last executing test programs: 4.497183922s ago: executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x415, 0x0) unshare(0x400) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fremovexattr(r0, 0x0) 4.282720515s ago: executing program 1: socket$packet(0x11, 0x0, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x606, &(0x7f0000001040)="$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") getdents(r0, &(0x7f0000001080)=""/4096, 0x1000) socket$packet(0x11, 0x3, 0x300) 3.974117612s ago: executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x2808000, &(0x7f0000000400)={[{@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@fat=@usefree}, {@fat=@tz_utc}, {@shortname_win95}, {@uni_xlate}, {@uni_xlateno}, {@utf8no}, {@uni_xlateno}]}, 0x1, 0x294, &(0x7f0000000500)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 3.887504465s ago: executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x217, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @dev, @mcast1, [@fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, @dstopts={0x4, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x5, {[@main=@item_012={0x2, 0x0, 0x0, "caf3"}, @global=@item_012={0x1, 0x1, 0x1, "9e"}]}}, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0xe07}, 0x14}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000e80)={r4, &(0x7f0000000cc0), &(0x7f0000000dc0), 0x3}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f00000000c0)) 2.781152185s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x4003}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000e40000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000ec0)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.619050643s ago: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) memfd_create(0x0, 0x0) symlink(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x11, 0x148, 0x138, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x0, 0x0, 0x0, 0x200000, 0x0, 0x3, 0x7}}}, @common=@icmp={{0x28}, {0x0, "3f8a"}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@tos={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 1.600885665s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) 1.537494095s ago: executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='binfmt_misc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x11052, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0) 1.447743209s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x4003}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000e40000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000ec0)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.433472611s ago: executing program 4: rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x77359400}}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/215, 0x7ffff000}], 0x6) 1.430243441s ago: executing program 3: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000500)={[{@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x34}}, {@shortname_mixed}, {@numtail}, {@uni_xlate}, {@shortname_lower}, {@shortname_winnt}]}, 0x25, 0x336, &(0x7f00000001c0)="$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") rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0) 1.389736298s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000051c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x18, r1, 0x301, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 1.377405299s ago: executing program 1: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x814, &(0x7f0000005800)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6163746976655f6c6f67733d362c6163746976655f6c6f67733d342c6a71666d743d76667376312c6163746976655f6c6f67733d3600000000615f666c7573682c6261636b67736f756e645f67633d6f6e2c6673796e635f6d6f64653d7374726963742c657874656e745fe3616368652c76c202748e327a69cd00f4f0d086ccccef7b6f05185fa7202d3de5fa04f8e54f6efc92b384d8740ade28b1d9b5877b8c6d4a206d0d0f202ceea69c9a567ef2a4b849ca4299ced7216150550b526fbbb003890381533d4e125766beb376faa027305d810d45cd14305e27081968"], 0x1, 0x5536, &(0x7f00000002c0)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) link(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file1\x00') 1.354152583s ago: executing program 4: socket$packet(0x11, 0x0, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x606, &(0x7f0000001040)="$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") getdents(r0, &(0x7f0000001080)=""/4096, 0x1000) socket$packet(0x11, 0x3, 0x300) 1.30639438s ago: executing program 4: r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x1d59, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xfa6c, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2066) 1.126853228s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}]}, 0x34}}, 0x0) 1.061062538s ago: executing program 2: r0 = socket(0x10, 0x803, 0x0) fcntl$lock(r0, 0x11, 0x0) 1.040710971s ago: executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) memfd_create(0x0, 0x0) symlink(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x11, 0x148, 0x138, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x0, 0x0, 0x0, 0x200000, 0x0, 0x3, 0x7}}}, @common=@icmp={{0x28}, {0x0, "3f8a"}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@tos={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 1.007455376s ago: executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_pwait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x6f4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)={0xa0000019}) 985.291329ms ago: executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='binfmt_misc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x11052, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0) 964.597023ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x4003}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000e40000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000ec0)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 940.645946ms ago: executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @dev, @mcast1, [@fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, @dstopts={0x4, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x5, {[@main=@item_012={0x2, 0x0, 0x0, "caf3"}, @global=@item_012={0x1, 0x1, 0x1, "9e"}]}}, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0xe07}, 0x14}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000e80)={r4, &(0x7f0000000cc0), &(0x7f0000000dc0), 0x3}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f00000000c0)) 864.432408ms ago: executing program 2: rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x77359400}}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/215, 0x7ffff000}], 0x6) 824.652104ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000051c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x18, r1, 0x301, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 796.907848ms ago: executing program 1: bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) keyctl$invalidate(0x15, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x42082, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000100)={0x20}, 0xfdef) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x41, 0x3, 0x260, 0xf8, 0x0, 0x0, 0xf8, 0x0, 0x1c8, 0x1f0, 0x1f0, 0x1c8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}}, 0x10) fadvise64(r2, 0x20, 0x1, 0x3) 85.539287ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) 69.767939ms ago: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @echo_request}}}}}, 0x0) 20.125817ms ago: executing program 4: r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x1d59, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xfa6c, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2066) 3.80085ms ago: executing program 0: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000500)={[{@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x34}}, {@shortname_mixed}, {@numtail}, {@uni_xlate}, {@shortname_lower}, {@shortname_winnt}]}, 0x25, 0x336, &(0x7f00000001c0)="$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") rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0) 0s ago: executing program 4: r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000300)=""/160, 0xa0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}}) kernel console output (not intermixed with test programs): ncated [ 247.014170][ T8344] loop0: p43 start 8388612 is beyond EOD, truncated [ 247.022675][ T8344] loop0: p44 size 32937 extends beyond EOD, truncated [ 247.037676][ T8344] loop0: p45 start 8388612 is beyond EOD, truncated [ 247.044891][ T8344] loop0: p46 size 32937 extends beyond EOD, truncated [ 247.052524][ T8344] loop0: p47 start 8388612 is beyond EOD, truncated [ 247.061275][ T8344] loop0: p48 size 32937 extends beyond EOD, truncated [ 247.070540][ T8344] loop0: p49 start 8388612 is beyond EOD, truncated [ 247.085275][ T8344] loop0: p50 size 32937 extends beyond EOD, truncated [ 247.109557][ T8344] loop0: p51 start 8388612 is beyond EOD, truncated [ 247.117750][ T8344] loop0: p52 size 32937 extends beyond EOD, truncated [ 247.125559][ T8344] loop0: p53 start 8388612 is beyond EOD, truncated [ 247.132198][ T8344] loop0: p54 size 32937 extends beyond EOD, truncated [ 247.139587][ T8344] loop0: p55 start 8388612 is beyond EOD, truncated [ 247.146100][ T8344] loop0: p56 size 32937 extends beyond EOD, truncated [ 247.153819][ T8344] loop0: p57 start 8388612 is beyond EOD, truncated [ 247.160267][ T8344] loop0: p58 size 32937 extends beyond EOD, truncated [ 247.167642][ T8344] loop0: p59 start 8388612 is beyond EOD, truncated [ 247.174131][ T8344] loop0: p60 size 32937 extends beyond EOD, truncated [ 247.181570][ T8344] loop0: p61 start 8388612 is beyond EOD, truncated [ 247.188103][ T8344] loop0: p62 size 32937 extends beyond EOD, truncated [ 247.195565][ T8344] loop0: p63 start 8388612 is beyond EOD, truncated [ 247.202052][ T8344] loop0: p64 size 32937 extends beyond EOD, truncated [ 247.209458][ T8344] loop0: p65 start 8388612 is beyond EOD, truncated [ 247.218210][ T8344] loop0: p66 size 32937 extends beyond EOD, truncated [ 247.226123][ T8344] loop0: p67 start 8388612 is beyond EOD, truncated [ 247.232811][ T8344] loop0: p68 size 32937 extends beyond EOD, truncated [ 247.240339][ T8344] loop0: p69 start 8388612 is beyond EOD, truncated [ 247.246845][ T8344] loop0: p70 size 32937 extends beyond EOD, truncated [ 247.258393][ T8344] loop0: p71 start 8388612 is beyond EOD, truncated [ 247.264875][ T8344] loop0: p72 size 32937 extends beyond EOD, truncated [ 247.272205][ T8344] loop0: p73 start 8388612 is beyond EOD, truncated [ 247.278644][ T8344] loop0: p74 size 32937 extends beyond EOD, truncated [ 247.285972][ T8344] loop0: p75 start 8388612 is beyond EOD, truncated [ 247.298539][ T8344] loop0: p76 size 32937 extends beyond EOD, truncated [ 247.313581][ T8344] loop0: p77 start 8388612 is beyond EOD, truncated [ 247.320878][ T8344] loop0: p78 size 32937 extends beyond EOD, truncated [ 247.333118][ T8344] loop0: p79 start 8388612 is beyond EOD, truncated [ 247.333129][ T8344] loop0: p80 size 32937 extends beyond EOD, truncated [ 247.333768][ T8344] loop0: p81 start 8388612 is beyond EOD, truncated [ 247.333784][ T8344] loop0: p82 size 32937 extends beyond EOD, truncated [ 247.334455][ T8344] loop0: p83 start 8388612 is beyond EOD, truncated [ 247.368278][ T8344] loop0: p84 size 32937 extends beyond EOD, truncated [ 247.376069][ T8344] loop0: p85 start 8388612 is beyond EOD, truncated [ 247.382677][ T8344] loop0: p86 size 32937 extends beyond EOD, truncated [ 247.389794][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.400332][ T8369] device bridge_slave_1 left promiscuous mode [ 247.401295][ T8344] loop0: p87 start 8388612 is beyond EOD, truncated [ 247.407585][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.420426][ T8369] device bridge_slave_0 left promiscuous mode [ 247.425170][ T8344] loop0: p88 size 32937 extends beyond EOD, truncated [ 247.427078][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.462813][ T8344] loop0: p89 start 8388612 is beyond EOD, truncated [ 247.482060][ T8344] loop0: p90 size 32937 extends beyond EOD, truncated [ 247.491246][ T8344] loop0: p91 start 8388612 is beyond EOD, truncated [ 247.497650][ T8344] loop0: p92 size 32937 extends beyond EOD, truncated [ 247.522630][ T8344] loop0: p93 start 8388612 is beyond EOD, truncated [ 247.530247][ T8344] loop0: p94 size 32937 extends beyond EOD, truncated [ 247.545187][ T8344] loop0: p95 start 8388612 is beyond EOD, truncated [ 247.559237][ T8344] loop0: p96 size 32937 extends beyond EOD, truncated [ 247.566668][ T8344] loop0: p97 start 8388612 is beyond EOD, truncated [ 247.573461][ T8344] loop0: p98 size 32937 extends beyond EOD, truncated [ 247.581195][ T8344] loop0: p99 start 8388612 is beyond EOD, truncated [ 247.587883][ T8344] loop0: p100 size 32937 extends beyond EOD, truncated [ 247.595385][ T8344] loop0: p101 start 8388612 is beyond EOD, truncated [ 247.616037][ T8344] loop0: p102 size 32937 extends beyond EOD, truncated [ 247.631893][ T8344] loop0: p103 start 8388612 is beyond EOD, truncated [ 247.648065][ T8344] loop0: p104 size 32937 extends beyond EOD, truncated [ 247.659604][ T8344] loop0: p105 start 8388612 is beyond EOD, truncated [ 247.686923][ T8344] loop0: p106 size 32937 extends beyond EOD, truncated [ 247.702988][ T8344] loop0: p107 start 8388612 is beyond EOD, truncated [ 247.721627][ T8344] loop0: p108 size 32937 extends beyond EOD, truncated [ 247.737751][ T8344] loop0: p109 start 8388612 is beyond EOD, truncated [ 247.764768][ T8344] loop0: p110 size 32937 extends beyond EOD, truncated [ 247.767811][ T8376] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.779107][ T8344] loop0: p111 start 8388612 is beyond EOD, truncated [ 247.785805][ T8376] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.795804][ T8344] loop0: p112 size 32937 extends beyond EOD, truncated [ 247.795847][ T8376] device bridge_slave_0 entered promiscuous mode [ 247.805490][ T8344] loop0: p113 start 8388612 is beyond EOD, truncated [ 247.810286][ T8376] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.822404][ T8344] loop0: p114 size 32937 extends beyond EOD, truncated [ 247.823035][ T8376] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.837076][ T8376] device bridge_slave_1 entered promiscuous mode [ 247.848508][ T8344] loop0: p115 start 8388612 is beyond EOD, truncated [ 247.855431][ T8344] loop0: p116 size 32937 extends beyond EOD, truncated [ 247.862999][ T8344] loop0: p117 start 8388612 is beyond EOD, truncated [ 247.869491][ T8344] loop0: p118 size 32937 extends beyond EOD, truncated [ 247.877047][ T8344] loop0: p119 start 8388612 is beyond EOD, truncated [ 247.883605][ T8344] loop0: p120 size 32937 extends beyond EOD, truncated [ 247.891065][ T8344] loop0: p121 start 8388612 is beyond EOD, truncated [ 247.897616][ T8344] loop0: p122 size 32937 extends beyond EOD, truncated [ 247.905162][ T8344] loop0: p123 start 8388612 is beyond EOD, truncated [ 247.911694][ T8344] loop0: p124 size 32937 extends beyond EOD, truncated [ 247.920463][ T8344] loop0: p125 start 8388612 is beyond EOD, truncated [ 247.927105][ T8344] loop0: p126 size 32937 extends beyond EOD, truncated [ 247.934857][ T8344] loop0: p127 start 8388612 is beyond EOD, truncated [ 247.937012][ T8372] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 247.941442][ T8344] loop0: p128 size 32937 extends beyond EOD, truncated [ 247.942193][ T8344] loop0: p129 start 8388612 is beyond EOD, truncated [ 247.962583][ T8344] loop0: p130 size 32937 extends beyond EOD, truncated [ 247.969725][ T8372] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 247.978101][ T8344] loop0: p131 start 8388612 is beyond EOD, truncated [ 247.984912][ T8344] loop0: p132 size 32937 extends beyond EOD, truncated [ 247.991144][ T8372] F2FS-fs (loop2): invalid crc value [ 247.992343][ T8344] loop0: p133 start 8388612 is beyond EOD, truncated [ 248.000637][ T8372] F2FS-fs (loop2): Found nat_bits in checkpoint [ 248.003309][ T8344] loop0: p134 size 32937 extends beyond EOD, truncated [ 248.004063][ T8344] loop0: p135 start 8388612 is beyond EOD, truncated [ 248.023010][ T8344] loop0: p136 size 32937 extends beyond EOD, truncated [ 248.033549][ T8344] loop0: p137 start 8388612 is beyond EOD, truncated [ 248.040080][ T8344] loop0: p138 size 32937 extends beyond EOD, truncated [ 248.064708][ T8391] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.091400][ T8344] loop0: p139 start 8388612 is beyond EOD, truncated [ 248.098010][ T8344] loop0: p140 size 32937 extends beyond EOD, truncated [ 248.108734][ T8344] loop0: p141 start 8388612 is beyond EOD, truncated [ 248.115349][ T8344] loop0: p142 size 32937 extends beyond EOD, truncated [ 248.125956][ T8344] loop0: p143 start 8388612 is beyond EOD, truncated [ 248.132551][ T8344] loop0: p144 size 32937 extends beyond EOD, truncated [ 248.175726][ T8344] loop0: p145 start 8388612 is beyond EOD, truncated [ 248.191202][ T8344] loop0: p146 size 32937 extends beyond EOD, truncated [ 248.208834][ T8344] loop0: p147 start 8388612 is beyond EOD, truncated [ 248.218251][ T8344] loop0: p148 size 32937 extends beyond EOD, truncated [ 248.230792][ T8344] loop0: p149 start 8388612 is beyond EOD, truncated [ 248.237373][ T8344] loop0: p150 size 32937 extends beyond EOD, truncated [ 248.245084][ T8344] loop0: p151 start 8388612 is beyond EOD, truncated [ 248.248208][ T8372] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 248.252072][ T8344] loop0: p152 size 32937 extends beyond EOD, truncated [ 248.260042][ T8372] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 248.266645][ T8344] loop0: p153 start 8388612 is beyond EOD, truncated [ 248.279408][ T8344] loop0: p154 size 32937 extends beyond EOD, truncated [ 248.286965][ T8344] loop0: p155 start 8388612 is beyond EOD, truncated [ 248.293537][ T8344] loop0: p156 size 32937 extends beyond EOD, truncated [ 248.296640][ T8376] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.301187][ T8344] loop0: p157 start 8388612 is beyond EOD, truncated [ 248.307804][ T8376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.314356][ T8344] loop0: p158 size 32937 extends beyond EOD, truncated [ 248.321468][ T8376] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.329369][ T8344] loop0: p159 start 8388612 is beyond EOD, truncated [ 248.334890][ T8376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.341528][ T8344] loop0: p160 size 32937 extends beyond EOD, truncated [ 248.355425][ T8372] attempt to access beyond end of device [ 248.355425][ T8372] loop2: rw=2051, want=45064, limit=40427 [ 248.356101][ T8344] loop0: p161 start 8388612 is beyond EOD, truncated [ 248.366663][ T8372] attempt to access beyond end of device [ 248.366663][ T8372] loop2: rw=2051, want=131072, limit=40427 [ 248.384081][ T8344] loop0: p162 size 32937 extends beyond EOD, truncated [ 248.384379][ T8372] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 248.384397][ T8372] F2FS-fs (loop2): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 248.399577][ T8344] loop0: p163 start 8388612 is beyond EOD, truncated [ 248.414434][ T8344] loop0: p164 size 32937 extends beyond EOD, truncated [ 248.422258][ T8344] loop0: p165 start 8388612 is beyond EOD, truncated [ 248.428824][ T8344] loop0: p166 size 32937 extends beyond EOD, truncated [ 248.436740][ T8344] loop0: p167 start 8388612 is beyond EOD, truncated [ 248.443305][ T8344] loop0: p168 size 32937 extends beyond EOD, truncated [ 248.450770][ T8344] loop0: p169 start 8388612 is beyond EOD, truncated [ 248.457379][ T8344] loop0: p170 size 32937 extends beyond EOD, truncated [ 248.464511][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.464753][ T8344] loop0: p171 start 8388612 is beyond EOD, truncated [ 248.478066][ T8344] loop0: p172 size 32937 extends beyond EOD, truncated [ 248.484918][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.485680][ T8344] loop0: p173 start 8388612 is beyond EOD, truncated [ 248.498833][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.499011][ T8344] loop0: p174 size 32937 extends beyond EOD, truncated [ 248.513132][ T8344] loop0: p175 start 8388612 is beyond EOD, truncated [ 248.519673][ T8344] loop0: p176 size 32937 extends beyond EOD, truncated [ 248.527050][ T8344] loop0: p177 start 8388612 is beyond EOD, truncated [ 248.533719][ T8344] loop0: p178 size 32937 extends beyond EOD, truncated [ 248.541142][ T8344] loop0: p179 start 8388612 is beyond EOD, truncated [ 248.547673][ T8344] loop0: p180 size 32937 extends beyond EOD, truncated [ 248.555376][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.555803][ T8344] loop0: p181 start 8388612 is beyond EOD, truncated [ 248.563623][ T833] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.569703][ T8344] loop0: p182 size 32937 extends beyond EOD, truncated [ 248.576558][ T833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.577001][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.584115][ T8344] loop0: p183 start 8388612 is beyond EOD, truncated [ 248.605548][ T8344] loop0: p184 size 32937 extends beyond EOD, truncated [ 248.611476][ T833] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.612945][ T8344] loop0: p185 start 8388612 is beyond EOD, truncated [ 248.618975][ T833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.646225][ T8344] loop0: p186 size 32937 extends beyond EOD, truncated [ 248.653724][ T8344] loop0: p187 start 8388612 is beyond EOD, truncated [ 248.660207][ T8344] loop0: p188 size 32937 extends beyond EOD, truncated [ 248.667631][ T8344] loop0: p189 start 8388612 is beyond EOD, truncated [ 248.674147][ T8344] loop0: p190 size 32937 extends beyond EOD, truncated [ 248.681569][ T8344] loop0: p191 start 8388612 is beyond EOD, truncated [ 248.688137][ T8344] loop0: p192 size 32937 extends beyond EOD, truncated [ 248.708228][ T8344] loop0: p193 start 8388612 is beyond EOD, truncated [ 248.714986][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.728094][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.735867][ T8344] loop0: p194 size 32937 extends beyond EOD, truncated [ 248.743775][ T8344] loop0: p195 start 8388612 is beyond EOD, truncated [ 248.746502][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.750293][ T8344] loop0: p196 size 32937 extends beyond EOD, truncated [ 248.765427][ T8344] loop0: p197 start 8388612 is beyond EOD, truncated [ 248.772267][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.782213][ T8344] loop0: p198 size 32937 extends beyond EOD, truncated [ 248.790082][ T8344] loop0: p199 start 8388612 is beyond EOD, truncated [ 248.796726][ T8344] loop0: p200 size 32937 extends beyond EOD, truncated [ 248.804547][ T8344] loop0: p201 start 8388612 is beyond EOD, truncated [ 248.811125][ T8344] loop0: p202 size 32937 extends beyond EOD, truncated [ 248.818418][ T8344] loop0: p203 start 8388612 is beyond EOD, truncated [ 248.820497][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.829724][ T8344] loop0: p204 size 32937 extends beyond EOD, truncated [ 248.839889][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.843367][ T8344] loop0: p205 start 8388612 is beyond EOD, truncated [ 248.854506][ T8344] loop0: p206 size 32937 extends beyond EOD, truncated [ 248.862387][ T8344] loop0: p207 start 8388612 is beyond EOD, truncated [ 248.862487][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.868965][ T8344] loop0: p208 size 32937 extends beyond EOD, truncated [ 248.877830][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.884193][ T8344] loop0: p209 start 8388612 is beyond EOD, truncated [ 248.892521][ T8400] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 248.892521][ T8400] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 248.892521][ T8400] [ 248.897475][ T8344] loop0: p210 size 32937 extends beyond EOD, truncated [ 248.915568][ T1343] device veth1_to_bond left promiscuous mode [ 248.928009][ T1343] bridge1: port 2(veth1_to_bond) entered disabled state [ 248.928333][ T8344] loop0: p211 start 8388612 is beyond EOD, truncated [ 248.937765][ T8400] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noacl,usrquota,noauto_da_alloc,,errors=continue [ 248.941374][ T8344] loop0: p212 size 32937 extends beyond EOD, truncated [ 248.961257][ T1343] device bridge_slave_1 left promiscuous mode [ 248.968330][ T8344] loop0: p213 start 8388612 is beyond EOD, truncated [ 248.975140][ T1343] bridge1: port 1(bridge_slave_1) entered disabled state [ 248.980252][ T8344] loop0: p214 size 32937 extends beyond EOD, truncated [ 248.994759][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.110917][ T8108] EXT4-fs error (device loop1): ext4_empty_dir:2990: inode #11: comm syz-executor.1: invalid size [ 249.150359][ T8108] EXT4-fs warning (device loop1): ext4_rmdir:3274: inode #11: comm syz-executor.1: empty directory 'file1' has too many links (0) [ 249.173441][ T8344] loop0: p215 start 8388612 is beyond EOD, truncated [ 249.187900][ T8344] loop0: p216 size 32937 extends beyond EOD, truncated [ 249.201832][ T8344] loop0: p217 start 8388612 is beyond EOD, truncated [ 249.208664][ T8344] loop0: p218 size 32937 extends beyond EOD, truncated [ 249.216505][ T8344] loop0: p219 start 8388612 is beyond EOD, truncated [ 249.223146][ T8344] loop0: p220 size 32937 extends beyond EOD, truncated [ 249.230487][ T8344] loop0: p221 start 8388612 is beyond EOD, truncated [ 249.237235][ T8344] loop0: p222 size 32937 extends beyond EOD, truncated [ 249.244653][ T8344] loop0: p223 start 8388612 is beyond EOD, truncated [ 249.251227][ T8344] loop0: p224 size 32937 extends beyond EOD, truncated [ 249.258502][ T8344] loop0: p225 start 8388612 is beyond EOD, truncated [ 249.265141][ T8344] loop0: p226 size 32937 extends beyond EOD, truncated [ 249.272659][ T8344] loop0: p227 start 8388612 is beyond EOD, truncated [ 249.279201][ T8344] loop0: p228 size 32937 extends beyond EOD, truncated [ 249.286606][ T8344] loop0: p229 start 8388612 is beyond EOD, truncated [ 249.295342][ T8344] loop0: p230 size 32937 extends beyond EOD, truncated [ 249.302820][ T8344] loop0: p231 start 8388612 is beyond EOD, truncated [ 249.309361][ T8344] loop0: p232 size 32937 extends beyond EOD, truncated [ 249.316768][ T8344] loop0: p233 start 8388612 is beyond EOD, truncated [ 249.323359][ T8344] loop0: p234 size 32937 extends beyond EOD, truncated [ 249.340268][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.348325][ T8344] loop0: p235 start 8388612 is beyond EOD, truncated [ 249.348668][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.356955][ T8344] loop0: p236 size 32937 extends beyond EOD, truncated [ 249.371569][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.379681][ T8344] loop0: p237 start 8388612 is beyond EOD, truncated [ 249.380097][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.389289][ T8344] loop0: p238 size 32937 extends beyond EOD, truncated [ 249.395047][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.409050][ T8344] loop0: p239 start 8388612 is beyond EOD, truncated [ 249.409450][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.416766][ T8344] loop0: p240 size 32937 extends beyond EOD, truncated [ 249.430991][ T8344] loop0: p241 start 8388612 is beyond EOD, truncated [ 249.438260][ T8344] loop0: p242 size 32937 extends beyond EOD, truncated [ 249.448673][ T8344] loop0: p243 start 8388612 is beyond EOD, truncated [ 249.456075][ T8344] loop0: p244 size 32937 extends beyond EOD, truncated [ 249.464395][ T8344] loop0: p245 start 8388612 is beyond EOD, truncated [ 249.473342][ T8344] loop0: p246 size 32937 extends beyond EOD, truncated [ 249.482265][ T8344] loop0: p247 start 8388612 is beyond EOD, truncated [ 249.488919][ T8344] loop0: p248 size 32937 extends beyond EOD, truncated [ 249.499914][ T8344] loop0: p249 start 8388612 is beyond EOD, truncated [ 249.506989][ T8344] loop0: p250 size 32937 extends beyond EOD, truncated [ 249.514826][ T8344] loop0: p251 start 8388612 is beyond EOD, truncated [ 249.521632][ T8344] loop0: p252 size 32937 extends beyond EOD, truncated [ 249.529105][ T8344] loop0: p253 start 8388612 is beyond EOD, truncated [ 249.535881][ T8344] loop0: p254 size 32937 extends beyond EOD, truncated [ 249.550679][ T8344] loop0: p255 start 8388612 is beyond EOD, truncated [ 249.713465][ T8409] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 249.728239][ T8409] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 249.753014][ T8409] F2FS-fs (loop1): invalid crc value [ 249.780000][ T8409] F2FS-fs (loop1): Found nat_bits in checkpoint [ 249.925816][ T8409] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 249.942993][ T8409] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 250.016342][ T8432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.208769][ T8429] device syzkaller0 entered promiscuous mode [ 250.221341][ T8409] attempt to access beyond end of device [ 250.221341][ T8409] loop1: rw=2049, want=45152, limit=40427 [ 250.251858][ T8108] attempt to access beyond end of device [ 250.251858][ T8108] loop1: rw=2049, want=45160, limit=40427 [ 250.275964][ T8415] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 250.285933][ T8415] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 250.300412][ T8415] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 250.310346][ T8415] F2FS-fs (loop4): Found nat_bits in checkpoint [ 250.432923][ T8415] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 250.440817][ T8415] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 250.543775][ T8442] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.151225][ T458] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 252.372544][ T8511] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.379611][ T8511] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.387156][ T8511] device bridge_slave_0 entered promiscuous mode [ 252.401286][ T8511] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.408214][ T8511] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.415703][ T8511] device bridge_slave_1 entered promiscuous mode [ 252.541368][ T458] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.550490][ T8511] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.558891][ T8511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.559689][ T458] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.566075][ T8511] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.582347][ T8511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.583903][ T458] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 252.598844][ T8523] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.605744][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.612645][ T458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.613373][ T8523] device bridge_slave_0 entered promiscuous mode [ 252.621728][ T458] usb 4-1: config 0 descriptor?? [ 252.636905][ T8523] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.643920][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.651366][ T8523] device bridge_slave_1 entered promiscuous mode [ 252.763895][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.771494][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.778630][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.801870][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.808737][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.816529][ T8529] device bridge_slave_0 entered promiscuous mode [ 252.861662][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.869707][ T3647] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.876542][ T3647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.885220][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.895012][ T3647] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.901861][ T3647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.909442][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.916423][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.923814][ T8529] device bridge_slave_1 entered promiscuous mode [ 252.945843][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.971439][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.029276][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.048231][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.067420][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.087790][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.096820][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.105314][ T3647] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.112160][ T3647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.119670][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.130446][ T458] uclogic 0003:5543:0522.0028: No inputs registered, leaving [ 253.139395][ T3647] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.146255][ T3647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.154728][ T458] uclogic 0003:5543:0522.0028: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 253.167579][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.251689][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.258984][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.266478][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.275110][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.285692][ T833] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.292555][ T833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.300422][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.309715][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.318487][ T833] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.325327][ T833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.406364][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.452783][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.475614][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.493533][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.501810][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.509714][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.517594][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.525711][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.534327][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.542259][ T121] usb 4-1: USB disconnect, device number 28 [ 253.551501][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.559762][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.567744][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.576231][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.629547][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.637932][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.659622][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.667913][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.684165][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.692719][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.700991][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.709268][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.738256][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.748211][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.770839][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.779866][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.794681][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.802879][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.819711][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.827971][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.855095][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.863946][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.891806][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.900148][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.014662][ T23] audit: type=1400 audit(1718633849.410:15892): avc: denied { rename } for pid=8568 comm="syz-executor.4" name="#a" dev="sda1" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 254.051203][ T23] audit: type=1400 audit(1718633849.410:15893): avc: denied { unlink } for pid=8568 comm="syz-executor.4" name="file1" dev="sda1" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 254.890806][ T8618] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 254.899653][ T8618] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.963059][ T8627] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.980472][ T8629] binder: 8628:8629 unknown command 0 [ 254.990815][ T8629] binder: 8628:8629 ioctl c0306201 200001c0 returned -22 [ 255.016068][ T8635] bridge_slave_0: FDB only supports static addresses [ 255.209373][ T8646] cgroup1: Bad value for 'name' [ 255.229604][ T8646] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 255.244377][ T23] audit: type=1400 audit(1718633850.650:15894): avc: denied { relabelto } for pid=8642 comm="syz-executor.3" name="bus" dev="sda1" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 255.507687][ T8646] EXT4-fs (loop3): orphan cleanup on readonly fs [ 255.516617][ T8646] EXT4-fs (loop3): 1 orphan inode deleted [ 255.522650][ T8646] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 255.967619][ T23] audit: type=1400 audit(1718633851.370:15895): avc: denied { unlink } for pid=8376 comm="syz-executor.3" name="bus" dev="sda1" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 256.079385][ T8657] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.293021][ T8638] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 256.409799][ T8677] binder: 8675:8677 unknown command 0 [ 256.416870][ T8677] binder: 8675:8677 ioctl c0306201 200001c0 returned -22 [ 256.453986][ T8681] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 256.462142][ T8681] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.942349][ T8684] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 256.949278][ T8696] bridge_slave_0: FDB only supports static addresses [ 256.950098][ T8684] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 256.966562][ T8684] F2FS-fs (loop2): invalid crc value [ 256.981411][ T8684] F2FS-fs (loop2): Found nat_bits in checkpoint [ 257.040507][ T8684] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 257.047447][ T8684] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 257.053389][ T8716] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 257.063551][ T8716] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.074213][ T8523] attempt to access beyond end of device [ 257.074213][ T8523] loop2: rw=2049, want=45104, limit=40427 [ 257.792569][ T8725] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 257.803428][ T8725] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 257.812902][ T8725] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 257.980192][ T8736] bridge_slave_0: FDB only supports static addresses [ 258.184463][ T8765] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 258.233657][ T8771] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 258.245941][ T8771] gretap1: activation failed [ 258.250348][ T8771] device gretap1 entered promiscuous mode [ 258.305844][ T8775] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 258.317090][ T8775] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 258.327865][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.337129][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.343335][ T8775] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 258.352011][ T8762] device bridge_slave_0 entered promiscuous mode [ 258.369050][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.380815][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.389441][ T8762] device bridge_slave_1 entered promiscuous mode [ 258.472407][ T8751] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 258.480124][ T8751] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 258.500051][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.506932][ T8762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.514071][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.520898][ T8762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.535990][ T8751] F2FS-fs (loop1): invalid crc value [ 258.545115][ T8797] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 258.554447][ T8751] F2FS-fs (loop1): Found nat_bits in checkpoint [ 258.600103][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.609766][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.629471][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.645856][ T8806] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 258.658197][ T8806] gretap1: activation failed [ 258.663646][ T8806] device gretap1 entered promiscuous mode [ 258.668305][ T8751] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 258.679130][ T8751] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 258.686746][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.698232][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.705114][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.718867][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.721229][ T8511] attempt to access beyond end of device [ 258.721229][ T8511] loop1: rw=2049, want=45104, limit=40427 [ 258.729463][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.744658][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.761836][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.772369][ T607] device bridge_slave_1 left promiscuous mode [ 258.783706][ T607] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.799072][ T607] device bridge_slave_0 left promiscuous mode [ 258.805175][ T607] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.886167][ T8819] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 258.896017][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.914593][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.943415][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.963767][ T8822] netlink: 1280 bytes leftover after parsing attributes in process `syz-executor.4'. [ 259.002461][ T8824] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.011534][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.019630][ T8824] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 259.030148][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.041641][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.053795][ T8831] tipc: Started in network mode [ 259.058489][ T8831] tipc: Own node identity ac1414aa, cluster identity 4711 [ 259.066171][ T8831] tipc: Enabled bearer , priority 10 [ 259.073920][ T8831] tipc: Disabling bearer [ 259.209008][ T8845] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 259.227094][ T8845] gretap2: activation failed [ 259.235128][ T8845] device gretap2 entered promiscuous mode [ 259.602875][ T8859] tipc: Enabled bearer , priority 10 [ 259.620107][ T8859] tipc: Disabling bearer [ 259.714550][ T8842] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 259.724144][ T8842] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 259.736268][ T8842] F2FS-fs (loop0): invalid crc value [ 259.745673][ T8842] F2FS-fs (loop0): Found nat_bits in checkpoint [ 259.821165][ T8842] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 259.829097][ T8842] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 259.872316][ T8020] attempt to access beyond end of device [ 259.872316][ T8020] loop0: rw=2049, want=45104, limit=40427 [ 259.992203][ T8878] input: syz1 as /devices/virtual/input/input26 [ 260.414118][ T8901] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 260.516873][ T8917] input: syz1 as /devices/virtual/input/input27 [ 262.034773][ T8994] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 262.086198][ T9005] cgroup1: Bad value for 'name' [ 262.283717][ T9005] EXT4-fs (loop2): orphan cleanup on readonly fs [ 262.295838][ T9005] EXT4-fs (loop2): 1 orphan inode deleted [ 262.302974][ T9005] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 262.572645][ T9034] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.594859][ T9034] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 263.679489][ T9049] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 263.792869][ T9080] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 263.809086][ T9080] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 263.829163][ T9080] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 263.840621][ T9080] EXT4-fs (loop1): 1 truncate cleaned up [ 263.846179][ T9080] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1, [ 263.869675][ T9080] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 4: comm syz-executor.1: lblock 0 mapped to illegal pblock 4 (length 1) [ 263.885054][ T9080] EXT4-fs (loop1): Remounting filesystem read-only [ 263.891534][ T9080] EXT4-fs error (device loop1) in ext4_evict_inode:276: Readonly filesystem [ 263.900630][ T9080] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 4: comm syz-executor.1: lblock 0 mapped to illegal pblock 4 (length 1) [ 263.973033][ T9097] input input28: cannot allocate more than FF_MAX_EFFECTS effects [ 265.342696][ T9118] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.350688][ T9125] usb usb8: usbfs: process 9125 (syz-executor.4) did not claim interface 0 before use [ 265.353808][ T9118] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 265.797538][ T23] audit: type=1400 audit(1718633861.200:15896): avc: denied { bind } for pid=9149 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 265.933702][ T9167] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.942826][ T9167] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 266.365033][ T9174] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 