last executing test programs: 12.220061869s ago: executing program 3 (id=2244): mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) rt_sigtimedwait(&(0x7f0000000140), 0x0, 0xfffffffffffffffe, 0x8) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 9.197401919s ago: executing program 2 (id=2256): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) keyctl$invalidate(0x15, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, 0x0, 0x0}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x4000, 0x2000, &(0x7f000000e000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x42082, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000100)={0x20}, 0xfdef) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x41, 0x3, 0x260, 0xf8, 0x0, 0x0, 0xf8, 0x0, 0x1c8, 0x1f0, 0x1f0, 0x1c8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}}, 0x10) fadvise64(r5, 0x20, 0x1, 0x3) 7.359370541s ago: executing program 2 (id=2261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 7.185197036s ago: executing program 4 (id=2262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 7.165333227s ago: executing program 0 (id=2263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="2001"], 0x120) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000f9"], 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xf9) 7.087816694s ago: executing program 3 (id=2265): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r0, 0x29, 0x48, &(0x7f0000000200)=@routing={0x0, 0x8, 0x0, 0x0, 0x0, [@mcast1, @mcast2, @empty, @private0]}, 0x48) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@init_itable_val}, {@nolazytime}, {@grpid}, {@prjquota}, {@norecovery}, {@lazytime}, {@errors_continue}, {@auto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$eJzs289vFFUcAPDvzG4BQdmKiIIgVTRp/NHSgsrBxGg08aCJiR7wWNtCkIUaWhMhjVZj8GhIvBuPJv4FnjwZ9WTiFY8mhoQoMQG9uGZ2Z0q77JbWbtlN9/NJBt6befve+3bmzb6dtxtA3xrK/kki7o6IyxFRaWSXFxhq/Hfj2vzk39fmJ5Oo1d78I6mXu35tfrKWK163I69zOI1IP03yRmJgabWz5y+cnqhWp8/l+dG5M++Nzp6/8PSpMxMnp09Onx0/duzokbHnnh1/pkWvf7u01jiz+K7v+3Bm/95X3770+uTxS+/8+E3W3z0HGsezONZa5+0MZYH/2fjbNB97vNONddm/tZtxJuVu94bVKkVEOR+cl6MSpbh58irxyidd7RywobJ79tb2hxdqwCaWRLd7AHRH8Uafff4ttjs09egJV19sfADK4r6Rb40j5UjzMgMb2P5QRBxf+OfLbIum5xC1Fs8NAADW67ts/vNUq/lfGnuWlNuZrw0NRsS9EbErIu6LiN0RcX9EvewDEfHgGtsfasrfOv9Mr/yvwFYpm/89n69tLZ//FbO/GCzluXvq8Q8kJ05Vpw/nf5PhGNia5cdaVV5U8fIvn7drf+n8L9uy9ou5YF7JlXLjAd22Ys/UxNxEpyalVz+O2FduFX+yuBKQRMTeiNi3tqp3FolTT3y9v12h28e/gg6sM9W+KiqZX4im+AvJyuuTo9uiOn14tLgqbvXTzxffaNf+uuLvgOz8b19+/TeVqPyVLF2vnV088MJq27j462dtP1OWV3/9L8qu/y3JW/U13S35vg8m5ubOjUVsSV6r55ftH7/52iJflM/iHz7Uevzvyl+Txf9QRGQX8YGIeDgiDubn7pGIeDQiDq0Q/w8vPfZuu2O9cP6nWt7/Fq//weXnf+2J0unvv23X/uruf0frqeF8T/3+dxvtu1PcRpuuZgAAANjE0vp345N0ZDGdpiMjje/w747taXVmdu7JEzPvn51qfId+MAbS4klXZcnz0LFkIa+xkR/PnxUXx4/kz42/KN1Vz49MzlSnuhw79LsdbcZ/5vdSt3sHbDi/14L+1Tz+0y71A7jzvP9D/zL+oX8Z/9C/Wo3/j5ry1gJgM6pVut0DoHvM/6F/Gf/Qv4x/6Evr+V3/RiXKK/x6X6JXEpH2RDd6JnGwh0ZTuQOju8s3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA75LwAA///foPki") r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 7.087143204s ago: executing program 0 (id=2266): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 7.058471816s ago: executing program 4 (id=2267): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x20}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x4000) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x0, "d30f388c52647612d91de4353d68b0fa00"}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x8948, &(0x7f0000000300)={'sit0\x00', 0x0}) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000140), 0x4) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x34}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x304}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x3, 0x7, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1b}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000400)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000001918120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300686173683a69702c706f72742c69700003d16fd4a9b143be8c0f8ba9a74c3f44a7a544"], 0x58}}, 0x0) 6.193263218s ago: executing program 0 (id=2268): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x0, 0x5004) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x9, 0x8, 0x200c}, 0x4) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4000000000000006110540000000000630a00ff000000009500000c00000000a2bf94ec21ce644fc6860b1212a71c01681cd586d1502558b0dc628a967e6908539c681af39432f0106cae77eff4c3f32d9bee199c96bcaf98ee416d37a0de9afe95a2bf338b655e63ba593c3d069b1d931ae352"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0xd8, 0x37f, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001900fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = open(&(0x7f0000000180)='./bus\x00', 0x56927f, 0x0) unlink(&(0x7f0000000480)='./file0/file0\x00') fallocate(r7, 0x0, 0x0, 0x1000f4) syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r7) 6.088087147s ago: executing program 1 (id=2270): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.087337017s ago: executing program 2 (id=2271): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x50}}, 0x0) 6.065582348s ago: executing program 4 (id=2272): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x5000)=nil, 0x5000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff9000/0x2000)=nil, 0x2000}, 0x1}) 6.033259021s ago: executing program 4 (id=2273): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0xfffd, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "fdf8c820e0a6daf0a7d33817fa1127caee55b0769b9b9ab1", "f80b0495eca862a8f09f1ce628066123b28dd1dc7e2dac79df36ee068de07b1c"}}}}}}, 0x0) 6.004385854s ago: executing program 2 (id=2274): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)) 4.990743827s ago: executing program 1 (id=2275): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.545235794s ago: executing program 3 (id=2276): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 4.494899129s ago: executing program 4 (id=2277): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB='\x00'], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x6c, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000000ba01f256000018004503005e00000000002f907800000000e00000012480655886dd080088be00000000100000000104000000000000080022eb0000000030000000020000000000000000000000080065580000000010a63fca06112c0a4f20df9478221b0cb2e7369cb66df827c71c1107f09e0592a3abb43a6f7d424418202899dddc7f70f4ab062eebee877069a762bacd1a0ba9217da432f5b16b4b4816e1eececa8294405d0d212aa647783d"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0], 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef3, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r5, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') 4.494338279s ago: executing program 1 (id=2278): shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2e, 0x10, 0x0, 0xfffffc1a}, 0x15) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0xfffffffe, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 4.453746502s ago: executing program 0 (id=2279): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000027c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x3) capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000280)) 4.241783419s ago: executing program 3 (id=2280): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='net/rt_cache\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x2, 0x0) 4.207751252s ago: executing program 3 (id=2281): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x1d, 0x413, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 4.145730887s ago: executing program 2 (id=2282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 2.274508922s ago: executing program 0 (id=2283): memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000000029000000000000000000850000003600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000100)=r2, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f0000000100)=r0, 0x4) 1.183077153s ago: executing program 2 (id=2284): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) 1.141708336s ago: executing program 3 (id=2285): r0 = open(&(0x7f0000000280)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x3000) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) execve(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000780)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x200000000}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r3, &(0x7f0000002140), 0xffffffffffffffdb, 0x20000004) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r2) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=r4, @ANYBLOB="010000000000000000000a000000180004"], 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01000000000000000000060b000000120905810300020000000904010000020d00000904010102020d0000090582020000000000090503020000000000"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) socket(0x0, 0x0, 0x0) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r8 = dup(r6) write$FUSE_BMAP(r8, &(0x7f00000001c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000440)='./file2\x00', &(0x7f0000000300), 0x8000, &(0x7f0000000440)=ANY=[]) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000080)={0x1, 'syzkaller0\x00', {}, 0x10}) 1.043872384s ago: executing program 0 (id=2286): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "f896e404"}, @local=@item_012={0x1, 0x2, 0x0, 'e'}, @main=@item_012={0x2, 0x0, 0x0, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x4018480c, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000100)={0x2, 0xfffffffb}) 948.309332ms ago: executing program 4 (id=2287): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r0, 0x29, 0x48, &(0x7f0000000200)=@routing={0x0, 0x8, 0x0, 0x0, 0x0, [@mcast1, @mcast2, @empty, @private0]}, 0x48) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@init_itable_val}, {@nolazytime}, {@grpid}, {@prjquota}, {@norecovery}, {@lazytime}, {@errors_continue}, {@auto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$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") r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 932.950193ms ago: executing program 1 (id=2288): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0xfffd, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "fdf8c820e0a6daf0a7d33817fa1127caee55b0769b9b9ab1", "f80b0495eca862a8f09f1ce628066123b28dd1dc7e2dac79df36ee068de07b1c"}}}}}}, 0x0) 906.752535ms ago: executing program 1 (id=2289): write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) dup(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r0, 0x0, 0x0}, 0x20) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000b40)=[{&(0x7f0000000300)=""/62, 0x3e}, {0x0}], 0x2) 0s ago: executing program 1 (id=2290): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0xd86, &(0x7f0000001580)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "711e8f", 0xd50, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev}, {[], @time_exceed={0x9, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "bede78", 0x0, 0x0, 0x0, @dev, @loopback, [@srh={0x0, 0xe, 0x4, 0x7, 0x0, 0x0, 0x0, [@mcast1, @empty, @private2, @private1, @private1, @loopback, @local]}, @dstopts={0x0, 0x193, '\x00', [@generic={0x0, 0x5f, "f0edb1af7badf7491d2500721be4cce0542133657e2d12f0ae3e134727e49fe7c04867be7426e8cbefd47520beacbe5c36083a972cb3b73de48f661a252e0b0a5a236ddf29543f29a5e18fd1c7b54248c8b03dc91385c9160f3394ff0708c8"}, @hao={0xc9, 0x10, @private1}, @jumbo, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x800, 0x0, 0x0, 0x4]}}, @jumbo, @calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0xbc4, "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"}]}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): (loop2): mounted filesystem without journal. Quota mode: writeback. [ 512.352913][ T6535] EXT4-fs error (device loop2): dx_make_map:1327: inode #2: block 255: comm syz.2.1786: bad entry in directory: inode out of bounds - offset=0, inode=1633771873, rec_len=1024, size=1024 fake=0 [ 512.373053][ T6535] EXT4-fs error (device loop2) in do_split:2092: Corrupt filesystem [ 512.383280][ T6535] EXT4-fs error (device loop2): htree_dirblock_to_tree:1111: inode #2: block 255: comm syz.2.1786: bad entry in directory: inode out of bounds - offset=1024, inode=1633771873, rec_len=1024, size=1024 fake=0 [ 512.424324][ T6497] EXT4-fs (loop2): unmounting filesystem. [ 512.466398][ T6544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1789'. [ 512.561050][ T6] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 512.573599][ T6] plantronics 0003:047F:FFFF.0022: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 512.663047][ T6553] loop3: detected capacity change from 0 to 512 [ 512.671053][ T28] audit: type=1400 audit(1721701178.859:1262): avc: denied { map } for pid=6550 comm="syz.3.1791" path="/dev/ashmem" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 512.699475][ T6553] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.1792: corrupted in-inode xattr [ 512.712364][ T6553] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1792: couldn't read orphan inode 15 (err -117) [ 512.724639][ T6553] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 512.778422][ T323] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 512.926430][ T28] audit: type=1400 audit(1721701179.139:1263): avc: denied { read } for pid=6548 comm="syz.4.1782" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 512.956096][ T28] audit: type=1400 audit(1721701179.139:1264): avc: denied { open } for pid=6548 comm="syz.4.1782" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 512.981833][ T28] audit: type=1400 audit(1721701179.179:1265): avc: denied { ioctl } for pid=6548 comm="syz.4.1782" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 513.862527][ T758] usb 1-1: USB disconnect, device number 22 [ 513.887707][ T323] usb 3-1: Using ep0 maxpacket: 8 [ 513.988626][ T3327] EXT4-fs (loop3): unmounting filesystem. [ 514.057842][ T323] usb 3-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=84.cd [ 514.066839][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.116338][ T323] usb 3-1: config 0 descriptor?? [ 516.128980][ T6575] loop4: detected capacity change from 0 to 512 [ 516.202741][ T6575] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2760: inode #11: comm syz.4.1799: corrupted xattr block 95 [ 516.216868][ T6575] EXT4-fs (loop4): Remounting filesystem read-only [ 516.223282][ T6575] EXT4-fs error (device loop4): ext4_evict_inode:290: comm syz.4.1799: couldn't truncate inode 11 (err -30) [ 516.235226][ T6575] EXT4-fs (loop4): 1 orphan inode deleted [ 516.241079][ T6575] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 516.276803][ T323] usb 3-1: USB disconnect, device number 34 [ 516.290615][ T6580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1800'. [ 516.421905][ T6589] loop0: detected capacity change from 0 to 512 [ 516.458140][ T6589] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1797: invalid indirect mapped block 256 (level 2) [ 516.498413][ T6589] EXT4-fs (loop0): 2 truncates cleaned up [ 516.509899][ T5024] EXT4-fs (loop4): unmounting filesystem. [ 516.516724][ T6589] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 516.721264][ T6604] loop3: detected capacity change from 0 to 512 [ 516.747768][ T28] audit: type=1400 audit(1721701182.981:1266): avc: denied { remount } for pid=6603 comm="syz.1.1810" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 516.770539][ T6605] SELinux: security_context_str_to_sid () failed with errno=-22 [ 516.782084][ T6604] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.1809: corrupted in-inode xattr [ 516.794618][ T6604] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1809: couldn't read orphan inode 15 (err -117) [ 516.807276][ T6604] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 516.807833][ T6605] tipc: Started in network mode [ 516.882799][ T6605] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 516.892193][ T6605] tipc: Enabling of bearer rejected, failed to enable media [ 517.037779][ T28] audit: type=1400 audit(1721701183.271:1267): avc: denied { unmount } for pid=5026 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 517.052904][ T6613] loop4: detected capacity change from 0 to 128 [ 517.509233][ T6613] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 517.535984][ T758] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 517.768294][ T6613] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 517.811527][ T6617] incfs: Options parsing error. -22 [ 517.827058][ T6617] incfs: mount failed -22 [ 517.975305][ T3327] EXT4-fs (loop3): unmounting filesystem. [ 518.145627][ T4919] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 518.185575][ T758] usb 3-1: Using ep0 maxpacket: 16 [ 518.242290][ T6069] EXT4-fs (loop0): unmounting filesystem. [ 518.499928][ T6627] loop3: detected capacity change from 0 to 512 [ 518.512816][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 518.558969][ T6627] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2760: inode #11: comm syz.3.1816: corrupted xattr block 95 [ 518.573454][ T6627] EXT4-fs (loop3): Remounting filesystem read-only [ 518.580359][ T6627] EXT4-fs error (device loop3): ext4_evict_inode:290: comm syz.3.1816: couldn't truncate inode 11 (err -30) [ 518.592953][ T758] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.605404][ T6627] EXT4-fs (loop3): 1 orphan inode deleted [ 518.611145][ T6627] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 518.735026][ T758] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.780468][ T758] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 518.818237][ T758] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 518.828408][ T758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.944458][ T758] usb 3-1: config 0 descriptor?? [ 519.027942][ T3327] EXT4-fs (loop3): unmounting filesystem. [ 519.185223][ T4919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.195859][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 519.218016][ T24] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 519.245043][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.365063][ T4919] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 519.374665][ T6639] loop0: detected capacity change from 0 to 128 [ 519.394547][ T4919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.404634][ T4919] usb 2-1: Product: syz [ 519.408842][ T4919] usb 2-1: Manufacturer: syz [ 519.417890][ T758] microsoft 0003:045E:07DA.0023: No inputs registered, leaving [ 519.433728][ T4919] usb 2-1: SerialNumber: syz [ 519.437752][ T758] microsoft 0003:045E:07DA.0023: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 519.445712][ T4919] usb 2-1: config 0 descriptor?? [ 519.450033][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 519.474990][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.482908][ T24] usb 5-1: Product: 邮홪ᨥಘ쐓⠠䠘쿀鑥㝤弰곯릪乣ඳ⻴䐜ﮚ⿔瓾뵉䬾缚딘琔晇赗헺ꋠＨ⊁덋賨稦᭯讔㞤猉鐈퓙آⓇ줎驣䘈䱝鋴떨炞駥꩑젇 [ 519.502014][ T758] microsoft 0003:045E:07DA.0023: no inputs found [ 519.508513][ T758] microsoft 0003:045E:07DA.0023: could not initialize ff, continuing anyway [ 519.519778][ T24] usb 5-1: Manufacturer: ᠉ [ 519.524255][ T24] usb 5-1: SerialNumber: syz [ 519.631788][ T323] usb 3-1: USB disconnect, device number 35 [ 519.728205][ T4919] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 519.739627][ T4919] usb 2-1: USB disconnect, device number 26 [ 519.964947][ T24] usb 5-1: 0:2 : does not exist [ 519.986525][ T24] usb 5-1: USB disconnect, device number 33 [ 520.074674][ T855] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 520.178527][ T6653] incfs: Options parsing error. -22 [ 520.183906][ T6653] incfs: mount failed -22 [ 520.192710][ T6651] device syzkaller0 entered promiscuous mode [ 520.255442][ T6658] loop1: detected capacity change from 0 to 512 [ 520.280605][ T6658] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 520.290014][ T6658] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038 (0x7fffffff) [ 520.314715][ T855] usb 1-1: Using ep0 maxpacket: 8 [ 520.417630][ T5026] EXT4-fs (loop1): unmounting filesystem. [ 520.444587][ T855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.455740][ T855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.466665][ T855] usb 1-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 520.475692][ T855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.485255][ T855] usb 1-1: config 0 descriptor?? [ 520.511553][ T5024] EXT4-fs (loop4): unmounting filesystem. [ 521.250733][ T6676] loop1: detected capacity change from 0 to 128 [ 521.427015][ T6676] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 521.437871][ T6676] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 521.968071][ T6680] input: syz1 as /devices/virtual/input/input33 [ 522.008617][ T5026] EXT4-fs (loop1): unmounting filesystem. [ 522.014431][ T4919] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 522.022121][ T855] wacom 0003:056A:00E5.0024: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.0-1/input0 [ 522.165271][ T6686] loop3: detected capacity change from 0 to 512 [ 522.172017][ T6686] ext4: Unknown parameter 'nouser_xattr' [ 522.206306][ T758] usb 1-1: USB disconnect, device number 23 [ 522.373683][ T4919] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 522.391108][ T4919] usb 3-1: config 0 has no interface number 1 [ 522.454003][ T4919] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 522.473699][ T4919] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 523.243635][ T6681] loop4: detected capacity change from 0 to 128 [ 523.333267][ T4919] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 523.352739][ T4919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 523.392760][ T6697] loop3: detected capacity change from 0 to 512 [ 523.414476][ T4919] usb 3-1: config 0 descriptor?? [ 523.433324][ T4919] usb 3-1: can't set config #0, error -71 [ 523.439126][ T6697] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1840: casefold flag without casefold feature [ 523.440068][ T4919] usb 3-1: USB disconnect, device number 36 [ 523.476373][ T6697] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.1840: missing EA_INODE flag [ 523.493191][ T6697] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1840: error while reading EA inode 2 err=-117 [ 523.506309][ T6697] EXT4-fs (loop3): 1 orphan inode deleted [ 523.511930][ T6697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 523.598465][ T3327] EXT4-fs (loop3): unmounting filesystem. [ 523.626478][ T6706] loop0: detected capacity change from 0 to 512 [ 523.639708][ T6708] loop3: detected capacity change from 0 to 128 [ 523.678985][ T6708] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 523.690615][ T6706] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 523.705615][ T6706] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038 (0x7fffffff) [ 523.716935][ T6708] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 523.822772][ T4919] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 524.833845][ T6069] EXT4-fs (loop0): unmounting filesystem. [ 524.972299][ T799] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 525.118423][ T6726] loop4: detected capacity change from 0 to 128 [ 525.232995][ T6726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 525.244083][ T6726] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 525.592282][ T799] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 525.620004][ T799] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 525.694966][ T799] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 525.868877][ T4919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.938338][ T5024] EXT4-fs (loop4): unmounting filesystem. [ 526.041819][ T4919] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 526.061146][ T4919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.071264][ T4919] usb 3-1: Product: syz [ 526.075365][ T4919] usb 3-1: Manufacturer: syz [ 526.089964][ T4919] usb 3-1: SerialNumber: syz [ 526.104048][ T4919] usb 3-1: config 0 descriptor?? [ 526.160710][ T6732] input: syz1 as /devices/virtual/input/input37 [ 526.304680][ T799] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 526.314352][ T799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.322916][ T799] usb 4-1: Product: 邮홪ᨥಘ쐓⠠䠘쿀鑥㝤弰곯릪乣ඳ⻴䐜ﮚ⿔瓾뵉䬾缚딘琔晇赗헺ꋠＨ⊁덋賨稦᭯讔㞤猉鐈퓙آⓇ줎驣䘈䱝鋴떨炞駥꩑젇 [ 526.342358][ T799] usb 4-1: Manufacturer: ᠉ [ 526.347139][ T799] usb 4-1: SerialNumber: syz [ 526.978835][ T4919] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 527.074070][ T4919] usb 3-1: USB disconnect, device number 37 [ 527.132169][ T6724] loop0: detected capacity change from 0 to 40427 [ 527.153786][ T6724] F2FS-fs (loop0): invalid crc value [ 527.171292][ T6724] F2FS-fs (loop0): Found nat_bits in checkpoint [ 527.271409][ T799] usb 4-1: 0:2 : does not exist [ 527.284961][ T799] usb 4-1: USB disconnect, device number 34 [ 527.320370][ T6724] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 527.583750][ T6752] loop2: detected capacity change from 0 to 1024 [ 527.595511][ T6752] EXT4-fs: Ignoring removed orlov option [ 527.605521][ T6752] EXT4-fs (loop2): Test dummy encryption mode enabled [ 527.639098][ T3327] EXT4-fs (loop3): unmounting filesystem. [ 527.681924][ T6752] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 527.890839][ T758] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 528.201905][ T6497] EXT4-fs (loop2): unmounting filesystem. [ 528.348014][ T28] audit: type=1326 audit(1721701194.577:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6763 comm="syz.0.1859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd38f375f19 code=0x0 [ 528.450451][ T24] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 528.530458][ T799] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 528.560552][ T758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 528.570476][ T758] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 528.740703][ T758] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 528.749843][ T758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.757880][ T758] usb 2-1: Product: syz [ 528.762418][ T758] usb 2-1: Manufacturer: syz [ 528.767042][ T758] usb 2-1: SerialNumber: syz [ 528.775536][ T758] usb 2-1: config 0 descriptor?? [ 528.900308][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 528.940327][ T799] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.000291][ T24] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 529.011521][ T24] usb 5-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 529.024706][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 529.046408][ T758] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 529.055140][ T758] usb 2-1: USB disconnect, device number 27 [ 529.140308][ T799] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 529.159677][ T799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.180595][ T799] usb 4-1: Product: syz [ 529.185722][ T799] usb 4-1: Manufacturer: syz [ 529.195643][ T799] usb 4-1: SerialNumber: syz [ 529.202878][ T799] usb 4-1: config 0 descriptor?? [ 529.211214][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 529.214477][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1862'. [ 529.227894][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.237258][ T24] usb 5-1: Product: 㠊 [ 529.249104][ T24] usb 5-1: Manufacturer: ࠧ [ 529.253654][ T24] usb 5-1: SerialNumber: syz [ 529.259490][ T6772] loop0: detected capacity change from 0 to 512 [ 529.270202][ T6772] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.1863: corrupted in-inode xattr [ 529.282588][ T6772] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1863: couldn't read orphan inode 15 (err -117) [ 529.295353][ T6772] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 529.430073][ T6758] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 529.437129][ T6758] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 529.464427][ T799] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 529.472879][ T799] usb 4-1: USB disconnect, device number 35 [ 530.384498][ T28] audit: type=1400 audit(1721701196.618:1269): avc: denied { create } for pid=6754 comm="syz.4.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 531.021784][ T6755] netlink: 'syz.4.1857': attribute type 5 has an invalid length. [ 531.375469][ T6787] loop3: detected capacity change from 0 to 512 [ 531.390334][ T6787] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.1867: invalid block [ 531.418740][ T6787] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1867: invalid indirect mapped block 10 (level 1) [ 531.442785][ T6787] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1867: invalid indirect mapped block 8 (level 1) [ 531.457756][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 531.479795][ T6792] fuse: Bad value for 'fd' [ 531.499220][ T24] usb 5-1: USB disconnect, device number 34 [ 531.508574][ T6069] EXT4-fs (loop0): unmounting filesystem. [ 531.515096][ T6787] EXT4-fs (loop3): 1 truncate cleaned up [ 531.521014][ T6787] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 531.522060][ T24] usblp0: removed [ 531.598643][ T3327] EXT4-fs (loop3): unmounting filesystem. [ 532.142132][ T6804] device syzkaller0 entered promiscuous mode [ 532.216524][ T3804] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 532.758294][ T3804] usb 2-1: Using ep0 maxpacket: 16 [ 532.782255][ T6807] loop2: detected capacity change from 0 to 1024 [ 532.790039][ T6807] EXT4-fs: Ignoring removed orlov option [ 532.796021][ T28] audit: type=1326 audit(1721701199.019:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.3.1874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febbd175f19 code=0x0 [ 532.819228][ T6807] EXT4-fs (loop2): Test dummy encryption mode enabled [ 532.843086][ T6807] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 532.928986][ T3804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.949200][ T3804] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 532.972307][ T3804] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 532.981359][ T3804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.990827][ T3804] usb 2-1: config 0 descriptor?? [ 533.028345][ T323] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 533.035905][ T4919] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 533.355913][ T6497] EXT4-fs (loop2): unmounting filesystem. [ 533.398188][ T4919] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 533.407400][ T323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 533.417735][ T4919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.425896][ T323] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 533.437408][ T4919] usb 1-1: config 0 descriptor?? [ 533.530608][ T3804] microsoft 0003:045E:07DA.0025: No inputs registered, leaving [ 533.564116][ T3804] microsoft 0003:045E:07DA.0025: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 533.575536][ T3804] microsoft 0003:045E:07DA.0025: no inputs found [ 533.582072][ T3804] microsoft 0003:045E:07DA.0025: could not initialize ff, continuing anyway [ 534.702132][ T6813] loop0: detected capacity change from 0 to 256 [ 534.708823][ T323] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 534.737488][ T323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.765786][ T323] usb 5-1: Product: syz [ 534.775927][ T323] usb 5-1: Manufacturer: syz [ 534.788797][ T6827] loop3: detected capacity change from 0 to 512 [ 534.796177][ T323] usb 5-1: SerialNumber: syz [ 534.807863][ T323] usb 5-1: config 0 descriptor?? [ 534.816989][ T6827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 534.828213][ T855] usb 2-1: USB disconnect, device number 28 [ 534.851827][ T6827] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2926: inode #16: comm syz.3.1879: corrupted xattr block 8 [ 534.866360][ T6827] EXT4-fs (loop3): Remounting filesystem read-only [ 534.872844][ T6827] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 534.882154][ T6827] EXT4-fs (loop3): 1 orphan inode deleted [ 534.888062][ T6827] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 534.897308][ T6827] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038 (0x7fffffff) [ 534.936818][ T3327] EXT4-fs (loop3): unmounting filesystem. [ 534.987977][ T6836] loop3: detected capacity change from 0 to 1024 [ 534.995415][ T6836] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 535.012304][ T6836] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 535.082927][ T323] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 535.092117][ T323] usb 5-1: USB disconnect, device number 35 [ 535.257192][ T4919] usb 1-1: Cannot read MAC address [ 535.262666][ T4919] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 535.278696][ T4919] usb 1-1: USB disconnect, device number 24 [ 538.167689][ T6859] device syzkaller0 entered promiscuous mode [ 538.864221][ T6864] fuse: Bad value for 'fd' [ 538.881337][ T28] audit: type=1400 audit(1721701205.102:1271): avc: denied { accept } for pid=6857 comm="syz.1.