last executing test programs: 6.931165084s ago: executing program 4 (id=403): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x0) 6.764207501s ago: executing program 4 (id=408): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r1, 0x4140aecd, &(0x7f0000002100)={{0x50000, 0x54000, 0xb, 0x1, 0x56, 0xa, 0x1, 0x5, 0x1, 0x6, 0x4, 0x7}, {0x10000, 0xdddd0000, 0x3, 0x5, 0x10, 0x0, 0x2, 0x3, 0x3, 0xf0, 0x8, 0x8}, {0x25000, 0xf000, 0xd, 0x1, 0x0, 0xfa, 0x0, 0x8, 0x5, 0x80, 0xf, 0x1}, {0xd000, 0xffffffff, 0x15, 0x8, 0xd8, 0x0, 0x2, 0x1, 0x8, 0x5, 0xe7}, {0x4000, 0x6000, 0x575fce867fa210f7, 0xe, 0x4, 0xfb, 0xd, 0xfb, 0x1, 0x4}, {0xb000, 0x2ffc, 0xb, 0x4, 0x6, 0xe, 0x1, 0xf, 0x6, 0x2b, 0xb, 0x9}, {0x50000, 0x8080000, 0xa, 0x8, 0x3, 0x0, 0xe, 0x0, 0x13, 0x0, 0x4, 0x7}, {0x40000, 0xdddd0000, 0x1, 0x2, 0x4, 0x8, 0x2, 0x7f, 0xb9, 0x5, 0x3, 0xa}, {0xeeef0000, 0xfff4}, {0x2ffc, 0x8}, 0x4000000c, 0x0, 0x6000, 0x0, 0xa, 0x400, 0x70000, 0x0, [0x7, 0x5, 0x8001, 0x9]}) 6.490690899s ago: executing program 4 (id=410): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd8", 0x79}, {&(0x7f0000000880)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1af", 0x8f}], 0x2}}], 0x1, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 6.410904417s ago: executing program 2 (id=412): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x400000000000041, 0x0) pidfd_getfd(r4, r4, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r3, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2800091, &(0x7f0000000b00)=ANY=[@ANYRES64=0x0, @ANYRES8=r4, @ANYRESHEX, @ANYRES32, @ANYRESOCT=r0, @ANYRES32], 0x55, 0x1be, &(0x7f0000001bc0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x8000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000500)=0x2, 0x4) bind$inet6(r8, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1fc}, 0x1c) add_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500), 0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffff1b65}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) 3.875561746s ago: executing program 2 (id=420): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b35, &(0x7f0000000140)={'wlan1\x00', @random="010000000800"}) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x7, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x20006}]}}}}}}}, 0x0) gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x3000014, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000004c0)=0x2) syz_mount_image$erofs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x2800091, &(0x7f00000005c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="d016c8d55cc9329d2e0101797fb5f52944f2b8694bae76ff77df23047285b916fba6b36c1b409890d28883acf4093105048a0c8cea76a257b7ee39a0fa772953b17ccd5d14328bcd8cd30f4cf0aa220eb9fcb0883de194766c39954634b5f9a0ca862e09200c5cf06ec1214c819ffadf5291b8ed1536d9145da9796ebeb922e3eea04914e29748eca2c90ffd65bace2ec8cb6808e9e719426ee9bb119acecbf8a735429439a2093d21aecabbdd15d44ddcf79b892ccb1b096880abd5988d69079281b4619ee58eaae0d054eaa813a0a1ee847cbef8563408ab7db29a8965f5a121b56175f4be4dfbf2e6da7e4b74b67f37ec6660227c655b67e0f1a41c18ae60ab4bf766c5460f296625113944f84df515da615e597357d29059cb92f354e88594b05de4328d59b0e0e099e996c126c6663c9751466f81e2059cd90aef508fa30a1b0cd6b0c1d9fc04a8831801d0c7ba813dc1e59614bf56c69ae20f1683889e7247a12b740a9656421981e0763c64e4ade9be51ff260d61fb3a8ad54bfe09225d3a8402f426fcd2243a4c246669dddec2bf5fd601dccfd57e680f0e869deffb3f91c6a12fd339a61bf2027566c590343154e79969abee74a57e0916438c58198a4816d31b2ee9d481fd2ea6264fa36185d7e025d245dc151fcb87c3502ef537695b244dccaf592c543565cccb52e177ecfa5a5adf612afe4b98edfaa1d2d4ad14ddf67ad5c33bc86967c305312b1df912286ad92e21fb025dc18c1f262f733eeaa0f17f437f41a2ea816cad63e736d6182b96da94b23dd86130a388b4b0b84554eb4ce851ce5610049ace33cf1282b21b771733baad9030dee46cd6209df098d04a131eafc8b2ed58c71461c50cadcc912ab0edd9eb090d36661df4653053608b6156d99298b7dfea7fe67ede7d040dac6ac66e78967eb3c05ddb469c90bc8e5a8f1c74088caa5ba98db4ffb9a8aca8f8f01a0383c349a5dfb139362a5f665abb5f5d07a5c59b5c35c7cb8bb53e6baaaa42352b09f443477dfa6bed6049339101ceecc3bd1b327fdf2ec8ed7d1e5cbd02d1630e34e6f2c7150f47ff9a974a88ac2e8f94fde99f4cad1554ca0f7520b0a5af672346f0cca349153c5b939a32b07ac78909bebdccdbd3b1ab3532c6d061c2665ee9d67887ec209d1cf5125989588c79a18b99e2ae30bf3bafeffd6b2ff032ba4b6f64b62abdf0f53feb4b7d722dfe13dddc79c9d6f655f01db1cf6d92057332a96d92069a4347235a08b6ae91417cee0fe37a339beaedcf50b3b68cf7b99d22b29d49137bbc7bc38ad6cf6e200e29b94077305293825c4476dc17634a3ecb1c75b289c8e270f68c9dcb8341471fef9a1b8e0d191a8cbe6192b0738f44144379b15d2db2269797c09c1789be60c9e52f452a5205c66782c91fd2573d27f65161a5eda08df1b0e7ee3d4e8b6c1a9b4fc87392e16e8c0dba1884adc52acc7cdd93c8f83feb5d44cab62b9856678eaaf9bb82825230c44ea177bb62ab36fcb8875bed5b4f9ad3eba65a75fc6428fe3abce7b42b992fa4dc218669e848f3d07553e6d381ecc3e1f9c9ac3650c1d11844cd29352132a07e9324b3fb70166977855669ec0cfe75cc34b8e21044e142ac7da564b1ececd3a985c4b3d0bdefec84a96c13c9a496b80cfc1a915804646fd14ca5e90b036c9f247f564af75ae851203c8640ecfa25c1837167c91b977a07fc1b88de3a257b3bb63a380bee62d7300dd84aa087f579172651f2db55f8e0c6efcf759a5343f5e59110177e3f7b948dcb0d33ab9ebec1d1b987c55d10bc6214cb81866dd5ae794ae89a3e9ceef6f73714138b69ccf6562a136bbff44eaf0d2b8587db3b9a6dbedb48930b9541e0d6c21239ec2ee78b77957742490c651cabdec8fe87731eaa77811ab31a6e47f21bc1e6000b20f6e9118bf7baeb6985047f937c7ca4e27ad16a8b108e0e1e7645c5e181bdf3354c7b11ff44c7a9600f8e0b4919f24cdf72abcacb509fe56418430bb1a46fe4044e886574c0ca22e1a9e316784510220d9e628744e9cb38c9805570935f0407f1596fb9965c1575963643d85a7f1e4f641d66c4fbb8d962857aea040d0d6f4e324bcc2c157efd5e9313a41069728ac75a84022814011420428f0c84d8808cf228379c5770a10dd4a2540ee9b49cf4c67423ce11545415cb3b3a271fad52979dfb205e765bbbdf27db6871373e5704aea7f8da0f71b6d2cd51a4c13e5140c9018d98c820e572df54a8accb9f378bf768325939913efdf90b69debc59d2d4195f2c60be37683201a157bdd25f365d35c97eb3d8579d98b1d270164b2f4b0f590f6cdbb9bcc8d0da4439b6cdad548c7a7976b89fabd64ee53f65c3bac50702a14d393bc1469db6f7fa5a607c6b09eb6157982fe7b70a50e2508bc9f2d6e6ed98f7f68e8a26683db2776f19422688d72c2d3c128c10382a81c970064dac4fdfd5873c711bdb902f70bb72c95b2db18ab3d4001f38a0d59a43b12f5002909513df9d90fe1abb35111ca57847f37b56242676fd2ca33b7bf0f858ccfc3c600af12235b26f488f94c6bbdee6d3b42f1cc9db75d8219b9a2c96f4ea153d3fa14517a1a5369c71f136c2a9ae234a85882d21b66354d08eadb2f68a5e932341596b44bea306f11a0a4ac5c2561c2540d025545a8735dbda092003709e8f4db40a744ae99f96750a036b0958a521202477b4d3eb94aada9a94045cdc70861a8d8fc08e79a960022f34231897f1a4816e998d0589146ce4b2426050d166424d7c3d5209f7814d824172aec43c4bd68f49855363917a71c7f91636f74bd0eeb4df24a846cb627ab8248b5400d3e2d8fe1297c6422cb5fae73be62c3015d4d4b5d40dd1206eb7228884ac609fbd255b12677ad5a535ec3bf2855ea4004ae625ceb787da5a2b17cf6de63a9890658e8f0fd497e029418752193344486d284059d1d7c13c8b170dc1a54db0192af587fdb94da913cfdefb2939c586f34ae3ec3d2fce5d08ba13de9bf027ff4fbfcb2cb2a20df6f5600a33c7d5026e5e6091fe904445ee23bcf156a7945136c4002a4b060085f36178f8909770847bba3ed7aa4ae35e76b77dd4782d73fa7f07e4b1851d51bac51bb8f6ab029a936e321c2401d061db416da765b6752b1c1b7562f2292315acb39b87d3763426dadf0b6097ad6221be9594ad73fe562b84c2e7113c8587bb6234b023bf421b1964fbda393f38a593c31a99679065f0bb2ed89d232b70355021def8327706e70a3f8efc42f048ef4de94e676e9d2c7bc618ee9b5778b90068f4405f0787682a5b7d1e641a5ad595ddbc2476b6b17ef86df5c474b8299a0ab5fe884bef5f172cf945224b5ddc24d7004ae2bcf26d6efa44f4fa9810f05c3430aa25812e31110a3e2ca2ef48189729ef0317e71895bda2106596351a3f77d1457361b7fe32ca77422e7eccb8ea3f8946a2ca0a031e2f2d0862bb3e64ecfaf4cf6b8c976de12848bb21ac75924245a95eab2509da5cfd9c1da5de34f473412611320096c82e9a924f343c1ee6008277d82020fd842669eb3e2945e96306b9cd869872687f421dd8f0c0891fc481c2a0154b23c229cc20444b4d8713722be4b9142c511f237cfd49a3fe8e296f8a6dbdb28e73e8f0b4c489287cee53388dc6d839d23db1f9e90ff475dd4ee5e728666edf8c9d872a6902204ee7d11e37fc32d4a7748267a26bab65335421f5898dfd50dfc2d0a9b9a7829fb1a5a6c2088337363f7a2088f2dfa9617fa299fbe2f6162aebb7847fad46017ff078c53354d7a8a7fe86e440299fe7d7d654ad045d5b9849a906b0ecce0cf46fc4f348a9c240e8f9d7efb699e9ff4868f28f560521502929c32d7447ab4b7c196fbb706c41bef4e8b655a185140d24d39f8c043fc5f304856cff55bd881ed52fe385f93d48320683fccc8299f514bdda70bae383c00e519c2bfc4ff03df76f91d270c86dd0499f145ada66dcb9d4cfbad8b97fa43873fb4695559af885daf12866be73f01c98ad836a652afbbb66e8ea6308884feae5efe796ce67ea24f83f3a7938c55f216daf22d0133cc0476d851b8449c10b5e6fa1c598c10de9f7085c66930cf24520fac24e71bebb0320c08e8cdf3fa2e8b2517285208de28e251f5b6f796d3ef0749bf67e1f2c178b0715705dfc0fdddf8d2a6c856323fd9af1a79855cc9ac9662df8664d483252a04ce639eeb4e73ea685e617e844b9aca90758f98c5ced2766f67e845ad3e8afa379bc56bb4512aab985d8e8e3ebcd3cb91ad2af343936c11e7e3dc549f9cdb754ef5296175e6252b22788bb4c25c7d785b82541c63c2bf84770ba032008b794bdd166402bb27fe65aaf15f2febf80e34038b771ed5fb7ed7417799a0d7895ec6226206c415da2dc59f09e1086a38b62ae2125522714a8f1ec56a4b376800937e62c42d030fb025789e1e30dc56df4d6658d67b1d0690b5d33364329b6f2e9e13166f5520064223661d08eb774dde4a6abb7e549b708ce92db767829ab585d3fdc773513d14dc8532618da09d60abcb341f50936bf45ce2d14dcc0ff14f9e58aa0069c0dcba9ee8f53f32b49450f18db0c47ce85ea935baa4729bd1d576364429e88b0b9792ff6e8095c0ca8701257685ce97a3b47340b45ff902d7fe66ad00e655902a98589e63a1f7916866f50a9ba8660e4c15b0aa60b14f21081923cdc61c085018d345592301a989ae3c64e7cff3f094e7fafe723eb2719a4fda9536005f84e5c8a107963f6b2681cff060dcd537481fb4f50c756df258bf7210c52252558c3df00c2e1f82cb1faa740de72d0f974de9cd4a2a1c37027d381f8689fd4d08f3a5c228a89e9b096a73189be0c8ce2660b571db8bed81252fa7d1122da07df6212a0d0adbf911d7dc16660bf7abf4764d4b7708d0912287493c8fddaea467cfaae7a24ba0907d98c847e8697d507cf82a86203a1d89c34b04db579ba03cb1cfbcdd65a652a36435c989b423de545f368bde41f33e76ee65ca5538bc89c29e36f725ad8385611ebd32afdb2e209676aff0df1577620524c6818e064cea1a349066c9ad27643494c91fb0af9c54ce88568197e8dea217df827981cf4b6affd2078fc5f09c5c292dc70000188e977901a20cafe90c3463a8274f02e65f8d3c42242c61813adb21a0807ad474347d429aadd7d05a63cedd93f9c6cfdc74996068dcbda1ec88621871e1f3dc67fb7e883150946ab498141775ec710413f0154f8ef088777997a5b9b3103f00a04b4ad3cb5018864c7e456b17d732274dce1c9b1a574a7a4e86b8f609c0a58a08e6acfc0ac0961604a8dc6663b0fcfae347881b7383577fb6267c30efe043e052a569eaa76d4e0168d6333bd11b9d5c1479a9b24216b9dd1b56dfc3a94ff37ae2a95844f6bd878a8191d078426c7932911acc89407709c1abd0165b0a53f93612574e77daf90d4f18566d1ed90764f19615c2a8e860d18d2f7bde00a865533418d070e175a09f237a63dd007916d9e80e8f2b985f6732274841aaa815afc8a769db6a18d4a832687731e54be2ffb182fd9802335ea2fde0a39fccf1ef3d8374fc416c5954697195acdafa90daf37c43b6fd218ee7b6365d1bcc3e5372ac6e30f474ccfa76c7004d7c860d13bc1bdfa121756d9d39478e18827a8dc8263771a62524eb2c32683117b47892fff88708b50082d3f9f50e66684ead47776fde241596c4005631e438d95b3213fd660f8824f27045d7e0c8974b0c44df4503bd2203681c159e389f5230d5ebf8025ae27c8348915dc014a1a539d", @ANYRES32], 0x55, 0x1be, &(0x7f0000001680)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./file2\x00', 0x80000, 0x82) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000001880)={0x2020}, 0x2020) mount$cgroup(0x0, 0x0, 0x0, 0x2208000, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003940)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000003a00)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 3.153913259s ago: executing program 1 (id=422): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000780)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000880), 0x318, 0x0) recvmmsg(r2, &(0x7f00000008c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000900)=0x2) listen(0xffffffffffffffff, 0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) read$char_usb(r4, &(0x7f0000000a40)=""/120, 0x78) sendfile(r5, r4, 0x0, 0x1c) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000b00)='mountinfo\x00') sendfile(r6, r6, &(0x7f0000000b40)=0x2eb4, 0x2000007ff) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x200800, &(0x7f0000000c40)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x2000}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x34, 0x68, 0x1, 0x100003, 0x25dfdbfb, {0x0, 0x0, 0x3}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x15}, {0x2, 0x4}, {0x0, 0x9}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) pipe2$9p(&(0x7f0000000180), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0xd3a, 0x0, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) 2.917583393s ago: executing program 2 (id=423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x458082, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x51) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0x1, 0x401, 0x4, 0x3}, 'syz0\x00', 0x44}) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0x72, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000600)={0x50, 0x13, 0x6, {0x0, 0x2}, {0x3, 0x2007}, @const={0xc, {0x100, 0x4, 0x4, 0x5}}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f00000001c0)={'syzkaller0\x00', @random="002000000102"}) close(r0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000002800)='./sys\x00', 0x2000010, &(0x7f00000009c0), 0x1, 0x27a6, &(0x7f000000f6c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000780), 0x208e24b) socket(0x10, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file4\x00', 0x11c0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000480), 0x318, 0x0) 2.728457913s ago: executing program 3 (id=424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x458082, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x51) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0x1, 0x401, 0x4, 0x3}, 'syz0\x00', 0x44}) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0x72, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000600)={0x50, 0x13, 0x6, {0x0, 0x2}, {0x3, 0x2007}, @const={0xc, {0x100, 0x4, 0x4, 0x5}}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f00000001c0)={'syzkaller0\x00', @random="002000000102"}) close(r0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000002800)='./sys\x00', 0x2000010, &(0x7f00000009c0), 0x1, 0x27a6, &(0x7f000000f6c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000780), 0x208e24b) socket(0x10, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file4\x00', 0x11c0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000002c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) sched_setscheduler(0x0, 0x0, &(0x7f0000000540)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) 2.397527216s ago: executing program 3 (id=425): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = syz_io_uring_setup(0xd40, &(0x7f0000000340)={0x0, 0x3, 0x3210, 0x0, 0xa9}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xb, &(0x7f0000000900)=@framed={{}, [@map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000a40)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000240)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(0xffffffffffffffff, 0x8004af80, &(0x7f00000000c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000580)={0x2, 0x0, [{0x40000073, 0x0, 0x7}, {0x40000073, 0x0, 0x13b764053}]}) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4714, 0x80000, 0x3, 0xdd, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x0, 0x0, 0x11a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ed2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 2.236995613s ago: executing program 1 (id=426): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000780)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000880), 0x318, 0x0) recvmmsg(r2, &(0x7f00000008c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000900)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/partitions\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f0000000a40)=""/120, 0x78) sendfile(0xffffffffffffffff, r4, 0x0, 0x1c) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000b00)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000b40)=0x2eb4, 0x2000007ff) mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x200800, &(0x7f0000000c40)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x25dfdbfb, {0x0, 0x0, 0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180), 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0xd3a, &(0x7f0000000540)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) 1.934990113s ago: executing program 4 (id=427): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r2, r1, 0x15, 0x0, @val=@perf_event={0x4b}}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000022c0)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000002300)) 1.886871868s ago: executing program 4 (id=428): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x6) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280), 0x48) mkdir(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c05c}}], 0x1, 0x2000c080) write(0xffffffffffffffff, &(0x7f0000002000)='1', 0x1) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000002040)='ext4\x00', &(0x7f0000002080)='./file2\x00', 0x200801f, &(0x7f00000020c0), 0x1, 0x501, &(0x7f0000002100)="$eJzs3UFvG1kdAPD/TOxt06Y4CxyWldhdsYuSCuokG7obcViohOBUCSj3EhI3iuLEVeK0TVRBKj4AEkKAxAVOXJD4AEioHwEhVYI7AgSqSgsHDoVZ2R6naWonqerYbfz7Sa/z3mTG///raCYz8yaeAIbWOxExGRFZlmXnI6KUz0/zEjut0lju0cPbC42SRJZdeZBEks9rf9apfHo2X+10RHz7GxHfS56Nu7G1vTJfrVbW8/ZUfTV5nGXbF5ZX55cqS5W12dmZD+Y+nLs4N92Tfo5HxEdf+/tPf/Trr3/0+y/e/MvVf05+v9XBlr396KVW14vN/4u2QkSsH0ewASk0e9hyccC5AABwsMb5/icj4nMRcT5KMdI8mwMAAABOkuwrY/E4aY3/AQAAACdTGhFjkaTl/HnfsUjTcrn1DO+n40xarW3Uv5CVdu8XjEcxvbZcrUznzw6MRzFptGfyZ2zb7ff3tWcj4vWI+ElptNkuL9SqiwO98wEAAADD4+y+6///lFrX/wAAAMAJMz7oBAAAAIBjlQ46AQAAAKAvjP8DAADAifbNy5cbJWu//3rxxtbmSu3GhcXKxkp5dXOhvFBbv15eqtWWmt/Zt3rY51VrtetfirXNW1P1ykZ9amNr++pqbXOtfnX5qVdgAwAAAH30+tt3/5xExM6XR9OIyJI9PytGZCN7Fy70Pz/g+DzXn//87fjyAPpvZNAJAAPjlB6GV3HQCQADd9hxoOvDO3/ofS4AAMDxmPjM7vh/swDDIx//T5JBJwL0nfF/GF7G/2F4FQ86A3BRACdeeoRd/cXH/7PsuZICAAB6bqxZkrScXweMRZqWyxHnmq8FKCbXlquV6Yj4RET8qVQ81WjPNNdM3B4AAAAAAAAAAAAAAAAAAAAAAAAAgCPKsiSyLkZ3lwEAAABeZRHpP5L8/V8TpffG9t8feC35b6k5jYibv7jys1vz9fr6TGP+v3bn13+ez3+/33cvAAAAgE7a1+nt63gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KVHD28vtEs/496/FKMx3il+IU43p6ejGBFn/p1EYc96SUSM9CD+zp2IeKNT/KSRVoznWeyPn0bEaF/iPzjXLf7ZHsSHYXb3UkR8tdP+l8Y7zWnn/b+Qlxd1/1JzJ+8Yv338G+ly/DvX6QPTZ2e9ee+3U13j34l4s9D5+NOOn3SJ/+4R+/jd72xvd/tZ9quIiY6/f5KnYk0lhetTG1vbF5ZX55cqS5W12dmZD+Y+nLs4Nz11bblayf/tGOPHn/3d/w/q/5ku8ccP6f97R+z//+7devipVrX4ZO6pVvuXWTb5buft/0aX+O3ffZ/PN3ejPdGu77Tqe731mz++9fYB/V/s0v/Dtv/kEft//ls//OsRFwUA+mBja3tlvlqtrKu8upX2qfLLks8zldHoY9D5OGiZ9kns8aURhbzygzzUc6z+2suxvRqVAR2QAACAY/PkpH/QmQAAAAAAAAAAAAAAAAAAAMDwOvTLzHrwdWL7Y+4MpqsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6OAAA//8btMeE") open(&(0x7f0000002640)='.