266.601196][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 266.721479][ T9188] EXT4-fs (loop1): Ignoring removed bh option [ 266.733241][ T9188] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 266.750707][ T9188] EXT4-fs (loop1): Ignoring removed nobh option [ 266.851278][ T9188] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,bh,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,minixdf,nobh,,errors=continue [ 266.868232][ T9188] EXT4-fs error (device loop1): ext4_remount:5517: Abort forced by user [ 266.876649][ T9188] EXT4-fs (loop1): Remounting filesystem read-only [ 266.883804][ T9188] EXT4-fs error (device loop1): empty_inline_dir:1832: inode #12: block 5: comm syz-executor.1: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 267.162700][ T9188] EXT4-fs warning (device loop1): empty_inline_dir:1839: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 267.197037][ T9203] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 267.211219][ T9203] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #11: comm syz-executor.4: invalid indirect mapped block 1 (level 1) [ 267.225301][ T9203] EXT4-fs (loop4): 1 truncate cleaned up [ 267.230743][ T9203] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 267.295913][ T9193] F2FS-fs (loop3): invalid crc value [ 267.303179][ T9193] F2FS-fs (loop3): Found nat_bits in checkpoint [ 267.306415][ T9208] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) [ 267.344532][ T9193] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 267.856368][ T23] audit: type=1400 audit(1718633863.260:15897): avc: denied { listen } for pid=9224 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 267.933829][ T9230] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 267.988822][ T9237] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.990390][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.178182][ T9244] 9pnet: p9_fd_create_unix (9244): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 268.406893][ T9244] EXT4-fs (loop0): Test dummy encryption mode enabled [ 268.500399][ T9244] EXT4-fs (loop0): Ignoring removed orlov option [ 268.507445][ T9244] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 268.743126][ T9243] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 268.753332][ T9243] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 268.757444][ T9250] F2FS-fs (loop2): invalid crc value [ 268.763297][ T9243] F2FS-fs (loop3): invalid crc value [ 268.768423][ T9250] F2FS-fs (loop2): Found nat_bits in checkpoint [ 268.773652][ T9243] F2FS-fs (loop3): Found nat_bits in checkpoint [ 268.817829][ T9250] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 268.825252][ T9243] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 268.833196][ T9243] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 268.853673][ T9239] EXT4-fs (loop0): 1 orphan inode deleted [ 268.859480][ T9239] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 268.878100][ T9239] ext4 filesystem being mounted at /root/syzkaller-testdir3776086689/syzkaller.EYe89s/94/file1 supports timestamps until 2038 (0x7fffffff) [ 269.462678][ T9279] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 269.469804][ T9279] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 269.477015][ T9279] EXT4-fs (loop2): error: could not find journal device path: error -2 [ 269.629952][ T23] audit: type=1400 audit(1718633865.030:15898): avc: denied { mount } for pid=9278 comm="syz-executor.2" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 269.653302][ T23] audit: type=1400 audit(1718633865.030:15899): avc: denied { search } for pid=9278 comm="syz-executor.2" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 269.675497][ T23] audit: type=1400 audit(1718633865.030:15900): avc: denied { write } for pid=9278 comm="syz-executor.2" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 269.697637][ T23] audit: type=1400 audit(1718633865.030:15901): avc: denied { unmount } for pid=8762 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 270.403387][ T9311] IPv6: Can't replace route, no match found [ 270.725717][ T9332] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.753919][ T9334] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 270.763172][ T9334] ext4 filesystem being mounted at /root/syzkaller-testdir3776086689/syzkaller.EYe89s/97/file1 supports timestamps until 2038 (0x7fffffff) [ 270.906250][ T23] audit: type=1400 audit(1718633866.310:15902): avc: denied { mount } for pid=9333 comm="syz-executor.0" name="/" dev="tmpfs" ino=57378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 270.942311][ T23] audit: type=1400 audit(1718633866.340:15903): avc: denied { unmount } for pid=8020 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 270.973765][ T9341] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 270.982916][ T9341] ext4 filesystem being mounted at /root/syzkaller-testdir56223646/syzkaller.z04gez/93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 271.131611][ T833] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 271.174884][ T9352] EXT4-fs (loop1): Ignoring removed bh option [ 271.184290][ T9352] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 271.192136][ T9352] EXT4-fs (loop1): Ignoring removed nobh option [ 271.225811][ T9352] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,bh,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,minixdf,nobh,,errors=continue [ 271.244150][ T9352] EXT4-fs error (device loop1): ext4_remount:5517: Abort forced by user [ 271.252918][ T9352] EXT4-fs (loop1): Remounting filesystem read-only [ 271.260279][ T9352] EXT4-fs error (device loop1): empty_inline_dir:1832: inode #12: block 5: comm syz-executor.1: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 271.279486][ T9352] EXT4-fs warning (device loop1): empty_inline_dir:1839: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 271.493757][ T9366] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.511254][ T833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.521956][ T833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.531509][ T833] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 271.540307][ T833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.554298][ T833] usb 3-1: config 0 descriptor?? [ 271.566606][ T9361] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1046) [ 271.574661][ T9361] FAT-fs (loop3): Filesystem has been set read-only [ 271.612352][ T9369] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 271.622682][ T9369] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2221: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 271.635030][ T9369] EXT4-fs (loop4): Remounting filesystem read-only [ 271.641608][ T9369] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 271.653847][ T9369] EXT4-fs (loop4): mounted filesystem without journal. Opts: prjquota,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpquota,norecovery, [ 271.736333][ T9379] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.4'. [ 271.775349][ T9381] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 271.785433][ T9381] ext4 filesystem being mounted at /root/syzkaller-testdir3947254574/syzkaller.r18l6Y/72/file1 supports timestamps until 2038 (0x7fffffff) [ 272.271665][ T8376] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1046) [ 272.395317][ T9390] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 272.406750][ T9390] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 272.417083][ T9390] F2FS-fs (loop4): invalid crc value [ 272.423999][ T9390] F2FS-fs (loop4): Found nat_bits in checkpoint [ 272.436441][ T9409] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 272.456467][ T9416] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.466838][ T9409] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 272.481564][ T9409] EXT4-fs (loop3): Remounting filesystem read-only [ 272.489040][ T9409] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 272.511969][ T9409] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpquota,norecovery, [ 272.535917][ T9390] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 272.543066][ T9390] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 272.566306][ T9425] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 272.677720][ T23] audit: type=1400 audit(1718633868.080:15904): avc: denied { rename } for pid=9424 comm="syz-executor.0" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 272.712948][ T8020] EXT4-fs error (device loop0): ext4_empty_dir:2990: inode #11: comm syz-executor.0: invalid size [ 273.010434][ T23] audit: type=1400 audit(1718633868.110:15905): avc: denied { create } for pid=9424 comm="syz-executor.0" name="#e" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 273.021430][ T8020] EXT4-fs warning (device loop0): ext4_rmdir:3274: inode #11: comm syz-executor.0: empty directory 'file1' has too many links (0) [ 273.032465][ T23] audit: type=1400 audit(1718633868.110:15906): avc: denied { setattr } for pid=9424 comm="syz-executor.0" name="#e" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 273.160080][ T9442] xt_limit: Overflow, try lower: 184549376/256 [ 273.167950][ T23] audit: type=1400 audit(1718633868.570:15907): avc: denied { mount } for pid=9437 comm="syz-executor.3" name="/" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 273.193407][ T9441] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 273.206291][ T9441] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046) [ 273.214500][ T9441] FAT-fs (loop1): Filesystem has been set read-only [ 273.301927][ T9451] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.461497][ T9458] tipc: Started in network mode [ 273.470365][ T9458] tipc: Own node identity ac1414aa, cluster identity 4711 [ 273.488767][ T9458] tipc: Enabling of bearer rejected, failed to enable media [ 273.645642][ T8511] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046) [ 273.802756][ T9477] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.836392][ T9473] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 273.851305][ T833] usbhid 3-1:0.0: can't add hid device: -71 [ 273.857110][ T9473] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 273.865265][ T833] usbhid: probe of 3-1:0.0 failed with error -71 [ 273.875001][ T9473] F2FS-fs (loop3): invalid crc value [ 273.881174][ T833] usb 3-1: USB disconnect, device number 17 [ 273.890302][ T9473] F2FS-fs (loop3): Found nat_bits in checkpoint [ 273.941987][ T9473] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 273.949068][ T9473] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 273.969911][ T9494] xt_limit: Overflow, try lower: 184549376/256 [ 274.069559][ T9504] tipc: Enabling of bearer rejected, failed to enable media [ 274.707452][ T9524] xt_limit: Overflow, try lower: 184549376/256 [ 274.714529][ T9517] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 274.721275][ T4354] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 274.734424][ T9517] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1046) [ 274.742832][ T9517] FAT-fs (loop2): Filesystem has been set read-only [ 275.111257][ T4354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.130841][ T4354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.141134][ T4354] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 275.149982][ T4354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.158833][ T4354] usb 2-1: config 0 descriptor?? [ 275.170779][ T8762] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1046) [ 275.303012][ T9547] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro, [ 275.312063][ T9547] ext4 filesystem being mounted at /root/syzkaller-testdir3776086689/syzkaller.EYe89s/120/file1 supports timestamps until 2038 (0x7fffffff) [ 275.339211][ T9547] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/120/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 275.364767][ T9547] EXT4-fs (loop0): Remounting filesystem read-only [ 275.371860][ T9547] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 275.397705][ T9547] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 275.424592][ T9547] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 275.449683][ T9547] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 275.475187][ T9547] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 275.501437][ T9547] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 275.526647][ T9547] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 18: comm syz-executor.0: lblock 23 mapped to illegal pblock 18 (length 1) [ 275.551839][ T9547] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 19: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 275.571156][ T458] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 275.584139][ T9547] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 20: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=2, size=2048 fake=0 [ 276.081152][ T458] usb 3-1: Using ep0 maxpacket: 16 [ 276.132334][ T9557] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 276.143048][ T9557] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 276.160138][ T9557] F2FS-fs (loop4): invalid crc value [ 276.184053][ T9557] F2FS-fs (loop4): Found nat_bits in checkpoint [ 276.201273][ T458] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.211232][ T458] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 276.219872][ T458] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.237480][ T9559] F2FS-fs (loop0): Found nat_bits in checkpoint [ 276.238055][ T9557] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 276.253536][ T9557] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 276.282913][ T9559] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 277.321352][ T458] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.331721][ T458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.342639][ T458] usb 3-1: Product: syz [ 277.347681][ T458] usb 3-1: Manufacturer: syz [ 277.354465][ T458] usb 3-1: SerialNumber: syz [ 277.402086][ T458] usb 3-1: selecting invalid altsetting 1 [ 277.413320][ T8020] attempt to access beyond end of device [ 277.413320][ T8020] loop0: rw=2049, want=45112, limit=40427 [ 277.439067][ T4354] usbhid 2-1:0.0: can't add hid device: -71 [ 277.444958][ T4354] usbhid: probe of 2-1:0.0 failed with error -71 [ 277.462466][ T4354] usb 2-1: USB disconnect, device number 12 [ 277.567056][ T9579] xt_limit: Overflow, try lower: 184549376/256 [ 277.823991][ T9589] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:455: comm syz-executor.3: Invalid block bitmap block 0 in block_group 0 [ 277.838590][ T9589] Quota error (device loop3): write_blk: dquota write failed [ 277.841307][ T458] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 277.845971][ T9589] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 277.856975][ T458] cdc_ncm 3-1:1.0: bind() failure [ 277.862240][ T9589] EXT4-fs error (device loop3): ext4_free_blocks:4799: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096 [ 277.879570][ T458] usb 3-1: USB disconnect, device number 18 [ 277.880431][ T9589] EXT4-fs error (device loop3): ext4_read_inode_bitmap:134: comm syz-executor.3: Invalid inode bitmap blk 0 in block_group 0 [ 277.890990][ T9597] tipc: Started in network mode [ 277.898806][ T9589] EXT4-fs error (device loop3) in ext4_free_inode:352: Corrupt filesystem [ 277.904310][ T402] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 277.911788][ T9589] EXT4-fs (loop3): 1 orphan inode deleted [ 277.923126][ T9597] tipc: Own node identity ac1414aa, cluster identity 4711 [ 277.932352][ T9589] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue [ 277.933835][ T9597] tipc: Enabling of bearer rejected, failed to enable media [ 278.507824][ T9614] xt_limit: Overflow, try lower: 184549376/256 [ 279.011043][ T9630] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:455: comm syz-executor.3: Invalid block bitmap block 0 in block_group 0 [ 279.026485][ T9630] Quota error (device loop3): write_blk: dquota write failed [ 279.034145][ T9630] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 279.047964][ T9630] EXT4-fs error (device loop3): ext4_free_blocks:4799: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096 [ 279.067227][ T9630] EXT4-fs error (device loop3): ext4_read_inode_bitmap:134: comm syz-executor.3: Invalid inode bitmap blk 0 in block_group 0 [ 279.080413][ T9630] EXT4-fs error (device loop3) in ext4_free_inode:352: Corrupt filesystem [ 279.088851][ T607] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 279.098527][ T9641] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro, [ 279.101494][ T9630] EXT4-fs (loop3): 1 orphan inode deleted [ 279.108141][ T9641] ext4 filesystem being mounted at /root/syzkaller-testdir3776086689/syzkaller.EYe89s/128/file1 supports timestamps until 2038 (0x7fffffff) [ 279.115746][ T9630] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue [ 279.151555][ T9641] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/128/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 279.177389][ T9641] EXT4-fs (loop0): Remounting filesystem read-only [ 279.184856][ T9641] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/128/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 279.210740][ T9641] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/128/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 279.236714][ T9641] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/128/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 279.261948][ T9641] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/128/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 279.289622][ T9658] 9pnet: p9_errstr2errno: server reported unknown error sŧ [ 279.292441][ T9641] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/128/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 279.323342][ T9641] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/128/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 279.331153][ T458] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 279.348418][ T9641] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 18: comm syz-executor.0: lblock 23 mapped to illegal pblock 18 (length 1) [ 279.370423][ T9641] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 19: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/128/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 279.396090][ T9641] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 20: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/128/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=2, size=2048 fake=0 [ 279.478012][ T9663] tipc: Enabling of bearer rejected, failed to enable media [ 279.921337][ T458] usb 2-1: Using ep0 maxpacket: 16 [ 280.131909][ T9672] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,lazytime,data_err=abort,errors=remount-ro, [ 280.158947][ T9672] EXT4-fs error (device loop4): ext4_find_extent:963: inode #2: comm syz-executor.4: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 280.175795][ T9672] EXT4-fs (loop4): Remounting filesystem read-only [ 280.193323][ T9672] EXT4-fs error (device loop4): ext4_find_extent:963: inode #2: comm syz-executor.4: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 280.236347][ T458] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.288460][ T458] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 280.297514][ T458] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.354193][ T9698] 9pnet: p9_errstr2errno: server reported unknown error sŧ [ 280.416953][ T9702] overlayfs: failed to get inode (-116) [ 280.422701][ T9695] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro, [ 280.431889][ T9702] overlayfs: failed to get inode (-116) [ 280.437390][ T9695] ext4 filesystem being mounted at /root/syzkaller-testdir1555890539/syzkaller.6WNV47/41/file1 supports timestamps until 2038 (0x7fffffff) [ 280.467633][ T9695] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor.2: path /root/syzkaller-testdir1555890539/syzkaller.6WNV47/41/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 280.492591][ T458] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.501284][ T9695] EXT4-fs (loop2): Remounting filesystem read-only [ 280.501488][ T458] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.508730][ T9695] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor.2: path /root/syzkaller-testdir1555890539/syzkaller.6WNV47/41/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 280.515595][ T458] usb 2-1: Product: syz [ 280.515610][ T458] usb 2-1: Manufacturer: syz [ 280.546434][ T9707] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 280.549909][ T458] usb 2-1: SerialNumber: syz [ 280.564855][ T9695] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir1555890539/syzkaller.6WNV47/41/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 280.597653][ T9695] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor.2: path /root/syzkaller-testdir1555890539/syzkaller.6WNV47/41/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 280.623043][ T458] usb 2-1: selecting invalid altsetting 1 [ 280.628864][ T9695] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor.2: path /root/syzkaller-testdir1555890539/syzkaller.6WNV47/41/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 280.654165][ T9695] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor.2: path /root/syzkaller-testdir1555890539/syzkaller.6WNV47/41/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 280.680235][ T9695] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz-executor.2: path /root/syzkaller-testdir1555890539/syzkaller.6WNV47/41/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 280.711280][ T9695] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 18: comm syz-executor.2: lblock 23 mapped to illegal pblock 18 (length 1) [ 280.726238][ T9695] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 19: comm syz-executor.2: path /root/syzkaller-testdir1555890539/syzkaller.6WNV47/41/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 280.751586][ T9695] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 20: comm syz-executor.2: path /root/syzkaller-testdir1555890539/syzkaller.6WNV47/41/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=2, size=2048 fake=0 [ 280.828989][ T9715] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 280.838658][ T9715] attempt to access beyond end of device [ 280.838658][ T9715] loop4: rw=0, want=304, limit=16 [ 280.849143][ T9715] erofs: (device loop4): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 280.858625][ T9715] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 281.131413][ T458] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 281.137266][ T458] cdc_ncm 2-1:1.0: bind() failure [ 281.137500][ T9719] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 4402341478404)! [ 281.144154][ T458] usb 2-1: USB disconnect, device number 13 [ 281.153166][ T9719] EXT4-fs (loop2): group descriptors corrupted! [ 281.471496][ T9734] overlayfs: failed to get inode (-116) [ 281.477522][ T9734] overlayfs: failed to get inode (-116) [ 281.481305][ T9736] 9pnet: p9_errstr2errno: server reported unknown error sŧ [ 281.802522][ T9747] EXT4-fs (loop1): first meta block group too large: 7 (group descriptor block count 1) [ 282.042001][ T9747] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 282.049215][ T9747] EXT4-fs (loop1): Ignoring removed orlov option [ 282.055548][ T9747] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 282.064964][ T9747] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 282.073443][ T9747] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 282.263963][ T9740] F2FS-fs (loop2): invalid crc value [ 282.297548][ T9740] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 282.309339][ T9740] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 282.573812][ T9761] F2FS-fs (loop3): Found nat_bits in checkpoint [ 282.634868][ T9761] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 282.774191][ T9774] EXT4-fs error (device loop4): ext4_orphan_get:1236: inode #15: comm syz-executor.4: iget: bad i_size value: -67835469387268086 [ 282.787609][ T9774] EXT4-fs (loop4): Remounting filesystem read-only [ 282.793977][ T9774] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 282.851509][ T9774] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nouid32,noload, [ 283.011415][ T9774] ext4 filesystem being mounted at /root/syzkaller-testdir3106193673/syzkaller.lJQBUj/90/file0 supports timestamps until 2038 (0x7fffffff) [ 283.096105][ T9785] overlayfs: failed to get inode (-116) [ 283.101598][ T9785] overlayfs: failed to get inode (-116) [ 283.109893][ T9774] EXT4-fs error (device loop4): ext4_remount:5517: Abort forced by user [ 283.118107][ T9774] EXT4-fs (loop4): Remounting filesystem read-only [ 283.124918][ T9774] ext4 filesystem being remounted at /root/syzkaller-testdir3106193673/syzkaller.lJQBUj/90/file0/file0 supports timestamps until 2038 (0x7fffffff) [ 283.162907][ T9786] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,data_err=abort,errors=remount-ro, [ 283.176830][ T9786] EXT4-fs error (device loop1): ext4_find_extent:963: inode #2: comm syz-executor.1: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 283.193811][ T9786] EXT4-fs (loop1): Remounting filesystem read-only [ 283.200497][ T9786] EXT4-fs error (device loop1): ext4_find_extent:963: inode #2: comm syz-executor.1: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 283.274251][ T8376] attempt to access beyond end of device [ 283.274251][ T8376] loop3: rw=2049, want=45112, limit=40427 [ 284.103847][ T9797] F2FS-fs (loop1): invalid crc value [ 284.141630][ T9797] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 284.222011][ T9823] overlayfs: failed to get inode (-116) [ 284.227436][ T9823] overlayfs: failed to get inode (-116) [ 286.300515][ T9884] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.398160][ T9846] F2FS-fs (loop0): invalid crc value [ 286.431577][ T9846] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 286.499954][ T9891] 9pnet: p9_fd_create_unix (9891): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 286.596761][ T9891] EXT4-fs (loop3): Test dummy encryption mode enabled [ 286.690067][ T9891] EXT4-fs (loop3): Ignoring removed orlov option [ 286.702252][ T9891] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 286.864607][ T121] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 286.937242][ T9886] EXT4-fs (loop3): 1 orphan inode deleted [ 286.942857][ T9886] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 286.961885][ T9886] ext4 filesystem being mounted at /root/syzkaller-testdir56223646/syzkaller.z04gez/128/file1 supports timestamps until 2038 (0x7fffffff) [ 287.214696][ T9903] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 287.228766][ T9903] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #11: comm syz-executor.1: invalid indirect mapped block 1 (level 1) [ 287.242613][ T9903] EXT4-fs (loop1): 1 truncate cleaned up [ 287.248060][ T9903] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 287.361237][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.373641][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.381530][ T9916] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 287.383261][ T121] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.404982][ T121] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 287.413756][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.422515][ T121] usb 3-1: config 0 descriptor?? [ 287.923157][ T121] wacom 0003:056A:0094.0029: unknown main item tag 0x0 [ 287.930048][ T121] wacom 0003:056A:0094.0029: Using device in hidraw-only mode [ 287.938596][ T121] wacom 0003:056A:0094.0029: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 287.954157][ T9925] F2FS-fs (loop0): invalid crc value [ 287.986709][ T9925] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 288.043024][ T9947] FAT-fs (loop3): Directory bread(block 64) failed [ 288.049394][ T9947] FAT-fs (loop3): Directory bread(block 65) failed [ 288.056180][ T9947] FAT-fs (loop3): Directory bread(block 66) failed [ 288.062517][ T9947] FAT-fs (loop3): Directory bread(block 67) failed [ 288.068848][ T9947] FAT-fs (loop3): Directory bread(block 68) failed [ 288.075187][ T9947] FAT-fs (loop3): Directory bread(block 69) failed [ 288.081550][ T9947] FAT-fs (loop3): Directory bread(block 70) failed [ 288.087830][ T9947] FAT-fs (loop3): Directory bread(block 71) failed [ 288.094652][ T9947] FAT-fs (loop3): Directory bread(block 72) failed [ 288.100961][ T9947] FAT-fs (loop3): Directory bread(block 73) failed [ 288.121178][ T18] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 288.137109][ T458] usb 3-1: USB disconnect, device number 19 [ 288.461170][ T18] usb 2-1: Using ep0 maxpacket: 16 [ 288.581195][ T18] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.591369][ T18] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 288.599981][ T18] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.771224][ T18] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.782245][ T18] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.793229][ T18] usb 2-1: Product: syz [ 288.798282][ T18] usb 2-1: Manufacturer: syz [ 288.804815][ T18] usb 2-1: SerialNumber: syz [ 288.893576][ T18] usb 2-1: selecting invalid altsetting 1 [ 288.994044][ T9966] EXT4-fs (loop3): Ignoring removed orlov option [ 289.003053][ T9966] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,data_err=abort,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,orlov,bsdgroups,max_batch_time=0x0000000000000400,user_xattr,quota,,errors=continue [ 289.077801][ T23] audit: type=1400 audit(1718633884.480:15908): avc: denied { mount } for pid=9982 comm="syz-executor.2" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 289.084563][ T9966] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 289.107456][ T23] audit: type=1400 audit(1718633884.510:15909): avc: denied { unmount } for pid=8762 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 289.110237][ T9966] EXT4-fs error (device loop3): ext4_get_max_inline_size:115: inode #18: comm syz-executor.3: can't get inode location 18 [ 289.154307][ T8376] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #2: block 16: comm syz-executor.3: lblock 0 mapped to illegal pblock 16 (length 1) [ 289.168873][ T8376] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1048: inode #2: lblock 0: comm syz-executor.3: error -117 reading