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 538.938929][ T6863] tipc: Enabling of bearer rejected, failed to enable media [ 538.963139][ T6870] loop2: detected capacity change from 0 to 512 [ 538.987382][ T6870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 539.011280][ T6873] input: syz1 as /devices/virtual/input/input39 [ 539.022638][ T6870] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2926: inode #16: comm syz.2.1892: corrupted xattr block 8 [ 539.038970][ T6870] EXT4-fs (loop2): Remounting filesystem read-only [ 539.052901][ T6870] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 539.072879][ T6870] EXT4-fs (loop2): 1 orphan inode deleted [ 539.125975][ T6870] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 539.155299][ T6870] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038 (0x7fffffff) [ 539.181318][ T6882] fuse: Bad value for 'fd' [ 539.585221][ T3804] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 539.987400][ T6497] EXT4-fs (loop2): unmounting filesystem. [ 540.064696][ T3804] usb 5-1: Using ep0 maxpacket: 16 [ 540.098491][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1897'. [ 540.108064][ T6888] netlink: 'syz.1.1897': attribute type 1 has an invalid length. [ 540.264392][ T3327] EXT4-fs (loop3): unmounting filesystem. [ 540.413382][ T6899] loop0: detected capacity change from 0 to 512 [ 540.438240][ T6899] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 540.475684][ T3804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.486582][ T3804] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 540.500499][ T6899] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1901: attempt to clear invalid blocks 1024 len 1 [ 540.510408][ T3804] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 540.518592][ T6899] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1901: invalid indirect mapped block 1819239214 (level 0) [ 540.532906][ T3804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.538143][ T6899] EXT4-fs (loop0): 1 truncate cleaned up [ 540.550220][ T3804] usb 5-1: config 0 descriptor?? [ 540.550848][ T6899] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 542.709761][ T3804] usb 5-1: can't set config #0, error -71 [ 542.716824][ T3804] usb 5-1: USB disconnect, device number 36 [ 542.795677][ T6069] EXT4-fs (loop0): unmounting filesystem. [ 542.965601][ T6915] loop4: detected capacity change from 0 to 128 [ 543.116798][ T6915] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 543.127183][ T6915] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 543.393591][ T6913] loop0: detected capacity change from 0 to 1024 [ 543.492817][ T6913] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 543.592852][ T6913] EXT4-fs (loop0): group descriptors corrupted! [ 543.781054][ T6920] loop3: detected capacity change from 0 to 512 [ 543.788165][ T6920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 543.798795][ T5024] EXT4-fs (loop4): unmounting filesystem. [ 543.824480][ T6920] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2926: inode #16: comm syz.3.1907: corrupted xattr block 8 [ 543.938811][ T6928] loop0: detected capacity change from 0 to 256 [ 543.955375][ T6920] EXT4-fs (loop3): Remounting filesystem read-only [ 543.976562][ T6920] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 544.047030][ T6932] loop2: detected capacity change from 0 to 128 [ 544.048437][ T6920] EXT4-fs (loop3): 1 orphan inode deleted [ 544.059290][ T6920] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 544.069864][ T6920] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038 (0x7fffffff) [ 544.452100][ T6933] fuse: Bad value for 'fd' [ 545.229961][ T6933] tipc: Started in network mode [ 545.236065][ T6933] tipc: Node identity 7f000001, cluster identity 4711 [ 545.247898][ T6933] tipc: Enabled bearer , priority 10 [ 545.865386][ T6932] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 546.451256][ T758] tipc: Node number set to 2130706433 [ 546.459329][ T6932] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 548.622492][ T3327] EXT4-fs (loop3): unmounting filesystem. [ 548.652606][ T6497] EXT4-fs (loop2): unmounting filesystem. [ 548.849430][ T6945] loop3: detected capacity change from 0 to 1024 [ 548.879712][ T6945] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 548.933673][ T6945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 549.338846][ T6954] loop2: detected capacity change from 0 to 1024 [ 549.346904][ T6954] EXT4-fs: Ignoring removed orlov option [ 551.006451][ T6954] EXT4-fs (loop2): Test dummy encryption mode enabled [ 551.194793][ T6954] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 551.613524][ T6497] EXT4-fs (loop2): unmounting filesystem. [ 551.758798][ T855] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 552.118773][ T855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.150279][ T855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.190772][ T855] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 552.211013][ T855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.242579][ T855] usb 1-1: config 0 descriptor?? [ 552.352193][ T199] device bridge_slave_1 left promiscuous mode [ 552.368857][ T199] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.377265][ T199] device bridge_slave_0 left promiscuous mode [ 552.406797][ T199] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.424451][ T199] device veth1_macvtap left promiscuous mode [ 552.477014][ T199] device veth0_vlan left promiscuous mode [ 553.349999][ T855] hid (null): bogus close delimiter [ 553.459087][ T855] usb 1-1: language id specifier not provided by device, defaulting to English [ 554.048534][ T3327] EXT4-fs (loop3): unmounting filesystem. [ 554.617567][ T855] uclogic 0003:256C:006D.0026: v1 frame probing failed: -71 [ 554.721218][ T855] uclogic 0003:256C:006D.0026: failed probing parameters: -71 [ 554.731911][ T855] uclogic: probe of 0003:256C:006D.0026 failed with error -71 [ 554.741215][ T855] usb 1-1: USB disconnect, device number 25 [ 554.756220][ T7001] loop4: detected capacity change from 0 to 16 [ 554.779661][ T7001] erofs: (device loop4): mounted with root inode @ nid 36. [ 554.847842][ T7001] syz.4.1932: attempt to access beyond end of device [ 554.847842][ T7001] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 554.866135][ T6969] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.877197][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.888481][ T6969] device bridge_slave_0 entered promiscuous mode [ 554.900131][ T6969] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.917232][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.925911][ T6969] device bridge_slave_1 entered promiscuous mode [ 555.038030][ T6995] loop1: detected capacity change from 0 to 128 [ 555.391963][ T6969] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.399157][ T6969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.406847][ T6969] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.413838][ T6969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.639375][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.657943][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.668555][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 555.684249][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 555.861620][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 555.879724][ T855] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.886743][ T855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.276882][ T758] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 556.418840][ T7031] loop1: detected capacity change from 0 to 512 [ 556.676711][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 556.685355][ T855] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.692323][ T855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.807314][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 556.826082][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 556.845341][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 556.864192][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 556.907111][ T7035] loop0: detected capacity change from 0 to 16 [ 556.923161][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 556.932943][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 556.943628][ T7035] erofs: (device loop0): mounted with root inode @ nid 36. [ 556.946404][ T758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.968245][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 556.976283][ T758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.978211][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 556.994915][ T758] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 556.995130][ T7035] syz.0.1943: attempt to access beyond end of device [ 556.995130][ T7035] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 557.016170][ T758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.022171][ T6969] device veth0_vlan entered promiscuous mode [ 557.027090][ T758] usb 4-1: config 0 descriptor?? [ 557.042278][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 557.049524][ T855] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 557.064491][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 557.099702][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 557.118032][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 557.138185][ T6969] device veth1_macvtap entered promiscuous mode [ 557.156455][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 557.164975][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 557.175025][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 557.209688][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 557.227232][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 557.316231][ T855] usb 2-1: Using ep0 maxpacket: 8 [ 557.466124][ T855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 557.490642][ T855] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 557.499803][ T855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.513103][ T7053] syz.2.1950 uses obsolete (PF_INET,SOCK_PACKET) [ 557.523148][ T855] usb 2-1: config 0 descriptor?? [ 557.588513][ T7044] netlink: 'syz.0.1947': attribute type 4 has an invalid length. [ 557.602069][ T855] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 557.610299][ T855] usb 2-1: Detected SIO [ 557.614391][ T855] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 557.622872][ T855] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 557.628688][ T758] arvo 0003:1E7D:30D4.0027: unknown main item tag 0x0 [ 557.645882][ T758] arvo 0003:1E7D:30D4.0027: unknown main item tag 0x0 [ 557.928600][ T758] arvo 0003:1E7D:30D4.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 558.715539][ T4919] usb 2-1: USB disconnect, device number 29 [ 558.717261][ T7061] loop0: detected capacity change from 0 to 256 [ 558.737781][ T4919] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 558.755182][ T4919] ftdi_sio 2-1:0.0: device disconnected [ 558.767742][ T7061] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 558.822729][ T7063] device syzkaller0 entered promiscuous mode [ 558.970576][ T7053] loop2: detected capacity change from 0 to 8192 [ 558.993483][ T4919] usb 4-1: USB disconnect, device number 36 [ 559.037782][ T7053] loop2: p2 p4[EZD] [ 559.051895][ T7053] loop2: p4 start 16779520 is beyond EOD, truncated [ 559.465840][ T7094] loop2: detected capacity change from 0 to 256 [ 559.487101][ T7094] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 559.609548][ T7076] loop0: detected capacity change from 0 to 128 [ 560.580844][ T7099] device syzkaller0 entered promiscuous mode [ 560.725389][ T7116] loop2: detected capacity change from 0 to 512 [ 560.732651][ T7116] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 560.770329][ T7116] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.1972: corrupted in-inode xattr [ 560.784829][ T7116] EXT4-fs (loop2): Remounting filesystem read-only [ 560.791767][ T7116] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1972: couldn't read orphan inode 15 (err -117) [ 560.831417][ T7116] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 560.853063][ T7116] EXT4-fs (loop2): unmounting filesystem. [ 560.944670][ T7133] loop0: detected capacity change from 0 to 256 [ 560.967950][ T7133] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 561.073862][ T7138] loop0: detected capacity change from 0 to 2048 [ 561.082285][ T7116] loop2: detected capacity change from 0 to 512 [ 561.089701][ T7116] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 561.103767][ T7138] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 561.105731][ T7116] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.1972: casefold flag without casefold feature [ 561.114117][ T323] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 561.138579][ T7116] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.1972: casefold flag without casefold feature [ 561.157317][ T7116] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.1972: ea_inode with extended attributes [ 561.177564][ T7116] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1972: error while reading EA inode 12 err=-117 [ 561.197414][ T7116] EXT4-fs (loop2): 1 orphan inode deleted [ 561.205408][ T7116] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 561.350008][ T6969] EXT4-fs (loop2): unmounting filesystem. [ 562.330010][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.341073][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.351008][ T323] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 562.360339][ T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.386766][ T323] usb 4-1: config 0 descriptor?? [ 562.427311][ T6069] EXT4-fs (loop0): unmounting filesystem. [ 563.043289][ T7155] device syzkaller0 entered promiscuous mode [ 563.572381][ T323] arvo 0003:1E7D:30D4.0028: unknown main item tag 0x0 [ 563.579181][ T323] arvo 0003:1E7D:30D4.0028: unknown main item tag 0x0 [ 563.588310][ T323] arvo 0003:1E7D:30D4.0028: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 563.714457][ T7172] loop1: detected capacity change from 0 to 512 [ 563.723619][ T7172] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 563.756868][ T7172] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.1992: corrupted in-inode xattr [ 563.769245][ T7172] EXT4-fs (loop1): Remounting filesystem read-only [ 563.775797][ T7172] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1992: couldn't read orphan inode 15 (err -117) [ 563.803277][ T7172] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 563.827271][ T28] audit: type=1400 audit(1721701230.075:1272): avc: denied { getopt } for pid=7179 comm="syz.0.