000000000000 R09: 0000000000000000 [ 46.423172][ T628] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 46.431230][ T628] R13: 0000000000000010 R14: 0000555556f954b0 R15: 00007ffe6a97e870 [ 46.439126][ T628] [ 46.442636][ T780] attempt to access beyond end of device [ 46.442636][ T780] loop1: rw=2049, want=45104, limit=40427 [ 46.455704][ T897] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 46.465472][ T628] F2FS-fs (loop0): access invalid blkaddr:2816 [ 46.470886][ T897] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 46.471812][ T628] CPU: 0 PID: 628 Comm: syz-executor Not tainted 5.15.161-syzkaller-00463-g8e36931104ac #0 [ 46.488384][ T628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 46.498276][ T628] Call Trace: [ 46.501401][ T628] [ 46.504179][ T628] dump_stack_lvl+0x151/0x1c0 [ 46.508778][ T628] ? io_uring_drop_tctx_refs+0x190/0x190 [ 46.514244][ T628] dump_stack+0x15/0x20 [ 46.518238][ T628] f2fs_is_valid_blkaddr+0xcc3/0x12d0 [ 46.523446][ T628] f2fs_map_blocks+0x1622/0x3ab0 [ 46.528217][ T628] ? __stack_depot_save+0x34/0x470 [ 46.533261][ T628] ? f2fs_do_map_lock+0x70/0x70 [ 46.538034][ T628] f2fs_mpage_readpages+0xc9a/0x21a0 [ 46.543160][ T628] ? dquot_release_reservation_block+0xa0/0xa0 [ 46.549134][ T628] ? workingset_activation+0x3f0/0x3f0 [ 46.554439][ T628] f2fs_readahead+0xfd/0x250 [ 46.558866][ T628] ? blk_start_plug+0x5a/0x170 [ 46.563461][ T628] read_pages+0x15e/0xb00 [ 46.567633][ T628] ? lru_cache_add+0x279/0x540 [ 46.572232][ T628] ? page_cache_ra_unbounded+0x920/0x920 [ 46.577699][ T628] ? add_to_page_cache_lru+0x225/0x2c0 [ 46.582987][ T628] ? add_to_page_cache_locked+0x40/0x40 [ 46.588455][ T628] ? __stack_depot_save+0x34/0x470 [ 46.593405][ T628] page_cache_ra_unbounded+0x6cb/0x920 [ 46.598715][ T628] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 46.605134][ T628] ? _raw_spin_unlock+0x4d/0x70 [ 46.609808][ T628] ? wp_page_reuse+0xff/0x120 [ 46.614410][ T628] ondemand_readahead+0x9c8/0xfa0 [ 46.619273][ T628] ? page_cache_sync_ra+0x4d0/0x4d0 [ 46.624303][ T628] ? debug_smp_processor_id+0x17/0x20 [ 46.629511][ T628] ? kasan_quarantine_put+0x34/0x1a0 [ 46.634642][ T628] ? selinux_inode_getattr+0x11f/0x3f0 [ 46.640016][ T628] ? fault_around_bytes_set+0xc0/0xc0 [ 46.645225][ T628] page_cache_sync_ra+0x2e9/0x4d0 [ 46.650084][ T628] ? force_page_cache_ra+0x420/0x420 [ 46.655205][ T628] ? do_handle_mm_fault+0x1807/0x2400 [ 46.660412][ T628] f2fs_readdir+0x52d/0xba0 [ 46.664764][ T628] ? f2fs_fill_dentries+0xd60/0xd60 [ 46.669792][ T628] ? avc_policy_seqno+0x1b/0x70 [ 46.674473][ T628] ? __kasan_check_read+0x11/0x20 [ 46.679334][ T628] ? security_file_permission+0x86/0xb0 [ 46.684725][ T628] iterate_dir+0x265/0x610 [ 46.688979][ T628] ? f2fs_fill_dentries+0xd60/0xd60 [ 46.694014][ T628] __se_sys_getdents64+0x1c1/0x460 [ 46.699162][ T628] ? __x64_sys_getdents64+0x90/0x90 [ 46.704523][ T628] ? filldir+0x680/0x680 [ 46.708714][ T628] __x64_sys_getdents64+0x7b/0x90 [ 46.713650][ T628] x64_sys_call+0x5ae/0x9a0 [ 46.717978][ T628] do_syscall_64+0x3b/0xb0 [ 46.722227][ T628] ? clear_bhb_loop+0x35/0x90 [ 46.726742][ T628] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.732826][ T628] RIP: 0033:0x7facf14d9193 [ 46.737080][ T628] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 46.756611][ T628] RSP: 002b:00007ffe6a97c5c8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 46.765028][ T628] RAX: ffffffffffffffda RBX: 0000555556f954e0 RCX: 00007facf14d9193 [ 46.772830][ T628] RDX: 0000000000008000 RSI: 0000555556f954e0 RDI: 0000000000000005 [ 46.780645][ T628] RBP: 0000555556f954b4 R08: 0000000000000000 R09: 0000000000000000 [ 46.788455][ T628] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 46.796267][ T628] R13: 0000000000000010 R14: 0000555556f954b0 R15: 00007ffe6a97e870 [ 46.804085][ T628] [ 46.808009][ T628] attempt to access beyond end of device [ 46.808009][ T628] loop0: rw=0, want=45072, limit=40427 [ 46.927467][ T10] attempt to access beyond end of device [ 46.927467][ T10] loop0: rw=2049, want=40984, limit=40427 [ 46.950734][ T30] audit: type=1400 audit(1727888759.552:226): avc: denied { create } for pid=901 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.025324][ T891] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 47.061486][ T30] audit: type=1400 audit(1727888759.552:227): avc: denied { ioctl } for pid=901 comm="syz.2.166" path="socket:[18009]" dev="sockfs" ino=18009 ioctlcmd=0x48e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.721297][ T10] device bridge_slave_1 left promiscuous mode [ 47.728460][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.737163][ T10] device bridge_slave_0 left promiscuous mode [ 47.737168][ T922] loop1: detected capacity change from 0 to 40427 [ 47.749704][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.757241][ T10] device veth1_macvtap left promiscuous mode [ 47.763403][ T10] device veth0_vlan left promiscuous mode [ 47.764379][ T922] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 47.776232][ T922] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 47.784798][ T922] F2FS-fs (loop1): fault_injection options not supported [ 47.791960][ T922] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 47.863703][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.876742][ T927] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.884565][ T927] device bridge_slave_0 entered promiscuous mode [ 47.893202][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.900277][ T927] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.907701][ T927] device bridge_slave_1 entered promiscuous mode [ 47.996693][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.003627][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.010746][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.017585][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.042045][ T937] loop3: detected capacity change from 0 to 256 [ 48.054839][ T939] loop1: detected capacity change from 0 to 256 [ 48.062521][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.071266][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.078797][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.376034][ T939] FAT-fs (loop1): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 48.376034][ T939] 18446744073709551615" or missing value [ 48.601629][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.609842][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.631449][ T881] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.631483][ T937] loop_set_status: loop3 () has still dirty pages (nrpages=1) [ 48.638404][ T881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.638594][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.662862][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.678987][ T881] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.685901][ T881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.693202][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.711013][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.718855][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.726977][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.756736][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.769228][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.835891][ T952] loop2: detected capacity change from 0 to 256 [ 48.836777][ T927] device veth0_vlan entered promiscuous