\x00', 0x20000, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002680), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000026c0)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000002700)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000002740)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000002780)={0x0, 0x0, 0x0, &(0x7f00000027c0), 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000002800)={0x1, 0x1, &(0x7f0000002840), &(0x7f0000002880), &(0x7f00000028c0)}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002900)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000002940)=0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0200080007000000000000000000007a42ccd4cd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x91, &(0x7f00000004c0)=""/145, 0x41000}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.current\x00', 0x275a, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x5e, &(0x7f0000001bc0)={@local, @remote, @val, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x8, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8e9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004014}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.849264862s ago: executing program 2 (id=429): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="b80000001900010000000000040000000a0101020000000000000000000000000a01010000000000000000000000000000000000000000020200"], 0xb8}, 0x1, 0x0, 0x0, 0x24004811}, 0x2c000010) 1.802183597s ago: executing program 3 (id=430): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000ff00008500000002000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xe, 0x0, &(0x7f0000000840)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.7702036s ago: executing program 3 (id=431): r0 = socket(0x2, 0x2, 0x1) capset(0x0, &(0x7f0000000140)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x32}, 0x5}) 1.743916803s ago: executing program 2 (id=432): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x6) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280), 0x48) mkdir(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c05c}}], 0x1, 0x2000c080) write(0xffffffffffffffff, &(0x7f0000002000)='1', 0x1) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000002040)='ext4\x00', &(0x7f0000002080)='./file2\x00', 0x200801f, &(0x7f00000020c0), 0x1, 0x501, &(0x7f0000002100)="$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") open(&(0x7f0000002640)='.\x00', 0x20000, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002680), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000026c0)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000002700)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000002740)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000002780)={0x0, 0x0, 0x0, &(0x7f00000027c0), 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000002800)={0x1, 0x1, &(0x7f0000002840), &(0x7f0000002880), &(0x7f00000028c0)}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002900)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000002940)=0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0200080007000000000000000000007a42ccd4cd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x91, &(0x7f00000004c0)=""/145, 0x41000}, 0x94) remap_file_pages(&(0x7f00003e3000/0x7000)=nil, 0x7000, 0x0, 0x400000000004, 0x100000) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x5e, &(0x7f0000001bc0)={@local, @remote, @val, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x8, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) 1.699078288s ago: executing program 3 (id=433): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b35, &(0x7f0000000140)={'wlan1\x00', @random="010000000800"}) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x7, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x20006}]}}}}}}}, 0x0) gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x3000014, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000004c0)=0x2) syz_mount_image$erofs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x2800091, &(0x7f00000005c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1be, &(0x7f0000001680)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./file2\x00', 0x80000, 0x82) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000001880)={0x2020}, 0x2020) mount$cgroup(0x0, 0x0, 0x0, 0x2208000, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003940)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000003a00)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 1.309787807s ago: executing program 1 (id=434): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x121400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000002100)={{0x50000, 0x54000, 0xb, 0x1, 0x56, 0xa, 0x1, 0x5, 0x1, 0x6, 0x4, 0x7}, {0x10000, 0xdddd0000, 0x3, 0x5, 0x10, 0x0, 0x2, 0x3, 0x3, 0xf0, 0x8, 0x8}, {0x25000, 0xf000, 0xd, 0x1, 0x0, 0xfa, 0x0, 0x8, 0x5, 0x80, 0xf, 0x1}, {0xd000, 0xffffffff, 0x15, 0x8, 0xd8, 0x0, 0x2, 0x1, 0x8, 0x5, 0xe7}, {0x4000, 0x6000, 0x575fce867fa210f7, 0xe, 0x4, 0xfb, 0xd, 0xfb, 0x1, 0x4}, {0xb000, 0x2ffc, 0xb, 0x4, 0x6, 0xe, 0x1, 0xf, 0x6, 0x2b, 0xb, 0x9}, {0x50000, 0x8080000, 0xa, 0x8, 0x3, 0x0, 0xe, 0x0, 0x13, 0x0, 0x4, 0x7}, {0x40000, 0xdddd0000, 0x1, 0x2, 0x4, 0x8, 0x2, 0x7f, 0xb9, 0x5, 0x3, 0xa}, {0xeeef0000, 0xfff4}, {0x2ffc, 0x8}, 0x4000000c, 0x0, 0x6000, 0x0, 0xa, 0x400, 0x70000, 0x0, [0x7, 0x5, 0x8001, 0x9]}) 1.208080418s ago: executing program 1 (id=435): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r3 = inotify_init() r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000180)=0x1) r5 = dup2(r4, r4) read$FUSE(r5, &(0x7f0000000280)={0x2020}, 0x2020) close_range(r3, 0xffffffffffffffff, 0x0) 1.092130609s ago: executing program 2 (id=436): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x1561, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x2, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x2, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.08441055s ago: executing program 1 (id=437): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x400000000000041, 0x0) pidfd_getfd(r4, r4, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2800091, &(0x7f0000000b00)=ANY=[@ANYRES64=0x0, @ANYRES8=r4, @ANYRESHEX, @ANYRES32, @ANYRESOCT=r0, @ANYRES32], 0x55, 0x1be, &(0x7f0000001bc0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0xfffffffffffffe4c, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000500)=0x2, 0x4) bind$inet6(r8, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1fc}, 0x1c) add_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500), 0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffff1b65}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) 985.36426ms ago: executing program 4 (id=438): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd8", 0x79}], 0x1}}], 0x1, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 917.827267ms ago: executing program 0 (id=440): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x0) 917.705907ms ago: executing program 0 (id=441): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000ff00008500000002000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xe, 0x0, &(0x7f0000000840)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 916.791907ms ago: executing program 0 (id=442): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="b80000001900010000000000040000000a0101020000000000000000000000000a0101000000000000000000000000000000000000000002020037"], 0xb8}, 0x1, 0x0, 0x0, 0x24004811}, 0x2c000010) 910.455048ms ago: executing program 0 (id=443): r0 = socket(0x2, 0x2, 0x1) capset(&(0x7f0000000100)={0x19980330}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x32}, 0x5}) 851.039604ms ago: executing program 0 (id=444): syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./bus\x00', 0x8, &(0x7f0000000a80), 0x5, 0x50c, &(0x7f0000002180)="$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") syz_mount_image$vfat(&(0x7f00000026c0), &(0x7f0000000780)='./file0\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f0000002740)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001bc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="e23936dc40216cae5a38a01586cb37f2ed3c87090022681618cd622217700a84f154a6a22c08ea55036796a58243962d", @ANYBLOB="bb8950d2d8010026bd7000fddb4c252b00050000000400440024b2d11c2076e3705ecce2d8bc106d1b781c16c79c7ca25989074bc4d193f8049fea600adedb681b69e66fe84127140cc28f229d77602098ad"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc000001) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r0, 0x0, 0x1) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000740)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x4000087, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000007c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000880)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000ac0)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x804, &(0x7f0000000300)=ANY=[@ANYBLOB="696f636861727365743d63703836312c73686f72746e616d653d77696e6e742c75746638010000006f636173652c646f733178666c6f7070792c73686f72746e616d653d6d697865642c757466383d312c756e695f786c6174653d312c757466383d312c73686f72746e616d653d6d697865642c756e695f786c6174653d312c636f6465706167653d313235312c696f636861727365743d69736f383835392d392c756d61736b3d30303030303030303030303030303030303037373703002c757466383d302c726f6469722c00"], 0x1, 0x2a6, &(0x7f0000000400)="$eJzs3c2KW2UYAOD35D/tIlm4EqEHdOGqdLyCKVJBHBCULNSFFpuCTEIhgUBUjF15BV6BCN6MG/EGvADFnV2IR05OfstJTKQzGfR5Vh/vT7/3+3oms8qZT14ZXj56Mn789MtfotVKonIe5/EsiW5UYunrKPXzb+VxAOCGe5Zl8Xs212oWoel2RX1HZ61y5cMBAFdi4/d/dupZAIDr8f4HH75z/+LiwXtp2ooYfjPpJRGtdf7+4/gsBtGPe9GJPyOylWL91tsXD6KW5rrx2nA26U16EcOPf1z2/xox7z+LTnTL+8/y7u+T2OifTXr1uLXY/3wQ/Xe/i068VN7/RlrY7I9eI15/dWP+u9GJnz6NJzGIR4vZlv1fnaXpm9m3f3zxUR7N+5PZpNdc1S2qq9f2nwIAAAAAAAAAAAAAAAAAAAAAwH/e3XSlu/3+neWL//fk97wfaLbxfp57aZpmSVG/7q/Fy7WonfLsAAAAAAAAAAAAAAAAAAAAcFOMp59fPhwM+qMDFlE5tHj5tf6SVPy1HWlGxCG7N0tTd8qK66X/TjFPVBejDZKII84+Gk/r0Zx3/nNx9ZhbHY2n7Xye/iipxTFd+Ul3X12yirQ3U3ei2CuPtIvFRuTg3X+4Xdzi86lWEVk+XZcPk+hX9t5Yq+wheQGLrOTxq+7sajwfaUf5AfPUnt0bt//VzFlnRyqJiPrqMrdr5j9kt9YPZP3F3mHpx0XjCj6CAAAAAAAAAAAAAAAAAACAhfWXfkuST08wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcwPrv/x+xmC2ad9Vk1XxRi0XkxEcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf+DvAAAA//+zu1nK") openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0x80000, 0x40) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000700)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) 823.795397ms ago: executing program 3 (id=445): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000780)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000880), 0x318, 0x0) recvmmsg(r2, &(0x7f00000008c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000900)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/partitions\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f0000000a40)=""/120, 0x78) sendfile(0xffffffffffffffff, r4, 0x0, 0x1c) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000b00)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000b40)=0x2eb4, 0x2000007ff) mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x200800, &(0x7f0000000c40)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x25dfdbfb, {0x0, 0x0, 0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180), 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0xd3a, &(0x7f0000000540)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) 2.79397ms ago: executing program 1 (id=446): socket$nl_xfrm(0x10, 0x3, 0x6) setitimer(0x1, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000063c0), 0x515002) unshare(0x10070100) prlimit64(0x0, 0xe, &(0x7f0000006400)={0x8, 0x800000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000006440)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000006540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000065c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000006600), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000006640)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000006680)='./file0\x00', 0x21) mprotect(&(0x7f0000c5c000/0x1000)=nil, 0x1000, 0x2000004) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000067c0)={0x8, 0x2, 0x9, 0xb, 0xfffbffff, 0xc}) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) mount$9p_fd(0x0, &(0x7f0000006800)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) 0s ago: executing program 0 (id=447): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r3 = inotify_init() r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000180)=0x1) r5 = dup2(r4, r4) read$FUSE(r5, &(0x7f0000000280)={0x2020}, 0x2020) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): copy to user failed while replacing table [ 54.720037][ T28] audit: type=1400 audit(1794525236.622:247): avc: denied { create } for pid=788 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.741767][ T28] audit: type=1400 audit(1794525236.642:248): avc: denied { ioctl } for pid=788 comm="syz.1.122" path="socket:[17869]" dev="sockfs" ino=17869 ioctlcmd=0xfff scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.766901][ T790] syz.0.120 uses obsolete (PF_INET,SOCK_PACKET) [ 54.788147][ T792] loop4: detected capacity change from 0 to 16 [ 54.795111][ T792] erofs: (device loop4): mounted with root inode @ nid 36. [ 54.821099][ T794] loop4: detected capacity change from 0 to 256 [ 54.971628][ T800] loop3: detected capacity change from 0 to 256 [ 54.994669][ T798] loop4: detected capacity change from 0 to 40427 [ 55.007977][ T798] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 55.016757][ T798] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 55.049563][ T390] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 55.054440][ T798] F2FS-fs (loop4): Found nat_bits in checkpoint [ 55.081179][ T798] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 55.088276][ T798] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 55.232204][ T806] loop3: detected capacity change from 0 to 33792 [ 55.240150][ T806] ======================================================= [ 55.240150][ T806] WARNING: The mand mount option has been deprecated and [ 55.240150][ T806] and is ignored by this kernel. Remove the mand [ 55.240150][ T806] option from the mount to silence this warning. [ 55.240150][ T806] ======================================================= [ 55.275299][ T806] ext4: Unknown parameter 'smackfsdef' [ 56.589561][ T390] usb 3-1: Using ep0 maxpacket: 16 [ 56.598494][ T390] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.610166][ T390] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.620657][ T390] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 57.432670][ T816] EXT4-fs error: 70 callbacks suppressed [ 57.432688][ T816] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.132: Detected aborted journal [ 57.455996][ T816] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.132: Detected aborted journal [ 57.466892][ T816] EXT4-fs: 62 callbacks suppressed [ 57.466905][ T816] EXT4-fs (sda1): Remounting filesystem read-only [ 57.478829][ T816] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.132: Detected aborted journal [ 57.489734][ T816] EXT4-fs (sda1): Remounting filesystem read-only [ 57.496442][ T816] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.132: Detected aborted journal [ 57.507318][ T816] EXT4-fs (sda1): Remounting filesystem read-only [ 57.514979][ T816] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.132: Detected aborted journal [ 57.525904][ T816] EXT4-fs (sda1): Remounting filesystem read-only [ 57.534375][ T816] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.132: Detected aborted journal [ 57.545294][ T816] EXT4-fs (sda1): Remounting filesystem read-only [ 57.553109][ T824] fuse: Bad value for 'fd' [ 57.557701][ T816] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.132: Detected aborted journal [ 57.568615][ T816] EXT4-fs (sda1): Remounting filesystem read-only [ 57.575977][ T816] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.132: Detected aborted journal [ 57.586885][ T816] EXT4-fs (sda1): Remounting filesystem read-only [ 57.594744][ T816] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.132: Detected aborted journal [ 57.605648][ T816] EXT4-fs (sda1): Remounting filesystem read-only [ 57.613303][ T816] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.132: Detected aborted journal [ 57.624210][ T816] EXT4-fs (sda1): Remounting filesystem read-only [ 57.633935][ T816] EXT4-fs (sda1): Remounting filesystem read-only [ 57.649355][ T390] usb 3-1: config 0 interface 0 has no altsetting 0 [ 57.659170][ T390] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 57.680354][ T390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.697791][ T390] usb 3-1: config 0 descriptor?? [ 57.707129][ T390] usb 3-1: can't set config #0, error -71 [ 57.714316][ T390] usb 3-1: USB disconnect, device number 4 [ 57.762366][ T28] audit: type=1400 audit(1794525239.662:249): avc: denied { connect } for pid=836 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.781767][ T28] audit: type=1400 audit(1794525239.662:250): avc: denied { map } for pid=838 comm="syz.3.139" path="socket:[18511]" dev="sockfs" ino=18511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.808388][ T28] audit: type=1400 audit(1794525239.662:251): avc: denied { read } for pid=838 comm="syz.3.139" path="socket:[18511]" dev="sockfs" ino=18511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.831522][ T28] audit: type=1400 audit(1794525239.702:252): avc: denied { create } for pid=844 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.848015][ T845] Write-error on swap-device (8:0:788318) Nov 12 23:13:59 [ 57.856610][ T845] Write-error on swap-device (8:0:788086) syzkaller kern.a[ 57.864302][ T845] Write-error on swap-device (8:0:788094) lert kernel: [ [ 57.871562][ T845] Write-error on swap-device (8:0:788102) 57.848015][ T8[ 57.877791][ T28] audit: type=1400 audit(1794525239.772:253): avc: denied { ioctl } for pid=844 comm="syz.3.142" path="socket:[18518]" dev="sockfs" ino=18518 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 45] Write-error [ 57.877954][ T28] audit: type=1400 audit(1794525239.772:254): avc: denied { bind } for pid=844 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 on swap-device ([ 57.905148][ T845] Write-error on swap-device (8:0:788326) 8:0:788318) Nov 12 23:13:59 syz[ 57.935852][ T28] audit: type=1400 audit(1794525239.832:255): avc: denied { setopt } for pid=844 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 kaller kern.aler[ 57.937470][ T845] Write-error on swap-device (8:0:788334) t kernel: [ 57[ 57.962954][ T28] audit: type=1400 audit(1794525239.832:256): avc: denied { read } for pid=844 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 .856610][ T845][ 57.983445][ T845] Write-error on swap-device (8:0:788342) Write-error on [ 57.984457][ T28] audit: type=1326 audit(1794525239.882:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.4.143" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85403a94d9 code=0x0 swap-device (8:0[ 57.990467][ T845] Write-error on swap-device (8:0:788350) :788086) Nov 12[ 58.022953][ T845] Write-error on swap-device (8:0:788110) 23:13:59 syzkal[ 58.030097][ T845] Write-error on swap-device (8:0:788118) ler kern.alert kernel: [ 57.864302][ T845] Wr[ 58.040330][ T28] audit: type=1400 audit(1794525239.942:258): avc: denied { ioctl } for pid=844 comm="syz.3.142" path="socket:[18519]" dev="sockfs" ino=18519 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 ite-error on swap-device (8:0:788094) Nov 12 23:13:59 syzkaller kern.alert kernel: [ 57.871562][ T845] Write-error on swap-device (8:0:788102) Nov 12 23:13:59 syzkaller kern.alert kernel: [ 57.905148][ T845] Write-error on swap-device (8:0:788326) Nov 12 23:13:59 syzkaller kern.alert kernel: [ [ 58.090815][ T848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=848 comm=syz.4.143 57.937470][ T845] Write-error[ 58.105974][ T848] tipc: Started in network mode on swap-device [ 58.111930][ T848] tipc: Node identity aaaaaaaaaa24, cluster identity 4711 (8:0:788334) No[ 58.120507][ T848] tipc: Enabled bearer , priority 10 v 12 23:13:59 sy[ 58.123683][ T186] EXT4-fs warning: 39 callbacks suppressed zkaller kern.ale[ 58.123694][ T186] EXT4-fs warning (device sda1): htree_dirblock_to_tree:1083: inode #121: lblock 0: comm crond: error -5 reading directory block rt kernel: [ 57.983445][ T845] Write-error on swap-device (8:0:788342) Nov 12 23:13:59 syzkaller kern.alert kernel: [ 57.990467][ T845] Write-error on swap-device (8:0:788350) Nov 12 23:13:59 syzkaller kern.alert kernel: [ 58.022953][ T845] Write-error on swap-device (8:0:788110) Nov 12 23:13:59 syzkaller kern.alert kernel: [ 58.030097][ T845] Write-error on swap-device (8:0:788118) [ 58.205691][ T845] syz.3.142 (845) used greatest stack depth: 21120 bytes left [ 58.219610][ T545] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 58.222697][ T853] loop3: detected capacity change from 0 to 33280 [ 58.237321][ T853] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 58.245990][ T853] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.252580][ T853] EXT4-fs error (device loop3): ext4_quota_enable:7036: inode #4: comm syz.3.144: unexpected EA_INODE flag [ 58.264665][ T853] EXT4-fs error (device loop3): ext4_quota_enable:7039: comm syz.3.144: Bad quota inode: 4, type: 1 [ 58.275689][ T853] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.290570][ T853] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 58.297342][ T853] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.313959][ T853] xt_hashlimit: size too large, truncated to 1048576 [ 58.348300][ T860] loop2: detected capacity change from 0 to 16 [ 58.359122][ T860] erofs: (device loop2): mounted with root inode @ nid 36. [ 58.368992][ T860] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 58.377993][ T860] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 58.387323][ T860] bio_check_eod: 51 callbacks suppressed [ 58.387336][ T860] syz.2.145: attempt to access beyond end of device [ 58.387336][ T860] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 58.400506][ T545] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.407215][ T860] syz.2.145: attempt to access beyond end of device [ 58.407215][ T860] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 58.423395][ T545] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 58.476320][ T545] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.499928][ T545] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 58.513358][ T545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.525961][ T545] usb 1-1: Product: syz [ 58.533916][ T545] usb 1-1: Manufacturer: syz [ 58.540624][ T545] usb 1-1: SerialNumber: syz [ 58.719725][ T866] loop4: detected capacity change from 0 to 33280 [ 58.741200][ T866] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 58.759971][ T866] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.766354][ T866] EXT4-fs error (device loop4): ext4_quota_enable:7036: inode #4: comm syz.4.147: unexpected EA_INODE flag [ 58.778259][ T866] EXT4-fs error (device loop4): ext4_quota_enable:7039: comm syz.4.147: Bad quota inode: 4, type: 1 [ 58.789644][ T866] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.804486][ T866] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 58.811400][ T866] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 58.826006][ T866] xt_hashlimit: size too large, truncated to 1048576 [ 59.151854][ T288] EXT4-fs (loop3): unmounting filesystem. [ 59.175618][ T873] process 'syz.3.149' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 59.239268][ T877] fuse: Bad value for 'fd' [ 59.305715][ T878] device veth2 entered promiscuous mode [ 59.344849][ T390] tipc: Node number set to 9349802 [ 59.358223][ T873] loop3: detected capacity change from 0 to 33280 [ 59.366171][ T873] EXT4-fs: Ignoring removed nobh option [ 59.379519][ T873] EXT4-fs: Ignoring removed nobh option [ 59.405046][ T873] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 59.419161][ T881] netlink: 224 bytes leftover after parsing attributes in process `syz.1.150'. [ 59.461312][ T873] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #3: comm syz.3.149: corrupted inode contents [ 59.473238][ T873] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #3: comm syz.3.149: mark_inode_dirty error [ 59.484821][ T873] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #3: comm syz.3.149: corrupted inode contents [ 59.498037][ T873] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.149: mark_inode_dirty error [ 59.514653][ T873] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.149: Failed to acquire dquot type 0 [ 59.529009][ T873] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.149: corrupted inode contents [ 59.541094][ T873] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #16: comm syz.3.149: mark_inode_dirty error [ 59.552635][ T873] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.149: corrupted inode contents [ 59.564582][ T873] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.149: mark_inode_dirty error [ 59.576072][ T873] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.149: corrupted inode contents [ 59.576141][ T291] EXT4-fs (loop4): unmounting filesystem. [ 59.588156][ T873] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 59.602352][ T873] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.149: corrupted inode contents [ 59.617291][ T873] EXT4-fs error (device loop3): ext4_truncate:4327: inode #16: comm syz.3.149: mark_inode_dirty error [ 59.633028][ T873] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 59.642536][ T873] EXT4-fs (loop3): 1 truncate cleaned up [ 59.648246][ T873] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 59.657523][ T873] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.723537][ T288] EXT4-fs (loop3): unmounting filesystem. [ 60.144014][ T898] loop2: detected capacity change from 0 to 40427 [ 60.153591][ T898] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 60.161606][ T898] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 60.171824][ T898] F2FS-fs (loop2): Found nat_bits in checkpoint [ 60.194741][ T898] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 60.201883][ T898] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 60.684025][ T907] loop3: detected capacity change from 0 to 33280 [ 60.798077][ T584] usb 1-1: USB disconnect, device number 5 [ 60.897589][ T907] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 61.269934][ T907] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.334628][ T913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.158'. [ 61.366006][ T913] FAULT_INJECTION: forcing a failure. [ 61.366006][ T913] name failslab, interval 1, probability 0, space 0, times 1 [ 61.379163][ T913] CPU: 0 PID: 913 Comm: syz.4.158 Not tainted syzkaller #0 [ 61.386378][ T913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 61.396454][ T913] Call Trace: [ 61.399731][ T913] [ 61.402662][ T913] __dump_stack+0x21/0x24 [ 61.407010][ T913] dump_stack_lvl+0x110/0x170 [ 61.411691][ T913] ? __cfi_dump_stack_lvl+0x8/0x8 [ 61.416725][ T913] dump_stack+0x15/0x24 [ 61.420858][ T913] should_fail_ex+0x3bf/0x510 [ 61.425513][ T913] __should_failslab+0xac/0xf0 [ 61.430319][ T913] should_failslab+0x9/0x20 [ 61.434812][ T913] kmem_cache_alloc_node+0x42/0x330 [ 61.440001][ T913] ? __alloc_skb+0xe8/0x4a0 [ 61.444502][ T913] __alloc_skb+0xe8/0x4a0 [ 61.448814][ T913] netlink_ack+0x373/0x1160 [ 61.453304][ T913] ? __cfi_genl_rcv_msg+0x10/0x10 [ 61.458310][ T913] ? __cfi_netlink_ack+0x10/0x10 [ 61.463258][ T913] netlink_rcv_skb+0x27e/0x450 [ 61.468033][ T913] ? __cfi_genl_rcv_msg+0x10/0x10 [ 61.473056][ T913] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 61.478353][ T913] ? __netlink_lookup+0x387/0x3b0 [ 61.483360][ T913] genl_rcv+0x28/0x40 [ 61.487328][ T913] netlink_unicast+0x8c1/0xa60 [ 61.492086][ T913] netlink_sendmsg+0x8b9/0xbd0 [ 61.496839][ T913] ? __cfi_netlink_sendmsg+0x10/0x10 [ 61.502108][ T913] ? security_socket_sendmsg+0x93/0xb0 [ 61.507549][ T913] ? __cfi_netlink_sendmsg+0x10/0x10 [ 61.512817][ T913] ____sys_sendmsg+0x5fb/0x9c0 [ 61.517558][ T913] ? __sys_sendmsg_sock+0x40/0x40 [ 61.522563][ T913] ? import_iovec+0x7c/0xb0 [ 61.527044][ T913] ___sys_sendmsg+0x2a2/0x360 [ 61.531698][ T913] ? __sys_sendmsg+0x290/0x290 [ 61.536443][ T913] ? call_rcu+0xb84/0xf50 [ 61.540758][ T913] ? __cfi_call_rcu+0x10/0x10 [ 61.545428][ T913] ? __fdget+0x19c/0x220 [ 61.549661][ T913] __x64_sys_sendmsg+0x20d/0x2e0 [ 61.554582][ T913] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 61.560021][ T913] ? __kasan_check_write+0x14/0x20 [ 61.565118][ T913] ? fpregs_restore_userregs+0x128/0x260 [ 61.570734][ T913] ? switch_fpu_return+0xe/0x10 [ 61.575584][ T913] x64_sys_call+0x171/0x9a0 [ 61.580078][ T913] do_syscall_64+0x4c/0xa0 [ 61.584494][ T913] ? clear_bhb_loop+0x30/0x80 [ 61.589162][ T913] ? clear_bhb_loop+0x30/0x80 [ 61.593820][ T913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.599704][ T913] RIP: 0033:0x7f85403a94d9 [ 61.604096][ T913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.623688][ T913] RSP: 002b:00007f85411f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.632110][ T913] RAX: ffffffffffffffda RBX: 00007f8540625fa0 RCX: 00007f85403a94d9 [ 61.640061][ T913] RDX: 000000000000c030 RSI: 00002000000004c0 RDI: 000000000000000b [ 61.648010][ T913] RBP: 00007f854043804e R08: 0000000000000000 R09: 0000000000000000 [ 61.655957][ T913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.663909][ T913] R13: 00007f8540626038 R14: 00007f8540625fa0 R15: 00007ffebcea2998 [ 61.671862][ T913] [ 62.307071][ T584] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 62.346388][ T288] EXT4-fs (loop3): unmounting filesystem. [ 62.468794][ T923] EXT4-fs error: 139 callbacks suppressed [ 62.468814][ T923] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.161: Detected aborted journal [ 62.489400][ T924] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.162: Detected aborted journal [ 62.490950][ T923] EXT4-fs: 110 callbacks suppressed [ 62.490962][ T923] EXT4-fs (sda1): Remounting filesystem read-only [ 62.505698][ T924] EXT4-fs (sda1): Remounting filesystem read-only [ 62.520405][ T927] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.163: Detected aborted journal [ 62.522421][ T925] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.160: Detected aborted journal [ 62.538866][ T923] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.161: Detected aborted journal [ 62.545505][ T925] EXT4-fs (sda1): Remounting filesystem read-only [ 62.553899][ T927] EXT4-fs (sda1): Remounting filesystem read-only [ 62.561536][ T925] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.160: Detected aborted journal [ 62.566115][ T923] EXT4-fs (sda1): Remounting filesystem read-only [ 62.577184][ T925] EXT4-fs (sda1): Remounting filesystem read-only [ 62.584557][ T927] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.163: Detected aborted journal [ 62.605927][ T928] xt_hashlimit: size too large, truncated to 1048576 [ 62.612735][ T927] EXT4-fs (sda1): Remounting filesystem read-only [ 62.619513][ T584] usb 1-1: Using ep0 maxpacket: 16 [ 62.624892][ T927] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.163: Detected aborted journal [ 62.625880][ T584] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.644945][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 62.651527][ T584] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.667913][ T584] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 62.668151][ T927] EXT4-fs (sda1): Remounting filesystem read-only [ 62.681054][ T584] usb 1-1: config 0 interface 0 has no altsetting 0 [ 62.687350][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 62.695278][ T584] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 62.713411][ T584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.721788][ T927] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.163: Detected aborted journal [ 62.728673][ T584] usb 1-1: config 0 descriptor?? [ 62.737983][ T927] EXT4-fs (sda1): Remounting filesystem read-only [ 62.779510][ T390] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 62.869234][ T938] xt_hashlimit: size too large, truncated to 1048576 [ 62.959512][ T390] usb 3-1: Using ep0 maxpacket: 32 [ 62.980201][ T390] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 62.988306][ T390] usb 3-1: config 0 has no interface number 0 [ 62.996311][ T390] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 63.005702][ T390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.014214][ T390] usb 3-1: Product: syz [ 63.018457][ T390] usb 3-1: Manufacturer: syz [ 63.023224][ T390] usb 3-1: SerialNumber: syz [ 63.027092][ T941] device-mapper: table: 252:2: crypt: Error decoding and setting key (-EINVAL) [ 63.028877][ T390] usb 3-1: config 0 descriptor?? [ 63.041808][ T941] device-mapper: ioctl: error adding target to table [ 63.043082][ T390] smsc95xx v2.0.0 [ 63.054772][ T941] loop3: detected capacity change from 0 to 33792 [ 63.066466][ T941] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.165: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 1, max 0(0), depth 0(0) [ 63.083845][ T941] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.165: couldn't read orphan inode 13 (err -117) [ 63.095895][ T941] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 63.105437][ T941] EXT4-fs (loop3): unmounting filesystem. [ 63.155861][ T584] hid (null): invalid report_size -1596829679 [ 63.162086][ T584] hid (null): unknown global tag 0x9c [ 63.167587][ T584] hid (null): unknown global tag 0xc [ 63.173110][ T584] hid (null): unknown global tag 0xe [ 63.178476][ T584] hid (null): global environment stack underflow [ 63.185061][ T584] hid (null): unknown global tag 0xc [ 63.250729][ T926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.259315][ T926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.355937][ T515] usb 1-1: USB disconnect, device number 6 [ 63.469903][ T390] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 63.486372][ T390] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 63.559569][ T19] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.660342][ T973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.171'. [ 63.782832][ T19] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 63.794241][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 63.794254][ T28] audit: type=1400 audit(1794525245.692:273): avc: denied { getopt } for pid=974 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.830249][ T19] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 63.847807][ T19] usb 4-1: config 1 interface 0 has no altsetting 0 [ 63.855295][ T28] audit: type=1400 audit(1794525245.722:274): avc: denied { getopt } for pid=974 comm="syz.4.172" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.882235][ T28] audit: type=1326 audit(1794525245.722:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.172" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85403a94d9 code=0x7ffc0000 [ 63.908916][ T28] audit: type=1326 audit(1794525245.722:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.172" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f85403a94d9 code=0x7ffc0000 [ 63.935526][ T979] loop0: detected capacity change from 0 to 256 [ 63.942360][ T19] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 63.951721][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.960571][ T979] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.971579][ T19] usb 4-1: Product: syz [ 63.975809][ T19] usb 4-1: Manufacturer: syz [ 63.980683][ T19] usb 4-1: SerialNumber: syz [ 63.992701][ T950] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 64.000214][ T950] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 64.000301][ T102] udevd[102]: worker [314] terminated by signal 7 (Bus error) [ 64.007386][ T979] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 64.023640][ T28] audit: type=1400 audit(1794525245.722:277): avc: denied { setattr } for pid=974 comm="syz.4.172" name="" dev="pipefs" ino=13062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 64.046435][ T28] audit: type=1326 audit(1794525245.722:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.172" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85403a94d9 code=0x7ffc0000 [ 64.049305][ T102] udevd[102]: worker [314] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 64.071409][ T28] audit: type=1326 audit(1794525245.722:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.172" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85403a94d9 code=0x7ffc0000 [ 64.105815][ T28] audit: type=1326 audit(1794525245.722:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.172" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85403a94d9 code=0x7ffc0000 [ 64.132048][ T28] audit: type=1326 audit(1794525245.722:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.172" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85403a94d9 code=0x7ffc0000 [ 64.157193][ T28] audit: type=1326 audit(1794525245.722:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.4.172" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85403a94d9 code=0x7ffc0000 [ 64.182258][ T979] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x892de5c8, utbl_chksum : 0xe619d30d) [ 64.200267][ T390] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 64.219570][ T390] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 64.245705][ T390] usb 3-1: USB disconnect, device number 5 [ 64.768272][ T984] end_swap_bio_write: 14277 callbacks suppressed [ 64.768309][ T984] Write-error on swap-device (8:0:789038) Nov 12 23:14:06 syzkaller kern.a[ 64.783574][ T984] Write-error on swap-device (8:0:789046) lert kernel: [ 64.768309][ T984] Write-error [ 64.793500][ T984] Write-error on swap-device (8:0:789054) on swap-device ([ 64.795593][ T989] loop2: detected capacity change from 0 to 33280 8:0:789038) Nov[ 64.799264][ T984] Write-error on swap-device (8:0:789062) 12 23:14:06 syz[ 64.799301][ T984] Write-error on swap-device (8:0:789070) kaller kern.aler[ 64.799332][ T984] Write-error on swap-device (8:0:789078) t kernel: [ 64.783574][ T984] Write-error on swap-device (8:0:789046) [ 64.842604][ T984] Write-error on swap-device (8:0:792886) [ 64.851592][ T989] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 64.861888][ T989] EXT4-fs (loop2): orphan cleanup on readonly fs [ 64.868456][ T989] EXT4-fs error (device loop2): ext4_quota_enable:7036: inode #4: comm syz.2.177: unexpected EA_INODE flag [ 64.887419][ T991] loop4: detected capacity change from 0 to 256 [ 65.020751][ T984] Write-error on swap-device (8:0:792894) Nov 12 23:14:06 syzkaller kern.alert kernel: [ 64.793500][ T984] Write-error on swap-device (8:0:789054) Nov 12 23:14:06 syzkaller kern.alert kernel: [ 64.799264][ T984] Write-error on swap-device (8:0:789062) Nov 12 23:14:06 syzkaller kern.alert kernel: [ 64.799301][ T984] Write-error on swap-device (8:0:789070) Nov 12 23:14:06 syzkaller kern.alert kernel: [ 64.79933[ 65.063582][ T989] EXT4-fs error (device loop2): ext4_quota_enable:7039: comm syz.2.177: Bad quota inode: 4, type: 1 2][ T984] Write-error on swap-d[ 65.077865][ T984] Write-error on swap-device (8:0:792902) evice (8:0:789078) Nov 12 23:14:06 syzkaller kern.alert kernel: [ 64.842604][ T984] Write-error on swap-device (8:0:792886) Nov 12 23:14:06 syzkaller kern.alert kernel: [ 65.020751][ T984] Write-error on swap-device (8:0:792894) Nov 12 23:14:06 syzkaller kern.alert kernel: [ 65.077865][ T984] Write-error on swap-device (8:0:792902) [ 65.137287][ T984] Write-error on swap-device (8:0:792910) Nov 12 23:14:07 syzkaller kern.alert kernel: [ 65.137287][ T984] Write-error on swap-device (8:0:792910) [ 65.191201][ T989] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.380575][ T989] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 65.456040][ T989] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 65.724479][ T989] xt_hashlimit: size too large, truncated to 1048576 [ 65.732996][ T19] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 65.740988][ T102] udevd[102]: worker [556] terminated by signal 7 (Bus error) [ 65.752843][ T102] udevd[102]: worker [556] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 65.786605][ T102] udevd[102]: worker [389] terminated by signal 7 (Bus error) [ 65.802832][ T102] udevd[102]: worker [389] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.67' [ 65.882590][ T102] udevd[102]: worker [549] terminated by signal 7 (Bus error) [ 65.899182][ T102] udevd[102]: worker [549] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0' [ 65.947354][ T390] usb 4-1: USB disconnect, device number 2 [ 65.953562][ T102] udevd[102]: worker [548] terminated by signal 7 (Bus error) [ 65.981350][ T102] udevd[102]: worker [548] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/net/eth1' [ 65.999288][ T997] loop4: detected capacity change from 0 to 49152 [ 66.030984][ T997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.070352][ T997] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 66.090107][ T290] EXT4-fs (loop2): unmounting filesystem. [ 66.099825][ T997] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 66.114451][ T999] xt_hashlimit: size too large, truncated to 1048576 [ 66.336924][ T1010] fuse: Bad value for 'fd' [ 66.474091][ T979] Unsupported ieee802154 address type: 0 [ 66.635634][ T1015] loop0: detected capacity change from 0 to 49152 [ 66.658263][ T1015] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 66.803878][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 66.816469][ T1019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 66.932648][ T1022] loop0: detected capacity change from 0 to 256 [ 67.429231][ T1027] raw_sendmsg: syz.4.188 forgot to set AF_INET. Fix it! [ 67.489905][ T1028] EXT4-fs error: 129 callbacks suppressed [ 67.489928][ T1028] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.189: Detected aborted journal [ 67.507992][ T1028] EXT4-fs: 107 callbacks suppressed [ 67.508011][ T1028] EXT4-fs (sda1): Remounting filesystem read-only [ 67.523413][ T1028] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.189: Detected aborted journal [ 67.534629][ T1016] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.185: Detected aborted journal [ 67.545685][ T1016] EXT4-fs (sda1): Remounting filesystem read-only [ 67.602346][ T1016] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.185: Detected aborted journal [ 67.613278][ T1016] EXT4-fs (sda1): Remounting filesystem read-only [ 67.644904][ T1000] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.180: Detected aborted journal [ 67.655955][ T1028] EXT4-fs (sda1): Remounting filesystem read-only [ 67.668198][ T1000] EXT4-fs (sda1): Remounting filesystem read-only [ 67.682488][ T1000] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.180: Detected aborted journal [ 67.695987][ T1031] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.190: Detected aborted journal [ 67.707426][ T1000] EXT4-fs (sda1): Remounting filesystem read-only [ 67.714147][ T1031] EXT4-fs (sda1): Remounting filesystem read-only [ 67.721029][ T1000] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.180: Detected aborted journal [ 67.729160][ T1031] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.190: Detected aborted journal [ 67.734136][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 67.743309][ T1031] EXT4-fs (sda1): Remounting filesystem read-only [ 67.754989][ T1000] EXT4-fs (sda1): Remounting filesystem read-only [ 67.767558][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 68.095710][ T1038] device veth3 entered promiscuous mode [ 68.103727][ T1038] loop0: detected capacity change from 0 to 32896 [ 68.117431][ C1] Adjusting tsc more than 11% (6082670 vs 8464037) [ 68.117498][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 68.143114][ T19] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.154576][ T1038] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.163401][ T19] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.173353][ T1038] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.183538][ T19] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 68.198659][ T19] usb 4-1: config 0 interface 0 has no altsetting 0 [ 68.205611][ T1038] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 68.216366][ T19] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 68.225449][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.234091][ T19] usb 4-1: config 0 descriptor?? [ 68.247887][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.919865][ T1047] loop2: detected capacity change from 0 to 2048 [ 68.982591][ T1032] loop4: detected capacity change from 0 to 131072 [ 68.995555][ T1032] F2FS-fs (loop4): invalid crc value [ 69.017245][ T1051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'. [ 69.026554][ T1047] loop2: p1 < > p4 [ 69.030826][ T1047] loop2: p4 size 722688 extends beyond EOD, truncated [ 69.039923][ T1051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45927 sclass=netlink_route_socket pid=1051 comm=syz.1.195 [ 69.076438][ T1032] F2FS-fs (loop4): Found nat_bits in checkpoint [ 69.116073][ T1032] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 69.135747][ T1032] tap0: tun_chr_ioctl cmd 1074025680 [ 69.174516][ T1032] tap0: tun_chr_ioctl cmd 2147767520 [ 69.181154][ T287] EXT4-fs (loop0): unmounting filesystem. [ 69.559708][ T19] hid (null): invalid report_size -1596829679 [ 69.565845][ T19] hid (null): unknown global tag 0x9c [ 69.572601][ T19] hid (null): unknown global tag 0xc [ 69.578264][ T19] hid (null): unknown global tag 0xe [ 69.583580][ T19] hid (null): global environment stack underflow [ 69.599929][ T19] hid (null): unknown global tag 0xc [ 69.620169][ T19] usb 4-1: USB disconnect, device number 3 [ 69.707906][ T1069] fuse: Bad value for 'fd' [ 70.546629][ T1079] fuse: Bad value for 'fd' [ 70.980038][ T1085] FAULT_INJECTION: forcing a failure. [ 70.980038][ T1085] name fail_futex, interval 1, probability 0, space 0, times 1 [ 71.067705][ T1081] loop3: detected capacity change from 0 to 40427 [ 71.117977][ T1085] CPU: 1 PID: 1085 Comm: syz.4.205 Not tainted syzkaller #0 [ 71.125309][ T1085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 71.135361][ T1085] Call Trace: [ 71.138634][ T1085] [ 71.141560][ T1085] __dump_stack+0x21/0x24 [ 71.145890][ T1085] dump_stack_lvl+0x110/0x170 [ 71.150560][ T1085] ? __cfi_dump_stack_lvl+0x8/0x8 [ 71.155583][ T1085] dump_stack+0x15/0x24 [ 71.159735][ T1085] should_fail_ex+0x3bf/0x510 [ 71.164419][ T1085] should_fail+0xb/0x10 [ 71.168571][ T1085] get_futex_key+0x143/0xb10 [ 71.173163][ T1085] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 71.178885][ T1085] ? __cfi_get_futex_key+0x10/0x10 [ 71.184004][ T1085] futex_wake+0x150/0x8e0 [ 71.188328][ T1085] ? __cfi_avc_has_perm+0x10/0x10 [ 71.193352][ T1085] ? __cfi_futex_wake+0x10/0x10 [ 71.198205][ T1085] ? security_file_alloc+0x33/0x130 [ 71.203401][ T1085] ? ipv6_setsockopt+0xf6/0x1a0 [ 71.208250][ T1085] do_futex+0x2bf/0x430 [ 71.212402][ T1085] ? __cfi_rawv6_setsockopt+0x10/0x10 [ 71.217772][ T1085] ? __cfi_do_futex+0x10/0x10 [ 71.222449][ T1085] __se_sys_futex+0x136/0x310 [ 71.227127][ T1085] ? __x64_sys_futex+0x100/0x100 [ 71.232078][ T1085] ? xfd_validate_state+0x70/0x150 [ 71.237214][ T1085] __x64_sys_futex+0xe5/0x100 [ 71.241901][ T1085] x64_sys_call+0x7ec/0x9a0 [ 71.246210][ T1081] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 71.246434][ T1085] do_syscall_64+0x4c/0xa0 [ 71.254132][ T1081] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 71.258560][ T1085] ? clear_bhb_loop+0x30/0x80 [ 71.258591][ T1085] ? clear_bhb_loop+0x30/0x80 [ 71.258611][ T1085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.281947][ T1085] RIP: 0033:0x7f85403a94d9 [ 71.286377][ T1085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.305986][ T1085] RSP: 002b:00007f85411f20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 71.314408][ T1085] RAX: ffffffffffffffda RBX: 00007f8540625fa8 RCX: 00007f85403a94d9 [ 71.322386][ T1085] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8540625fac [ 71.330364][ T1085] RBP: 00007f8540625fa0 R08: 00188cd91402c16e R09: 0000000000000000 [ 71.338343][ T1085] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 71.346320][ T1085] R13: 00007f8540626038 R14: 00007ffebcea28b0 R15: 00007ffebcea2998 [ 71.354299][ T1085] [ 71.422843][ T1088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 71.460869][ T1062] loop0: detected capacity change from 0 to 131072 [ 71.482317][ T1062] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 71.492221][ T1062] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 71.558496][ T1062] F2FS-fs (loop0): Test dummy encryption mode enabled [ 71.663550][ T1062] F2FS-fs (loop0): invalid crc value [ 71.688511][ T1081] F2FS-fs (loop3): Found nat_bits in checkpoint [ 71.812063][ T1062] F2FS-fs (loop0): Found nat_bits in checkpoint [ 71.888904][ T1081] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 71.964624][ T1085] loop4: detected capacity change from 0 to 256 [ 71.978876][ T1085] FAT-fs (loop4): Directory bread(block 64) failed [ 71.985537][ T1085] FAT-fs (loop4): Directory bread(block 65) failed [ 71.992118][ T1085] FAT-fs (loop4): Directory bread(block 66) failed [ 71.998729][ T1085] FAT-fs (loop4): Directory bread(block 67) failed [ 72.036737][ T1081] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.041306][ T1085] FAT-fs (loop4): Directory bread(block 68) failed [ 72.069891][ T1085] FAT-fs (loop4): Directory bread(block 69) failed [ 72.084033][ T1085] FAT-fs (loop4): Directory bread(block 70) failed [ 72.102219][ T1085] FAT-fs (loop4): Directory bread(block 71) failed [ 72.113788][ T1085] FAT-fs (loop4): Directory bread(block 72) failed [ 72.120973][ T1062] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 72.142246][ T1085] FAT-fs (loop4): Directory bread(block 73) failed [ 72.153398][ T1081] device vlan2 entered promiscuous mode [ 72.159183][ T1081] device dummy0 entered promiscuous mode [ 72.166495][ T1062] F2FS-fs (loop0): Start checkpoint disabled! [ 72.183775][ T1062] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 72.192292][ T1085] end_swap_bio_write: 502 callbacks suppressed [ 72.192307][ T1085] Write-error on swap-device (8:0:789086) [ 72.196915][ T1105] loop2: detected capacity change from 0 to 33280 [ 72.204230][ T1062] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 Nov 12 23:14:13 syzkaller kern.alert kernel: [ 72.192307][ T1085] Write-error on swap-device (8:0:789086) [ 72.230387][ T1062] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 72.464321][ T1105] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 72.558192][ T1105] EXT4-fs (loop2): orphan cleanup on readonly fs [ 72.643046][ T1105] EXT4-fs error (device loop2): ext4_quota_enable:7036: inode #4: comm syz.2.209: unexpected EA_INODE flag [ 72.801368][ T1105] EXT4-fs error (device loop2): ext4_quota_enable:7039: comm syz.2.209: Bad quota inode: 4, type: 1 [ 72.923897][ T1105] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 73.138552][ T1105] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 73.145280][ T1105] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 73.250764][ T1105] xt_hashlimit: size too large, truncated to 1048576 [ 73.271211][ T1115] xt_hashlimit: size too large, truncated to 1048576 [ 73.366851][ T1062] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 73.444445][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 73.444459][ T28] audit: type=1400 audit(1794525254.479:316): avc: denied { create } for pid=1061 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.640537][ T1123] EXT4-fs error: 122 callbacks suppressed [ 73.640554][ T1123] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.214: Detected aborted journal [ 73.646834][ T1104] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.209: Detected aborted journal [ 73.671779][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 73.680173][ T1123] EXT4-fs: 103 callbacks suppressed [ 73.680187][ T1123] EXT4-fs (sda1): Remounting filesystem read-only [ 73.716185][ T1123] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.214: Detected aborted journal [ 73.727179][ T1123] EXT4-fs (sda1): Remounting filesystem read-only [ 73.756738][ T1104] EXT4-fs (sda1): Remounting filesystem read-only [ 73.873034][ T1126] loop3: detected capacity change from 0 to 16 [ 73.881552][ T1126] erofs: (device loop3): mounted with root inode @ nid 36. [ 73.892915][ T1123] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.214: Detected aborted journal [ 73.903853][ T1123] EXT4-fs (sda1): Remounting filesystem read-only [ 73.911210][ T1123] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.214: Detected aborted journal [ 73.922114][ T1123] EXT4-fs (sda1): Remounting filesystem read-only [ 73.929527][ T1126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 73.990170][ T1123] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.214: Detected aborted journal [ 74.001153][ T1123] EXT4-fs (sda1): Remounting filesystem read-only [ 74.008665][ T1123] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.214: Detected aborted journal [ 74.019584][ T1123] EXT4-fs (sda1): Remounting filesystem read-only [ 74.027119][ T1123] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.214: Detected aborted journal [ 74.038034][ T1123] EXT4-fs (sda1): Remounting filesystem read-only [ 74.055811][ T1123] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.214: Detected aborted journal [ 74.066866][ T1123] EXT4-fs (sda1): Remounting filesystem read-only [ 74.074603][ T1123] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.214: Detected aborted journal [ 74.085512][ T1123] EXT4-fs (sda1): Remounting filesystem read-only [ 74.784756][ T290] EXT4-fs (loop2): unmounting filesystem. [ 74.933970][ T1136] ip_tables: iptables: counters copy to user failed while replacing table [ 74.970511][ T28] audit: type=1400 audit(1794525255.830:317): avc: denied { create } for pid=1140 comm="syz.4.