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 563.829815][ T7172] EXT4-fs (loop1): unmounting filesystem. [ 563.897450][ T7186] loop0: detected capacity change from 0 to 256 [ 563.945765][ T317] usb 4-1: USB disconnect, device number 37 [ 564.154766][ T7195] loop1: detected capacity change from 0 to 512 [ 564.166672][ T7195] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 564.195345][ T7195] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1992: casefold flag without casefold feature [ 564.455607][ T7195] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1992: casefold flag without casefold feature [ 564.530339][ T7195] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1992: ea_inode with extended attributes [ 564.664817][ T7195] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1992: error while reading EA inode 12 err=-117 [ 565.061152][ T7195] EXT4-fs (loop1): 1 orphan inode deleted [ 565.067139][ T7195] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 565.093396][ T7199] device syzkaller0 entered promiscuous mode [ 565.999698][ T7206] netlink: 'syz.2.2004': attribute type 2 has an invalid length. [ 566.048490][ T5026] EXT4-fs (loop1): unmounting filesystem. [ 566.264386][ T7225] loop4: detected capacity change from 0 to 512 [ 566.281195][ T7225] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 566.320619][ T7225] EXT4-fs (loop4): failed to initialize system zone (-117) [ 566.331611][ T7225] EXT4-fs (loop4): mount failed [ 566.532733][ T7239] device syzkaller0 entered promiscuous mode [ 566.626114][ T7244] loop4: detected capacity change from 0 to 512 [ 566.632296][ T7246] netlink: 'syz.1.2019': attribute type 2 has an invalid length. [ 566.643435][ T7244] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 566.957833][ T7244] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.2018: corrupted in-inode xattr [ 567.045589][ T7244] EXT4-fs (loop4): Remounting filesystem read-only [ 567.092983][ T7244] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2018: couldn't read orphan inode 15 (err -117) [ 567.170751][ T7244] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 567.273242][ T7244] EXT4-fs (loop4): unmounting filesystem. [ 567.437725][ T7254] device batadv_slave_1 entered promiscuous mode [ 567.447843][ T7254] bridge0: port 4(syz_tun) entered disabled state [ 567.457023][ T7254] device syz_tun left promiscuous mode [ 567.462561][ T7254] bridge0: port 4(syz_tun) entered disabled state [ 567.481192][ T855] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 567.558508][ T7253] device batadv_slave_1 left promiscuous mode [ 567.576527][ T7257] loop0: detected capacity change from 0 to 256 [ 567.593354][ T7244] loop4: detected capacity change from 0 to 512 [ 567.601197][ T7244] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 567.617393][ T7244] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.2018: casefold flag without casefold feature [ 567.631304][ T7244] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.2018: casefold flag without casefold feature [ 567.644604][ T7244] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.2018: ea_inode with extended attributes [ 567.658167][ T7244] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2018: error while reading EA inode 12 err=-117 [ 567.672499][ T7244] EXT4-fs (loop4): 1 orphan inode deleted [ 567.678114][ T7244] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 567.709243][ T5024] EXT4-fs (loop4): unmounting filesystem. [ 567.800540][ T7269] loop3: detected capacity change from 0 to 1024 [ 567.808382][ T7269] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 568.242110][ T7269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2026'. [ 568.660502][ T855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.671377][ T855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.698860][ T7277] loop1: detected capacity change from 0 to 512 [ 568.706584][ T7277] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 568.722003][ T7277] EXT4-fs (loop1): failed to initialize system zone (-117) [ 568.729420][ T7277] EXT4-fs (loop1): mount failed [ 568.763560][ T855] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 568.773180][ T855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.788017][ T855] usb 3-1: config 0 descriptor?? [ 568.795582][ T7283] loop0: detected capacity change from 0 to 512 [ 568.836431][ T7283] EXT4-fs (loop0): 1 orphan inode deleted [ 568.842285][ T7283] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 568.851366][ T7283] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038 (0x7fffffff) [ 568.883921][ T7283] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 568.893808][ T7283] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.2029: mark_inode_dirty error [ 568.905551][ T7283] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 568.918452][ T7283] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.2029: mark_inode_dirty error [ 568.961844][ T7289] device syzkaller0 entered promiscuous mode [ 569.130364][ T7283] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 569.150651][ T7283] EXT4-fs error (device loop0): ext4_punch_hole:4142: inode #16: comm syz.0.2029: mark_inode_dirty error [ 569.579601][ T6069] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 569.994981][ T855] arvo 0003:1E7D:30D4.0029: unknown main item tag 0x0 [ 570.001848][ T855] arvo 0003:1E7D:30D4.0029: unknown main item tag 0x0 [ 570.010308][ T855] arvo 0003:1E7D:30D4.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 570.998077][ T6069] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 571.017824][ T6069] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 571.031770][ T6069] EXT4-fs (loop0): unmounting filesystem. [ 571.063560][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2037'. [ 571.103693][ T6069] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 571.110865][ T855] arvo 0003:1E7D:30D4.0029: couldn't init struct arvo_device [ 571.122486][ T855] arvo 0003:1E7D:30D4.0029: couldn't install keyboard [ 571.130583][ T855] arvo: probe of 0003:1E7D:30D4.0029 failed with error -71 [ 571.139726][ T855] usb 3-1: USB disconnect, device number 38 [ 571.187217][ T7311] loop4: detected capacity change from 0 to 512 [ 571.217114][ T7313] loop1: detected capacity change from 0 to 256 [ 571.222607][ T7317] device batadv_slave_1 entered promiscuous mode [ 571.453515][ T7316] device batadv_slave_1 left promiscuous mode [ 572.311852][ T308] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 572.522831][ T7337] loop2: detected capacity change from 0 to 512 [ 572.543456][ T7338] 9pnet_fd: Insufficient options for proto=fd [ 572.590892][ T7321] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.597804][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.614950][ T7321] device bridge_slave_0 entered promiscuous mode [ 572.622967][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.630140][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.635827][ T308] usb 5-1: Using ep0 maxpacket: 8 [ 572.638731][ T7321] device bridge_slave_1 entered promiscuous mode [ 572.653150][ T7337] EXT4-fs (loop2): 1 orphan inode deleted [ 572.659068][ T7337] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 572.664404][ T7343] binder: 7342:7343 ioctl c0306201 0 returned -14 [ 572.667993][ T28] audit: type=1400 audit(1721701238.910:1273): avc: denied { read } for pid=7342 comm="syz.1.2050" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 572.680713][ T7337] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038 (0x7fffffff) [ 572.698975][ T28] audit: type=1400 audit(1721701238.910:1274): avc: denied { ioctl } for pid=7342 comm="syz.1.2050" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 572.966823][ T7346] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 573.075236][ T7346] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.2049: mark_inode_dirty error [ 573.129822][ T7346] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 573.161344][ T7346] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.2049: mark_inode_dirty error [ 573.175163][ T7346] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 573.186920][ T7346] EXT4-fs error (device loop2): ext4_punch_hole:4142: inode #16: comm syz.2.2049: mark_inode_dirty error [ 573.458123][ T6969] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 573.510539][ T6969] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 573.538199][ T6969] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #16: comm syz-executor: mark_inode_dirty error [ 573.553315][ T6969] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 573.587778][ T6969] EXT4-fs (loop2): unmounting filesystem. [ 573.600389][ T308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 573.610729][ T308] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 573.619995][ T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.630391][ T308] usb 5-1: config 0 descriptor?? [ 573.648276][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2053'. [ 573.672978][ T308] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 573.688646][ T199] device bridge_slave_1 left promiscuous mode [ 573.695331][ T308] usb 5-1: Detected SIO [ 573.699364][ T308] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 573.716881][ T199] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.731124][ T199] device bridge_slave_0 left promiscuous mode [ 573.741270][ T308] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 573.749393][ T199] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.789800][ T199] device veth1_macvtap left promiscuous mode [ 573.795880][ T199] device veth0_vlan left promiscuous mode [ 573.907561][ T855] usb 5-1: USB disconnect, device number 37 [ 573.915765][ T855] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 573.935623][ T855] ftdi_sio 5-1:0.0: device disconnected [ 574.150362][ T308] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 574.253258][ T7360] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.261140][ T7360] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.269202][ T7360] device bridge_slave_0 entered promiscuous mode [ 574.300877][ T7360] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.306103][ T7370] loop1: detected capacity change from 0 to 512 [ 574.307788][ T7360] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.309164][ T7360] device bridge_slave_1 entered promiscuous mode [ 574.343835][ T7370] EXT4-fs (loop1): 1 orphan inode deleted [ 574.350295][ T7370] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 574.359906][ T7370] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038 (0x7fffffff) [ 574.471170][ T7374] binder: 7373:7374 ioctl c0306201 0 returned -14 [ 574.477279][ T7370] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 574.488261][ T7370] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.2061: mark_inode_dirty error [ 574.500526][ T7370] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 574.510701][ T7370] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.2061: mark_inode_dirty error [ 574.510975][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.536808][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.539986][ T7370] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 574.547185][ T308] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 574.559599][ T7370] EXT4-fs error (device loop1): ext4_punch_hole:4142: inode #16: comm syz.1.2061: mark_inode_dirty error [ 574.565619][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.623133][ T308] usb 4-1: config 0 descriptor?? [ 574.642584][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 574.644696][ T5026] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 574.650696][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 574.674457][ T5026] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 574.675307][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 574.684491][ T5026] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 574.693960][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 574.716606][ T5026] EXT4-fs (loop1): unmounting filesystem. [ 574.718095][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.729095][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.739262][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 574.750662][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 574.758927][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.765835][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.786631][ T5026] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 574.814606][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 574.859948][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 574.868777][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 574.905998][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 574.917016][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 574.995085][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 575.004303][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 575.041895][ T7321] device veth0_vlan entered promiscuous mode [ 575.053335][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 575.062959][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 575.075822][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 575.084096][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 575.114936][ T308] isku 0003:1E7D:319C.