last executing test programs: 33.422756097s ago: executing program 2 (id=233): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@discard}, {@grpjquota}, {@errors_remount}, {@lazytime}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x8, 0xffffffffffffffff, 0x0, 0x2000000009500}, {0xffffffff, 0x0, 0x6, 0xa, 0x0, 0x4}], ['\x00']}) 33.311820152s ago: executing program 2 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2f, 0x25dfcbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xfffffff8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40104}, 0x0) 33.215111247s ago: executing program 2 (id=241): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000100)={0x244887000, &(0x7f00000002c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 33.027481006s ago: executing program 2 (id=249): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) 32.913088251s ago: executing program 2 (id=253): getrandom(&(0x7f0000200000), 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='4', 0x1) 31.413627972s ago: executing program 2 (id=272): personality(0x60000a) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x344000, &(0x7f00000002c0)={[], [{@appraise_type}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext3\x00'}}, {@euid_lt}]}, 0x9b, 0x50c, &(0x7f0000000c40)="$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") 31.413562402s ago: executing program 32 (id=272): personality(0x60000a) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x344000, &(0x7f00000002c0)={[], [{@appraise_type}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext3\x00'}}, {@euid_lt}]}, 0x9b, 0x50c, &(0x7f0000000c40)="$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") 12.264410083s ago: executing program 3 (id=973): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2058015, &(0x7f0000000180), 0x3, 0x57b, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 12.066130652s ago: executing program 3 (id=979): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 11.860980942s ago: executing program 3 (id=981): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x54a, &(0x7f00000005c0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x40) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 11.832363623s ago: executing program 3 (id=982): syz_mount_image$f2fs(&(0x7f0000002100), &(0x7f0000000340)='./bus\x00', 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x208481, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) 11.531578687s ago: executing program 3 (id=985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x5) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000580)) 11.016887751s ago: executing program 3 (id=993): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4d) 11.016842691s ago: executing program 33 (id=993): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4d) 842.83608ms ago: executing program 4 (id=1322): ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000500)={{}, "b706fc41cb1a92a5e2ab18e89ad486023ad121c9ea70fa249ee8f9b4a7a48361051d5c7f7fb143e7ee27ee66cf458fe23d9dea19dba139e9b3797d6f3dcace905d563e41399436c2c264fe2fed9b354be4200e2b80bb847f3a63e52f4236e448d3bad67dce9acadc8bac9d8658ef31e8e561ea9c5647996c76e147da3e3f46deddc1b99e24b0f39da07275add72375fba252a938ea85f165c36171cd210caf75b8b0060b6f63ebf311328d9aec7e142f06936d53e2f335f9beefd8e776b09ec0cc7863a4e9f62bd36708546164d52ab631efb6dda9aaa6706f16dd5d47d4482d53d53a6fba84578431c3781b9e638906241e23b13385f66cbfc7422d20775f0a0a99e4e0225b28d39f1851d22f78745a2f48bd0a19785b66746fcec00a1d2a091db236c237528513fc61a44d6bf4a3e21e4bda3df05fd43340a1a61f29b38cc1d0d7a4d7121f42311327e8039f6886e878b27541aadd635aabbd8f15bf64012b008449eb61299f939d6a37789aade0fe7472cfdf6de3d5bffb59ace5ae2cdf39ed1c62c693cf1bd33b3636268d744c1a8a78c5278e5a02a70eeadfbcddcc192479f6f0b6f5e84bc7fd3aae1e79e862a885597d8fff9c3a43216b58be0abf12f28147f3efd483317579eae6c3f15dede690101203ac7693084cf066640b9e848b854eb9b85887a33a14407d37c31c3a705fb9ca0df480b54ce136085dc0d26b3e0c3beb7b3621bab3296d367e663779f09a628a7d9146e320ec416d58bdc551abf85caa2f106c16bb16bfdd5bcc9084e4dc8160c64910ddb1f55b62a922fcce68c473c666ac605c7219c4a7b97068d06dede4c1f38c288fcc92f904e52966063def74f3405c3d834505c4a529ea45673bfd224e345c5c4d3d7c961edf1c1e0ee51cd1f24e91b1cac3e6e9c07c2b3d0e1dd6d7353d67cdb8ce4db8a574f05c05a971c9b9ffbbc41dc40c0c1acc581218fe44872171727a67862ae269f0545e3035635bd64b2ac979c5f0bff2b0ad3ca8f7546be349376df0a757c0c42402383bcba74aae36b3a013337bc29d3d87809927de2e87a43e49ed679b860e9f437291f22066c43a70e073c77e6ed0f5dcd40172d2798fce6e6c1a79a30254ad2f05f84669fd077474bc1a4a2940a3d22ee77c839baf3954d9b7dc85d2f31d253014bed8ba16f01b4ba1950f746d76000cab03f287e724faeba2cd1b395bf1c830cf73da07d1c5e44fb4fc2fe4e3cb345e9ec03586ad7f0db9b7a3f8b5d485af47144f84ee33e48587e1704a9f21e48ad3c0002c31f60ee2ae65e40b648c08e92fb7fedef47bae485caafeccf636bb44dc77457d5be60b64dd1e1fc8819b22d931593e18838e73839a110e04f0625a049e345da5a8323b442eff89751f9da5a0dd8c769513b632771853412bdd8ee751994e53c5436d723d90b647221d5a7e7a0aa1a4131ecfe57c8d8a11eaa14aa48887a61b174b9ef5c4d7ab249533d62ddab4eec783b9c5686352a0e2946389c5460a1dec89567b01b4eb07c5663b90a5ae70b27301d1556791dc7df1f1c64f2be0416a851e918423e59b01ed76457ccb37d378ea0f2e72635b1ca656f68970da58ffaabf0d3c924e562a32d5e871523b89f9b049b99231dc907acf73b9b792305140cbf92b064ffa2e95659265a501cb0686a128c59ff75cba430ad7fecf0c4579520025ebc3b66e3a71eb7691c5fb1ce4aae2b534f24f2767a16164258d27c50c1f98943b3bd1c2d0e0e84f8a9b0f417723ac1a79769b80cdf5f9c36f5edf19d0ddebaa4c6c49f39a45d0218ee38202d8ae9ef8c48ffd6d2d01ad7a532e3827