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.336101][ T1152] fuse: Bad value for 'fd' [ 75.387455][ T28] audit: type=1400 audit(1794525256.207:318): avc: denied { connect } for pid=1150 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.387738][ T1154] mmap: syz.2.224 (1154): VmData 29265920 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 75.485206][ T1157] loop3: detected capacity change from 0 to 256 [ 75.872374][ T28] audit: type=1400 audit(1794525256.639:319): avc: denied { ioctl } for pid=1158 comm="syz.2.225" path="socket:[19860]" dev="sockfs" ino=19860 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.595472][ T28] audit: type=1400 audit(1794525257.172:320): avc: denied { mount } for pid=1160 comm="syz.0.226" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 76.596430][ T1168] loop3: detected capacity change from 0 to 33280 [ 76.644983][ T1168] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 76.653760][ T1168] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.660211][ T1168] EXT4-fs error (device loop3): ext4_quota_enable:7036: inode #4: comm syz.3.228: unexpected EA_INODE flag [ 76.672622][ T1168] EXT4-fs error (device loop3): ext4_quota_enable:7039: comm syz.3.228: Bad quota inode: 4, type: 1 [ 76.683699][ T1168] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.698464][ T1168] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 76.716551][ T28] audit: type=1400 audit(1794525257.172:321): avc: denied { search } for pid=1160 comm="syz.0.226" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 76.740337][ T1168] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 76.751136][ T28] audit: type=1400 audit(1794525257.181:322): avc: denied { read write } for pid=1160 comm="syz.0.226" name="trigger" dev="tracefs" ino=2557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 76.781967][ T28] audit: type=1400 audit(1794525257.181:323): avc: denied { open } for pid=1160 comm="syz.0.226" path="/33/trace/events/sched/sched_switch/trigger" dev="tracefs" ino=2557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 77.845138][ T1172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.227'. [ 77.904003][ T1168] xt_hashlimit: size too large, truncated to 1048576 [ 78.115120][ T28] audit: type=1400 audit(1794525258.651:324): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 78.638398][ T1181] loop0: detected capacity change from 0 to 16 [ 78.686664][ T1181] erofs: (device loop0): mounted with root inode @ nid 36. [ 78.699644][ T1181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 79.144136][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 79.319787][ T288] EXT4-fs (loop3): unmounting filesystem. [ 79.337539][ T1185] EXT4-fs error: 76 callbacks suppressed [ 79.337555][ T1185] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.233: Detected aborted journal [ 79.354296][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 79.360532][ T24] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.382800][ T24] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.403895][ T1185] EXT4-fs: 70 callbacks suppressed [ 79.403911][ T1185] EXT4-fs (sda1): Remounting filesystem read-only [ 79.415956][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 79.416816][ T1185] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.233: Detected aborted journal [ 79.438079][ T1185] EXT4-fs (sda1): Remounting filesystem read-only [ 79.439874][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 79.445102][ T1185] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.233: Detected aborted journal [ 79.457090][ T24] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 79.466745][ T1185] EXT4-fs (sda1): Remounting filesystem read-only [ 79.480254][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 79.486678][ T1185] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.233: Detected aborted journal [ 79.501443][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 79.507995][ T1185] EXT4-fs (sda1): Remounting filesystem read-only [ 79.522130][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 79.524821][ T1187] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.234: Detected aborted journal [ 79.533524][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 79.547035][ T1185] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.233: Detected aborted journal [ 79.551640][ T1176] EXT4-fs (sda1): Remounting filesystem read-only [ 79.562012][ T1187] EXT4-fs (sda1): Remounting filesystem read-only [ 79.573358][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 79.574902][ T1185] EXT4-fs (sda1): Remounting filesystem read-only [ 79.584175][ T1176] EXT4-fs (sda1): Remounting filesystem read-only [ 79.590205][ T28] audit: type=1400 audit(1794525260.020:325): avc: denied { map } for pid=1176 comm="syz.1.229" path="socket:[19193]" dev="sockfs" ino=19193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 79.597487][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.629110][ T1187] EXT4-fs (sda1): Remounting filesystem read-only [ 79.634673][ T24] usb 3-1: config 0 descriptor?? [ 79.637352][ T1188] input: syz0 as /devices/virtual/input/input5 [ 79.646758][ T28] audit: type=1400 audit(1794525260.020:326): avc: denied { accept } for pid=1176 comm="syz.1.229" path="socket:[19193]" dev="sockfs" ino=19193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 79.718570][ T1188] loop0: detected capacity change from 0 to 49152 [ 79.728690][ T1188] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 79.744277][ T1188] EXT4-fs (loop0): mounted filesystem with ordered data mode. Quota mode: journalled. [ 80.097022][ T24] hid (null): invalid report_size -1596829679 [ 80.103122][ T24] hid (null): unknown global tag 0x9c [ 80.108542][ T24] hid (null): unknown global tag 0xc [ 80.114619][ T24] hid (null): unknown global tag 0xe [ 80.120007][ T24] hid (null): global environment stack underflow [ 80.126358][ T24] hid (null): unknown global tag 0xc [ 80.350381][ T1207] loop3: detected capacity change from 0 to 16 [ 80.358845][ T1207] erofs: (device loop3): mounted with root inode @ nid 36. [ 80.379532][ T1207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 80.807757][ T24] usb 3-1: USB disconnect, device number 6 [ 80.877833][ T1211] loop4: detected capacity change from 0 to 33280 [ 80.969849][ T1211] EXT4-fs: Ignoring removed oldalloc option [ 81.113543][ T1211] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 81.131994][ T287] EXT4-fs (loop0): unmounting filesystem. [ 81.153805][ T1211] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.386427][ T1212] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.393665][ T1212] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.080590][ T291] EXT4-fs (loop4): unmounting filesystem. [ 82.319790][ T1229] loop2: detected capacity change from 0 to 40427 [ 82.321553][ T1231] loop3: detected capacity change from 0 to 16 [ 82.326806][ T1229] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 82.340496][ T1229] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 82.340539][ T1231] erofs: (device loop3): mounted with root inode @ nid 36. [ 82.367733][ T1231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 82.376469][ T1229] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.424235][ T28] audit: type=1400 audit(1794525262.625:327): avc: denied { read write } for pid=1245 comm="syz.4.251" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 82.425418][ T1229] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 82.454875][ T1229] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 82.462730][ T28] audit: type=1400 audit(1794525262.625:328): avc: denied { open } for pid=1245 comm="syz.4.251" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 82.518305][ T1250] loop4: detected capacity change from 0 to 512 [ 82.556233][ T1250] FAT-fs (loop4): Unrecognized mount option "ioch" or missing value [ 82.592829][ T554] blk_print_req_error: 58 callbacks suppressed [ 82.592844][ T554] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.611056][ T1252] loop3: detected capacity change from 0 to 33792 [ 82.626271][ T1252] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.380265][ T1261] loop4: detected capacity change from 0 to 33280 [ 83.396881][ T1252] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 83.440247][ T1261] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 83.465935][ T1261] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.493769][ T1261] EXT4-fs error (device loop4): ext4_quota_enable:7036: inode #4: comm syz.4.254: unexpected EA_INODE flag [ 83.520369][ T1261] EXT4-fs error (device loop4): ext4_quota_enable:7039: comm syz.4.254: Bad quota inode: 4, type: 1 [ 83.533528][ T1244] Write-error on swap-device (8:0:789094) [ 83.539801][ T1244] Write-error on swap-device (8:0:789102) [ 83.545564][ T1261] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. Nov 12 23:14:23 syzkaller kern.alert kernel: [ 83.533528][ T1244] Write-error on swap-device (8:0:789094) Nov[ 83.570199][ T1244] Write-error on swap-device (8:0:789110) 12 23:14:23 syzkaller kern.aler[ 83.577709][ T1261] EXT4-fs (loop4): Cannot turn on quotas: error -117 t kernel: [ 83[ 83.577969][ T1244] Write-error on swap-device (8:0:789118) .539801][ T1244][ 83.592904][ T1261] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. Write-error on swap-device (8:0:789102) Nov 12 23:14:23 syzkaller kern.alert kernel: [ 83.570199][ T1244] Write-error on swap-device (8:0:789110) Nov 12 23:14:23 syzkaller kern.alert kernel: [ 83.577969][ T1244] Write-error on swap-device (8:0:789118) [ 83.644341][ T1261] xt_hashlimit: size too large, truncated to 1048576 [ 83.654092][ T1244] Write-error on swap-device (8:0:789126) [ 83.664266][ T1249] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.671470][ T1249] bridge0: port 1(bridge_slave_0) entered disabled state Nov 12 23:14:23 syzkaller kern.alert kernel: [ 83.654092][ T1244] Write-error on swap-device (8:0:789126) [ 83.711530][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 83.713123][ T1244] Write-error on swap-device (8:0:789286) Nov 12 23:14:23 syzkaller kern.alert kernel: [ 83.713123][ T1244] Write-error on swap-device (8:0:789286) [ 83.752340][ T1244] Write-error on swap-device (8:0:789286) [ 83.763923][ T1244] Write-error on swap-device (8:0:789286) Nov 12 23:14:23 syzkaller kern.alert kernel: [ 83.752340][ T1244] Write-error on swap-device ([ 83.777032][ T1244] Write-error on swap-device (8:0:789286) 8:0:789286) Nov 12 23:14:23 syzkaller kern.alert kernel: [ 83.763923][ T1244] Write-error on swap-device (8:0:789286) Nov 12 23:14:23 syzkaller kern.alert kernel: [ 83.777032][ T1244] Write-error on swap-device (8:0:789286) [ 83.868955][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.918096][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 83.924927][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.939612][ T24] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.954253][ T1256] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.961320][ T1256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.961527][ T309] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 83.979419][ T24] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.006147][ T24] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 84.084577][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 84.110593][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 84.183972][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.192335][ T309] usb 3-1: Using ep0 maxpacket: 16 [ 84.200276][ T309] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.244540][ T1256] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.251661][ T1256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.708663][ T102] udevd[102]: worker [551] terminated by signal 7 (Bus error) [ 84.716308][ T24] usb 4-1: config 0 descriptor?? [ 84.721323][ T309] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.732298][ T102] udevd[102]: worker [551] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 84.753402][ T309] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 84.776292][ T309] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.783068][ T309] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 84.801488][ T1243] EXT4-fs error: 132 callbacks suppressed [ 84.801504][ T1243] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.250: Detected aborted journal [ 84.813867][ T1260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.254: Detected aborted journal [ 84.820168][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 84.851173][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.859928][ T309] usb 3-1: config 0 descriptor?? [ 84.865002][ T279] EXT4-fs: 103 callbacks suppressed [ 84.865013][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 84.874941][ T1243] EXT4-fs (sda1): Remounting filesystem read-only [ 84.886031][ T1274] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.256: Detected aborted journal [ 84.895186][ T1256] device veth0_vlan left promiscuous mode [ 84.897095][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 84.909058][ T1243] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.250: Detected aborted journal [ 84.913934][ T1274] EXT4-fs (sda1): Remounting filesystem read-only [ 84.925513][ T1256] device veth0_vlan entered promiscuous mode [ 84.931136][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 84.938372][ T1256] device veth1_macvtap left promiscuous mode [ 84.944354][ T1243] EXT4-fs (sda1): Remounting filesystem read-only [ 84.953147][ T1256] device veth1_macvtap entered promiscuous mode [ 84.957188][ T1274] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.256: Detected aborted journal [ 84.962503][ T1243] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.250: Detected aborted journal [ 84.973759][ T1251] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.252: Detected aborted journal [ 84.985070][ T1256] device veth3 left promiscuous mode [ 84.994756][ T1251] EXT4-fs (sda1): Remounting filesystem read-only [ 85.004661][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.006458][ T1274] EXT4-fs (sda1): Remounting filesystem read-only [ 85.016865][ T1243] EXT4-fs (sda1): Remounting filesystem read-only [ 85.020240][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 85.027169][ T291] EXT4-fs (loop4): unmounting filesystem. [ 85.037922][ T1251] EXT4-fs (sda1): Remounting filesystem read-only [ 85.043646][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.049849][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 85.057514][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.073631][ T28] audit: type=1400 audit(1794525265.062:329): avc: denied { create } for pid=1274 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.081271][ T1277] loop4: detected capacity change from 0 to 33280 [ 85.094720][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.100017][ T1277] EXT4-fs: Ignoring removed oldalloc option [ 85.109237][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.121759][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.130885][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.139709][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.148271][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.157154][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.165371][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.174630][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 85.178690][ T1277] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 85.191030][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.191579][ T1277] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.199511][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 85.218463][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.226933][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.235315][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.243695][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.251957][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.260559][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 85.292887][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 85.310122][ T1252] device ip6gretap0 entered promiscuous mode [ 85.323859][ T24] logitech-djreceiver 0003:046D:C53A.0004: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 85.345509][ T309] hid (null): invalid report_size -1596829679 [ 85.351716][ T309] hid (null): unknown global tag 0x9c [ 85.357404][ T309] hid (null): unknown global tag 0xc [ 85.375683][ T309] hid (null): unknown global tag 0xe [ 85.381143][ T309] hid (null): global environment stack underflow [ 85.388546][ T309] hid (null): unknown global tag 0xc [ 85.713876][ T102] udevd[102]: worker [554] terminated by signal 7 (Bus error) [ 85.851194][ T24] usb 3-1: USB disconnect, device number 7 [ 85.874942][ T102] udevd[102]: worker [554] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 86.066096][ T382] usb 4-1: USB disconnect, device number 4 [ 86.074504][ T102] udevd[102]: worker [1292] terminated by signal 7 (Bus error) [ 86.089127][ T102] udevd[102]: worker [1292] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 86.124971][ T1300] udevd[1300]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 86.186437][ T102] udevd[102]: worker [1299] terminated by signal 7 (Bus error) [ 86.195975][ T291] EXT4-fs (loop4): unmounting filesystem. [ 86.202959][ T102] udevd[102]: worker [1299] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 86.283093][ T1308] loop4: detected capacity change from 0 to 512 [ 86.289792][ T1308] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 86.301311][ T28] audit: type=1400 audit(1794525266.195:330): avc: denied { name_bind } for pid=1307 comm="syz.4.262" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 86.385400][ T1314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 86.533903][ T288] EXT4-fs (loop3): unmounting filesystem. [ 86.591689][ T1317] input: syz0 as /devices/virtual/input/input6 [ 87.244115][ T1317] loop2: detected capacity change from 0 to 49152 [ 87.273325][ T1317] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 