mode [ 48.852873][ T946] loop4: detected capacity change from 0 to 40427 [ 48.852985][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.877181][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.892794][ T946] F2FS-fs (loop4): fault_injection options not supported [ 48.901096][ T952] exfat: Unknown parameter 'keep_last_dots' [ 48.909371][ T927] device veth1_macvtap entered promiscuous mode [ 48.911505][ T946] F2FS-fs (loop4): invalid crc value [ 48.927680][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.931626][ T946] F2FS-fs (loop4): Found nat_bits in checkpoint [ 48.941240][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.951883][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.970913][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.989315][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.009224][ T946] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 49.027321][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.047687][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.061107][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.080267][ T946] attempt to access beyond end of device [ 49.080267][ T946] loop4: rw=16812033, want=78672, limit=40427 [ 49.100889][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.123685][ T294] attempt to access beyond end of device [ 49.123685][ T294] loop4: rw=2049, want=45104, limit=40427 [ 49.125547][ T950] loop1: detected capacity change from 0 to 40427 [ 49.161096][ T950] F2FS-fs (loop1): fault_injection options not supported [ 49.175621][ T950] F2FS-fs (loop1): fault_type options not supported [ 49.189495][ T950] F2FS-fs (loop1): invalid crc value [ 49.206047][ T950] F2FS-fs (loop1): Found nat_bits in checkpoint [ 49.256918][ T950] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 49.289280][ T957] loop2: detected capacity change from 0 to 40427 [ 49.300502][ T959] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.307617][ T959] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.332932][ T957] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 49.341204][ T959] device bridge_slave_0 entered promiscuous mode [ 49.357764][ T969] loop0: detected capacity change from 0 to 512 [ 49.364174][ T957] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 49.373605][ T959] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.381104][ T959] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.389653][ T959] device bridge_slave_1 entered promiscuous mode [ 49.396694][ T957] F2FS-fs (loop2): invalid crc value [ 49.424752][ T780] attempt to access beyond end of device [ 49.424752][ T780] loop1: rw=2049, want=45112, limit=40427 [ 49.426046][ T957] F2FS-fs (loop2): Found nat_bits in checkpoint [ 49.540711][ T30] audit: type=1326 audit(1727888762.212:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=970 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470a716ff9 code=0x7ffc0000 [ 49.570162][ T30] audit: type=1326 audit(1727888762.212:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=970 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470a716ff9 code=0x7ffc0000 [ 49.698988][ T30] audit: type=1326 audit(1727888762.212:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=970 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f470a716ff9 code=0x7ffc0000 [ 49.704065][ T957] F2FS-fs (loop2): Start checkpoint disabled! [ 49.722303][ T30] audit: type=1326 audit(1727888762.212:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=970 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470a716ff9 code=0x7ffc0000 [ 49.730130][ T969] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 49.754515][ T957] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 49.762512][ T969] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 49.769304][ T957] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 49.829120][ T796] attempt to access beyond end of device [ 49.829120][ T796] loop2: rw=524288, want=45072, limit=40427 [ 49.840725][ T796] attempt to access beyond end of device [ 49.840725][ T796] loop2: rw=0, want=45072, limit=40427 [ 49.858282][ T969] EXT4-fs error (device loop0): ext4_map_blocks:602: inode #2: block 18: comm syz.0.187: lblock 23 mapped to illegal pblock 18 (length 1) [ 49.886515][ T10] device bridge_slave_1 left promiscuous mode [ 49.894802][ T447] attempt to access beyond end of device [ 49.894802][ T447] loop2: rw=2049, want=41152, limit=40427 [ 49.895884][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.915507][ T969] EXT4-fs error (device loop0): ext4_map_blocks:602: inode #2: block 18: comm syz.0.187: lblock 23 mapped to illegal pblock 18 (length 1) [ 49.930881][ T969] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.187: path /1/file0: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2197815810, rec_len=21, size=2048 fake=0 [ 49.951460][ T969] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz.0.187: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 49.972194][ T10] device bridge_slave_0 left promiscuous mode [ 49.975776][ T969] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz.0.187: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 49.978504][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.000928][ T969] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz.0.187: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 50.026925][ T969] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz.0.187: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 50.047681][ T969] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz.0.187: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 50.047718][ T10] device veth1_macvtap left promiscuous mode [ 50.047753][ T10] device veth0_vlan left promiscuous mode [ 50.068879][ T969] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz.0.187: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 50.439405][ T985] loop4: detected capacity change from 0 to 2048 [ 50.506503][ T985] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.517189][ T985] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 50.533022][ T985] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.190: bg 0: block 288: padding at end of block bitmap is not set [ 50.567740][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.580221][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.590320][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.599632][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.607881][ T881] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.614821][ T881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.629304][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.636938][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.646130][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.654908][ T881] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.661792][ T881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.673604][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.690334][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.737373][ T959] device veth0_vlan entered promiscuous mode [ 50.779741][ T959] device veth1_macvtap entered promiscuous mode [ 