d68d229fe99b404157f6f4103bcd0b3af8e6b7dc7f7222e9208e507014542587db175ce61bef9d0ea0d14247395527aec87e45e893d305b1b554fe3a4029d9ce2c2f0ada523059faa6dbcae48d77d4ef6e53d25da68456bf94c60fc96be51571a80bd5eabc88bd40d2c83720f9f9dd1d095df8f0290b4406c312447cff2914246a717634e568cb86b647575545add5b86066ffa3b341f76a46cf2b7407d31c02d7b28a94afadc4f2485d1026105ac1d47648c5da2dbc889abdef6d1b5b74912f7a826b173be2725de01f445919f912d70c216e1d836f1f5649b25033eeac7f99143724d94b70847d2f32da0427fc67c84988dcca9ec81b914f44449d18c59fc7de4ff31c53ab9a614b4c2076fcef5112582fcc3b23770fc3dc6904f9019d2810d82d435c85b1ae66181f17c58fb1fac564678df1fad1211526f3126d25c73c794816d20b2c014642426b9c20589ba753d8ced31df82215d58730ecb485d71b5c76156feaa9447a1a973feaa4fc4212f02597d358a482f1219272aacb8383bf232726498147a40cf8f1cad8abb78fcec3951ce577063bd05d623339481b95d9b6f9caec1d353865dd0548bca1b9839e53d5509c99c221101f0eeeb307af813419d42008d217bf0bdec4efc5568caeb01a292bcc24aa6dbe02d7b093fe11ac296417d81a9923d26a4decae45b5d9ef778620b65fe97943cc3ec1390ad9d33442e01a49aec78e553756023bbbd56213e18472c005270fa3d20203acb1450324b45e31f1c40876f43adfa4c4b88f9410df9f338547bdd320327b5c11e287246fcbcaa25012da5e43c4bc5af715a151a8c91427e70e969b2a6f7344efe6ef4f90c27ee1fa6dbdb838636dcb7c402882911214432ef1ee5ccb2e9aa8e8b0fff921caed08827dee47419092f2d4bae420ab3287a26d0fdd544d55c24cf00518d5905efbf29ff737a75f3576392d17c7c0f0844809cc2892a28bf7f9a314112887cff5475faa3a59227f62e3e7450ead018d9e3e76cc1131dd5bc6cef1096cc47fa1d21a8b9f5fb28c75f3754a2e06d8ace6648acb167ccedb1a3cb01d17234c88f5f24f38aa4a0f963d35159cd1601b349408b929df23db8417eff44570561649f4435b07ddd841098100b2214705ca3f16fbc17f9f0e4877954b8392f4f8a73c14a9f3d7575e932d579e61ae36150a838b3714537e1bb0a379d514009e942d66f070a8641b046241358cbac06566e3dfa0a21badad359034c7fc3fd6d07542c5aaa1eb41868a77a00b3146bac0ae40b0f3e62f55957378c06956b7850542dfac5c257a9d74793cdf9b90972ee8115db37ce436c9c6bcf05abc34bda725e29d9fdc4cfb5d79b6d1d71ca68f388db90d6a9ac01bde3203dedb14a1f55592109231c0b1c665c04d59d6ea54b799cab524544e656737701665ed5dd356a88477216e859c5e55b734b10640f841f8d9b9ddd02749c79fd5440c30a75d430350d90f9c69adddda32b23a9a90f6b4e40bc6e3c5f90e6c86d40282aec884d863b5461777697b129a9a39321ae1e33732d8aad197b39acaa93740d8d6fa965f9bb910e93fc66c525d0246aa06dacfd84fbc73f7404774e2686943130514388f6671aa6a0794fed40c72b5ab856ea7a0048f5f0952a54ad57089445e97d2878d579d47d2af7bbe89806770d2bb8525b1af9aa6938776704d62ac0b14664e0ed48715d861ee76fac63137837528bd290039e74d642fb1f08f294f67139c05b74f77e98cb22e3588c89d5c214b206ca693ca0f77303d63475334749ea2a72cada0a89ee38ab5b24a57072ea8bec423d30c83c04b3812f3cda62b7d4ad73dfe3a9b56090140acc66fa872da2e668c938a458812fdda9c3ba724aaeb648f96605fe8be51cf468598139a0ce6868ff8a13dcf07698df2fddcf346291668154c5692004f552532c68903d274f446d7150c0f3231fbd5447e477f953281ddcbc1f5cf1548a6d3bdeb84a37cc040aa4d9506c75ad76c3cea8003567e731aba2d41d0f23a94fc379b1dfc98212ccf1c72b5363436c46ca8cb5ee79012089b18134b919a264f44c80d83f81ed468660e4d4af208cf39eef8b8019191a87467c8b73d24fd00d0ae29130ed19d3216b4c6071fce4b710f25293da61564dd5e11d4e2b477232b980cef248c63dee5c8adb07d3d37c4db89bafc97079ae9131ec31e027bf9e07a31655eea145fee2a1fe24e21f4e48d73290f176cdb6de14ddb76b90a7a2d89e0d799a42f9a4e020ce5f8453a7aea18f9b274752494eaff4a0b234b74eccbf7e6537f8bfc779a3b48fd5ec86e5644988ada0833f65a0f51a2a7b800777e724f13820b0b72ad2c2559c7e4bc775bb7aab3210e8a98b7faf02a50c2c358151ade2a0f1d83b453fb15f018ad4cd50f250825123ecdce4fb8c642586da7f36c4b96d0f0d556e791ca3aed144e461eed1b69e9e3c33b0855f8da873dab7a146182816f40e458004c00659d1b2a124e26e4c5018f2fb87cb859a60dbb5b125edaa65ba20f57f7d8b9649ee445cee39067da28d2c63fa0779bfdb04091d4c216cc4c0c4bf0621bea0d02601a4ba13847c0a5f919627fca8d9c05ef177a87f6ea27ab34045cb6c146a163357eaafdc1d97620c153f04fc9e292e2a23681849aec66278bc19795ff2ad6de420779b4e11097c0d77ba79fb79def454166c54735066c90e0ee94db49e0bcc9b8c47dd61e8d0a09b7d82680e5a8ad5551d0452b7452d8bba06904f0541030ca95fc10d651bbfa53e9e6939d10819046423f0680c3992ca125577a38719458528a3a379e44bdff7c7dc7cbc51ad42f115f6c6ff11a0714bc31b190b681278df8749bc8e8f80f1a28dd59dc7dced903a27fd9b8d657541e181f59fec6cbd678517ad2ddd8cdc7940edd200fb72256c04977a7805ee12f21010178168e4d246fbad218a69f210c09d51b463ae91b1d7b9eaad5811459756cbda5c9c78c93d95e393805cc408e15b8721d442985f4685b054193907edf7650994c5a60df74564570c76ae43101d8242a02157b942c06c5c0f260ca97b75c09783a09e1058accfcde6f6149136929eafa0309feac48254d9d17943a36e099bb93e98f72cbaf80f6b06136c88a66ef3df1b452dd7a15e8fb3015a1205c4b3e87f13a3d651e9a871ccb8f3f9dceee19dec42bff60ae2ecba4a9f532f33715c3304f9000d3d737c700546a27512b6976bfbf7052bf1b4e38227d23c45e8b400e2af952ec765f3122d51992978705ab6679263d3298cc951b8e3f94d33f85cb3a132adecdf6659eb320fa378bf5c67dcf4a8aebe43c5297a21c4a4110c420b4828f8b445c2b92ea671ee13cc6ff94627f5a31bf35f97f094b320447f460de9e68bc14152c9b215eadcdfaea8661730f4751786c129a00570f54f6b1583ea648ce253176f377977e390825da3e0103de770103919d89ab9226d2ebf6e9e83ffe91d51ffe5fc0bff2e988821cc191fb1056ba7ce7d9df3bae426298e6e2ba6377cc16c8b24ce7dca5ecc73d378e55016ce2fe5f6de1dd1cbc89cc5d325587d3d55ba9beb3c0dbaa8eea955d6e720912c520cce827b680b87fe51d5124b053c67d42315f287543142b7f03b77a349baf473a6114dfe68a86e1c169175999174a9fd7079f7eb86a0a61ed6d197acb728442cbb691f2aa921039cdc48067a67d10ce928b7c3b7c9bbd79249b91e509f8bc30ceaa6ce420d9fa6bee0a9dbaf59c57e980987a8bbefbc556829dacd724cd2ea63377993525e4bd771ff744a16ae543a2304952f182a0e724c6c9260e57f75fb251a34177b0dd93b4fad8b3fb5c525b794a35a7cd592a1c84f0600af1c22a7754b703f36328e5b4284eefc916ac40717260f006d647b85492f4b22903ca14bc3b9cf719dd2de014e36aacb99d01260c5e765b38694ee667e9b9683cbf7b68f1fdc055adc8b16c23cfdb88"}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x40, 