87.307962][ T1317] EXT4-fs (loop2): mounted filesystem with ordered data mode. Quota mode: journalled. [ 87.336382][ T1325] syz.1.267 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.385489][ T1320] loop4: detected capacity change from 0 to 40427 [ 87.389364][ T1331] device batadv_slave_1 entered promiscuous mode [ 87.402932][ T1320] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 87.414955][ T1320] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 87.431890][ T1320] F2FS-fs (loop4): Found nat_bits in checkpoint [ 87.499920][ T1320] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 87.521483][ T1320] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 87.603812][ T28] audit: type=1400 audit(1794525267.329:331): avc: denied { mounton } for pid=1324 comm="syz.1.267" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 87.683310][ T28] audit: type=1400 audit(1794525267.329:332): avc: denied { create } for pid=1324 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 87.703236][ T28] audit: type=1400 audit(1794525267.329:333): avc: denied { sys_admin } for pid=1324 comm="syz.1.267" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 87.784840][ T1343] device batadv_slave_1 entered promiscuous mode [ 87.786089][ T290] EXT4-fs (loop2): unmounting filesystem. [ 88.128220][ T1353] loop2: detected capacity change from 0 to 33280 [ 88.149992][ T1353] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 88.160857][ T1353] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.167453][ T1353] EXT4-fs error (device loop2): ext4_quota_enable:7036: inode #4: comm syz.2.273: unexpected EA_INODE flag [ 88.179783][ T1353] EXT4-fs error (device loop2): ext4_quota_enable:7039: comm syz.2.273: Bad quota inode: 4, type: 1 [ 88.190924][ T1353] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.205882][ T1353] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 88.212773][ T1353] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 88.282752][ T1330] device batadv_slave_1 left promiscuous mode [ 88.626661][ T1365] loop4: detected capacity change from 0 to 16 [ 88.636904][ T1365] erofs: (device loop4): mounted with root inode @ nid 36. [ 88.645448][ T1365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'. [ 88.688160][ T1342] device batadv_slave_1 left promiscuous mode [ 88.763345][ T1368] loop3: detected capacity change from 0 to 16 [ 88.771391][ T1368] erofs: (device loop3): mounted with root inode @ nid 36. [ 88.781003][ T1368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 88.937593][ T1372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 89.212585][ T290] EXT4-fs (loop2): unmounting filesystem. [ 89.843146][ T1383] loop2: detected capacity change from 0 to 33280 [ 89.853270][ T1384] tipc: Started in network mode [ 89.861235][ T1384] tipc: Node identity 4, cluster identity 4711 [ 89.868388][ T1384] tipc: Node number set to 4 [ 89.874368][ T1384] tipc: Enabled bearer , priority 0 [ 89.934060][ T1383] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 89.943316][ T1383] EXT4-fs (loop2): orphan cleanup on readonly fs [ 89.949836][ T1383] EXT4-fs error (device loop2): ext4_quota_enable:7036: inode #4: comm syz.2.282: unexpected EA_INODE flag [ 89.961812][ T1383] EXT4-fs error (device loop2): ext4_quota_enable:7039: comm syz.2.282: Bad quota inode: 4, type: 1 [ 89.973243][ T1383] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 89.989017][ T1383] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 89.997319][ T1383] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.207598][ T1383] xt_hashlimit: size too large, truncated to 1048576 [ 90.249832][ T1394] EXT4-fs error: 149 callbacks suppressed [ 90.249848][ T1394] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.285: Detected aborted journal [ 90.299234][ T1394] EXT4-fs: 121 callbacks suppressed [ 90.299252][ T1394] EXT4-fs (sda1): Remounting filesystem read-only [ 90.317373][ T1394] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.285: Detected aborted journal [ 90.340988][ T1394] EXT4-fs (sda1): Remounting filesystem read-only [ 90.503487][ T1394] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.285: Detected aborted journal [ 90.514461][ T1394] EXT4-fs (sda1): Remounting filesystem read-only [ 90.514459][ T1374] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.280: Detected aborted journal [ 90.514482][ T1374] EXT4-fs (sda1): Remounting filesystem read-only [ 90.521898][ T1394] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.285: Detected aborted journal [ 90.549042][ T1394] EXT4-fs (sda1): Remounting filesystem read-only [ 90.555901][ T1394] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.285: Detected aborted journal [ 90.644432][ T1394] EXT4-fs (sda1): Remounting filesystem read-only [ 90.687365][ T1394] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.285: Detected aborted journal [ 90.698336][ T1394] EXT4-fs (sda1): Remounting filesystem read-only [ 90.722745][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 90.782363][ T1380] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.282: Detected aborted journal [ 90.793367][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 90.793495][ T1380] EXT4-fs (sda1): Remounting filesystem read-only [ 90.810913][ T1398] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.286: Detected aborted journal [ 90.815449][ T1390] EXT4-fs (sda1): Remounting filesystem read-only [ 90.824939][ T1399] device batadv_slave_1 entered promiscuous mode [ 90.845797][ T290] EXT4-fs (loop2): unmounting filesystem. [ 91.314319][ T382] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 91.447846][ T1410] loop3: detected capacity change from 0 to 40427 [ 91.455296][ T1410] F2FS-fs (loop3): fault_injection options not supported [ 91.463041][ T1410] F2FS-fs (loop3): invalid crc value [ 91.473354][ T1410] F2FS-fs (loop3): Found nat_bits in checkpoint [ 91.524398][ T382] usb 3-1: Using ep0 maxpacket: 16 [ 91.530812][ T382] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.552199][ T382] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.562428][ T382] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 91.578531][ T382] usb 3-1: config 0 interface 0 has no altsetting 0 [ 91.578689][ T1410] F2FS-fs (loop3): Start checkpoint disabled! [ 91.591865][ T382] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 91.591975][ T1410] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 91.600963][ T382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.608708][ T1410] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 91.621708][ T382] usb 3-1: config 0 descriptor?? [ 91.655496][ T347] kworker/u4:4: attempt to access beyond end of device [ 91.655496][ T347] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 91.660139][ T1418] loop0: detected capacity change from 0 to 33280 [ 91.686403][ T1418] EXT4-fs: Ignoring removed oldalloc option [ 91.704109][ T1418] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 91.713125][ T1418] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.727084][ T1398] device batadv_slave_1 left promiscuous mode [ 91.769189][ T1426] loop3: detected capacity change from 0 to 33280 [ 91.809625][ T1426] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 91.839432][ T1426] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.877082][ T1430] loop4: detected capacity change from 0 to 16 [ 91.887417][ T1430] erofs: (device loop4): mounted with root inode @ nid 36. [ 91.905036][ T1430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 92.268734][ T382] hid (null): invalid report_size -1596829679 [ 92.362451][ T382] hid (null): unknown global tag 0x9c [ 92.406751][ T382] hid (null): unknown global tag 0xc [ 92.476472][ T382] hid (null): unknown global tag 0xe [ 92.535275][ T382] hid (null): global environment stack underflow [ 92.572695][ T382] hid (null): unknown global tag 0xc [ 92.723438][ T288] EXT4-fs (loop3): unmounting filesystem. [ 92.753708][ T382] usb 3-1: USB disconnect, device number 8 [ 92.806595][ T1442] loop3: detected capacity change from 0 to 33280 [ 92.874464][ T1442] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 92.889365][ T1442] EXT4-fs (loop3): orphan cleanup on readonly fs [ 92.897632][ T1442] EXT4-fs error (device loop3): ext4_quota_enable:7036: inode #4: comm syz.3.297: unexpected EA_INODE flag [ 92.901118][ T1445] fuse: Bad value for 'fd' [ 93.012202][ T1442] EXT4-fs error (device loop3): ext4_quota_enable:7039: comm syz.3.297: Bad quota inode: 4, type: 1 [ 93.023903][ T1442] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.038791][ T1442] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 93.046298][ T1442] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 94.095365][ T1438] loop4: detected capacity change from 0 to 40427 [ 94.107432][ T287] EXT4-fs (loop0): unmounting filesystem. [ 94.120100][ T1438] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 94.138413][ T1438] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 94.161879][ T1442] xt_hashlimit: size too large, truncated to 1048576 [ 94.170183][ T1438] F2FS-fs (loop4): Found nat_bits in checkpoint [ 94.183786][ T1458] loop0: detected capacity change from 0 to 33280 [ 94.199962][ T1458] EXT4-fs: Ignoring removed oldalloc option [ 94.249256][ T1458] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 94.272287][ T1458] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.300622][ T1438] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 94.307747][ T1438] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 94.438502][ T1457] loop2: detected capacity change from 0 to 40427 [ 94.462636][ T1457] F2FS-fs (loop2): fault_injection options not supported [ 94.608594][ T1457] F2FS-fs (loop2): invalid crc value [ 94.687580][ T1457] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.972721][ T1457] F2FS-fs (loop2): Start checkpoint disabled! [ 94.993816][ T1457] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 95.033808][ T1457] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 95.239757][ T221] kworker/u4:3: attempt to access beyond end of device [ 95.239757][ T221] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 95.276050][ T288] EXT4-fs (loop3): unmounting filesystem. [ 95.306648][ T1470] input: syz0 as /devices/virtual/input/input7 [ 96.082752][ T1451] EXT4-fs error: 115 callbacks suppressed [ 96.082781][ T1451] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.302: Detected aborted journal [ 96.099525][ T1451] EXT4-fs: 100 callbacks suppressed [ 96.099550][ T1451] EXT4-fs (sda1): Remounting filesystem read-only [ 96.159432][ T1473] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.305: Detected aborted journal [ 96.196790][ T1455] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.301: Detected aborted journal [ 96.224918][ T1455] EXT4-fs (sda1): Remounting filesystem read-only [ 96.231656][ T1473] EXT4-fs (sda1): Remounting filesystem read-only [ 96.240217][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 96.240940][ T1474] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.304: Detected aborted journal [ 96.261527][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 96.264652][ T1473] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.305: Detected aborted journal [ 96.280524][ T1470] loop3: detected capacity change from 0 to 49152 [ 96.290024][ T1474] EXT4-fs (sda1): Remounting filesystem read-only [ 96.300010][ T1474] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.304: Detected aborted journal [ 96.311107][ T1474] EXT4-fs (sda1): Remounting filesystem read-only [ 96.317864][ T1477] device batadv_slave_1 entered promiscuous mode [ 96.325067][ T1473] EXT4-fs (sda1): Remounting filesystem read-only [ 96.329434][ T1476] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.307: Detected aborted journal [ 96.335038][ T1475] loop4: detected capacity change from 0 to 33280 [ 96.342867][ T1476] EXT4-fs (sda1): Remounting filesystem read-only [ 96.348858][ T1455] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.301: Detected aborted journal [ 96.356159][ T1476] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.307: Detected aborted journal [ 96.366177][ T1455] EXT4-fs (sda1): Remounting filesystem read-only [ 96.383519][ T1455] EXT4-fs (sda1): Remounting filesystem read-only [ 96.385314][ T1470] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 96.403673][ T1475] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 96.412046][ T1475] EXT4-fs (loop4): orphan cleanup on readonly fs [ 96.419367][ T1475] EXT4-fs error (device loop4): ext4_quota_enable:7036: inode #4: comm syz.4.305: unexpected EA_INODE flag [ 96.434143][ T1475] EXT4-fs error (device loop4): ext4_quota_enable:7039: comm syz.4.305: Bad quota inode: 4, type: 1 [ 96.436472][ T1470] EXT4-fs (loop3): mounted filesystem with ordered data mode. Quota mode: journalled. [ 96.447262][ T1475] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 97.145484][ T1475] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 97.300602][ T287] EXT4-fs (loop0): unmounting filesystem. [ 97.307708][ T1475] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.351045][ T1490] loop0: detected capacity change from 0 to 33280 [ 97.383861][ T291] EXT4-fs (loop4): unmounting filesystem. [ 97.386766][ T1490] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.398815][ T1490] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.410292][ T1474] device batadv_slave_1 left promiscuous mode [ 97.501284][ T1495] loop4: detected capacity change from 0 to 33280 [ 97.507983][ T28] audit: type=1400 audit(1794525276.525:334): avc: denied { create } for pid=1499 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.514096][ T1500] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 97.604875][ T1503] loop2: detected capacity change from 0 to 16 [ 97.613446][ T1503] erofs: (device loop2): mounted with root inode @ nid 36. [ 97.628911][ T1503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 97.805857][ T1495] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 97.867574][ T1495] EXT4-fs (loop4): orphan cleanup on readonly fs [ 97.908820][ T1495] EXT4-fs error (device loop4): ext4_quota_enable:7036: inode #4: comm syz.4.309: unexpected EA_INODE flag [ 97.945741][ T1500] fuse: Bad value for 'fd' [ 97.963827][ T1495] EXT4-fs error (device loop4): ext4_quota_enable:7039: comm syz.4.309: Bad quota inode: 4, type: 1 [ 98.013493][ T1495] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.029360][ T1495] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 98.037042][ T1495] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.172607][ T288] EXT4-fs (loop3): unmounting filesystem. [ 98.286536][ T287] EXT4-fs (loop0): unmounting filesystem. [ 98.466095][ T1508] input: syz0 as /devices/virtual/input/input8 [ 98.580793][ T1512] loop2: detected capacity change from 0 to 33280 [ 98.602357][ T1508] loop3: detected capacity change from 0 to 49152 [ 98.615869][ T1508] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 98.625521][ T1512] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 98.633885][ T1512] EXT4-fs (loop2): orphan cleanup on readonly fs [ 98.640437][ T1512] EXT4-fs error (device loop2): ext4_quota_enable:7036: inode #4: comm syz.2.314: unexpected EA_INODE flag [ 98.652135][ T1512] EXT4-fs error (device loop2): ext4_quota_enable:7039: comm syz.2.314: Bad quota inode: 4, type: 1 [ 98.654334][ T291] EXT4-fs (loop4): unmounting filesystem. [ 98.664987][ T1512] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.687405][ T1512] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 98.696764][ T1512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.708154][ T1519] fuse: Bad value for 'fd' [ 98.726195][ T1508] EXT4-fs (loop3): mounted filesystem with ordered data mode. Quota mode: journalled. [ 98.917447][ T1512] xt_hashlimit: size too large, truncated to 1048576 [ 99.059922][ T288] EXT4-fs (loop3): unmounting filesystem. [ 99.605788][ T1531] loop0: detected capacity change from 0 to 33280 [ 99.641743][ T1521] loop4: detected capacity change from 0 to 40427 [ 99.665789][ T1521] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 99.673743][ T1531] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 99.694971][ T1521] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 99.703830][ T1531] EXT4-fs (loop0): orphan cleanup on readonly fs [ 99.748568][ T1521] F2FS-fs (loop4): Found nat_bits in checkpoint [ 99.750643][ T1531] EXT4-fs error (device loop0): ext4_quota_enable:7036: inode #4: comm syz.0.319: unexpected EA_INODE flag [ 99.789770][ T1531] EXT4-fs error (device loop0): ext4_quota_enable:7039: comm syz.0.319: Bad quota inode: 4, type: 1 [ 99.817398][ T1521] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 99.834222][ T1521] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 99.849394][ T1531] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 99.865701][ T1531] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 99.881637][ T1531] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 99.894080][ T1541] fuse: Bad value for 'fd' [ 100.012304][ T287] EXT4-fs (loop0): unmounting filesystem. [ 100.022903][ T1526] kvm [1525]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1032 [ 100.423207][ T1526] kvm [1525]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x792d [ 100.490865][ T290] EXT4-fs (loop2): unmounting filesystem. [ 100.526867][ T1527] Write-error on swap-device (8:0:796934) [ 100.547630][ T1526] kvm [1525]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xb3ce [ 100.576922][ T1527] Write-error on swap-device (8:0:796942) Nov 12 23:14:39 syzkaller kern.alert kernel: [ 100.526867][ T1527] Write-error on swap-device (8:0:796934) Nov[ 100.595440][ T1527] Write-error on swap-device (8:0:796950) 12 23:14:39 syzkaller kern.alert kernel: [ 100.576922][ T1527] Write-error on swap-device (8:0:796942) Nov 12 23:14:39 syzkaller kern.alert kernel: [ 100.595440][ T1527] Wr[ 100.616166][ T1526] kvm [1525]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x8086 ite-error on swap-device (8:0:796950) [ 100.648483][ T1527] Write-error on swap-device (8:0:796958) [ 100.700078][ T1549] input: syz0 as /devices/virtual/input/input9 [ 100.733483][ T1527] Write-error on swap-device (8:0:789310) Nov 12 23:14:39 [ 100.740194][ T1527] Write-error on swap-device (8:0:789318) syzkaller kern.alert kernel: [ [ 100.749038][ T1527] Write-error on swap-device (8:0:789326) 100.648483][ T1527] Write-error on swap-device ([ 100.759015][ T1526] kvm: MONITOR instruction emulated as NOP! 8:0:796958) Nov[ 100.759324][ T1527] Write-error on swap-device (8:0:789334) 12 23:14:39 syzkaller kern.alert kernel: [ 100.733483][ T1527][ 100.777016][ T1546] bridge0: port 2(bridge_slave_1) entered disabled state Write-error on [ 100.785194][ T1546] bridge0: port 1(bridge_slave_0) entered disabled state swap-device (8:0[ 100.793932][ T1527] Write-error on swap-device (8:0:797054) :789310) Nov 12 23:14:39 syzkaller kern.alert kernel: [ 100.740194][ T1527] Write-error on swap-device (8:0:789318) Nov 12 23[ 100.811480][ T1527] Write-error on swap-device (8:0:797062) :14:39 syzkaller kern.alert kernel: [ 100.749038][ T1527] Write-error on swap-device (8:0:789326) Nov 12 23:14:39 syzkaller kern.alert kernel: [ 100.759324][ T1527] Write-error on swap-device (8:0:789334) Nov 12 23:14:39 syzkaller kern.alert kernel: [ 100.793932][ T1527] Write-error on swap-device (8:0:797054) Nov 12 23:14:39 syzkaller kern.alert kernel: [ 100.811480][ T1527] Write-error on swap-device (8:0:797062) [ 101.015144][ T1557] loop0: detected capacity change from 0 to 49152 [ 101.035463][ T1557] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 101.053269][ T1557] EXT4-fs (loop0): mounted filesystem with ordered data mode. Quota mode: journalled. [ 101.485442][ T1575] loop3: detected capacity change from 0 to 16 [ 101.494303][ T1575] erofs: (device loop3): mounted with root inode @ nid 36. [ 101.508199][ T1571] EXT4-fs error: 158 callbacks suppressed [ 101.508214][ T1571] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.326: Detected aborted journal [ 101.526007][ T1571] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.326: Detected aborted journal [ 101.536930][ T1571] EXT4-fs: 131 callbacks suppressed [ 101.536951][ T1571] EXT4-fs (sda1): Remounting filesystem read-only [ 101.549955][ T1575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 101.607560][ T1571] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.326: Detected aborted journal [ 101.618539][ T1571] EXT4-fs (sda1): Remounting filesystem read-only [ 101.625668][ T1571] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.326: Detected aborted journal [ 101.636578][ T1571] EXT4-fs (sda1): Remounting filesystem read-only [ 101.644631][ T1571] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.326: Detected aborted journal [ 101.655571][ T1571] EXT4-fs (sda1): Remounting filesystem read-only [ 101.664028][ T1571] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.326: Detected aborted journal [ 101.674945][ T1571] EXT4-fs (sda1): Remounting filesystem read-only [ 101.683689][ T1571] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.326: Detected aborted journal [ 101.694593][ T1571] EXT4-fs (sda1): Remounting filesystem read-only [ 101.702107][ T1571] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.326: Detected aborted journal [ 101.713032][ T1571] EXT4-fs (sda1): Remounting filesystem read-only [ 101.721284][ T1571] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.326: Detected aborted journal [ 101.732208][ T1571] EXT4-fs (sda1): Remounting filesystem read-only [ 101.742741][ T1571] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.326: Detected aborted journal [ 101.753693][ T1571] EXT4-fs (sda1): Remounting filesystem read-only [ 101.761724][ T1571] EXT4-fs (sda1): Remounting filesystem read-only [ 102.366046][ T40] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 102.378439][ T287] EXT4-fs (loop0): unmounting filesystem. [ 102.554317][ T1584] fuse: Bad value for 'fd' [ 102.613316][ T1588] loop3: detected capacity change from 0 to 33280 [ 102.638712][ T1588] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 102.656109][ T40] usb 3-1: Using ep0 maxpacket: 16 [ 102.662392][ T40] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.665381][ T1588] EXT4-fs (loop3): orphan cleanup on readonly fs [ 102.673430][ T40] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.689651][ T40] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 102.689821][ T1593] input: syz0 as /devices/virtual/input/input10 [ 102.703020][ T40] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.715734][ T40] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 102.724568][ T1588] EXT4-fs error (device loop3): ext4_quota_enable:7036: inode #4: comm syz.3.332: unexpected EA_INODE flag [ 102.724892][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.745003][ T40] usb 3-1: config 0 descriptor?? [ 102.750942][ T1588] EXT4-fs error (device loop3): ext4_quota_enable:7039: comm syz.3.332: Bad quota inode: 4, type: 1 [ 102.766965][ T1588] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 102.782796][ T1588] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 102.789747][ T1588] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.863939][ T288] EXT4-fs (loop3): unmounting filesystem. [ 102.888498][ T1593] loop0: detected capacity change from 0 to 49152 [ 102.897524][ T1593] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 102.946181][ T1593] EXT4-fs (loop0): mounted filesystem with ordered data mode. Quota mode: journalled. [ 103.263163][ T382] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.283983][ T40] hid (null): invalid report_size -1596829679 [ 103.290816][ T40] hid (null): unknown global tag 0x9c [ 103.336103][ T40] hid (null): unknown global tag 0xc [ 103.375294][ T40] hid (null): unknown global tag 0xe [ 103.400085][ T40] hid (null): global environment stack underflow [ 103.432093][ T40] hid (null): unknown global tag 0xc [ 103.469203][ T382] usb 4-1: Using ep0 maxpacket: 16 [ 103.476916][ T382] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.618698][ T40] usb 3-1: USB disconnect, device number 9 [ 103.667386][ T382] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.845216][ T382] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 103.858500][ T382] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.879443][ T287] EXT4-fs (loop0): unmounting filesystem. [ 103.896886][ T382] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 103.923745][ T382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.941104][ T1609] loop4: detected capacity change from 0 to 16 [ 103.947970][ T1609] erofs: (device loop4): mounted with root inode @ nid 36. [ 103.957618][ T1609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 103.978155][ T382] usb 4-1: config 0 descriptor?? [ 104.423810][ T1617] loop0: detected capacity change from 0 to 33280 [ 104.438518][ T1619] loop2: detected capacity change from 0 to 33280 [ 104.455508][ T1617] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 104.471574][ T1619] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 104.478604][ T382] hid (null): invalid report_size -1596829679 [ 104.488946][ T1619] EXT4-fs (loop2): orphan cleanup on readonly fs [ 104.494393][ T1617] EXT4-fs (loop0): orphan cleanup on readonly fs [ 104.501790][ T382] hid (null): unknown global tag 0x9c [ 104.508230][ T1617] EXT4-fs error (device loop0): ext4_quota_enable:7036: inode #4: comm syz.0.340: unexpected EA_INODE flag [ 104.520928][ T382] hid (null): unknown global tag 0xc [ 104.521128][ T1619] EXT4-fs error (device loop2): ext4_quota_enable:7036: inode #4: comm syz.2.341: unexpected EA_INODE flag [ 104.527373][ T382] hid (null): unknown global tag 0xe [ 104.538321][ T1617] EXT4-fs error (device loop0): ext4_quota_enable:7039: comm syz.0.340: Bad quota inode: 4, type: 1 [ 104.563667][ T1619] EXT4-fs error (device loop2): ext4_quota_enable:7039: comm syz.2.341: Bad quota inode: 4, type: 1 [ 104.601221][ T382] hid (null): global environment stack underflow [ 104.619716][ T1617] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 104.629363][ T382] hid (null): unknown global tag 0xc [ 104.634808][ T1617] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 104.646538][ T1617] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 104.669877][ T1617] xt_hashlimit: size too large, truncated to 1048576 [ 104.688736][ T1619] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 104.707116][ T382] usb 4-1: USB disconnect, device number 5 [ 104.714579][ T1619] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 104.721400][ T1619] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.623468][ T290] EXT4-fs (loop2): unmounting filesystem. [ 105.800306][ T1633] loop2: detected capacity change from 0 to 16 [ 105.810394][ T1633] erofs: (device loop2): mounted with root inode @ nid 36. [ 105.825016][ T1633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 106.233224][ T287] EXT4-fs (loop0): unmounting filesystem. [ 106.695540][ T1633] syz.2.343 (1633) used greatest stack depth: 20976 bytes left [ 106.892699][ T1652] fuse: Bad value for 'fd' [ 107.063576][ T1636] loop3: detected capacity change from 0 to 40427 [ 107.084682][ T1636] F2FS-fs (loop3): fault_injection options not supported [ 107.110500][ T1636] F2FS-fs (loop3): invalid crc value [ 107.126596][ T1636] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.143022][ T382] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 107.177729][ T1648] loop0: detected capacity change from 0 to 40427 [ 107.189409][ T1648] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 107.198267][ T1636] F2FS-fs (loop3): Start checkpoint disabled! [ 107.204554][ T1648] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 107.208091][ T102] EXT4-fs error: 144 callbacks suppressed [ 107.208102][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 107.230008][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 107.241344][ T279] EXT4-fs: 122 callbacks suppressed [ 107.241358][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 107.241491][ T1636] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 107.246777][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 107.256710][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 107.260611][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 107.271842][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 107.284690][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 107.300395][ T1636] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 107.320362][ T1648] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.329379][ T1635] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.344: Detected aborted journal [ 107.340490][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 107.353812][ T1635] EXT4-fs (sda1): Remounting filesystem read-only [ 107.355237][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 107.361213][ T1658] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.352: Detected aborted journal [ 107.383146][ T382] usb 3-1: Using ep0 maxpacket: 16 [ 107.387597][ T1658] EXT4-fs (sda1): Remounting filesystem read-only [ 107.389354][ T1648] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 107.395771][ T1658] EXT4-fs (sda1): Remounting filesystem read-only [ 107.402275][ T382] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.408860][ T1658] EXT4-fs (sda1): Remounting filesystem read-only [ 107.419715][ T1635] EXT4-fs (sda1): Remounting filesystem read-only [ 107.426100][ T1658] EXT4-fs (sda1): Remounting filesystem read-only [ 107.432075][ T1648] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.440082][ T1635] EXT4-fs (sda1): Remounting filesystem read-only [ 107.445939][ T382] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.462214][ T382] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 107.466852][ T1647] EXT4-fs (sda1): Remounting filesystem read-only [ 107.475436][ T382] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.488447][ T382] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 107.496506][ T10] kworker/u4:1: attempt to access beyond end of device [ 107.496506][ T10] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 107.498029][ T382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.569867][ T382] usb 3-1: config 0 descriptor?? [ 107.657084][ T1667] loop3: detected capacity change from 0 to 16 [ 107.859910][ T1667] erofs: (device loop3): mounted with root inode @ nid 36. [ 108.066410][ T1667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 108.097593][ T382] hid (null): invalid report_size -1596829679 [ 108.111894][ T382] hid (null): unknown global tag 0x9c [ 108.119663][ T382] hid (null): unknown global tag 0xc [ 108.127305][ T382] hid (null): unknown global tag 0xe [ 108.132979][ T382] hid (null): global environment stack underflow [ 108.139380][ T382] hid (null): unknown global tag 0xc [ 108.334367][ T382] usb 3-1: USB disconnect, device number 10 [ 109.378970][ T1697] input: syz0 as /devices/virtual/input/input11 [ 109.412219][ T1698] loop4: detected capacity change from 0 to 16 [ 109.422664][ T1698] erofs: (device loop4): mounted with root inode @ nid 36. [ 109.431185][ T1698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.361'. [ 109.511562][ T1701] device batadv_slave_1 entered promiscuous mode [ 109.537736][ T1697] loop0: detected capacity change from 0 to 49152 [ 109.559349][ T1697] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 109.627122][ T1709] input: syz0 as /devices/virtual/input/input12 [ 109.642028][ T1697] EXT4-fs (loop0): mounted filesystem with ordered data mode. Quota mode: journalled. [ 109.693431][ T1709] loop3: detected capacity change from 0 to 49152 [ 109.705592][ T1709] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 109.754328][ T1709] EXT4-fs (loop3): mounted filesystem with ordered data mode. Quota mode: journalled. [ 109.821395][ T287] EXT4-fs (loop0): unmounting filesystem. [ 109.996226][ T1720] fuse: Bad value for 'fd' [ 110.549036][ T1700] device batadv_slave_1 left promiscuous mode [ 110.862025][ T288] EXT4-fs (loop3): unmounting filesystem. [ 110.930596][ T1731] loop4: detected capacity change from 0 to 16 [ 110.942538][ T1732] loop0: detected capacity change from 0 to 16 [ 110.951697][ T1732] erofs: (device loop0): mounted with root inode @ nid 36. [ 110.980764][ T1732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 111.006252][ T1731] erofs: (device loop4): mounted with root inode @ nid 36. [ 111.029717][ T1731] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 111.038794][ T1731] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 111.048262][ T1731] syz.4.368: attempt to access beyond end of device [ 111.048262][ T1731] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 111.062621][ T1731] syz.4.368: attempt to access beyond end of device [ 111.062621][ T1731] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 111.634344][ T1728] loop2: detected capacity change from 0 to 40427 [ 112.210292][ T1728] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 112.236144][ T1728] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 112.248525][ T1728] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.285952][ T1728] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 112.293233][ T1728] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 112.655075][ T1727] EXT4-fs error: 139 callbacks suppressed [ 112.655112][ T1727] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.371: Detected aborted journal [ 112.671832][ T1727] EXT4-fs: 115 callbacks suppressed [ 112.671859][ T1727] EXT4-fs (sda1): Remounting filesystem read-only [ 112.687186][ T1727] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.371: Detected aborted journal [ 112.698147][ T1727] EXT4-fs (sda1): Remounting filesystem read-only [ 112.738437][ T1741] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.373: Detected aborted journal [ 112.752110][ T1727] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.371: Detected aborted journal [ 112.763100][ T1727] EXT4-fs (sda1): Remounting filesystem read-only [ 112.773139][ T1727] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.371: Detected aborted journal [ 112.784130][ T1727] EXT4-fs (sda1): Remounting filesystem read-only [ 113.141543][ T1727] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.371: Detected aborted journal [ 113.152532][ T1727] EXT4-fs (sda1): Remounting filesystem read-only [ 113.323156][ T1727] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.371: Detected aborted journal [ 113.334089][ T1727] EXT4-fs (sda1): Remounting filesystem read-only [ 113.334274][ T1727] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.371: Detected aborted journal [ 113.351384][ T1727] EXT4-fs (sda1): Remounting filesystem read-only [ 113.358082][ T1727] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.371: Detected aborted journal [ 113.368965][ T1727] EXT4-fs (sda1): Remounting filesystem read-only [ 113.375591][ T1727] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.371: Detected aborted journal [ 113.386456][ T1727] EXT4-fs (sda1): Remounting filesystem read-only [ 113.393204][ T1727] EXT4-fs (sda1): Remounting filesystem read-only [ 113.739846][ T1773] loop2: detected capacity change from 0 to 16 [ 113.749513][ T1773] erofs: (device loop2): mounted with root inode @ nid 36. [ 113.758087][ T1773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 113.852881][ T1766] loop3: detected capacity change from 0 to 40427 [ 113.870327][ T1766] F2FS-fs (loop3): invalid crc value [ 113.894958][ T1766] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.954872][ T1766] F2FS-fs (loop3): Start checkpoint disabled! [ 113.967924][ T1766] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 113.987431][ T1766] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 114.520495][ T1789] loop4: detected capacity change from 0 to 33280 [ 114.606172][ T1791] loop2: detected capacity change from 0 to 33280 [ 114.623945][ T1789] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 114.635999][ T1789] EXT4-fs (loop4): orphan cleanup on readonly fs [ 114.642393][ T1789] EXT4-fs error (device loop4): ext4_quota_enable:7036: inode #4: comm syz.4.384: unexpected EA_INODE