50.804714][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.813216][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.823158][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.831966][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.841218][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.849976][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.858558][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.868003][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.878792][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.904474][ T1000] loop1: detected capacity change from 0 to 256 [ 51.097555][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.106252][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.115094][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.123415][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.154466][ T1004] 9pnet: Could not find request transport: fd0x0000000000000003 [ 51.179535][ T1008] loop1: detected capacity change from 0 to 512 [ 51.194336][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.201544][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.209401][ T1002] device bridge_slave_0 entered promiscuous mode [ 51.223255][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.224079][ T1008] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 51.230492][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.248427][ T1008] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 51.248584][ T1002] device bridge_slave_1 entered promiscuous mode [ 51.262908][ T1008] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #2: comm syz.1.198: corrupted inode contents [ 51.276211][ T1008] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #2: comm syz.1.198: mark_inode_dirty error [ 51.291652][ T1008] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #2: comm syz.1.198: corrupted inode contents [ 51.305020][ T1008] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.198: mark_inode_dirty error [ 51.320327][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 51.320345][ T30] audit: type=1400 audit(1727888764.002:242): avc: denied { mounton } for pid=1007 comm="syz.1.198" path="/14/file0/bus" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.370749][ T30] audit: type=1400 audit(1727888764.062:243): avc: denied { rmdir } for pid=1007 comm="syz.1.198" name="control" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 51.380616][ T1008] loop_set_status: loop1 () has still dirty pages (nrpages=3) [ 51.412484][ T1019] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #18: comm syz.1.198: directory missing '.' [ 51.431580][ T1021] loop4: detected capacity change from 0 to 128 [ 51.463204][ T780] EXT4-fs error (device loop1): ext4_lookup:1852: inode #18: comm syz-executor: 'control' linked to parent dir [ 51.477339][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.484222][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.491339][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.498095][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.503258][ T1018] loop3: detected capacity change from 0 to 40427 [ 51.505746][ T780] EXT4-fs error (device loop1): ext4_lookup:1852: inode #18: comm syz-executor: 'control' linked to parent dir [ 51.533182][ T1021] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 51.544147][ T1021] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038 (0x7fffffff) [ 51.563714][ T1018] F2FS-fs (loop3): fault_injection options not supported [ 51.571522][ T1018] F2FS-fs (loop3): invalid crc value [ 51.577363][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.588730][ T1021] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 51.592826][ T1018] F2FS-fs (loop3): Found nat_bits in checkpoint [ 51.605811][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.614364][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.621492][ T1021] fscrypt: loop4: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 14 [ 51.632657][ T1018] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 51.656372][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.666057][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.670063][ T1018] attempt to access beyond end of device [ 51.670063][ T1018] loop3: rw=2049, want=77960, limit=40427 [ 51.685392][ T926] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.692261][ T926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.713398][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.734976][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.744561][ T959] attempt to access beyond end of device [ 51.744561][ T959] loop3: rw=2049, want=40976, limit=40427 [ 51.757608][ T926] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.764523][ T926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.791198][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.799096][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.817536][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.831171][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.839103][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.847649][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.863070][ T1002] device veth0_vlan entered promiscuous mode [ 51.883255][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.891259][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.902548][ T1002] device veth1_macvtap entered promiscuous mode [ 51.941236][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.948545][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.953164][ T1039] loop3: detected capacity change from 0 to 512 [ 51.956086][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.969961][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.990848][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.009264][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.017514][ T1032] loop0: detected capacity change from 0 to 40427 [ 52.018399][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.043828][ T1039] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 52.044326][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.057937][ T1039] ext4 filesystem being mounted at /2/bus supports timestamps until 2038 (0x7fffffff) [ 52.066402][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.111957][ T1046] loop2: detected capacity change from 0 to 2048 [ 52.119613][ T1032] F2FS-fs (loop0): fault_injection options not supported [ 52.127741][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.127938][ T1032] F2FS-fs (loop0): invalid crc value [ 52.135113][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.148410][ T1032] F2FS-fs (loop0): Found nat_bits in checkpoint [ 52.151923][ T1050] 9pnet: Insufficient options for proto=fd [ 52.179853][ T1036] device bridge_slave_0 entered promiscuous mode [ 52.194234][ T1032] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 52.205305][ T1046] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 52.216821][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.221836][ T1032] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 52.238424][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.246418][ T927] attempt to access beyond end of device [ 52.246418][ T927] loop0: rw=2049, want=45120, limit=40427 [ 52.258556][ T1036] device bridge_slave_1 entered promiscuous mode [ 52.274790][ T10] device bridge_slave_1 left promiscuous mode [ 52.291728][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.328387][ T10] device bridge_slave_0 left promiscuous mode [ 52.337531][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.346684][ T10] device veth1_macvtap