0x40, 0x41, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000008c0), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 808.889672ms ago: executing program 4 (id=1324): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000001980)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@gid}, {@discard}, {}, {@gid}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0x80000000}}]}, 0x1, 0x154a, &(0x7f0000000400)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1f7) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) 769.228134ms ago: executing program 1 (id=1326): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000280), 0x0) 767.516264ms ago: executing program 5 (id=1328): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) 685.028757ms ago: executing program 1 (id=1329): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000008c0)=""/146, 0x92}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000600)=""/152, 0x98}, {&(0x7f0000001400)=""/97, 0x61}], 0x5}, 0xe9}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 640.09921ms ago: executing program 1 (id=1332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xa, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x46}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 589.397972ms ago: executing program 4 (id=1333): unshare(0x28000600) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) 549.325754ms ago: executing program 0 (id=1334): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000011c0)={[{@utf8}, {@fat=@dos1xfloppy}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@debug}, {@fat=@check_normal}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@numtail}, {@uni_xlate}, {@utf8no}, {}, {@shortname_mixed}, {@rodir}]}, 0xfd, 0x2bd, &(0x7f0000000600)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 548.344234ms ago: executing program 1 (id=1336): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88800, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 509.540016ms ago: executing program 0 (id=1337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="06"], 0x1c}}, 0x20024090) 439.129599ms ago: executing program 1 (id=1338): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x1, 0x0, 0xe0, 0x42, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5, 0x2, 0x0, 0x0, @multicast2, @rand_addr=0x64010102}}}}}}, 0x0) 381.177132ms ago: executing program 5 (id=1340): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x80802, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) 381.050212ms ago: executing program 4 (id=1341): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendto$inet6(r0, 0x0, 0x0, 0x90, &(0x7f00000001c0)={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x18) 380.275612ms ago: executing program 0 (id=1342): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f00000025c0)=0xfffffffffffffdaa) 366.893323ms ago: executing program 0 (id=1343): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x4, 0x3, 0x6, 0x7, 0x0, 0xfffffffd, 0xf2c}, 0x1c) 360.566403ms ago: executing program 4 (id=1344): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f00000022c0)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280000000000000029000000040000003c0102000000040200020401"], 0x28}, 0xc0) 293.660886ms ago: executing program 5 (id=1345): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000700)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x13, @multicast2}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)={0x8, {{0x2, 0x4e23, @multicast1}}, 0x1, 0x1, [{{0x2, 0x4e21, @rand_addr=0x64010100}}]}, 0x110) 270.425567ms ago: executing program 0 (id=1347): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000040)={0x200002, 0x200003, 0x6, 0x4, 0x7, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 237.904119ms ago: executing program 5 (id=1348): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB=',-'], 0x31) 237.732969ms ago: executing program 6 (id=1349): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x8000000000000000, 0x12) 236.797949ms ago: executing program 0 (id=1350): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804880, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="81257fdf8e659a4c9e0c24dea6203b6ee59ce2c2ec413618075d542835223c68fc908be2c7324f403d1d0e703bc3e4272679b25a"], 0x10, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ftruncate(r0, 0x4a8e) 198.264211ms ago: executing program 5 (id=1351): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002000)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x7f) 197.929431ms ago: executing program 6 (id=1352): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xf}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 197.294231ms ago: executing program 5 (id=1353): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6e616d656361736500000000696d655f6f66667365743d3078303030303030303030304a30303030342c646d61736b3d3030303030303030303030303030303225f2bec26a30352c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c646973636172642c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030342c696f636861727365743d69736f383835392d31352c6e616d6563f15c6173653d312c616c6c6f775f7574696d653d30303030303030303030303030303030303030303230352c00"], 0x1, 0x153b, &(0x7f0000001f80)="$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") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x20004842}, 0x0) 141.604513ms ago: executing program 6 (id=1354): unshare(0x2040400) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) 140.675473ms ago: executing program 6 (id=1355): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) waitid(0x1, r0, 0x0, 0x4, 0x0) 54.965667ms ago: executing program 6 (id=1356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000021000000100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x10001}}]}, 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) 54.765847ms ago: executing program 6 (id=1357): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1100000000000000", @ANYBLOB="c60b2f81"], 0x18}, 0x2000c8d0) 9.87766ms ago: executing program 4 (id=1358): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0fc5:1227:jm', 0xc) 0s ago: executing program 1 (id=1359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0x10000, 0x4, 0x9, 0x94, 0xe4, 0x40, 0x7, 0x0, 0x1, 0x16}, {0x200000, 0x26000, 0x41815281aecbad47, 0x0, 0x26, 0x5, 0x7d, 0x3, 0x5, 0x3, 0x3}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xd000, 0x9, 0x6, 0x8, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xc000, 0x8, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x1000, 0x2, 0xc, 0x4, 0xb1, 0x8, 0x23, 0x81, 0x80, 0x0, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x3c, 0x6, 0x1, 0x72}, {0xd000, 0x1000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x5}, 0x4004003f, 0x0, 0x8000000, 0x2024, 0xc, 0x500, 0x0, [0xe88, 0x6, 0x7c, 0xfff]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. [ 21.258662][ T24] audit: type=1400 audit(1790051407.339:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.259689][ T271] cgroup: Unknown subsys name 'net' [ 21.281319][ T24] audit: type=1400 audit(1790051407.339:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.308535][ T24] audit: type=1400 audit(1790051407.369:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.308686][ T271] cgroup: Unknown subsys name 'devices' [ 21.455544][ T271] cgroup: Unknown subsys name 'hugetlb' [ 21.461219][ T271] cgroup: Unknown subsys name 'rlimit' [ 21.597686][ T24] audit: type=1400 audit(1790051407.679:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.620951][ T24] audit: type=1400 audit(1790051407.679:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.645721][ T24] audit: type=1400 audit(1790051407.679:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.695060][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.703829][ T24] audit: type=1400 audit(1790051407.779:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 21.729237][ T24] audit: type=1400 audit(1790051407.779:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.779423][ T24] audit: type=1400 audit(1790051407.859:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.804928][ T24] audit: type=1400 audit(1790051407.859:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.804950][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.241996][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.249134][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.256586][ T282] device bridge_slave_0 entered promiscuous mode [ 22.271858][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.278989][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.286360][ T282] device bridge_slave_1 entered promiscuous mode [ 22.313749][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.320855][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.328328][ T280] device bridge_slave_0 entered promiscuous mode [ 22.336793][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.343816][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.351158][ T280] device bridge_slave_1 entered promiscuous mode [ 22.386833][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.393871][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.401302][ T281] device bridge_slave_0 entered promiscuous mode [ 22.409290][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.416357][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.423688][ T281] device bridge_slave_1 entered promiscuous mode [ 22.459874][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.466932][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.474291][ T284] device bridge_slave_0 entered promiscuous mode [ 22.483390][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.490459][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.497731][ T284] device bridge_slave_1 entered promiscuous mode [ 22.530519][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.537609][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.544977][ T283] device bridge_slave_0 entered promiscuous mode [ 22.551671][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.558838][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.566147][ T283] device bridge_slave_1 entered promiscuous mode [ 