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 575.167056][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 575.178305][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 575.189979][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 575.202232][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 575.214040][ T7321] device veth1_macvtap entered promiscuous mode [ 575.225162][ T199] device bridge_slave_1 left promiscuous mode [ 575.233511][ T199] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.242670][ T199] device bridge_slave_0 left promiscuous mode [ 575.248796][ T199] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.258349][ T199] device veth1_macvtap left promiscuous mode [ 575.264753][ T199] device veth0_vlan left promiscuous mode [ 575.523559][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 575.531866][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 575.532443][ T6] usb 4-1: USB disconnect, device number 38 [ 575.541023][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 575.563009][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.569959][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.599148][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 575.607445][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 575.616294][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 575.625247][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.632272][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.641034][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 575.649263][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 575.657590][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 575.666181][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 575.675045][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 575.683511][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 575.720264][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 575.728821][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 575.821135][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 575.829794][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 575.883095][ T7392] loop4: detected capacity change from 0 to 512 [ 576.039187][ T7360] device veth0_vlan entered promiscuous mode [ 576.045723][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 576.054738][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 576.071099][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 576.078840][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 577.513917][ T855] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 577.548352][ T7377] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.555485][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.564201][ T7377] device bridge_slave_0 entered promiscuous mode [ 577.572213][ T7377] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.579118][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.587584][ T7377] device bridge_slave_1 entered promiscuous mode [ 577.739734][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 577.750328][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 577.751593][ T7410] loop3: detected capacity change from 0 to 512 [ 577.790655][ T199] tipc: Left network mode [ 578.019858][ T7410] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 578.124924][ T7410] EXT4-fs (loop3): 1 truncate cleaned up [ 578.140726][ T7410] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 578.529067][ T855] usb 5-1: Using ep0 maxpacket: 8 [ 578.643699][ T3327] EXT4-fs (loop3): unmounting filesystem. [ 578.650319][ T855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 578.666115][ T855] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 578.675484][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.687093][ T7360] device veth1_macvtap entered promiscuous mode [ 578.709990][ T855] usb 5-1: config 0 descriptor?? [ 578.751496][ T855] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 578.759522][ T855] usb 5-1: Detected SIO [ 578.764377][ T855] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 578.780959][ T855] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 578.794143][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 578.811467][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 578.820028][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 578.846377][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 578.861209][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 578.879108][ T855] usb 5-1: USB disconnect, device number 38 [ 578.898237][ T855] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 578.907820][ T855] ftdi_sio 5-1:0.0: device disconnected [ 580.099982][ T7446] loop3: detected capacity change from 0 to 512 [ 580.131653][ T7446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 580.175825][ T7446] EXT4-fs (loop3): 1 truncate cleaned up [ 580.190597][ T7446] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 580.212135][ T7450] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2086'. [ 580.305427][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 580.314613][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 580.331492][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 580.336795][ T3327] EXT4-fs (loop3): unmounting filesystem. [ 580.340689][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 580.354194][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.361205][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.369130][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 580.377876][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 580.386391][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.393309][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.404237][ T199] device bridge_slave_1 left promiscuous mode [ 580.429642][ T199] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.449925][ T199] device bridge_slave_0 left promiscuous mode [ 580.465344][ T199] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.477292][ T199] device veth1_macvtap left promiscuous mode [ 580.487787][ T199] device veth0_vlan left promiscuous mode [ 580.551619][ T7463] incfs: Can't find or create .index dir in ./file0 [ 580.556552][ T7464] loop3: detected capacity change from 0 to 512 [ 580.570453][ T7463] incfs: mount failed -14 [ 580.778971][ T7453] loop2: detected capacity change from 0 to 40427 [ 580.786206][ T7453] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 580.794000][ T7453] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 580.807993][ T7453] F2FS-fs (loop2): Found nat_bits in checkpoint [ 580.815774][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 580.850722][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 580.859039][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 580.886244][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 580.897998][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 580.910333][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 580.923219][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 580.932770][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 580.964979][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 580.975661][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 580.986750][ T7377] device veth0_vlan entered promiscuous mode [ 580.994942][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 581.004182][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 581.037001][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 581.046170][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 581.063038][ T7377] device veth1_macvtap entered promiscuous mode [ 581.108939][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 581.117922][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 581.127689][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 581.161404][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 581.180400][ T7453] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 581.187354][ T7453] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 581.230195][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 581.250253][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 581.421017][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 581.461025][ T24] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 581.539949][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.724973][ T24] usb 4-1: config 0 descriptor?? [ 581.798260][ T24] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 581.850370][ T24] usb 4-1: Detected SIO [ 582.134880][ T7488] loop1: detected capacity change from 0 to 512 [ 582.154046][ T7488] EXT4-fs: Ignoring removed nobh option [ 582.180968][ T7488] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 582.188310][ T24] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 582.194153][ T7488] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2098: attempt to clear invalid blocks 2 len 1 [ 582.203285][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 582.227252][ T7488] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 582.245805][ T24] usb 4-1: USB disconnect, device number 39 [ 582.270854][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 582.277989][ T7488] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2098: invalid indirect mapped block 1819239214 (level 0) [ 582.292678][ T24] ftdi_sio 4-1:0.0: device disconnected [ 582.300671][ T7488] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2098: invalid indirect mapped block 1819239214 (level 1) [ 582.318624][ T7488] EXT4-fs (loop1): 1 truncate cleaned up [ 582.324846][ T7488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 582.498442][ T7501] loop4: detected capacity change from 0 to 2048 [ 582.516999][ T7504] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2097'. [ 582.541505][ T7501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 582.601973][ T7509] loop2: detected capacity change from 0 to 256 [ 582.698523][ T5024] EXT4-fs (loop4): unmounting filesystem. [ 582.823916][ T7519] loop2: detected capacity change from 0 to 1024 [ 582.862217][ T7519] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 582.869907][ T7519] EXT4-fs (loop2): write access will be enabled during recovery [ 582.907738][ T7519] JBD2: no valid journal superblock found [ 582.920032][ T7519] EXT4-fs (loop2): error loading journal [ 583.218195][ T7535] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 583.266967][ T7534] cgroup: name respecified [ 583.311463][ T7534] loop0: detected capacity change from 0 to 512 [ 583.344571][ T7532] incfs: Can't find or create .index dir in ./file0 [ 583.355220][ T7532] incfs: mount failed -14 [ 583.377780][ T7534] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 583.835584][ T7534] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 584.141241][ T7534] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 584.148573][ T28] audit: type=1400 audit(1721701250.400:1275): avc: denied { remount } for pid=7533 comm="syz.0.2115" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 584.189116][ T7541] loop4: detected capacity change from 0 to 512 [ 584.200373][ T7534] EXT4-fs error (device loop0): __ext4_remount:6412: comm syz.0.2115: Abort forced by user [ 584.241093][ T7534] EXT4-fs (loop0): Remounting filesystem read-only [ 584.322215][ T7321] EXT4-fs (loop0): unmounting filesystem. [ 584.373476][ T7377] EXT4-fs (loop1): unmounting filesystem. [ 584.383530][ T7514] loop3: detected capacity change from 0 to 40427 [ 584.396426][ T7514] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 584.404475][ T7514] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 584.418175][ T7514] F2FS-fs (loop3): Found nat_bits in checkpoint [ 584.487277][ T7554] loop0: detected capacity change from 0 to 512 [ 584.498143][ T7554] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.2121: casefold flag without casefold feature [ 584.511181][ T7554] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.2121: missing EA_INODE flag [ 584.523186][ T7554] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2121: error while reading EA inode 12 err=-117 [ 584.527588][ T7514] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 584.536160][ T7554] EXT4-fs (loop0): 1 orphan inode deleted [ 584.542885][ T7514] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 584.548076][ T7554] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 584.564103][ T3804] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 584.580343][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 584.621004][ T7321] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 36: comm syz-executor: lblock 0 mapped to illegal pblock 36 (length 1) [ 584.645733][ T7321] EXT4-fs (loop0): unmounting filesystem. [ 584.690508][ T6] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 584.850228][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 584.924383][ T7559] loop3: detected capacity change from 0 to 1024 [ 584.932736][ T7559] EXT4-fs (loop3): INFO: recovery required on readonly filesystem [ 584.940698][ T3804] usb 3-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 584.949360][ T3804] usb 3-1: config 45 has an invalid descriptor of length 0, skipping remainder of the config [ 584.959522][ T7559] EXT4-fs (loop3): write access will be enabled during recovery [ 584.960494][ T6] usb 2-1: device descriptor read/64, error -71 [ 584.967345][ T7559] JBD2: no valid journal superblock found [ 584.979200][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 584.983954][ T7559] EXT4-fs (loop3): error loading journal [ 584.988850][ T3804] usb 3-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 585.003838][ T24] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 585.013081][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.021276][ T3804] usb 3-1: config 45 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 585.035670][ T24] usb 5-1: config 0 descriptor?? [ 585.040754][ T3804] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 585.049728][ T3804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.102169][ T3804] usbhid 3-1:45.0: couldn't find an input interrupt endpoint [ 585.115733][ T24] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 585.124882][ T24] usb 5-1: Detected SIO [ 585.128925][ T24] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 585.137224][ T24] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 585.193932][ T7560] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.201524][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.209635][ T7560] device bridge_slave_0 entered promiscuous mode [ 585.223135][ T7560] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.230737][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.239729][ T7560] device bridge_slave_1 entered promiscuous mode [ 585.320868][ T317] usb 5-1: USB disconnect, device number 39 [ 585.329017][ T317] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 585.338770][ T317] ftdi_sio 5-1:0.0: device disconnected [ 585.357210][ T3031] device bridge_slave_1 left promiscuous mode [ 585.363441][ T3031] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.370467][ T6] usb 2-1: device descriptor read/64, error -71 [ 585.377167][ T3031] device bridge_slave_0 left promiscuous mode [ 585.383455][ T3031] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.392815][ T3031] device veth1_macvtap left promiscuous mode [ 585.410350][ T3031] device veth0_vlan left promiscuous mode [ 585.731394][ T6] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 586.010421][ T6] usb 2-1: device descriptor read/64, error -71 [ 586.172418][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 586.430264][ T6] usb 2-1: device descriptor read/64, error -71 [ 586.430955][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 586.445033][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 586.456317][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 586.910725][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 587.031057][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.115790][ T6] usb usb2-port1: attempt power cycle [ 587.122322][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 587.131042][ T855] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.137982][ T855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.149649][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 