directory block [ 289.183000][ T8376] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 289.282154][ T607] tipc: Left network mode [ 289.441343][ T18] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 289.455424][ T18] cdc_ncm 2-1:1.0: bind() failure [ 289.528142][ T18] usb 2-1: USB disconnect, device number 14 [ 289.747295][T10000] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.754202][T10000] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.762240][T10000] device bridge_slave_0 entered promiscuous mode [ 289.827625][T10000] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.834672][T10000] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.842480][T10000] device bridge_slave_1 entered promiscuous mode [ 289.843622][T10008] syz-executor.4[10008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.899953][T10000] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.918409][T10000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.925593][T10000] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.932438][T10000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.970349][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.977894][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.993525][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.043696][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.052034][ T458] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.058857][ T458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.070241][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.078541][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.085372][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.093887][T10017] EXT4-fs (loop2): Ignoring removed orlov option [ 290.104108][T10017] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,data_err=abort,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,orlov,bsdgroups,max_batch_time=0x0000000000000400,user_xattr,quota,,errors=continue [ 290.137315][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.151340][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.174760][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.188371][T10017] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 290.191377][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.197843][T10017] EXT4-fs error (device loop2): ext4_get_max_inline_size:115: inode #18: comm syz-executor.2: can't get inode location 18 [ 290.219509][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.228396][ T8762] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 16: comm syz-executor.2: lblock 0 mapped to illegal pblock 16 (length 1) [ 290.239090][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.243939][ T8762] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1048: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block [ 290.251611][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.264669][ T8762] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 290.331935][ T607] device bridge_slave_1 left promiscuous mode [ 290.337934][ T607] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.345342][ T607] device bridge_slave_0 left promiscuous mode [ 290.351526][ T607] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.588393][T10026] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.595322][T10026] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.602626][T10026] device bridge_slave_0 entered promiscuous mode [ 290.609624][T10026] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.616525][T10026] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.623843][T10026] device bridge_slave_1 entered promiscuous mode [ 290.685248][T10026] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.692104][T10026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.699303][T10026] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.706063][T10026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.735365][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.743225][ T458] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.750364][ T458] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.759889][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.768231][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.775069][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.784887][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.792979][ T458] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.799792][ T458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.822866][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.840730][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.861365][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.878446][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.896738][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.904416][T10049] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 290.913942][T10049] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 290.916845][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.932379][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.022854][T10057] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 291.031853][T10057] ext4 filesystem being mounted at /root/syzkaller-testdir4144560102/syzkaller.gQGWZ9/1/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 291.056724][T10057] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 291.065289][T10057] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 291.120380][T10066] input: syz1 as /devices/virtual/input/input30 [ 291.163010][T10068] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 291.171924][T10068] ext4 filesystem being mounted at /root/syzkaller-testdir4144560102/syzkaller.gQGWZ9/4/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 291.231402][ T607] device bridge_slave_1 left promiscuous mode [ 291.237385][ T607] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.244711][ T607] device bridge_slave_0 left promiscuous mode [ 291.250707][ T607] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.259993][T10075] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 291.268398][T10075] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 291.656925][T10084] l2tp_ppp: tunl 8: set debug=b3 [ 291.661937][ T607] l2tp_core: tunl 8: closing all sessions... [ 291.673626][T10086] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.683050][ C0] l2tp_core: tunl 8: closing... [ 291.683130][T10086] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.857396][T10098] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 292.069578][ T23] audit: type=1400 audit(1718633887.470:15910): avc: denied { remove_name } for pid=10105 comm="syz-executor.3" name="file0" dev="incremental-fs" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 292.096353][T10103] F2FS-fs (loop1): Found nat_bits in checkpoint [ 292.097697][ T23] audit: type=1400 audit(1718633887.470:15911): avc: denied { rename } for pid=10105 comm="syz-executor.3" name="file0" dev="incremental-fs" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 292.136943][T10117] usb usb8: usbfs: process 10117 (syz-executor.3) did not claim interface 0 before use [ 292.169888][T10103] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 292.182238][T10103] attempt to access beyond end of device [ 292.182238][T10103] loop1: rw=2049, want=53792, limit=40427 [ 292.195047][T10103] attempt to access beyond end of device [ 292.195047][T10103] loop1: rw=0, want=53792, limit=40427 [ 292.206203][T10103] attempt to access beyond end of device [ 292.206203][T10103] loop1: rw=0, want=53792, limit=40427 [ 292.217137][T10103] attempt to access beyond end of device [ 292.217137][T10103] loop1: rw=0, want=53792, limit=40427 [ 292.228003][T10103] attempt to access beyond end of device [ 292.228003][T10103] loop1: rw=0, want=53792, limit=40427 [ 292.247094][ T8511] attempt to access beyond end of device [ 292.247094][ T8511] loop1: rw=2049, want=45104, limit=40427 [ 292.344534][T10139] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 292.361226][ T18] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 292.611132][ T18] usb 3-1: Using ep0 maxpacket: 16 [ 292.732051][ T18] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.750532][ T18] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.770037][ T18] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 292.782932][ T18] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 292.792064][ T18] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.800980][ T18] usb 3-1: config 0 descriptor?? [ 292.857418][T10151] F2FS-fs (loop1): Found nat_bits in checkpoint [ 292.941352][T10151] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 292.976967][T10151] attempt to access beyond end of device [ 292.976967][T10151] loop1: rw=2049, want=53792, limit=40427 [ 292.998318][T10151] attempt to access beyond end of device [ 292.998318][T10151] loop1: rw=0, want=53792, limit=40427 [ 293.010697][T10151] attempt to access beyond end of device [ 293.010697][T10151] loop1: rw=0, want=53792, limit=40427 [ 293.021739][T10151] attempt to access beyond end of device [ 293.021739][T10151] loop1: rw=0, want=53792, limit=40427 [ 293.082733][T10169] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 293.273248][T10180] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 293.282376][T10180] ext4 filesystem being mounted at /root/syzkaller-testdir2421383413/syzkaller.rLDNSU/17/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 293.282998][ T18] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 293.307829][T10180] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 293.317932][T10180] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 293.330343][ T18] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 293.338845][ T18] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 293.346645][ T18] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 293.353823][ T18] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 293.361142][ T18] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 293.371018][ T18] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 293.378243][ T18] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 293.447284][ T18] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 293.456063][ T18] microsoft 0003:045E:07DA.002A: No inputs registered, leaving [ 293.466294][ T18] microsoft 0003:045E:07DA.002A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 293.477918][ T18] microsoft 0003:045E:07DA.002A: no inputs found [ 293.484385][ T18] microsoft 0003:045E:07DA.002A: could not initialize ff, continuing anyway [ 293.494264][ T18] usb 3-1: USB disconnect, device number 20 [ 293.874335][T10219] EXT4-fs error (device loop1): ext4_ext_check_inode:540: inode #4: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 293.892686][T10219] EXT4-fs error (device loop1): ext4_quota_enable:6059: comm syz-executor.1: Bad quota inode: 4, type: 1 [ 293.903869][T10219] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 293.918464][T10219] EXT4-fs (loop1): mount failed [ 294.024590][T10223] EXT4-fs (loop3): bad geometry: block count 3098423767073024 exceeds size of device (256 blocks) [ 294.086159][T10223] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 294.095608][T10223] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 294.104748][T10223] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 294.149990][T10233] input: syz0 as /devices/virtual/input/input32 [ 294.374402][T10248] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 294.440538][T10260] device syzkaller0 entered promiscuous mode [ 294.851170][ T833] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 294.913278][T10267] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 294.941678][T10267] EXT4-fs (loop1): failed to initialize system zone (-117) [ 294.948822][T10267] EXT4-fs (loop1): mount failed [ 295.171158][ T23] audit: type=1400 audit(1718633890.570:15912): avc: denied { accept } for pid=10266 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 295.311557][ T833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.322322][ T833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.333209][ T833] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.345802][ T833] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 295.354695][ T833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.366919][ T833] usb 3-1: config 0 descriptor?? [ 295.389059][T10275] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' [ 295.462127][T10277] input: syz0 as /devices/virtual/input/input33 [ 295.702705][T10290] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 295.831434][T10303] input: syz0 as /devices/virtual/input/input34 [ 295.842609][ T833] wacom 0003:056A:0094.002B: unknown main item tag 0x0 [ 295.849551][ T833] wacom 0003:056A:0094.002B: Using device in hidraw-only mode [ 295.858151][ T833] wacom 0003:056A:0094.002B: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 295.992583][T10311] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 296.002293][T10311] EXT4-fs (loop1): Test dummy encryption mode enabled [ 296.013848][T10311] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 296.022023][T10311] EXT4-fs (loop1): Remounting filesystem read-only [ 296.028423][T10311] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 296.036625][T10311] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 296.044847][T10311] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 296.054077][T10311] EXT4-fs error (device loop1): ext4_evict_inode:312: comm syz-executor.1: couldn't truncate inode 16 (err -27) [ 296.057721][ T833] usb 3-1: USB disconnect, device number 21 [ 296.070085][T10304] F2FS-fs (loop0): Found nat_bits in checkpoint [ 296.071978][T10311] EXT4-fs (loop1): 1 orphan inode deleted [ 296.077552][ T3647] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 296.090579][T10311] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv1,dioread_nolock,test_dummy_encryption,delalloc,nolazytime, [ 296.108701][T10311] ext4 filesystem being mounted at /root/syzkaller-testdir3947254574/syzkaller.r18l6Y/136/file1 supports timestamps until 2038 (0x7fffffff) [ 296.125435][T10304] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 296.213382][T10323] device syzkaller0 entered promiscuous mode [ 296.355076][T10325] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 296.365226][T10325] EXT4-fs (loop1): failed to initialize system zone (-117) [ 296.377167][T10325] EXT4-fs (loop1): mount failed [ 296.441199][ T3647] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.451145][ T3647] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.540498][ T3647] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 296.549405][ T3647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 296.557313][ T3647] usb 4-1: SerialNumber: syz [ 296.648871][T10340] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' [ 296.861147][ T121] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 296.863128][ T3647] usb 4-1: 0:2 : does not exist [ 296.913169][ T3647] usb 4-1: USB disconnect, device number 29 [ 296.993705][T10348] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 297.002536][T10348] ext4 filesystem being