22.660679][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.667746][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.675041][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.682054][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.719877][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.726938][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.734187][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.741200][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.750340][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.757595][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.764861][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.771871][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.781001][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.788059][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.795325][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.802373][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.825354][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.832567][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.840324][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.847783][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.855109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.862527][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.869796][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.877110][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.884397][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.897891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.905412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.912778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.921043][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.928087][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.935870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.944224][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.951239][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.973714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.982044][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.989087][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.996758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.005400][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.012412][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.019806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.027709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.051737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.059223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.067528][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.074587][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.082634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.090841][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.097883][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.117596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.125025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.132876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.143012][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.150062][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.157771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.165961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.174088][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.181131][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.188611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.205313][ T282] device veth0_vlan entered promiscuous mode [ 23.212636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.220981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.229976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.237683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.245444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.258470][ T284] device veth0_vlan entered promiscuous mode [ 23.271437][ T282] device veth1_macvtap entered promiscuous mode [ 23.278598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.286727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.295129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.303051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.311123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.319334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.327277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.335309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.343338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.351008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.358470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.366264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.374416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.387870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.396302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.404844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.412188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.420227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.428619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.436903][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.443906][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.451344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.459627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.467936][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.474957][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.482379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.493877][ T283] device veth0_vlan entered promiscuous mode [ 23.505386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.513285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.521408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.528996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.541329][ T284] device veth1_macvtap entered promiscuous mode [ 23.552342][ T283] device veth1_macvtap entered promiscuous mode [ 