flag [ 114.684458][ T1791] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 114.703902][ T1791] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.722232][ T1789] EXT4-fs error (device loop4): ext4_quota_enable:7039: comm syz.4.384: Bad quota inode: 4, type: 1 [ 114.740344][ T1791] EXT4-fs error (device loop2): ext4_quota_enable:7036: inode #4: comm syz.2.385: unexpected EA_INODE flag [ 114.772994][ T1789] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 114.788122][ T1791] EXT4-fs error (device loop2): ext4_quota_enable:7039: comm syz.2.385: Bad quota inode: 4, type: 1 [ 114.807582][ T1789] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 114.814860][ T1789] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 114.849869][ T1791] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 114.864753][ T1791] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 114.871937][ T1791] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.911958][ T291] EXT4-fs (loop4): unmounting filesystem. [ 114.931623][ T1791] xt_hashlimit: size too large, truncated to 1048576 [ 115.193950][ T1807] fuse: Bad value for 'fd' [ 115.522132][ T290] EXT4-fs (loop2): unmounting filesystem. [ 115.559642][ T1815] input: syz0 as /devices/virtual/input/input13 [ 115.709797][ T1815] loop0: detected capacity change from 0 to 49152 [ 115.746531][ T1815] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 115.795056][ T1815] EXT4-fs (loop0): mounted filesystem with ordered data mode. Quota mode: journalled. [ 115.858445][ T1834] input: syz0 as /devices/virtual/input/input14 [ 115.968296][ T1837] loop3: detected capacity change from 0 to 16 [ 115.978359][ T1837] erofs: (device loop3): mounted with root inode @ nid 36. [ 116.595902][ T287] EXT4-fs (loop0): unmounting filesystem. [ 116.712257][ T1834] loop4: detected capacity change from 0 to 49152 [ 116.868245][ T1834] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 116.884075][ T1839] loop2: detected capacity change from 0 to 33280 [ 116.941302][ T1834] EXT4-fs (loop4): mounted filesystem with ordered data mode. Quota mode: journalled. [ 116.947920][ T1845] loop0: detected capacity change from 0 to 33280 [ 116.968070][ T1839] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 116.980551][ T1845] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 116.989058][ T1839] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.005818][ T1839] EXT4-fs error (device loop2): ext4_quota_enable:7036: inode #4: comm syz.2.400: unexpected EA_INODE flag [ 117.027521][ T1845] EXT4-fs (loop0): orphan cleanup on readonly fs [ 117.033938][ T1845] EXT4-fs error (device loop0): ext4_quota_enable:7036: inode #4: comm syz.0.399: unexpected EA_INODE flag [ 117.046185][ T1839] EXT4-fs error (device loop2): ext4_quota_enable:7039: comm syz.2.400: Bad quota inode: 4, type: 1 [ 117.056645][ T1845] EXT4-fs error (device loop0): ext4_quota_enable:7039: comm syz.0.399: Bad quota inode: 4, type: 1 [ 117.092992][ T1839] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.113817][ T1839] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 117.114941][ T1845] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.120669][ T1839] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.144232][ T1845] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 117.152397][ T1845] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 117.162286][ T1853] loop3: detected capacity change from 0 to 16 [ 117.169000][ T1853] erofs: (device loop3): mounted with root inode @ nid 36. [ 117.177703][ T1853] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 117.186703][ T1853] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 117.195760][ T1853] syz.3.402: attempt to access beyond end of device [ 117.195760][ T1853] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 117.196296][ T1845] xt_hashlimit: size too large, truncated to 1048576 [ 117.216634][ T1853] syz.3.402: attempt to access beyond end of device [ 117.216634][ T1853] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 117.657325][ T291] EXT4-fs (loop4): unmounting filesystem. [ 117.688333][ T1839] xt_hashlimit: size too large, truncated to 1048576 [ 118.080515][ T1862] EXT4-fs error: 132 callbacks suppressed [ 118.080533][ T1862] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.404: Detected aborted journal [ 118.099110][ T1862] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.404: Detected aborted journal [ 118.110035][ T1862] EXT4-fs: 115 callbacks suppressed [ 118.110057][ T1862] EXT4-fs (sda1): Remounting filesystem read-only [ 118.126494][ T1862] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.404: Detected aborted journal [ 118.137441][ T1862] EXT4-fs (sda1): Remounting filesystem read-only [ 118.144905][ T1862] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.404: Detected aborted journal [ 118.155817][ T1862] EXT4-fs (sda1): Remounting filesystem read-only [ 118.163384][ T1862] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.404: Detected aborted journal [ 118.174279][ T1862] EXT4-fs (sda1): Remounting filesystem read-only [ 118.190702][ T1862] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.404: Detected aborted journal [ 118.201636][ T1862] EXT4-fs (sda1): Remounting filesystem read-only [ 118.208393][ T1862] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.404: Detected aborted journal [ 118.219344][ T1862] EXT4-fs (sda1): Remounting filesystem read-only [ 118.226030][ T1862] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.404: Detected aborted journal [ 118.236929][ T1862] EXT4-fs (sda1): Remounting filesystem read-only [ 118.263440][ T287] EXT4-fs (loop0): unmounting filesystem. [ 118.300765][ T1868] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.407: Detected aborted journal [ 118.320774][ T1876] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.410: Detected aborted journal [ 118.338478][ T1877] EXT4-fs (sda1): Remounting filesystem read-only [ 118.346933][ T1868] EXT4-fs (sda1): Remounting filesystem read-only [ 118.350292][ T1879] EXT4-fs (sda1): Remounting filesystem read-only [ 118.384427][ T1875] fuse: Bad value for 'fd' [ 118.403303][ T290] EXT4-fs (loop2): unmounting filesystem. [ 118.643057][ T1884] loop3: detected capacity change from 0 to 16 [ 118.656736][ T1885] loop0: detected capacity change from 0 to 16 [ 119.281770][ T1885] erofs: (device loop0): mounted with root inode @ nid 36. [ 119.335550][ T1884] erofs: (device loop3): mounted with root inode @ nid 36. [ 119.622137][ T1883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 119.636182][ T1885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 120.137117][ T1553] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.145984][ T1890] loop2: detected capacity change from 0 to 16 [ 120.155382][ T1890] erofs: (device loop2): mounted with root inode @ nid 36. [ 120.830836][ T1906] xt_hashlimit: size too large, truncated to 1048576 [ 120.868505][ T1900] loop3: detected capacity change from 0 to 40427 [ 120.896266][ T40] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 120.907650][ T1900] F2FS-fs (loop3): invalid crc value [ 120.923619][ T1900] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.965437][ T1900] F2FS-fs (loop3): Start checkpoint disabled! [ 120.972053][ T1553] usb 5-1: Using ep0 maxpacket: 16 [ 120.973514][ T1900] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 120.978271][ T1553] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.984949][ T1900] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 121.004500][ T1553] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.014722][ T1553] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 121.027913][ T1553] usb 5-1: config 0 interface 0 has no altsetting 0 [ 121.034523][ T1553] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 121.043795][ T1553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.067413][ T1912] erofs: (device loop2): mounted with root inode @ nid 36. [ 121.070352][ T1553] usb 5-1: config 0 descriptor?? [ 121.074929][ T40] usb 1-1: device descriptor read/64, error -71 [ 121.087580][ T1912] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 121.096604][ T1912] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 121.105667][ T1912] syz.2.420: attempt to access beyond end of device [ 121.105667][ T1912] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 121.119860][ T1912] syz.2.420: attempt to access beyond end of device [ 121.119860][ T1912] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 121.373067][ T40] usb 1-1: device descriptor read/64, error -71 [ 121.878142][ T1921] fuse: Bad value for 'fd' [ 121.887595][ T40] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 122.099815][ T1923] input: syz0 as /devices/virtual/input/input15 [ 122.103398][ T1553] hid (null): invalid report_size -1596829679 [ 122.120788][ T1553] hid (null): unknown global tag 0x9c [ 122.126225][ T1553] hid (null): unknown global tag 0xc [ 122.143490][ T1553] hid (null): unknown global tag 0xe [ 122.148802][ T1553] hid (null): global environment stack underflow [ 122.162793][ T1925] input: syz0 as /devices/virtual/input/input16 [ 122.164150][ T1553] hid (null): unknown global tag 0xc [ 122.169220][ T40] usb 1-1: device descriptor read/64, error -71 [ 122.201591][ T1923] set_capacity_and_notify: 1 callbacks suppressed [ 122.201608][ T1923] loop2: detected capacity change from 0 to 49152 [ 122.226993][ T1923] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 122.242301][ T1923] EXT4-fs (loop2): mounted filesystem with ordered data mode. Quota mode: journalled. [ 122.245112][ T1925] loop3: detected capacity change from 0 to 49152 [ 122.263819][ T1925] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 122.286977][ T1925] EXT4-fs (loop3): mounted filesystem with ordered data mode. Quota mode: journalled. [ 122.331136][ T1553] usb 5-1: USB disconnect, device number 3 [ 122.431152][ T288] EXT4-fs (loop3): unmounting filesystem. [ 122.478493][ T40] usb 1-1: device descriptor read/64, error -71 [ 122.608649][ T40] usb usb1-port1: attempt power cycle [ 122.702085][ T1938] fuse: Bad value for 'fd' [ 122.897118][ T1942] loop4: detected capacity change from 0 to 33280 [ 122.907197][ T1942] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 122.915847][ T1942] EXT4-fs (loop4): orphan cleanup on readonly fs [ 122.922292][ T1942] EXT4-fs error (device loop4): ext4_quota_enable:7036: inode #4: comm syz.4.428: unexpected EA_INODE flag [ 122.934169][ T1942] EXT4-fs error (device loop4): ext4_quota_enable:7039: comm syz.4.428: Bad quota inode: 4, type: 1 [ 122.946938][ T1942] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 122.961650][ T1942] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 122.969195][ T1942] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 122.984237][ T290] EXT4-fs (loop2): unmounting filesystem. [ 123.003601][ T1942] xt_hashlimit: size too large, truncated to 1048576 [ 123.052859][ T40] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 123.086412][ T40] usb 1-1: device descriptor read/8, error -71 [ 123.086963][ T1953] loop2: detected capacity change from 0 to 33280 [ 123.130545][ T1953] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 123.139394][ T1953] EXT4-fs (loop2): orphan cleanup on readonly fs [ 123.149465][ T1953] EXT4-fs error (device loop2): ext4_quota_enable:7036: inode #4: comm syz.2.432: unexpected EA_INODE flag [ 123.165495][ T1953] EXT4-fs error (device loop2): ext4_quota_enable:7039: comm syz.2.432: Bad quota inode: 4, type: 1 [ 123.183103][ T1953] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 123.204611][ T1953] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 123.215599][ T1953] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 123.225220][ T1958] loop3: detected capacity change from 0 to 16 [ 123.232230][ T1958] erofs: (device loop3): mounted with root inode @ nid 36. [ 123.241045][ T1958] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 123.248971][ T40] usb 1-1: device descriptor read/8, error -71 [ 123.250062][ T1958] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 123.265299][ T1958] syz.3.433: attempt to access beyond end of device [ 123.265299][ T1958] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 123.279451][ T1958] syz.3.433: attempt to access beyond end of device [ 123.279451][ T1958] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 123.293546][ T1953] xt_hashlimit: size too large, truncated to 1048576 [ 123.513047][ T1961] EXT4-fs error: 121 callbacks suppressed [ 123.513066][ T1961] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.434: Detected aborted journal [ 123.544009][ T1961] EXT4-fs: 100 callbacks suppressed [ 123.544026][ T1961] EXT4-fs (sda1): Remounting filesystem read-only [ 123.551426][ T40] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 123.574176][ T1961] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.434: Detected aborted journal [ 123.594750][ T1961] EXT4-fs (sda1): Remounting filesystem read-only [ 123.595762][ T40] usb 1-1: device descriptor read/8, error -71 [ 123.618227][ T1963] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.435: Detected aborted journal [ 123.638103][ T1963] EXT4-fs (sda1): Remounting filesystem read-only [ 123.650711][ T1963] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.435: Detected aborted journal [ 123.700692][ T1963] EXT4-fs (sda1): Remounting filesystem read-only [ 123.707489][ T1964] device batadv_slave_1 entered promiscuous mode [ 123.715012][ T1963] device batadv_slave_1 left promiscuous mode [ 123.736212][ T1965] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.437: Detected aborted journal [ 123.746800][ T290] EXT4-fs (loop2): unmounting filesystem. [ 123.747364][ T1965] EXT4-fs (sda1): Remounting filesystem read-only [ 123.765371][ T1967] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.436: Detected aborted journal [ 123.777594][ T40] usb 1-1: device descriptor read/8, error -71 [ 123.786493][ T1965] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.437: Detected aborted journal [ 123.797822][ T1965] EXT4-fs (sda1): Remounting filesystem read-only [ 123.804682][ T1967] EXT4-fs (sda1): Remounting filesystem read-only [ 123.812320][ T1967] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.436: Detected aborted journal [ 123.814113][ T1965] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.437: Detected aborted journal [ 123.829020][ T1967] EXT4-fs (sda1): Remounting filesystem read-only [ 123.834554][ T1965] EXT4-fs (sda1): Remounting filesystem read-only [ 123.841404][ T1967] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.436: Detected aborted journal [ 123.847646][ T291] EXT4-fs (loop4): unmounting filesystem. [ 123.864028][ T1965] EXT4-fs (sda1): Remounting filesystem read-only [ 123.919932][ T40] usb usb1-port1: unable to enumerate USB device [ 123.930149][ T1984] loop0: detected capacity change from 0 to 33280 [ 123.939383][ T1985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 123.979357][ T1984] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 123.989826][ T1984] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.134743][ T1991] fuse: Bad value for 'fd' [ 124.788744][ T287] EXT4-fs (loop0): unmounting filesystem. [ 124.849245][ T1997] device batadv_slave_1 entered promiscuous mode [ 124.884503][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd SYZFAIL: SIGBUS pc-offset:0xfffffffffffea099 pc:0x7f1c86e6a677 addr:0x7f1c7f7eeffc code=2 (errno 11: Resource temporarily unavailable) [ 124.934695][ T28] audit: type=1400 audit(1794525301.834:335): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[14832]" dev="pipefs" ino=14832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 125.079505][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 125.087496][ T6] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.155110][ T6] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.263459][ T2000] device batadv_slave_1 left promiscuous mode [ 125.327064][ T6] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 125.340110][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.346754][ T6] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 125.355891][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.365364][ T1999] tipc: Disabling bearer [ 125.374796][ T6] usb 5-1: config 0 descriptor?? [ 125.405669][ T6] usb 5-1: can't set config #0, error -71 [ 125.415980][ T6] usb 5-1: USB disconnect, device number 4 [ 125.914880][ T43] device bridge_slave_1 left promiscuous mode [ 125.921014][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.928626][ T43] device bridge_slave_0 left promiscuous mode [ 125.934725][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.942806][ T43] device veth1_macvtap left promiscuous mode [ 125.948861][ T43] device veth0_vlan left promiscuous mode [ 126.307090][ T43] tipc: Left network mode [ 126.311734][ T43] tipc: Disabling bearer [ 126.317293][ T43] tipc: Left network mode [ 126.836980][ T43] device bridge_slave_1 left promiscuous mode [ 126.843118][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.850560][ T43] device bridge_slave_0 left promiscuous mode [ 126.856898][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.865087][ T43] device bridge_slave_1 left promiscuous mode [ 126.871342][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.878832][ T43] device bridge_slave_0 left promiscuous mode [ 126.884934][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.893593][ T43] device bridge_slave_1 left promiscuous mode [ 126.899695][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.907173][ T43] device bridge_slave_0 left promiscuous mode [ 126.913416][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.921355][ T43] device bridge_slave_1 left promiscuous mode [ 126.927531][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.934940][ T43] device bridge_slave_0 left promiscuous mode [ 126.941025][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.949121][ T43] device veth1_macvtap left promiscuous mode [ 126.955170][ T43] device veth0_vlan left promiscuous mode [ 126.961173][ T43] device veth1_macvtap left promiscuous mode