mounted at /root/syzkaller-testdir3776086689/syzkaller.EYe89s/174/file0 supports timestamps until 2038 (0x7fffffff) [ 297.121012][T10357] device syzkaller0 entered promiscuous mode [ 297.235714][T10369] syz-executor.1[10369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.291520][ T121] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.313269][ T121] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 297.331166][ T121] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 297.341994][ T121] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 297.351770][ T121] usb 3-1: config 1 interface 2 has no altsetting 0 [ 297.392892][T10371] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 297.400355][T10371] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 297.410630][T10371] F2FS-fs (loop0): invalid crc value [ 297.418313][T10371] F2FS-fs (loop0): Found nat_bits in checkpoint [ 297.451394][T10371] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 297.458237][T10371] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 297.475350][ T23] audit: type=1400 audit(1718633892.880:15913): avc: denied { link } for pid=10370 comm="syz-executor.0" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 297.501243][ T833] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 297.510216][ T8020] handle_bad_sector: 8 callbacks suppressed [ 297.510227][ T8020] attempt to access beyond end of device [ 297.510227][ T8020] loop0: rw=2049, want=45104, limit=40427 [ 297.527182][ T121] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.551127][ T121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.569444][ T121] usb 3-1: Product: syz [ 297.573480][ T121] usb 3-1: Manufacturer: syz [ 297.578264][ T121] usb 3-1: SerialNumber: syz [ 297.741138][ T833] usb 2-1: Using ep0 maxpacket: 32 [ 297.861237][ T833] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.880564][ T833] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 297.901139][ T833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.932246][ T833] usb 2-1: config 0 descriptor?? [ 298.171810][T10398] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 298.184784][ T833] usb 2-1: bad CDC descriptors [ 298.184881][T10398] EXT4-fs (loop0): failed to initialize system zone (-117) [ 298.201186][T10398] EXT4-fs (loop0): mount failed [ 298.241899][T10391] F2FS-fs (loop3): Wrong segment_count / block_count (65567 > 16384) [ 298.249869][T10391] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 298.260982][T10391] F2FS-fs (loop3): Found nat_bits in checkpoint [ 298.278810][ T395] usb 2-1: USB disconnect, device number 15 [ 298.299588][T10391] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 298.306551][T10391] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 298.694796][T10407] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' [ 299.828122][ T121] usb 3-1: selecting invalid altsetting 0 [ 299.851582][ T121] usb 3-1: USB disconnect, device number 22 [ 300.101111][ T395] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 300.491341][ T395] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.501535][ T395] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.522845][T10497] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 300.531631][T10497] ext4 filesystem being mounted at /root/syzkaller-testdir3776086689/syzkaller.EYe89s/197/bus supports timestamps until 2038 (0x7fffffff) [ 300.549418][T10497] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 300.557616][T10497] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 300.569043][ T23] audit: type=1400 audit(1718633895.970:15914): avc: denied { map } for pid=10496 comm="syz-executor.0" path="/root/syzkaller-testdir3776086689/syzkaller.EYe89s/197/bus/bus" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.599726][ T395] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 300.611147][ T121] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 300.623733][T10497] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 300.626151][ T395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 300.647258][T10497] EXT4-fs error (device loop0): __ext4_find_entry:1654: inode #2: comm syz-executor.0: checksumming directory block 0 [ 300.651601][ T395] usb 4-1: SerialNumber: syz [ 300.702116][ T8020] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 300.717903][ T8020] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/197/bus: directory fails checksum at offset 0 [ 300.737003][ T8020] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/197/bus: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 300.761955][ T8020] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 300.777491][ T8020] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/197/bus: directory fails checksum at offset 18432 [ 300.795781][ T8020] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 300.811302][ T8020] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/197/bus: directory fails checksum at offset 20480 [ 300.829791][ T8020] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 300.845761][ T8020] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/197/bus: directory fails checksum at offset 22528 [ 300.864384][ T8020] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 300.879988][ T8020] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/197/bus: directory fails checksum at offset 24576 [ 300.898685][ T8020] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 300.931167][ T8020] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor.0: path /root/syzkaller-testdir3776086689/syzkaller.EYe89s/197/bus: directory fails checksum at offset 26624 [ 300.950243][ T8020] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 300.988439][ T8020] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 301.004966][ T8020] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 301.131179][ T121] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.150236][ T121] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 301.162112][ T395] usb 4-1: 0:2 : does not exist [ 301.170964][ T121] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.191382][ T121] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 301.203576][ T395] usb 4-1: USB disconnect, device number 30 [ 301.210331][ T121] usb 3-1: config 1 interface 2 has no altsetting 0 [ 301.401268][ T121] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.420262][ T121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.440408][ T121] usb 3-1: Product: syz [ 301.444404][ T121] usb 3-1: Manufacturer: syz [ 301.448802][ T121] usb 3-1: SerialNumber: syz [ 301.767849][T10529] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 301.778174][T10529] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 301.807866][T10529] F2FS-fs (loop1): invalid crc value [ 301.823279][T10529] F2FS-fs (loop1): Found nat_bits in checkpoint [ 302.122760][T10529] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 302.130927][T10529] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 302.193345][ T8511] attempt to access beyond end of device [ 302.193345][ T8511] loop1: rw=2049, want=45104, limit=40427 [ 302.552484][T10543] EXT4-fs (loop3): inodes count not valid: 0 vs 32 [ 302.614772][T10548] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 302.697663][T10543] overlayfs: failed to look up (file1) for ino (-5) [ 302.824930][ T1343] tipc: Left network mode [ 302.892573][T10559] xt_hashlimit: size too large, truncated to 1048576 [ 302.899115][T10559] xt_hashlimit: overflow, try lower: 0/0 [ 302.944198][T10557] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.951056][T10557] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.958319][T10557] device bridge_slave_0 entered promiscuous mode [ 302.966699][T10557] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.973595][T10557] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.980765][T10557] device bridge_slave_1 entered promiscuous mode [ 302.991119][ T3647] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 303.036231][T10557] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.043069][T10557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.050159][T10557] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.056957][T10557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.082630][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.090009][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.097791][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.113453][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.121994][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.128838][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.147900][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.160702][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.167648][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.178435][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.191351][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.207081][T10567] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 303.208384][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.216261][T10567] ext4 filesystem being mounted at /root/syzkaller-testdir4144560102/syzkaller.gQGWZ9/22/bus supports timestamps until 2038 (0x7fffffff) [ 303.231274][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.245559][ T121] usb 3-1: selecting invalid altsetting 0 [ 303.255705][T10567] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 303.257621][ T121] usb 3-1: USB disconnect, device number 23 [ 303.264118][ T3647] usb 2-1: Using ep0 maxpacket: 8 [ 303.275934][T10567] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 303.290491][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.307696][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.308713][T10567] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 303.331192][T10567] EXT4-fs error (device loop2): __ext4_find_entry:1654: inode #2: comm syz-executor.2: checksumming directory block 0 [ 303.336002][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.363441][T10026] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 303.379156][T10026] EXT4-fs error (device loop2): ext4_readdir:220: inode #2: comm syz-executor.2: path /root/syzkaller-testdir4144560102/syzkaller.gQGWZ9/22/bus: directory fails checksum at offset 0 [ 303.397264][T10026] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor.2: path /root/syzkaller-testdir4144560102/syzkaller.gQGWZ9/22/bus: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 303.422381][ T3647] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 303.423296][T10026] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 303.430504][ T3647] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 303.430517][ T3647] usb 2-1: config 135 has no interface number 0 [ 303.446392][T10026] EXT4-fs error (device loop2): ext4_readdir:220: inode #2: comm syz-executor.2: path /root/syzkaller-testdir4144560102/syzkaller.gQGWZ9/22/bus: directory fails checksum at offset 18432 [ 303.457850][ T3647] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.462398][T10026] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 303.509226][T10026] EXT4-fs error (device loop2): ext4_readdir:220: inode #2: comm syz-executor.2: path /root/syzkaller-testdir4144560102/syzkaller.gQGWZ9/22/bus: directory fails checksum at offset 20480 [ 303.527682][T10026] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 303.543172][T10026] EXT4-fs error (device loop2): ext4_readdir:220: inode #2: comm syz-executor.2: path /root/syzkaller-testdir4144560102/syzkaller.gQGWZ9/22/bus: directory fails checksum at offset 22528 [ 303.561682][T10026] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 303.577325][T10026] EXT4-fs error (device loop2): ext4_readdir:220: inode #2: comm syz-executor.2: path /root/syzkaller-testdir4144560102/syzkaller.gQGWZ9/22/bus: directory fails checksum at offset 24576 [ 303.595785][T10026] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 303.601643][ T1343] device bridge_slave_1 left promiscuous mode [ 303.611303][T10026] EXT4-fs error (device loop2): ext4_readdir:220: inode #2: comm syz-executor.2: path /root/syzkaller-testdir4144560102/syzkaller.gQGWZ9/22/bus: directory fails checksum at offset 26624 [ 303.622951][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.641386][T10026] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 303.659784][T10026] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 303.675340][ T1343] device bridge_slave_0 left promiscuous mode [ 303.675422][T10026] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 303.681432][ T3647] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 303.705935][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.713596][ T3647] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.721479][ T3647] usb 2-1: Product: syz [ 303.725550][ T3647] usb 2-1: Manufacturer: syz [ 303.730019][ T3647] usb 2-1: SerialNumber: syz [ 303.891998][T10582] EXT4-fs (loop3): inodes count not valid: 0 vs 32 [ 303.996105][T10582] overlayfs: failed to look up (file1) for ino (-5) [ 304.011389][ T3647] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 304.018779][ T3647] uvcvideo: No valid video chain found. [ 304.031230][ T3647] usb 2-1: USB disconnect, device number 16 [ 304.385044][ T23] audit: type=1326 audit(1718633899.790:15915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ae0e4f29 code=0x7ffc0000 [ 304.520671][ T23] audit: type=1326 audit(1718633899.790:15916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0ae0e4f29 code=0x7ffc0000 [ 304.636660][T10597] 9pnet: Insufficient options for proto=fd [ 304.645193][ T23] audit: type=1326 audit(1718633899.790:15917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ae0e4f29 code=0x7ffc0000 [ 304.670500][ T23] audit: type=1326 audit(1718633899.790:15918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0ae0e4f29 code=0x7ffc0000 [ 304.694656][ T23] audit: type=1326 audit(1718633899.790:15919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ae0e4f29 code=0x7ffc0000 [ 304.719063][ T23] audit: type=1326 audit(1718633899.790:15920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fc0ae0e4f29 code=0x7ffc0000 [ 304.750571][ T23] audit: type=1326 audit(1718633899.790:15921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ae0e4f29 code=0x7ffc0000 [ 304.817751][T10599] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 304.826580][T10599] ext4 filesystem being mounted at /root/syzkaller-testdir2132539473/syzkaller.xnYT3c/5/bus supports timestamps until 2038 (0x7fffffff) [ 304.866859][T10599] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 304.875279][T10599] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 304.896461][T10608] FAT-fs (loop1): Directory bread(block 64) failed [ 304.903039][T10608] FAT-fs (loop1): Directory bread(block 65) failed [ 304.909427][T10608] FAT-fs (loop1): Directory bread(block 66) failed [ 304.912597][T10599] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 304.915823][T10608] FAT-fs (loop1): Directory bread(block 67) failed [ 304.931200][T10599] EXT4-fs error (device loop0): __ext4_find_entry:1654: inode #2: comm syz-executor.0: checksumming directory block 0 [ 304.939287][T10557] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 304.965831][T10608] FAT-fs (loop1): Directory bread(block 68) failed [ 304.972410][T10608] FAT-fs (loop1): Directory bread(block 69) failed [ 304.978797][T10608] FAT-fs (loop1): Directory bread(block 70) failed [ 304.985099][T10608] FAT-fs (loop1): Directory bread(block 71) failed [ 304.991603][T10557] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor.0: path /root/syzkaller-testdir2132539473/syzkaller.xnYT3c/5/bus: directory fails checksum at offset 0 [ 305.009264][T10608] FAT-fs (loop1): Directory bread(block 72) failed [ 305.015511][T10608] FAT-fs (loop1): Directory bread(block 73) failed [ 305.029292][T10557] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor.0: path /root/syzkaller-testdir2132539473/syzkaller.xnYT3c/5/bus: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 305.055438][T10557] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 305.070929][T10557] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor.0: path /root/syzkaller-testdir2132539473/syzkaller.xnYT3c/5/bus: directory fails checksum at offset 18432 [ 305.089043][T10557] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 305.105103][T10557] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor.0: path /root/syzkaller-testdir2132539473/syzkaller.xnYT3c/5/bus: directory fails checksum at offset 20480 [ 305.159009][T10557] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 305.174847][T10557] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor.0: path /root/syzkaller-testdir2132539473/syzkaller.xnYT3c/5/bus: directory fails checksum at offset 22528 [ 305.201325][T10557] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 305.231147][T10557] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor.0: path /root/syzkaller-testdir2132539473/syzkaller.xnYT3c/5/bus: directory fails checksum at offset 24576 [ 305.250686][T10615] 9pnet: Insufficient options for proto=fd [ 305.268273][T10557] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 305.283890][T10557] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor.0: path /root/syzkaller-testdir2132539473/syzkaller.xnYT3c/5/bus: directory fails checksum at offset 26624 [ 305.302103][T10557] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 305.318128][T10557] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 305.333991][T10557] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:389: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 305.362458][T10613] EXT4-fs (loop1): inodes count not valid: 0 vs 32 [ 305.426625][T10613] overlayfs: failed to look up (file1) for ino (-5) [ 305.621566][T10632] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.628396][T10632] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.635875][T10632] device bridge_slave_0 entered promiscuous mode [ 305.642763][T10632] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.649579][T10632] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.657248][T10632] device bridge_slave_1 entered promiscuous mode [ 305.712006][T10634] FAT-fs (loop1): Unrecognized mount option "codepage=<66" or missing value [ 305.729252][T10632] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.736108][T10632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.743363][T10632] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.750174][T10632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.789290][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.811568][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.818666][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.842285][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.850371][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.857195][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.866190][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.874304][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.881137][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.982554][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.990344][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.186794][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.234441][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.268880][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.282439][T10641] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.289356][T10641] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.297342][T10641] device bridge_slave_0 entered promiscuous mode [ 306.308673][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.321174][T10641] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.327997][T10641] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.335994][T10641] device bridge_slave_1 entered promiscuous mode [ 306.346220][ T833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.361102][ T13] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 306.446640][T10648] xt_hashlimit: size too large, truncated to 1048576 [ 306.461804][T10648] xt_hashlimit: overflow, try lower: 0/0 [ 306.588292][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.601579][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.619558][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.628436][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.636612][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.643442][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.656073][T10658] EXT4-fs (loop4): inodes count not valid: 0 vs 32 [ 306.662985][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.671680][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.688550][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.695386][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.711221][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.718745][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.726921][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.745364][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.751197][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.764662][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.774292][ T13] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 306.783077][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.801361][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.801664][ T13] usb 2-1: config 0 descriptor?? [ 306.818339][T10658] overlayfs: failed to look up (file1) for ino (-5) [ 306.855063][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.880354][T10663] 9pnet: Insufficient options for proto=fd [ 306.887841][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.896834][ T1343] device bridge_slave_1 left promiscuous mode [ 306.902799][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.910152][ T1343] device bridge_slave_0 left promiscuous mode [ 306.916865][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.036476][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.125812][T10661] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.145585][T10661] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.160965][T10661] device bridge_slave_0 entered promiscuous mode [ 307.175103][T10670] 9pnet: Insufficient options for proto=fd [ 307.175166][T10661] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.190707][T10661] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.203902][T10661] device bridge_slave_1 entered promiscuous mode [ 307.292533][ T13] hid-led 0003:27B8:01ED.002C: unknown main item tag 0x0 [ 307.362423][T10661] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.369275][T10661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.376379][T10661] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.383149][T10661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.511260][ T13] hid-led: probe of 0003:27B8:01ED.002C failed with error -71 [ 307.521371][ T13] usb 2-1: USB disconnect, device number 17 [ 307.541557][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.549234][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.557995][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.592272][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.600320][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.608948][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.617667][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.824920][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.834889][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.850672][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.868334][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.885772][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.895513][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.920406][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.930612][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.939266][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.948107][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.036319][T10681] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.049573][T10687] FAT-fs (loop3): Directory bread(block 64) failed [ 308.056079][T10681] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.063731][T10681] device bridge_slave_0 entered promiscuous mode [ 308.069904][T10687] FAT-fs (loop3): Directory bread(block 65) failed [ 308.077618][T10687] FAT-fs (loop3): Directory bread(block 66) failed [ 308.084478][T10687] FAT-fs (loop3): Directory bread(block 67) failed [ 308.090878][T10681] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.097771][T10687] FAT-fs (loop3): Directory bread(block 68) failed [ 308.104376][T10681] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.111528][T10687] FAT-fs (loop3): Directory bread(block 69) failed [ 308.118473][T10681] device bridge_slave_1 entered promiscuous mode [ 308.126219][T10687] FAT-fs (loop3): Directory bread(block 70) failed [ 308.132763][T10687] FAT-fs (loop3): Directory bread(block 71) failed [ 308.139361][T10687] FAT-fs (loop3): Directory bread(block 72) failed [ 308.215759][ T1343] device bridge_slave_1 left promiscuous mode [ 308.221138][T10687] FAT-fs (loop3): Directory bread(block 73) failed [ 308.231173][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.241491][ T1343] device bridge_slave_0 left promiscuous mode [ 308.247444][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.362719][T10699] 9pnet: Insufficient options for proto=fd [ 308.388932][T10695] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 308.396274][T10695] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 308.428373][T10706] xt_hashlimit: size too large, truncated to 1048576 [ 308.441116][T10706] xt_hashlimit: overflow, try lower: 0/0 [ 308.458338][T10695] F2FS-fs (loop1): Found nat_bits in checkpoint [ 308.500608][T10697] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.507464][T10697] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.517211][T10697] device bridge_slave_0 entered promiscuous mode [ 308.524271][T10697] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.530800][T10695] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 308.531453][T10697] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.538879][T10697] device bridge_slave_1 entered promiscuous mode [ 308.545504][T10695] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 308.556471][T10719] FAT-fs (loop3): Unrecognized mount option "codepage=<66" or missing value [ 308.593998][T10709] attempt to access beyond end of device [ 308.593998][T10709] loop1: rw=2049, want=45104, limit=40427 [ 308.722105][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.729714][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.763509][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.772021][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.779974][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.786904][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.794594][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.802900][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.810810][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.817626][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.837997][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 308.860132][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 308.868957][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.877694][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 308.886014][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.900916][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.908970][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.921224][ T124] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 308.944802][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.953331][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.961574][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.968392][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.975787][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.983962][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.992027][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.998847][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.022897][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.030243][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.039262][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.048466][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.057698][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 309.089803][T10723] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.099387][T10723] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.107163][T10723] device bridge_slave_0 entered promiscuous mode [ 309.115334][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 309.123775][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 309.125576][T10729] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 309.154910][T10723] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.161893][T10723] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.162087][T10729] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 309.169471][T10723] device bridge_slave_1 entered promiscuous mode [ 309.184959][T10729] xt_TCPMSS: Only works on TCP SYN packets [ 309.195578][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.203651][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 309.215072][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 309.231265][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 309.239909][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 309.248917][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 309.257688][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 309.281168][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.294589][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.304614][ T124] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 309.313489][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.322629][ T124] usb 4-1: config 0 descriptor?? [ 309.327514][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.348819][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 309.384191][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready serialport: VM disconnected.