left promiscuous mode [ 52.358006][ T10] device veth0_vlan left promiscuous mode [ 52.398193][ T1059] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 52.430620][ T1059] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 101 with error 28 [ 52.450674][ T1059] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.450674][ T1059] [ 52.471571][ T1059] EXT4-fs (loop2): Total free blocks count 0 [ 52.477400][ T1059] EXT4-fs (loop2): Free/Dirty block details [ 52.499713][ T1059] EXT4-fs (loop2): free_blocks=2415919104 [ 52.505844][ T1059] EXT4-fs (loop2): dirty_blocks=112 [ 52.511132][ T1059] EXT4-fs (loop2): Block reservation details [ 52.520956][ T1059] EXT4-fs (loop2): i_reserved_data_blocks=7 [ 52.576225][ T1061] loop3: detected capacity change from 0 to 40427 [ 52.605620][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.613341][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.633499][ T1061] F2FS-fs (loop3): invalid crc value [ 52.653860][ T1036] device veth0_vlan entered promiscuous mode [ 52.668008][ T1036] device veth1_macvtap entered promiscuous mode [ 52.689461][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.696167][ T1061] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.697849][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.712220][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.719745][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.727298][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.732334][ T1061] F2FS-fs (loop3): Start checkpoint disabled! [ 52.735509][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.749616][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.750125][ T1061] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 52.757938][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.771851][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.779707][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.801586][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.810224][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.817238][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.908343][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.919659][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.928712][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.936855][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.958701][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.979210][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.987907][ T571] attempt to access beyond end of device [ 52.987907][ T571] loop3: rw=2049, want=40968, limit=40427 [ 52.988448][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.007747][ T571] attempt to access beyond end of device [ 53.007747][ T571] loop3: rw=2049, want=41000, limit=40427 [ 53.063342][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.064142][ T1076] loop1: detected capacity change from 0 to 512 [ 53.123825][ T1080] loop2: detected capacity change from 0 to 512 [ 53.182881][ T1076] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.195102][ T1080] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.200687][ T1076] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 53.266045][ T1076] Quota error (device loop1): write_blk: dquota write failed [ 53.278163][ T1080] EXT4-fs (loop2): 1 truncate cleaned up [ 53.288864][ T1076] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 53.291959][ T1078] loop4: detected capacity change from 0 to 40427 [ 53.305143][ T1080] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,auto_da_alloc=0x0000000000000007,block_validity,quota,,errors=continue. Quota mode: writeback. [ 53.305545][ T1076] EXT4-fs error (device loop1): ext4_acquire_dquot:6187: comm syz.1.213: Failed to acquire dquot type 1 [ 53.376843][ T1087] loop0: detected capacity change from 0 to 4096 [ 53.392199][ T1078] F2FS-fs (loop4): Unrecognized mount option "errors=remount-ro" or missing value [ 53.428952][ T1089] 9pnet: Insufficient options for proto=fd [ 53.441749][ T1087] EXT4-fs error (device loop0): ext4_quota_enable:6378: comm syz.0.217: inode #255: comm syz.0.217: iget: illegal inode # [ 53.516034][ T1087] EXT4-fs error (device loop0): ext4_quota_enable:6381: comm syz.0.217: Bad quota inode: 255, type: 2 [ 53.560672][ T1087] EXT4-fs warning (device loop0): ext4_enable_quotas:6422: Failed to enable quota tracking (type=2, err=-117, ino=255). Please run e2fsck to fix. [ 53.576307][ T1087] EXT4-fs (loop0): mount failed [ 53.664409][ T1108] loop2: detected capacity change from 0 to 128 [ 53.701822][ T1110] loop0: detected capacity change from 0 to 256 [ 53.702796][ T1108] EXT4-fs (loop2): Test dummy encryption mode enabled [ 53.717633][ T1108] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 53.730440][ T1108] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038 (0x7fffffff) [ 53.742004][ T10] device bridge_slave_1 left promiscuous mode [ 53.748058][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.753886][ T1110] FAT-fs (loop0): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 53.753886][ T1110] 18446744073709551615" or missing value [ 53.769813][ T10] device bridge_slave_0 left promiscuous mode [ 53.785874][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.800717][ T10] device veth1_macvtap left promiscuous mode [ 53.806643][ T10] device veth0_vlan left promiscuous mode [ 53.853426][ T1084] loop3: detected capacity change from 0 to 131072 [ 53.877193][ T1114] request_module fs-autofs succeeded, but still no fs? [ 53.921923][ T1084] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 53.929997][ T1116] loop0: detected capacity change from 0 to 2048 [ 53.940640][ T1084] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 53.969869][ T1084] F2FS-fs (loop3): Found nat_bits in checkpoint [ 53.991752][ T1116] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.084370][ T1084] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 54.091573][ T1084] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 54.105201][ T1118] loop2: detected capacity change from 0 to 40427 [ 54.137359][ T1125] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.170483][ T1125] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 101 with error 28 [ 54.184888][ T1118] F2FS-fs (loop2): fault_injection options not supported [ 54.184900][ T1125] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.184900][ T1125] [ 54.184917][ T1125] EXT4-fs (loop0): Total free blocks count 0 [ 54.198801][ T1118] F2FS-fs (loop2): fault_type options not supported [ 54.202305][ T1125] EXT4-fs (loop0): Free/Dirty block details [ 54.214171][ T1118] F2FS-fs (loop2): invalid crc value [ 54.219499][ T1125] EXT4-fs (loop0): free_blocks=2415919104 [ 54.226294][ T1118] F2FS-fs (loop2): Found nat_bits in checkpoint [ 54.231044][ T1125] EXT4-fs (loop0): dirty_blocks=112 [ 54.241431][ T1125] EXT4-fs (loop0): Block reservation details [ 54.247239][ T1125] EXT4-fs (loop0): i_reserved_data_blocks=7 [ 54.287836][ T1118] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 54.315772][ T1002] attempt to access beyond end of device [ 54.315772][ T1002] loop2: rw=2049, want=45104, limit=40427 [ 54.333005][ T30] audit: type=1400 audit(1727888767.022:244): avc: denied { mount } for pid=1128 comm="syz.4.229" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 54.389574][ T1131] 9pnet: Insufficient options for proto=fd [ 54.399095][ T30] audit: type=1400 