587.157212][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.167491][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 587.228267][ T7560] device veth0_vlan entered promiscuous mode [ 587.254926][ T7560] device veth1_macvtap entered promiscuous mode [ 587.262646][ T24] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 587.274084][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 587.274372][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 587.288486][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 587.295609][ T24] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 587.302564][ T7576] fuse: Unknown parameter 'fd0x0000000000000003' [ 587.320816][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 587.328572][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 587.341092][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 587.357518][ T799] usb 3-1: USB disconnect, device number 39 [ 587.363949][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 587.376067][ T7576] cgroup: name respecified [ 587.378226][ T7578] loop2: detected capacity change from 0 to 512 [ 587.387418][ T7576] loop4: detected capacity change from 0 to 512 [ 587.387574][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 587.402214][ T7578] EXT4-fs: Ignoring removed nobh option [ 587.408451][ T855] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.412202][ T7578] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 587.415503][ T855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.425172][ T7578] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.2130: attempt to clear invalid blocks 2 len 1 [ 587.431551][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 587.445333][ T7578] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 587.451971][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 587.465523][ T7578] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2130: invalid indirect mapped block 1819239214 (level 0) [ 587.486995][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 587.492007][ T7576] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 587.496085][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.512580][ T24] usb 4-1: Product: syz [ 587.513482][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 587.516604][ T24] usb 4-1: Manufacturer: syz [ 587.516650][ T24] usb 4-1: SerialNumber: syz [ 587.529172][ T7576] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038 (0x7fffffff) [ 587.533776][ T7578] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2130: invalid indirect mapped block 1819239214 (level 1) [ 587.556860][ T6] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 587.557816][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 587.587122][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 587.591668][ T7576] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 587.596378][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 587.604902][ T7578] EXT4-fs (loop2): 1 truncate cleaned up [ 587.617740][ T7576] EXT4-fs error (device loop4): __ext4_remount:6412: comm syz.4.2129: Abort forced by user [ 587.625601][ T7578] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 587.639075][ T7576] EXT4-fs (loop4): Remounting filesystem read-only [ 587.649839][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 587.670565][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 587.754711][ T5024] EXT4-fs (loop4): unmounting filesystem. [ 587.830963][ T6] usb 2-1: device descriptor read/8, error -71 [ 588.100464][ T6] usb 2-1: device descriptor read/8, error -71 [ 588.284651][ T28] audit: type=1400 audit(1721701254.540:1276): avc: denied { shutdown } for pid=7599 comm="syz.4.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 588.380428][ T6] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 588.397627][ T7603] loop4: detected capacity change from 0 to 1024 [ 588.422203][ T7603] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 588.429981][ T7603] EXT4-fs (loop4): write access will be enabled during recovery [ 588.439214][ T7603] JBD2: no valid journal superblock found [ 588.445165][ T7603] EXT4-fs (loop4): error loading journal [ 588.560285][ T6] usb 2-1: device descriptor read/8, error -71 [ 588.611600][ T7360] EXT4-fs (loop2): unmounting filesystem. [ 588.625923][ T7606] loop4: detected capacity change from 0 to 1024 [ 588.661943][ T7606] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 588.731343][ T7617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2140'. [ 588.740636][ T24] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 588.741556][ T7606] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 588.788539][ T7620] fuse: Unknown parameter 'fd0x0000000000000003' [ 588.794093][ T7606] xt_TCPMSS: Only works on TCP SYN packets [ 588.795256][ T24] cdc_ncm 4-1:1.0: bind() failure [ 588.807846][ T24] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 588.808762][ T7620] cgroup: name respecified [ 588.814991][ T24] cdc_ncm 4-1:1.1: bind() failure [ 588.828386][ T24] usb 4-1: USB disconnect, device number 40 [ 588.840883][ T7620] loop0: detected capacity change from 0 to 512 [ 588.841025][ T6] usb 2-1: device descriptor read/8, error -71 [ 588.865580][ T7620] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 588.875198][ T7620] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 588.936745][ T7620] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 588.945640][ T7620] EXT4-fs error (device loop0): __ext4_remount:6412: comm syz.0.2141: Abort forced by user [ 588.960050][ T7620] EXT4-fs (loop0): Remounting filesystem read-only [ 588.970403][ T6] usb usb2-port1: unable to enumerate USB device [ 589.025326][ T7560] EXT4-fs (loop0): unmounting filesystem. [ 589.527810][ T7635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2146'. [ 590.250074][ T7641] loop2: detected capacity change from 0 to 512 [ 590.264322][ T7643] loop0: detected capacity change from 0 to 1024 [ 590.282413][ T7641] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 590.300751][ T7643] EXT4-fs (loop0): INFO: recovery required on readonly filesystem [ 590.300845][ T7641] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 590.308976][ T7643] EXT4-fs (loop0): write access will be enabled during recovery [ 590.350402][ T7643] JBD2: no valid journal superblock found [ 590.364207][ T7643] EXT4-fs (loop0): error loading journal [ 590.386367][ T5024] EXT4-fs (loop4): unmounting filesystem. [ 590.509866][ T7651] loop4: detected capacity change from 0 to 512 [ 590.516996][ T7651] EXT4-fs: Ignoring removed nobh option [ 590.529742][ T7360] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 590.544833][ T7651] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 590.559833][ T7360] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 590.588390][ T7651] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.2151: attempt to clear invalid blocks 2 len 1 [ 591.267287][ T7360] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 591.288969][ T7651] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 591.321557][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2153'. [ 591.335491][ T7651] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2151: invalid indirect mapped block 1819239214 (level 0) [ 591.355051][ T7360] EXT4-fs (loop2): unmounting filesystem. [ 591.362595][ T7360] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 591.372426][ T7651] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2151: invalid indirect mapped block 1819239214 (level 1) [ 591.386759][ T7360] EXT4-fs error (device loop2): ext4_quota_off:7053: inode #3: comm syz-executor: mark_inode_dirty error [ 591.399190][ T7651] EXT4-fs (loop4): 1 truncate cleaned up [ 591.405568][ T7360] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 591.413043][ T7651] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 591.439449][ T7360] EXT4-fs error (device loop2): ext4_quota_off:7053: inode #4: comm syz-executor: mark_inode_dirty error [ 591.565716][ T7662] netlink: 'syz.0.2155': attribute type 4 has an invalid length. [ 591.612899][ T7665] fuse: Unknown parameter 'fd0x0000000000000003' [ 591.623867][ T7665] cgroup: name respecified [ 591.633362][ T7665] loop0: detected capacity change from 0 to 512 [ 591.653829][ T7665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 591.662970][ T7665] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 591.679532][ T7665] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 591.688267][ T7665] EXT4-fs error (device loop0): __ext4_remount:6412: comm syz.0.2156: Abort forced by user [ 591.701420][ T7665] EXT4-fs (loop0): Remounting filesystem read-only [ 591.751985][ T7560] EXT4-fs (loop0): unmounting filesystem. [ 592.257849][ T3031] device bridge_slave_1 left promiscuous mode [ 592.264208][ T3031] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.282566][ T3031] device bridge_slave_0 left promiscuous mode [ 592.300441][ T3031] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.326567][ T3031] device veth1_macvtap left promiscuous mode [ 592.333047][ T3031] device veth0_vlan left promiscuous mode [ 592.483019][ T7679] loop3: detected capacity change from 0 to 512 [ 592.584280][ T5024] EXT4-fs (loop4): unmounting filesystem. [ 592.600555][ T7679] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 592.609448][ T7679] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038 (0x7fffffff) [ 593.483823][ T7673] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.501404][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.514257][ T7673] device bridge_slave_0 entered promiscuous mode [ 593.522370][ T7673] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.529655][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.542833][ T7673] device bridge_slave_1 entered promiscuous mode [ 593.557567][ T3327] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /274/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 593.578883][ T3327] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 593.589386][ T3327] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 593.654157][ T5527] EXT4-fs (loop3): unmounting filesystem. [ 593.660472][ T5527] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 593.670105][ T5527] EXT4-fs error (device loop3): ext4_quota_off:7053: inode #3: comm syz.3.1468: mark_inode_dirty error [ 593.681929][ T5527] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 593.692619][ T5527] EXT4-fs error (device loop3): ext4_quota_off:7053: inode #4: comm syz.3.1468: mark_inode_dirty error [ 594.879171][ T4919] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 595.103993][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 595.113247][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 595.121099][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 595.129784][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 595.138540][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.145610][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.709761][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 595.718666][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 595.727733][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.734787][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.742306][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 595.780353][ T4919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.800918][ T4919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.820323][ T4919] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 595.836223][ T4919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.850004][ T4919] usb 1-1: config 0 descriptor?? [ 595.893180][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 595.902430][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 595.911976][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 595.920860][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 595.996754][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 596.006820][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 596.029268][ T7673] device veth0_vlan entered promiscuous mode [ 596.072013][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 596.081049][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 596.089718][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 596.098147][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 596.524569][ T3031] bridge0: port 3(erspan0) entered disabled state [ 596.843738][ T3031] device erspan0 left promiscuous mode [ 596.849365][ T3031] bridge0: port 3(erspan0) entered disabled state [ 596.866297][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 596.947605][ T4919] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 596.956912][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 596.969334][ T4919] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002B/input/input40 [ 597.017269][ T7673] device veth1_macvtap entered promiscuous mode [ 597.050041][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.058579][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.066158][ T4919] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 597.067300][ T7710] device bridge_slave_0 entered promiscuous mode [ 597.098688][ T4919] usb 1-1: USB disconnect, device number 26 [ 597.111391][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.118320][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.128024][ T7710] device bridge_slave_1 entered promiscuous mode [ 597.175562][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 597.185262][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 597.205396][ T7711] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.212742][ T7711] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.221700][ T7711] device bridge_slave_0 entered promiscuous mode [ 597.239611][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 597.248306][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 597.257931][ T3031] device bridge_slave_1 left promiscuous mode [ 597.264439][ T3031] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.272625][ T3031] device bridge_slave_0 left promiscuous mode [ 597.278657][ T3031] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.288681][ T3031] device veth1_macvtap left promiscuous mode [ 597.294728][ T3031] device veth0_vlan left promiscuous mode [ 597.390356][ T323] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 597.469154][ T7711] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.476295][ T7711] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.484191][ T7711] device bridge_slave_1 entered promiscuous mode [ 597.760370][ T323] usb 5-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 597.774503][ T323] usb 5-1: config 45 has an invalid descriptor of length 0, skipping remainder of the config [ 597.784750][ T323] usb 5-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 597.794414][ T323] usb 5-1: config 45 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 597.807483][ T323] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 597.816588][ T323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.841770][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.848740][ T7710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.856077][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.863041][ T7710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.891567][ T323] usbhid 5-1:45.0: couldn't find an input interrupt endpoint [ 597.945077][ T7711] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.952104][ T7711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.959364][ T7711] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.966322][ T7711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.988763][ T6] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 597.989274][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.004735][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.013123][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.020734][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.928366][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 598.938442][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 598.966747][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 598.976313][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 598.985237][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.992406][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.000306][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 599.010292][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 599.017451][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 599.026502][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.033449][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.083158][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 599.092940][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 599.110416][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 599.118412][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 599.138531][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 599.147195][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.159797][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 599.168780][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.179318][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 599.187962][ T6] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 599.198827][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 599.206861][ T6] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 599.217210][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.224351][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.231866][ T6] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 599.241989][ T6] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 599.293293][ T7710] device veth0_vlan entered promiscuous mode [ 599.318611][ T7710] device veth1_macvtap entered promiscuous mode [ 599.336997][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 599.347423][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 599.357631][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 599.378736][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 599.388018][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 599.396492][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 599.404969][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 599.412428][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.422070][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 600.019696][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.028711][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 600.036782][ T6] usb 3-1: Product: syz [ 600.040891][ T6] usb 3-1: Manufacturer: syz [ 600.046123][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.053175][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.061499][ T6] usb 3-1: SerialNumber: syz [ 600.077959][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 600.086414][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 600.144570][ T308] usb 5-1: USB disconnect, device number 40 [ 600.187184][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 600.196123][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 600.242574][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 600.251766][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 600.263898][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 600.273982][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 600.291329][ T3031] device bridge_slave_1 left promiscuous mode [ 600.297402][ T3031] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.307555][ T3031] device bridge_slave_0 left promiscuous mode [ 600.313904][ T3031] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.325686][ T3031] device veth1_macvtap left promiscuous mode [ 600.331950][ T3031] device veth0_vlan left promiscuous mode [ 600.508701][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 600.517913][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 600.527595][ T7760] bridge0: port 3(syz_tun) entered blocking state [ 600.534264][ T7760] bridge0: port 3(syz_tun) entered disabled state [ 600.542682][ T7760] device syz_tun entered promiscuous mode [ 600.548589][ T7760] bridge0: port 3(syz_tun) entered blocking state [ 600.554928][ T7760] bridge0: port 3(syz_tun) entered forwarding state [ 600.570251][ T323] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 600.604411][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 600.615171][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 600.648082][ T7711] device veth0_vlan entered promiscuous mode [ 600.658954][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 600.668868][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 600.687409][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 600.696532][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 600.723198][ T7711] device veth1_macvtap entered promiscuous mode [ 600.734427][ T7765] loop4: detected capacity change from 0 to 1024 [ 600.743720][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 600.752856][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 600.762961][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 600.786493][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 600.796173][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 600.799279][ T7765] EXT4-fs error (device loop4): ext4_map_blocks:721: inode #3: block 1: comm syz.4.2188: lblock 1 mapped to illegal pblock 1 (length 1) [ 600.806398][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 600.827415][ T7765] Quota error (device loop4): write_blk: dquota write failed [ 600.827938][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 600.843066][ T7765] Quota error (device loop4): find_free_dqentry: Can't write quota data block 1 [ 600.852992][ T7765] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 600.863302][ T7765] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.2188: Failed to acquire dquot type 0 [ 600.882864][ T7765] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #3: block 1: comm syz.4.2188: lblock 1 mapped to illegal pblock 1 (length 1) [ 600.926136][ T28] audit: type=1400 audit(1721701267.170:1277): avc: denied { map } for pid=7762 comm="syz.3.2171" path="socket:[54542]" dev="sockfs" ino=54542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 600.957454][ T7765] Quota error (device loop4): do_insert_tree: Can't read tree quota block 1 [ 600.967308][ T7765] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 600.978194][ T7765] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.2188: Failed to acquire dquot type 0 [ 600.991518][ T7765] EXT4-fs error (device loop4): ext4_free_blocks:6211: comm syz.4.2188: Freeing blocks not in datazone - block = 0, count = 4096 [ 601.007444][ T7765] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #3: block 1: comm syz.4.2188: lblock 1 mapped to illegal pblock 1 (length 1) [ 601.025638][ T7765] Quota error (device loop4): do_insert_tree: Can't read tree quota block 1 [ 601.035750][ T7765] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 601.048720][ T7765] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.2188: Failed to acquire dquot type 0 [ 601.062186][ T7765] EXT4-fs (loop4): 1 orphan inode deleted [ 601.068385][ T7765] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 601.316588][ T28] audit: type=1400 audit(1721701267.570:1278): avc: denied { create } for pid=7764 comm="syz.4.2188" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 601.339897][ T7765] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #3: block 1: comm syz.4.2188: lblock 1 mapped to illegal pblock 1 (length 1) [ 601.355626][ T7765] Quota error (device loop4): do_insert_tree: Can't read tree quota block 1 [ 601.369241][ T7765] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.2188: Failed to acquire dquot type 0 [ 601.450390][ T6] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 601.548744][ T5024] EXT4-fs (loop4): unmounting filesystem. [ 601.560349][ T6] cdc_ncm 3-1:1.0: bind() failure [ 601.566015][ T323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.579845][ T6] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 601.587606][ T6] cdc_ncm 3-1:1.1: bind() failure [ 601.593410][ T323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.605570][ T6] usb 3-1: USB disconnect, device number 40 [ 601.612013][ T323] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 601.633315][ T323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.660443][ T323] usb 1-1: config 0 descriptor?? [ 601.666180][ T7776] futex_wake_op: syz.1.2172 tries to shift op by 32; fix this program [ 602.063766][ T7787] loop1: detected capacity change from 0 to 256 [ 602.796710][ T7789] loop2: detected capacity change from 0 to 1024 [ 602.828368][ T7789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 602.831984][ T7795] tap0: tun_chr_ioctl cmd 1074025678 [ 602.847237][ T7795] tap0: group set to 0 [ 602.998614][ T7801] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 603.001898][ T323] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 603.016404][ T7789] xt_TCPMSS: Only works on TCP SYN packets [ 603.058541][ T323] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002C/input/input41 [ 603.172707][ T7811] loop1: detected capacity change from 0 to 512 [ 603.181055][ T7811] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 603.195526][ T323] keytouch 0003:0926:3333.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 603.210755][ T7811] EXT4-fs (loop1): 1 truncate cleaned up [ 603.216335][ T7811] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 603.234962][ T7811] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.2199: corrupted in-inode xattr [ 603.248497][ T7811] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1745: inode #15: comm syz.1.2199: unable to update i_inline_off [ 603.261102][ T7811] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.2199: corrupted in-inode xattr [ 603.273734][ T4919] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 603.291649][ T323] usb 1-1: USB disconnect, device number 27 [ 603.520261][ T4919] usb 4-1: Using ep0 maxpacket: 32 [ 603.531599][ T7673] EXT4-fs (loop2): unmounting filesystem. [ 603.680992][ T4919] usb 4-1: unable to get BOS descriptor or descriptor too short [ 603.760584][ T4919] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 4533, setting to 1024 [ 603.773149][ T4919] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 603.783374][ T4919] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 604.265158][ T7711] EXT4-fs (loop1): unmounting filesystem. [ 604.271043][ T4919] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 604.294529][ T4919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.320259][ T4919] usb 4-1: Manufacturer: Ц [ 605.548706][ T7839] futex_wake_op: syz.4.2210 tries to shift op by 32; fix this program [ 605.580344][ T4919] cdc_ncm 4-1:1.0: bind() failure [ 605.587470][ T4919] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 605.613777][ T4919] cdc_ncm 4-1:1.1: bind() failure [ 605.642343][ T4919] usb 4-1: USB disconnect, device number 41 [ 605.951319][ T7845] loop4: detected capacity change from 0 to 256 [ 606.505935][ T7843] tap0: tun_chr_ioctl cmd 1074025678 [ 606.515301][ T7843] tap0: group set to 0 [ 606.637548][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2213'. [ 607.058669][ T7860] loop0: detected capacity change from 0 to 128 [ 607.144489][ T7865] syz.0.2218: attempt to access beyond end of device [ 607.144489][ T7865] loop0: rw=2049, sector=145, nr_sectors = 864 limit=128 [ 607.161408][ T7864] loop1: detected capacity change from 0 to 1024 [ 607.174293][ T7864] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 607.191735][ T7864] EXT4-fs (loop1): orphan cleanup on readonly fs [ 607.209096][ T7864] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.2220: Invalid inode table block 0 in block_group 0 [ 607.250407][ T7864] EXT4-fs (loop1): Remounting filesystem read-only [ 607.257413][ T7864] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 607.300447][ T7864] EXT4-fs error (device loop1): ext4_quota_write:7159: inode #3: comm syz.1.2220: mark_inode_dirty error [ 607.333267][ T7864] __quota_error: 4 callbacks suppressed [ 607.333302][ T7864] Quota error (device loop1): write_blk: dquota write failed [ 607.360491][ T7860] syz.0.2218: attempt to access beyond end of device [ 607.360491][ T7860] loop0: rw=0, sector=177, nr_sectors = 1 limit=128 [ 607.375806][ T7864] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 607.400261][ T7864] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.2220: Failed to acquire dquot type 0 [ 607.420744][ T7859] syz.0.2218: attempt to access beyond end of device [ 607.420744][ T7859] loop0: rw=0, sector=177, nr_sectors = 1 limit=128 [ 607.434111][ T7864] EXT4-fs (loop1): 1 truncate cleaned up [ 607.450322][ T7864] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 607.470288][ T7859] buffer_io_error: 182 callbacks suppressed [ 607.470321][ T7859] Buffer I/O error on dev loop0, logical block 177, async page read [ 607.493020][ T7859] syz.0.2218: attempt to access beyond end of device [ 607.493020][ T7859] loop0: rw=0, sector=178, nr_sectors = 1 limit=128 [ 607.507310][ T7711] EXT4-fs (loop1): unmounting filesystem. [ 607.519580][ T7859] Buffer I/O error on dev loop0, logical block 178, async page read [ 607.539010][ T7859] syz.0.2218: attempt to access beyond end of device [ 607.539010][ T7859] loop0: rw=0, sector=179, nr_sectors = 1 limit=128 [ 607.565461][ T7859] Buffer I/O error on dev loop0, logical block 179, async page read [ 607.582469][ T7859] syz.0.2218: attempt to access beyond end of device [ 607.582469][ T7859] loop0: rw=0, sector=180, nr_sectors = 1 limit=128 [ 607.612743][ T7859] Buffer I/O error on dev loop0, logical block 180, async page read [ 607.628191][ T7859] syz.0.2218: attempt to access beyond end of device [ 607.628191][ T7859] loop0: rw=0, sector=181, nr_sectors = 1 limit=128 [ 607.651904][ T7859] Buffer I/O error on dev loop0, logical block 181, async page read [ 607.667883][ T7859] syz.0.2218: attempt to access beyond end of device [ 607.667883][ T7859] loop0: rw=0, sector=182, nr_sectors = 1 limit=128 [ 607.720336][ T7859] Buffer I/O error on dev loop0, logical block 182, async page read [ 607.744820][ T7859] syz.0.2218: attempt to access beyond end of device [ 607.744820][ T7859] loop0: rw=0, sector=183, nr_sectors = 1 limit=128 [ 607.758961][ T7859] Buffer I/O error on dev loop0, logical block 183, async page read [ 607.767383][ T7859] syz.0.2218: attempt to access beyond end of device [ 607.767383][ T7859] loop0: rw=0, sector=184, nr_sectors = 1 limit=128 [ 607.783814][ T7859] Buffer I/O error on dev loop0, logical block 184, async page read [ 607.794615][ T7859] Buffer I/O error on dev loop0, logical block 177, async page read [ 607.804456][ T7859] Buffer I/O error on dev loop0, logical block 