23.559441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.567865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.576930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.585296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.593354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.600989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.609278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.617671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.625769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.633659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.642017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.650159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.658451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.666485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.681982][ T280] device veth0_vlan entered promiscuous mode [ 23.692743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.701067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.709733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.718496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.726847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.735147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.743329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.751447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.759552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.767372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.784505][ T280] device veth1_macvtap entered promiscuous mode [ 23.797866][ T281] device veth0_vlan entered promiscuous mode [ 23.804900][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 23.815026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.823154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.831731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.839380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.847653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.856151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.864534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.873161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.881382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.889816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.897696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.905681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.913053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.926273][ T282] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.950402][ T281] device veth1_macvtap entered promiscuous mode [ 23.964618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.973969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.983210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.992980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.001336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.009586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.017840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.025526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.033728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.042194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.050398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.066112][ T308] netlink: 'syz.0.6': attribute type 11 has an invalid length. [ 24.073740][ T308] netlink: 3653 bytes leftover after parsing attributes in process `syz.0.6'. [ 24.099332][ T312] capability: warning: `syz.3.7' uses 32-bit capabilities (legacy support in use) [ 24.175543][ T328] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=328 comm=syz.4.13 [ 24.300703][ T353] raw_sendmsg: syz.0.21 forgot to set AF_INET. Fix it! [ 24.347540][ T350] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 24.385216][ T355] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000005,errors=remount-ro,sysvgroups, [ 24.413992][ T355] EXT4-fs error (device loop3): ext4_ext_precache:607: inode #2: comm syz.3.25: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 24.480282][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.487527][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.497608][ T355] EXT4-fs (loop3): Remounting filesystem read-only [ 24.530681][ T310] EXT4-fs error (device loop4): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 24.545291][ T310] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 24.559100][ T310] EXT4-fs (loop4): This should not happen!! Data will be lost [ 24.559100][ T310] [ 24.604276][ T310] EXT4-fs (loop4): Total free blocks count 0 [ 24.631906][ T310] EXT4-fs (loop4): Free/Dirty block details [ 24.644333][ T385] device wireguard0 entered promiscuous mode [ 24.654244][ T310] EXT4-fs (loop4): free_blocks=4096 [ 24.659509][ T310] EXT4-fs (loop4): dirty_blocks=512 [ 24.669123][ T390] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 24.674129][ T310] EXT4-fs (loop4): Block reservation details [ 24.702273][ T310] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 24.766360][ T408] capability: warning: `syz.3.46' uses deprecated v2 capabilities in a way that may be insecure [ 24.784135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 24.940361][ T443] netlink: 'syz.1.63': attribute type 3 has an invalid length. [ 25.004508][ T461] netlink: 64 bytes leftover after parsing attributes in process `syz.3.70'. [ 25.169045][ T476] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 25.287325][ T478] F2FS-fs (loop4): Found nat_bits in checkpoint [ 25.310996][ T478] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 25.390099][ T283] attempt to access beyond end of device [ 25.390099][ T283] loop4: rw=2049, want=45104, limit=40427 [ 25.420953][ T506] mmap: syz.1.87 (506): VmData 38731776 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 25.434151][ T499] erofs: (device loop3): mounted with root inode @ nid 36. [ 25.453957][ T499] ------------[ cut here ]------------ [ 25.470480][ T499] WARNING: CPU: 0 PID: 499 at fs/iomap/direct-io.c:451 __iomap_dio_rw+0xd4d/0x1070 [ 25.506777][ T499] Modules linked in: [ 25.510742][ T499] CPU: 1 PID: 499 Comm: syz.3.85 Not tainted syzkaller #0 [ 25.530839][ T499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.566431][ T499] RIP: 0010:__iomap_dio_rw+0xd4d/0x1070 [ 25.578554][ T499] Code: 89 7d a3 ff 45 85 f6 4c 8b 6c 24 08 78 0a e8 ca 79 a3 ff e9 97 fb ff ff 4d 63 f6 e8 bd 79 a3 ff e9 e1 f8 ff ff e8 b3 79 a3 ff <0f> 0b 48 c7 c3 fb ff ff ff e9 e3 f8 ff ff e8 b0 e7 bb 02 44 89 f9 [ 25.623499][ T499] RSP: 0018:ffffc90000ed7920 EFLAGS: 00010283 [ 25.649163][ T499] RAX: ffffffff81c13afd RBX: ffffc90000ed7bd0 RCX: 0000000000080000 [ 25.662728][ T499] RDX: ffffc900030d2000 RSI: 000000000000003d RDI: 000000000000003e [ 25.672761][ T526] device vlan2 entered promiscuous mode [ 25.684093][ T526] device bridge0 entered promiscuous mode [ 25.691527][ T499] RBP: ffffc90000ed7ab8 R08: ffffc90000ed7a27 R09: ffffc90000ed7a00 [ 25.701618][ T499] R10: dffffc0000000000 R11: fffff520001daf45 R12: 0000000000001000 [ 25.720306][ T499] R13: 1ffff920001daf3c R14: dffffc0000000000 R15: 0000000000000000 [ 25.734074][ T499] FS: 00007f73729c46c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 25.763281][ T499] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.773370][ T499] CR2: 000000110c2fc1e1 CR3: 0000000112e9a000 CR4: 00000000003506a0 [ 25.802702][ T499] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.819786][ T499] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.834086][ T499] Call Trace: [ 25.837434][ T499] ? preempt_schedule_common+0xbe/0xf0 [ 25.844058][ T499] ? preempt_schedule+0xbc/0xd0 [ 25.848973][ T499] ? schedule_preempt_disabled+0x20/0x20 [ 25.855012][ T499] ? iomap_dio_complete+0x6b0/0x6b0 [ 25.860444][ T499] ? iov_iter_alignment+0x186/0x660 [ 25.866633][ T499] iomap_dio_rw+0x35/0x80 [ 25.871005][ T499] erofs_file_read_iter+0x27b/0x2f0 [ 25.874338][ T536] ====================================================== [ 25.874338][ T536] WARNING: the mand mount option is being deprecated and [ 25.874338][ T536] will be removed in v5.15! [ 25.874338][ T536] ====================================================== [ 25.876438][ T499] do_iter_readv_writev+0x477/0x5f0 [ 25.907330][ T499] ? generic_file_rw_checks+0x2a0/0x2a0 [ 25.912881][ T499] ? security_file_permission+0x83/0xa0 [ 25.918586][ T499] ? rw_verify_area+0x1c0/0x360 [ 25.923445][ T499] do_iter_read+0x168/0x5d0 [ 25.928016][ T499] ? import_iovec+0x7c/0xb0 [ 25.932542][ T499] do_preadv+0x233/0x390 [ 25.936832][ T499] ? vfs_writev+0x530/0x530 [ 25.941360][ T499] ? __x64_sys_futex+0x100/0x100 [ 25.952007][ T499] ? ____fput+0x15/0x20 [ 25.956247][ T499] __x64_sys_preadv2+0xd7/0x100 [ 25.961098][ T499] do_syscall_64+0x31/0x40 [ 25.965561][ T499] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.971450][ T499] RIP: 0033:0x7f7373f6b159 [ 25.976054][ T499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.995693][ T499] RSP: 002b:00007f73729c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 26.004138][ T499] RAX: ffffffffffffffda RBX: 00007f73741f2fa0 RCX: 00007f7373f6b159 [ 26.012119][ T499] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 26.020176][ T499] RBP: 00007f737400206b R08: 0000000000000000 R09: 0000000000000000 [ 26.028319][ T499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.038658][ T499] R13: 00007f73741f3038 R14: 00007f73741f2fa0 R15: 00007ffc131a6c78 [ 26.050074][ T499] ---[ end trace c8c5a5dd381a7710 ]--- [ 26.062857][ T536] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 26.225596][ T516] F2FS-fs (loop4): invalid crc value [ 26.258192][ T516] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.302897][ T516] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 26.316103][ T24] kauditd_printk_skb: 98 callbacks suppressed [ 26.316113][ T24] audit: type=1400 audit(1790051412.399:172): avc: denied { read write } for pid=567 comm="syz.3.112" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.345691][ T24] audit: type=1400 audit(1790051412.399:173): avc: denied { open } for pid=567 comm="syz.3.112" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.351340][ T570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 26.368894][ T516] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 26.423184][ T24] audit: type=1400 audit(1790051412.469:174): avc: denied { ioctl } for pid=515 comm="syz.4.92" path="/17/file1/file1" dev="loop4" ino=7 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.533300][ T578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 26.556040][ T578] netlink: 10 bytes leftover after parsing attributes in process `syz.2.119'. [ 26.565535][ T578] tipc: Invalid UDP bearer configuration [ 26.565555][ T578] tipc: Enabling of bearer rejected, failed to enable media [ 26.580052][ T584] netlink: 64 bytes leftover after parsing attributes in process `syz.1.118'. [ 26.620499][ T24] audit: type=1400 audit(1790051412.699:175): avc: denied { create } for pid=588 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.705005][ T24] audit: type=1400 audit(1790051412.719:176): avc: denied { write } for pid=588 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.819604][ T24] audit: type=1400 audit(1790051412.899:177): avc: denied { create } for pid=609 comm="syz.4.