audit(1727888767.052:245): avc: denied { search } for pid=1128 comm="syz.4.229" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 54.423592][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.430644][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.453372][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.460347][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.467638][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.474598][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.482064][ T30] audit: type=1400 audit(1727888767.052:246): avc: denied { read } for pid=1128 comm="syz.4.229" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 54.484341][ T1135] loop4: detected capacity change from 0 to 512 [ 54.518163][ T30] audit: type=1400 audit(1727888767.052:247): avc: denied { open } for pid=1128 comm="syz.4.229" path="/36/file1" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 54.530719][ T1133] device bridge0 entered promiscuous mode [ 54.545936][ T30] audit: type=1400 audit(1727888767.052:248): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 54.567312][ T1135] EXT4-fs (loop4): Ignoring removed oldalloc option [ 54.588986][ T1135] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.233: Parent and EA inode have the same ino 15 [ 54.640416][ T1141] loop2: detected capacity change from 0 to 512 [ 54.647183][ T1135] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.233: Parent and EA inode have the same ino 15 [ 54.660172][ T1135] EXT4-fs (loop4): 1 orphan inode deleted [ 54.666325][ T1135] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 54.734693][ T1141] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.762531][ T1138] loop3: detected capacity change from 0 to 40427 [ 54.784203][ T1147] loop4: detected capacity change from 0 to 256 [ 54.792553][ T1141] EXT4-fs (loop2): 1 truncate cleaned up [ 54.801162][ T1141] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,auto_da_alloc=0x0000000000000007,block_validity,quota,,errors=continue. Quota mode: writeback. [ 54.851224][ T1138] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 54.858323][ T1138] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 54.861188][ T1143] loop1: detected capacity change from 0 to 40427 [ 54.867300][ T1138] F2FS-fs (loop3): invalid crc value [ 54.878796][ T1138] F2FS-fs (loop3): Found nat_bits in checkpoint [ 54.883933][ T1152] loop0: detected capacity change from 0 to 1024 [ 54.891603][ T1147] FAT-fs (loop4): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 54.891603][ T1147] 18446744073709551615" or missing value [ 54.909459][ T1152] EXT4-fs (loop0): Ignoring removed oldalloc option [ 54.920189][ T1154] loop2: detected capacity change from 0 to 128 [ 54.921362][ T1143] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 54.934830][ T1143] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 54.941582][ T1138] F2FS-fs (loop3): Start checkpoint disabled! [ 54.944767][ T1143] F2FS-fs (loop1): invalid crc value [ 54.950891][ T1152] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 54.955289][ T1138] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 54.984377][ T1138] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 54.990708][ T1152] EXT4-fs (loop0): shut down requested (0) [ 54.998635][ T1143] F2FS-fs (loop1): Found nat_bits in checkpoint [ 55.018681][ T959] attempt to access beyond end of device [ 55.018681][ T959] loop3: rw=524288, want=45072, limit=40427 [ 55.041676][ T1152] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 55.060617][ T959] attempt to access beyond end of device [ 55.060617][ T959] loop3: rw=0, want=45072, limit=40427 [ 55.062204][ T1152] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 55.118169][ T30] audit: type=1400 audit(1727888767.802:249): avc: denied { unlink } for pid=1151 comm="syz.0.237" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.136670][ T10] attempt to access beyond end of device [ 55.136670][ T10] loop3: rw=2049, want=41088, limit=40427 [ 55.159277][ T1143] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 55.168354][ T1143] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 55.214444][ T1166] 9pnet: Insufficient options for proto=fd [ 55.323623][ T1172] loop2: detected capacity change from 0 to 1024 [ 55.343285][ T1174] loop4: detected capacity change from 0 to 512 [ 55.424945][ T1172] EXT4-fs (loop2): Ignoring removed orlov option [ 55.439434][ T1172] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 55.451518][ T1174] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.246: bg 0: block 131: padding at end of block bitmap is not set [ 55.466131][ T1172] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 55.480853][ T1172] System zones: 0-1, 3-36 [ 55.485944][ T1174] EXT4-fs (loop4): Remounting filesystem read-only [ 55.504273][ T1172] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,block_validity,debug_want_extra_isize=0x0000000000000006,init_itable=0x0000000000000000,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 55.517696][ T1168] loop0: detected capacity change from 0 to 40427 [ 55.527288][ T1174] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 55.543620][ T1174] EXT4-fs (loop4): 1 truncate cleaned up [ 55.549096][ T1174] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,i_version,data_err=ignore,. Quota mode: writeback. [ 55.568609][ T1186] loop1: detected capacity change from 0 to 256 [ 55.582656][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.589660][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.591470][ T1168] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 55.600413][ T1177] device bridge_slave_0 entered promiscuous mode [ 55.604778][ T1168] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 55.619609][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.625603][ T1186] exfat: Deprecated parameter 'utf8' [ 55.632296][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.640208][ T1177] device bridge_slave_1 entered promiscuous mode [ 55.648398][ T1168] F2FS-fs (loop0): Found nat_bits in checkpoint [ 55.648515][ T1193] loop2: detected capacity change from 0 to 256 [ 55.673795][ T1186] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0ec8ca35, utbl_chksum : 0xe619d30d) [ 55.696546][ T1195] loop4: detected capacity change from 0 to 2048 [ 55.703471][ T1193] FAT-fs (loop2): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 55.703471][ T1193] 18446744073709551615" or missing value [ 55.719285][ T1168] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 55.726447][ T1168] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 55.741706][ T1168] attempt to access beyond end of device [ 55.741706][ T1168] loop0: rw=10241, want=45104, limit=40427 [ 55.760794][ T1186] loop_set_status: loop1 () has still dirty pages (nrpages=3) [ 55.827900][ T927] attempt to access beyond end of device [ 55.827900][ T927] loop0: rw=2051, want=45104, limit=40427 [ 55.840688][ T927] F2FS-fs (loop0): Issue discard(5637, 5637, 1) failed, ret: -5 [ 55.939167][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.950235][ T1202] 9pnet: Insufficient options for proto=fd [ 55.980941][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.990725][ T45] device bridge_slave_1 left promiscuous mode [ 56.009728][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.059516][ T45] device bridge_slave_0 left promiscuous mode [ 56.073542][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.097502][ T45] device veth1_macvtap left promiscuous mode [ 56.103460][ T45] device veth0_vlan left promiscuous mode [ 56.385183][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.397584][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.406573][ T926] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.413680][ T926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.425021][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.432601][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.440867][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.448928][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.455974][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.471529][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.484668][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.519148][ T1177] device veth0_vlan entered promiscuous mode [ 56.528197][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.536958][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.545065][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.553560][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.571173][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 56.571194][ T30] audit: type=1400 audit(1727888769.252:257): avc: denied { ioctl } for pid=1221 comm="syz.0.263" path="socket:[20847]" dev="sockfs" ino=20847 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.572957][ T1177] device veth1_macvtap entered promiscuous mode [ 56.618615][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.637218][ T1226] loop0: detected capacity change from 0 to 256 [ 56.668417][ T1231] loop3: detected capacity change from 0 to 2048 [ 56.675008][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.683200][ T1226] FAT-fs (loop0): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 56.683200][ T1226] 18446744073709551615" or missing value [ 56.683323][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.700462][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.714566][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.724075][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.732213][ T1212] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.739766][ T1212] device bridge_slave_0 entered promiscuous mode [ 56.747052][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.754310][ T1212] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.762017][ T1212] device bridge_slave_1 entered promiscuous mode [ 56.766608][ T1231] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.896975][ T1242] 9pnet: Insufficient options for proto=fd [ 56.901488][ T1241] loop4: detected capacity change from 0 to 512 [ 56.928022][ T1237] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.931767][ T30] audit: type=1400 audit(1727888769.612:258): avc: denied { setopt } for pid=1247 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.969628][ T1237] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 101 with error 28 [ 56.982565][ T1237] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.982565][ T1237] [ 56.993784][ T1237] EXT4-fs (loop3): Total free blocks count 0 [ 56.996229][ T1241] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 56.999642][ T1237] EXT4-fs (loop3): Free/Dirty block details [ 57.017643][ T1237] EXT4-fs (loop3): free_blocks=2415919104 [ 57.023278][ T1237] EXT4-fs (loop3): dirty_blocks=112 [ 57.028569][ T1237] EXT4-fs (loop3): Block reservation details [ 57.034547][ T1237] EXT4-fs (loop3): i_reserved_data_blocks=7 [ 57.041252][ T1241] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038 (0x7fffffff) [ 57.056025][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.057807][ T30] audit: type=1400 audit(1727888769.742:259): avc: denied { rename } for pid=1240 comm="syz.4.268" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.062933][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.086489][ T1241] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 57.095490][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.106820][ T30] audit: type=1400 audit(1727888769.772:260): avc: denied { unlink } for pid=1240 comm="syz.4.268" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 57.112739][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.135387][ T1241] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 57.152882][ T1241] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.268: Failed to acquire dquot type 0 [ 57.166872][ T1257] loop2: detected capacity change from 0 to 512 [ 57.173908][ T30] audit: type=1400 audit(1727888769.862:261): avc: denied { append } for pid=1240 comm="syz.4.268" name="loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.217790][ T1259] loop0: detected capacity change from 0 to 256 [ 57.233237][ T1257] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 57.248568][ T1257] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 57.250835][ T1259] exfat: Deprecated parameter 'utf8' [ 57.256605][ T30] audit: type=1400 audit(1727888769.932:262): avc: denied { connect } for pid=1260 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.267895][ T1259] exfat: Deprecated parameter 'namecase' [ 57.294511][ T1259] exfat: Deprecated parameter 'utf8' [ 57.297589][ T1257] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.299921][ T1259] exfat: Deprecated parameter 'namecase' [ 57.311716][ T30] audit: type=1400 audit(1727888769.952:263): avc: denied { read append } for pid=1260 comm="syz.4.275" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 57.335684][ T30] audit: type=1400 audit(1727888769.952:264): avc: denied { open } for pid=1260 comm="syz.4.275" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 57.351455][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.366876][ T1257] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.273: bg 0: block 361: padding at end of block bitmap is not set [ 57.369569][ T1259] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 57.394890][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.395711][ T1257] EXT4-fs (loop2): Remounting filesystem read-only [ 57.418185][ T1257] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 57.425428][ T1266] loop4: detected capacity change from 0 to 256 [ 57.433208][ T1257] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.273: attempt to clear invalid blocks 33619980 len 1 [ 57.446945][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.455781][ T1257] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.273: invalid indirect mapped block 1811939328 (level 0) [ 57.470377][ T1266] FAT-fs (loop4): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 57.470377][ T1266] 18446744073709551615" or missing value [ 57.470447][ T1257] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.273: invalid indirect mapped block 2185560079 (level 1) [ 57.510247][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.519368][ T1257] EXT4-fs (loop2): 1 truncate cleaned up [ 57.525279][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.553569][ T1257] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none. [ 57.559111][ T1212] device veth0_vlan entered promiscuous mode [ 57.587165][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.595700][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.604990][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.623257][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.729260][ T1212] device