178, async page read [ 608.773113][ T28] audit: type=1326 audit(1721701275.030:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cb575f19 code=0x7ffc0000 [ 608.803017][ T28] audit: type=1326 audit(1721701275.030:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cb575f19 code=0x7ffc0000 [ 608.826997][ T7880] tap0: tun_chr_ioctl cmd 1074025678 [ 608.846749][ T7880] tap0: group set to 0 [ 608.859348][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2226'. [ 608.867323][ T28] audit: type=1326 audit(1721701275.060:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f43cb574857 code=0x7ffc0000 [ 608.892823][ T28] audit: type=1326 audit(1721701275.060:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cb575f19 code=0x7ffc0000 [ 608.916910][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2227'. [ 608.962278][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.976470][ T28] audit: type=1326 audit(1721701275.060:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cb575f19 code=0x7ffc0000 [ 609.005705][ T7884] device bridge_slave_0 left promiscuous mode [ 609.009874][ T7890] loop4: detected capacity change from 0 to 512 [ 609.020037][ T28] audit: type=1326 audit(1721701275.080:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f43cb575f19 code=0x7ffc0000 [ 609.020331][ T7890] EXT4-fs (loop4): Test dummy encryption mode enabled [ 609.051870][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.058952][ T28] audit: type=1326 audit(1721701275.080:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cb575f19 code=0x7ffc0000 [ 609.083538][ T28] audit: type=1326 audit(1721701275.080:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cb575f19 code=0x7ffc0000 [ 609.124651][ T7890] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.2229: inline data xattr refers to an external xattr inode [ 609.150567][ T7890] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2229: couldn't read orphan inode 12 (err -117) [ 609.162843][ T7890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 609.439240][ T7907] device pim6reg1 entered promiscuous mode [ 609.744266][ T317] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 610.808524][ T7903] overlayfs: failed to resolve './file2': -2 [ 611.168650][ T317] usb 1-1: Using ep0 maxpacket: 32 [ 611.172847][ T5024] EXT4-fs (loop4): unmounting filesystem. [ 611.176954][ T7919] loop2: detected capacity change from 0 to 1024 [ 611.225724][ T7919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 611.253213][ T7925] tap0: tun_chr_ioctl cmd 1074025678 [ 611.277161][ T7925] tap0: group set to 0 [ 611.379603][ T7919] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 611.439991][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2240'. [ 611.450922][ T7919] xt_TCPMSS: Only works on TCP SYN packets [ 611.850313][ T317] usb 1-1: unable to get BOS descriptor or descriptor too short [ 611.940465][ T317] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 4533, setting to 1024 [ 611.960253][ T317] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 611.984184][ T317] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 612.040394][ T317] usb 1-1: string descriptor 0 read error: -71 [ 612.046586][ T317] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 612.067011][ T317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.071772][ T7673] EXT4-fs (loop2): unmounting filesystem. [ 612.130437][ T317] usb 1-1: can't set config #1, error -71 [ 612.145505][ T317] usb 1-1: USB disconnect, device number 28 [ 613.288495][ T7954] device pim6reg1 entered promiscuous mode [ 613.368844][ T7936] loop4: detected capacity change from 0 to 40427 [ 613.462276][ T7936] F2FS-fs (loop4): Found nat_bits in checkpoint [ 613.534907][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2252'. [ 613.559524][ T7962] loop2: detected capacity change from 0 to 2048 [ 613.609346][ T7962] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 613.646301][ T7970] loop1: detected capacity change from 0 to 512 [ 613.669256][ T7673] EXT4-fs (loop2): unmounting filesystem. [ 613.674081][ T7970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 613.703748][ T7970] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2760: inode #11: comm syz.1.2253: corrupted xattr block 95 [ 613.730604][ T7936] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 613.738868][ T7970] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2253: bg 0: block 7: invalid block bitmap [ 613.853188][ T7970] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 613.874604][ T7970] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2926: inode #11: comm syz.1.2253: corrupted xattr block 95 [ 613.887904][ T5024] bio_check_eod: 216 callbacks suppressed [ 613.887943][ T5024] syz-executor: attempt to access beyond end of device [ 613.887943][ T5024] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 613.956430][ T7970] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 613.976548][ T7970] EXT4-fs (loop1): 1 orphan inode deleted [ 613.996404][ T7970] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 614.943894][ T7711] EXT4-fs (loop1): unmounting filesystem. [ 615.048842][ T7981] loop2: detected capacity change from 0 to 1024 [ 615.107036][ T7981] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 615.310290][ T7981] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 615.393195][ T7981] xt_TCPMSS: Only works on TCP SYN packets [ 616.748560][ T7673] EXT4-fs (loop2): unmounting filesystem. [ 616.899978][ T8000] device pim6reg1 entered promiscuous mode [ 617.067468][ T8010] loop3: detected capacity change from 0 to 512 [ 617.904678][ T8010] EXT4-fs (loop3): Test dummy encryption mode enabled [ 617.945932][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2264'. [ 618.021382][ T8010] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.2265: inline data xattr refers to an external xattr inode [ 618.049411][ T8010] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.2265: couldn't read orphan inode 12 (err -117) [ 618.067156][ T8010] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 618.110651][ T8030] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 618.271415][ T8032] loop0: detected capacity change from 0 to 1024 [ 618.279447][ T8032] EXT4-fs: Ignoring removed orlov option [ 618.293919][ T8032] EXT4-fs (loop0): Test dummy encryption mode enabled [ 618.300653][ T8032] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 619.095243][ T8033] overlayfs: failed to resolve './file2': -2 [ 619.507721][ T7710] EXT4-fs (loop3): unmounting filesystem. [ 619.647067][ T8040] loop4: detected capacity change from 0 to 512 [ 619.788887][ T8040] EXT4-fs (loop4): 1 orphan inode deleted [ 619.800426][ T8040] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 619.819574][ T8040] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038 (0x7fffffff) [ 620.250859][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 621.519875][ T28] audit: type=1400 audit(1721701286.350:1353): avc: denied { mount } for pid=8043 comm="syz.0.2279" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 622.971978][ T28] audit: type=1400 audit(1721701286.450:1354): avc: denied { mounton } for pid=8043 comm="syz.0.2279" path="/37/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 623.040664][ T28] audit: type=1400 audit(1721701288.070:1355): avc: denied { unmount } for pid=7560 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 623.160126][ T5024] EXT4-fs (loop4): unmounting filesystem. [ 623.195311][ T8076] loop4: detected capacity change from 0 to 512 [ 623.203538][ T8076] EXT4-fs (loop4): Test dummy encryption mode enabled [ 623.213978][ T8076] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.2287: inline data xattr refers to an external xattr inode [ 623.229114][ T799] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 623.230639][ T8076] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2287: couldn't read orphan inode 12 (err -117) [ 623.249021][ T8076] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 623.394152][ T758] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 623.394563][ T317] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 623.618849][ T8082] overlayfs: failed to resolve './file2': -2 [ 623.680350][ T799] usb 3-1: Using ep0 maxpacket: 8 [ 623.811341][ T758] usb 4-1: config 1 has an invalid interface association descriptor of length 6, skipping [ 623.822501][ T799] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.833969][ T317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.846889][ T758] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.859195][ T799] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 623.869596][ T317] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 623.887621][ T758] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 623.899005][ T799] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.910500][ T758] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 623.924353][ T317] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 623.934968][ T799] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 623.945664][ T317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.955996][ T799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.964610][ T758] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 623.996632][ T758] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 624.010857][ T317] usb 1-1: config 0 descriptor?? [ 624.061480][ T799] hub 3-1:1.0: bad descriptor, ignoring hub [ 624.067345][ T799] hub: probe of 3-1:1.0 failed with error -5 [ 624.084149][ T799] cdc_wdm 3-1:1.0: skipping garbage [ 624.093950][ T799] cdc_wdm 3-1:1.0: skipping garbage [ 624.099177][ T799] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 624.109257][ T8084] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 624.121062][ T8084] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 624.129594][ T8084] CPU: 1 PID: 8084 Comm: syz.1.2290 Tainted: G W 6.1.90-syzkaller-00106-g4a9ef0dc4ba5 #0 [ 624.141439][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 624.151346][ T8084] RIP: 0010:dev_map_generic_redirect+0x90/0x7d0 [ 624.157419][ T8084] Code: f1 f1 00 f2 f2 f2 4b 89 04 26 43 c7 44 26 0f f3 f3 f3 f3 43 c6 44 26 13 f3 e8 6c 02 de ff 48 89 d8 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 20 00 74 08 48 89 df e8 f1 0f 25 00 48 89 5c 24 18 4c 8b [ 624.176857][ T8084] RSP: 0018:ffffc9000712f6a0 EFLAGS: 00010246 [ 624.182762][ T8084] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 624.190585][ T8084] RDX: ffffc90004e78000 RSI: 00000000000000b3 RDI: 00000000000000b4 [ 624.198400][ T8084] RBP: ffffc9000712f7f8 R08: 0000000000000005 R09: ffffffff8412a4c3 [ 624.206207][ T8084] R10: 0000000000000004 R11: ffff88812513bcc0 R12: dffffc0000000000 [ 624.214330][ T8084] R13: ffff88810994c640 R14: 1ffff92000e25ee0 R15: 0000000000000000 [ 624.222313][ T8084] FS: 00007f0711ba36c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 624.231622][ T8084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 624.238156][ T8084] CR2: 0000000020002000 CR3: 0000000137182000 CR4: 00000000003506a0 [ 624.245958][ T8084] DR0: 000000000000004e DR1: 0000000000000000 DR2: 0000000000000000 [ 624.253763][ T8084] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 624.261950][ T8084] Call Trace: [ 624.265360][ T8084] [ 624.268155][ T8084] ? __die_body+0x62/0xb0 [ 624.272392][ T8084] ? die_addr+0x9f/0xd0 [ 624.276691][ T8084] ? exc_general_protection+0x317/0x4c0 [ 624.282083][ T8084] ? asm_exc_general_protection+0x27/0x30 [ 624.287827][ T8084] ? xdp_do_generic_redirect+0x303/0xad0 [ 624.293398][ T8084] ? dev_map_generic_redirect+0x90/0x7d0 [ 624.299055][ T8084] ? kasan_quarantine_put+0x34/0x1a0 [ 624.304253][ T8084] ? kfree+0x7a/0xf0 [ 624.307999][ T8084] ? bq_enqueue+0x3e0/0x3e0 [ 624.312337][ T8084] ? bpf_prog_run_generic_xdp+0xa35/0x1200 [ 624.318192][ T8084] xdp_do_generic_redirect+0x411/0xad0 [ 624.323568][ T8084] do_xdp_generic+0x53e/0x800 [ 624.328562][ T8084] ? generic_xdp_tx+0x560/0x560 [ 624.333699][ T8084] ? tun_get_user+0x2340/0x3a90 [ 624.338470][ T8084] tun_get_user+0x238a/0x3a90 [ 624.342995][ T8084] ? release_firmware_map_entry+0x131/0x191 [ 624.348724][ T8084] ? futex_q_unlock+0x30/0x30 [ 624.353229][ T8084] ? tun_do_read+0x2000/0x2000 [ 624.357813][ T8084] ? ref_tracker_alloc+0x31d/0x450 [ 624.362852][ T8084] ? ref_tracker_dir_print+0x160/0x160 [ 624.368889][ T8084] ? futex_wait_setup+0x330/0x330 [ 624.374071][ T8084] ? avc_policy_seqno+0x1b/0x70 [ 624.378752][ T8084] ? tun_get+0xe9/0x120 [ 624.382878][ T8084] tun_chr_write_iter+0x129/0x210 [ 624.387750][ T8084] vfs_write+0x902/0xeb0 [ 624.392606][ T8084] ? file_end_write+0x1c0/0x1c0 [ 624.399142][ T8084] ? do_futex+0x55a/0x9a0 [ 624.403402][ T8084] ? __fget_files+0x2cb/0x330 [ 624.408897][ T8084] ? __fdget_pos+0x204/0x390 [ 624.413545][ T8084] ? ksys_write+0x77/0x2c0 [ 624.418063][ T8084] ksys_write+0x199/0x2c0 [ 624.422473][ T8084] ? save_fpregs_to_fpstate+0x220/0x220 [ 624.428120][ T8084] ? __ia32_sys_read+0x90/0x90 [ 624.433999][ T8084] ? fpregs_restore_userregs+0x130/0x290 [ 624.439720][ T8084] __x64_sys_write+0x7b/0x90 [ 624.444294][ T8084] x64_sys_call+0x2f/0x9a0 [ 624.448847][ T8084] do_syscall_64+0x3b/0xb0 [ 624.453124][ T8084] ? clear_bhb_loop+0x55/0xb0 [ 624.457730][ T8084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.463541][ T8084] RIP: 0033:0x7f0710d74a9f [ 624.467808][ T8084] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 624.487470][ T8084] RSP: 002b:00007f0711ba3010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 624.495754][ T8084] RAX: ffffffffffffffda RBX: 00007f0710f05f60 RCX: 00007f0710d74a9f [ 624.503779][ T8084] RDX: 0000000000000d86 RSI: 0000000020001580 RDI: 00000000000000c8 [ 624.512312][ T8084] RBP: 00007f0710de4e68 R08: 0000000000000000 R09: 0000000000000000 [ 624.520238][ T8084] R10: 0000000000000d86 R11: 0000000000000293 R12: 0000000000000000 [ 624.528407][ T8084] R13: 000000000000000b R14: 00007f0710f05f60 R15: 00007ffd31a20e38 [ 624.536680][ T8084] [ 624.539637][ T8084] Modules linked in: [ 624.543508][ T8084] ---[ end trace 0000000000000000 ]--- [ 624.548923][ T8084] RIP: 0010:dev_map_generic_redirect+0x90/0x7d0 [ 624.555341][ T8084] Code: f1 f1 00 f2 f2 f2 4b 89 04 26 43 c7 44 26 0f f3 f3 f3 f3 43 c6 44 26 13 f3 e8 6c 02 de ff 48 89 d8 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 20 00 74 08 48 89 df e8 f1 0f 25 00 48 89 5c 24 18 4c 8b [ 624.575581][ T8084] RSP: 0018:ffffc9000712f6a0 EFLAGS: 00010246 [ 624.582968][ T8084] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 624.590922][ T8084] RDX: ffffc90004e78000 RSI: 00000000000000b3 RDI: 00000000000000b4 [ 624.599540][ T8084] RBP: ffffc9000712f7f8 R08: 0000000000000005 R09: ffffffff8412a4c3 [ 624.607938][ T8084] R10: 0000000000000004 R11: ffff88812513bcc0 R12: dffffc0000000000 [ 624.616533][ T8084] R13: ffff88810994c640 R14: 1ffff92000e25ee0 R15: 0000000000000000 [ 624.627498][ T8084] FS: 00007f0711ba36c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 624.637261][ T8084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 624.644526][ T8084] CR2: 0000000020002000 CR3: 0000000137182000 CR4: 00000000003506a0 [ 624.652647][ T8084] DR0: 000000000000004e DR1: 0000000000000000 DR2: 0000000000000000 [ 624.660568][ T8084] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 624.668518][ T8084] Kernel panic - not syncing: Fatal exception in interrupt [ 624.676267][ T8084] Kernel Offset: disabled [ 624.680736][ T8084] Rebooting in 86400 seconds..