veth1_macvtap entered promiscuous mode [ 57.743689][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.767081][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.777306][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.027589][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.090476][ T1281] loop2: detected capacity change from 0 to 256 [ 58.098755][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.114849][ T1283] loop4: detected capacity change from 0 to 1024 [ 58.115583][ T1285] loop3: detected capacity change from 0 to 16 [ 58.127512][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.135896][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.146700][ T1281] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 58.161809][ T1285] erofs: (device loop3): mounted with root inode @ nid 36. [ 58.199012][ T1283] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 58.224821][ T1291] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 58.236496][ T45] device bridge_slave_1 left promiscuous mode [ 58.248213][ T1291] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 58.249701][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.267875][ T1291] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 58.279973][ T1283] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 58.295408][ T45] device bridge_slave_0 left promiscuous mode [ 58.303787][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.328814][ T45] device veth1_macvtap left promiscuous mode [ 58.335098][ T45] device veth0_vlan left promiscuous mode [ 58.416614][ T1303] loop3: detected capacity change from 0 to 256 [ 58.441158][ T1307] loop4: detected capacity change from 0 to 128 [ 58.462315][ T1307] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.762125][ T1303] FAT-fs (loop3): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 58.762125][ T1303] 18446744073709551615" or missing value [ 58.829718][ T1307] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038 (0x7fffffff) [ 58.862861][ T1315] loop0: detected capacity change from 0 to 1024 [ 58.905035][ T1315] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.999297][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.006360][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.010828][ T1315] loop_set_status: loop0 () has still dirty pages (nrpages=2) [ 59.014110][ T1322] device bridge_slave_0 entered promiscuous mode [ 59.027965][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.035104][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.042734][ T1322] device bridge_slave_1 entered promiscuous mode [ 59.093302][ T1335] loop4: detected capacity change from 0 to 128 [ 59.137238][ T1343] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 59.154485][ T1335] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000000009,,errors=continue. Quota mode: none. [ 59.174522][ T1335] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 59.217281][ T1348] loop3: detected capacity change from 0 to 256 [ 59.230094][ T1351] loop1: detected capacity change from 0 to 256 [ 59.261010][ T1348] FAT-fs (loop3): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 59.261010][ T1348] 18446744073709551615" or missing value [ 59.272991][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.282434][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.289627][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.296424][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.306654][ T1351] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 59.374452][ T1362] loop0: detected capacity change from 0 to 16 [ 59.423613][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.431674][ T1362] erofs: (device loop0): mounted with root inode @ nid 36. [ 59.442916][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.459595][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.493163][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.537431][ T1378] Zero length message leads to an empty skb [ 59.560779][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.567668][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.576195][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.585720][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.592874][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.658488][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.691424][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.773399][ T1385] loop4: detected capacity change from 0 to 16 [ 59.921276][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.934171][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.944116][ T1385] erofs: Unknown parameter ')|' [ 59.985130][ T1385] loop4: detected capacity change from 0 to 1024 [ 59.989244][ T1322] device veth0_vlan entered promiscuous mode [ 60.011103][ T1322] device veth1_macvtap entered promiscuous mode [ 60.013573][ T1385] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.323: Invalid block bitmap block 0 in block_group 0 [ 60.033943][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.041929][ T1385] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.323: Failed to acquire dquot type 0 [ 60.044105][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.063668][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.071838][ T1385] EXT4-fs error (device loop4): ext4_free_blocks:6226: comm syz.4.323: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.072133][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.093071][ T1385] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.323: Invalid inode bitmap blk 0 in block_group 0 [ 60.104081][ T447] EXT4-fs error (device loop4): ext4_release_dquot:6210: comm kworker/u4:4: Failed to release dquot type 0 [ 60.105978][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.117925][ T1385] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 60.124840][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.132905][ T1385] EXT4-fs (loop4): 1 orphan inode deleted [ 60.141783][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.146511][ T1385] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 60.154785][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.173676][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.203598][ T1399] device syzkaller0 entered promiscuous mode [ 60.215276][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.229089][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.234082][ T1403] loop2: detected capacity change from 0 to 512 [ 60.255211][ T1405] loop4: detected capacity change from 0 to 2048 [ 60.271407][ T1405] EXT4-fs (loop4): Ignoring removed nobh option [ 60.282378][ T1405] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,nodioread_nolock,,errors=continue. Quota mode: none. [ 60.283167][ T1403] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,grpjquota=,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 60.310924][ T1403] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 60.333690][ T1403] 9pnet_virtio: no channels available for device syz [ 60.413200][ T1419] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.420353][ T1419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.428227][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.435159][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.443082][ T1419] device bridge0 entered promiscuous mode [ 60.503124][ T45] device bridge_slave_1 left promiscuous mode [ 60.532716][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.578772][ T45] device bridge_slave_0 left promiscuous mode [ 60.597703][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.650301][ T45] device veth1_macvtap left promiscuous mode [ 60.853517][ T1439] device pim6reg1 entered promiscuous mode [ 60.980487][ T1456] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.987555][ T1456] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.998146][ T1456] device bridge0 left promiscuous mode [ 61.058811][ T1456] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.065983][ T1456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.073201][ T1456] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.080080][ T1456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.168265][ T1456] device bridge0 entered promiscuous mode [ 61.174401][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.182700][ T325] ================================================================== [ 61.190666][ T325] BUG: KASAN: use-after-free in vlan_dev_get_iflink+0x70/0x80 [ 61.198130][ T325] Read of size 4 at addr ffff8881077b20d0 by task kworker/1:4/325 [ 61.205942][ T325] [ 61.208114][ T325] CPU: 1 PID: 325 Comm: kworker/1:4 Not tainted 5.15.161-syzkaller-00463-g8e36931104ac #0 [ 61.217838][ T325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 61.227734][ T325] Workqueue: events linkwatch_event [ 61.232760][ T325] Call Trace: [ 61.235991][ T325] [ 61.238750][ T325] dump_stack_lvl+0x151/0x1c0 [ 61.243354][ T325] ? io_uring_drop_tctx_refs+0x190/0x190 [ 61.248911][ T325] ? panic+0x760/0x760 [ 61.252816][ T325] print_address_description+0x87/0x3b0 [ 61.258289][ T325] ? nlmsg_notify+0x161/0x1c0 [ 61.262802][ T325] kasan_report+0x179/0x1c0 [ 61.267147][ T325] ? vlan_dev_get_iflink+0x70/0x80 [ 61.272184][ T325] ? vlan_dev_get_iflink+0x70/0x80 [ 61.277122][ T325] __asan_report_load4_noabort+0x14/0x20 [ 61.282589][ T325] vlan_dev_get_iflink+0x70/0x80 [ 61.287367][ T325] ? vlan_dev_fix_features+0x190/0x190 [ 61.292744][ T325] dev_get_iflink+0x6f/0xc0 [ 61.296946][ T1458] loop1: detected capacity change from 0 to 40427 [ 61.297107][ T325] rfc2863_policy+0x127/0x2b0 [ 61.307841][ T325] ? linkwatch_forget_dev+0xf1/0x180 [ 61.312968][ T325] linkwatch_do_dev+0x3c/0x160 [ 61.317572][ T325] __linkwatch_run_queue+0x4ca/0x7f0 [ 61.317993][ T1458] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 61.322774][ T325] ? __mutex_lock_slowpath+0xe/0x10 [ 61.322801][ T325] ? linkwatch_run_queue+0x20/0x20 [ 61.322820][ T325] ? linkwatch_event+0x9/0x60 [ 61.322838][ T325] linkwatch_event+0x4c/0x60 [ 61.330339][ T1458] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 61.335358][ T325] process_one_work+0x6bb/0xc10 [ 61.335381][ T325] worker_thread+0xad5/0x12a0 [ 61.335398][ T325] ? _raw_spin_lock+0x1b0/0x1b0 [ 61.341674][ T1458] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 61.345001][ T325] kthread+0x421/0x510 [ 61.345023][ T325] ? worker_clr_flags+0x180/0x180 [ 61.345037][ T325] ? kthread_blkcg+0xd0/0xd0 [ 61.345054][ T325] ret_from_fork+0x1f/0x30 [ 61.397943][ T325] [ 61.400805][ T325] [ 61.402972][ T325] Allocated by task 1002: [ 61.407146][ T325] ____kasan_kmalloc+0xdb/0x110 [ 61.411918][ T325] __kasan_kmalloc+0x9/0x10 [ 61.416257][ T325] __kmalloc+0x13a/0x270 [ 61.420346][ T325] kvmalloc_node+0x1f0/0x4d0 [ 61.424767][ T325] alloc_netdev_mqs+0x8c/0xc90 [ 61.429361][ T325] rtnl_create_link+0x2e1/0x9d0 [ 61.434056][ T325] rtnl_newlink+0x13a7/0x2050 [ 61.438571][ T325] rtnetlink_rcv_msg+0x951/0xc40 [ 61.443344][ T325] netlink_rcv_skb+0x1cf/0x410 [ 61.447932][ T325] rtnetlink_rcv+0x1c/0x20 [ 61.452461][ T325] netlink_unicast+0x8df/0xac0 [ 61.457237][ T325] netlink_sendmsg+0xa0a/0xd20 [ 61.461846][ T325] __sys_sendto+0x564/0x720 [ 61.466172][ T325] __x64_sys_sendto+0xe5/0x100 [ 61.470775][ T325] x64_sys_call+0x15c/0x9a0 [ 61.475113][ T325] do_syscall_64+0x3b/0xb0 [ 61.479379][ T325] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.485097][ T325] [ 61.487265][ T325] Freed by task 45: [ 61.490915][ T325] kasan_set_track+0x4b/0x70 [ 61.495425][ T325] kasan_set_free_info+0x23/0x40 [ 61.500461][ T325] ____kasan_slab_free+0x126/0x160 [ 61.505405][ T325] __kasan_slab_free+0x11/0x20 [ 61.510009][ T325] slab_free_freelist_hook+0xbd/0x190 [ 61.515221][ T325] kfree+0xc8/0x220 [ 61.518958][ T325] kvfree+0x35/0x40 [ 61.522599][ T325] netdev_freemem+0x3f/0x60 [ 61.526936][ T325] netdev_release+0x7f/0xb0 [ 61.531367][ T325] device_release+0x95/0x1c0 [ 61.535796][ T325] kobject_put+0x178/0x260 [ 61.540041][ T325] netdev_run_todo+0x869/0x9f0 [ 61.544640][ T325] rtnl_unlock+0xe/0x10 [ 61.548632][ T325] default_device_exit_batch+0x38f/0x3f0 [ 61.554159][ T325] cleanup_net+0x6ce/0xc00 [ 61.558355][ T325] process_one_work+0x6bb/0xc10 [ 61.563129][ T325] worker_thread+0xad5/0x12a0 [ 61.567729][ T325] kthread+0x421/0x510 [ 61.571726][ T325] ret_from_fork+0x1f/0x30 [ 61.576077][ T325] [ 61.578234][ T325] The buggy address belongs to the object at ffff8881077b2000 [ 61.578234][ T325] which belongs to the cache kmalloc-4k of size 4096 [ 61.592131][ T325] The buggy address is located 208 bytes inside of [ 61.592131][ T325] 4096-byte region [ffff8881077b2000, ffff8881077b3000) [ 61.605334][ T325] The buggy address belongs to the page: [ 61.610788][ T325] page:ffffea00041dec00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1077b0 [ 61.620852][ T325] head:ffffea00041dec00 order:3 compound_mapcount:0 compound_pincount:0 [ 61.629009][ T325] flags: 0x4000000000010200(slab|head|zone=1) [ 61.634940][ T325] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 61.643337][ T325] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 61.651927][ T325] page dumped because: kasan: bad access detected [ 61.658354][ T325] page_owner tracks the page as allocated [ 61.663911][ T325] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 1095153336, free_ts 0 [ 61.681974][ T325] post_alloc_hook+0x1a3/0x1b0 [ 61.686661][ T325] prep_new_page+0x1b/0x110 [ 61.690990][ T325] get_page_from_freelist+0x3550/0x35d0 [ 61.696985][ T325] __alloc_pages+0x27e/0x8f0 [ 61.701410][ T325] new_slab+0x9a/0x4e0 [ 61.705311][ T325] ___slab_alloc+0x39e/0x830 [ 61.710186][ T325] __slab_alloc+0x4a/0x90 [ 61.714356][ T325] kmem_cache_alloc_trace+0x142/0x210 [ 61.719548][ T325] kobject_uevent_env+0x269/0x700 [ 61.724495][ T325] kobject_uevent+0x1f/0x30 [ 61.728837][ T325] kernel_add_sysfs_param+0x108/0x130 [ 61.734056][ T325] param_sysfs_builtin+0x16a/0x1f0 [ 61.738993][ T325] param_sysfs_init+0x6a/0x70 [ 61.743507][ T325] do_one_initcall+0x182/0x610 [ 61.748112][ T325] do_initcall_level+0x186/0x310 [ 61.752974][ T325] do_initcalls+0x4e/0x90 [ 61.757142][ T325] page_owner free stack trace missing [ 61.762349][ T325] [ 61.764524][ T325] Memory state around the buggy address: [ 61.769996][ T325] ffff8881077b1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 61.777917][ T325] ffff8881077b2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.785876][ T325] >ffff8881077b2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.793777][ T325] ^ [ 61.800371][ T325] ffff8881077b2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.808280][ T325] ffff8881077b2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.816176][ T325] ================================================================== [ 61.824066][ T325] Disabling lock debugging due to kernel taint