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 26.846604][ T603] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 26.856643][ T603] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 26.880927][ T24] audit: type=1400 audit(1790051412.899:178): avc: denied { create } for pid=609 comm="syz.4.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.914387][ T24] audit: type=1400 audit(1790051412.899:179): avc: denied { write } for pid=609 comm="syz.4.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.937528][ T24] audit: type=1400 audit(1790051412.899:180): avc: denied { nlmsg_write } for pid=609 comm="syz.4.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.959068][ T24] audit: type=1400 audit(1790051412.899:181): avc: denied { mmap_zero } for pid=611 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 27.297026][ T638] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 27.317686][ T638] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 27.347353][ T638] F2FS-fs (loop3): invalid crc value [ 27.387664][ T638] F2FS-fs (loop3): Found nat_bits in checkpoint [ 27.487124][ T638] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 27.499674][ T638] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 27.910696][ T667] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue [ 27.942659][ T667] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.992890][ T667] EXT4-fs error (device loop1): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 28.045870][ T667] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 28.088636][ T667] EXT4-fs (loop1): This should not happen!! Data will be lost [ 28.088636][ T667] [ 28.118162][ T667] EXT4-fs (loop1): Total free blocks count 0 [ 28.133984][ T667] EXT4-fs (loop1): Free/Dirty block details [ 28.142803][ T692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 28.149968][ T667] EXT4-fs (loop1): free_blocks=65280 [ 28.164064][ T667] EXT4-fs (loop1): dirty_blocks=1 [ 28.173669][ T667] EXT4-fs (loop1): Block reservation details [ 28.180087][ T667] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 28.215188][ T658] F2FS-fs (loop4): invalid crc value [ 28.230497][ T658] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.268861][ T658] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 28.280507][ T658] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 28.292820][ T646] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 28.324079][ T646] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 28.332464][ T283] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 28.333028][ T646] F2FS-fs (loop0): invalid crc value [ 28.342481][ T283] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 28.359996][ T283] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 28.369155][ T283] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 28.378332][ T283] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 28.387995][ T283] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 28.397025][ T283] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 28.397033][ T646] F2FS-fs (loop0): Found nat_bits in checkpoint [ 28.412290][ T283] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 28.421262][ T283] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 28.430518][ T283] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 28.439813][ T283] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 28.448859][ T283] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 28.457909][ T283] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 28.467275][ T283] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 28.476392][ T283] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 28.476401][ T646] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 28.476415][ T646] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 28.505259][ T54] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.744278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 28.765854][ T718] device erspan0 entered promiscuous mode [ 28.771684][ T718] device macsec1 entered promiscuous mode [ 28.784193][ T718] device erspan0 left promiscuous mode [ 28.883594][ T715] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 28.893998][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 28.914047][ T54] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 28.923867][ T715] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.944059][ T54] usb 3-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 28.953159][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.004622][ T54] usb-storage 3-1:1.0: USB Mass Storage device detected [ 29.209673][ T728] F2FS-fs (loop3): invalid crc value [ 29.254100][ T54] scsi host1: usb-storage 3-1:1.0 [ 29.274953][ T728] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 29.306452][ T711] F2FS-fs (loop1): invalid crc value [ 29.337888][ T728] F2FS-fs (loop3): Start checkpoint disabled! [ 29.347725][ T711] F2FS-fs (loop1): Found nat_bits in checkpoint [ 29.364795][ T728] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 29.467857][ T711] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 29.519790][ T15] usb 3-1: USB disconnect, device number 2 [ 29.571595][ T711] F2FS-fs (loop1): access invalid blkaddr:11220996 [ 29.578198][ T711] CPU: 1 PID: 711 Comm: syz.1.170 Tainted: G W syzkaller #0 [ 29.586780][ T711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.596829][ T711] Call Trace: [ 29.600129][ T711] __dump_stack+0x21/0x24 [ 29.604459][ T711] dump_stack_lvl+0x1a7/0x208 [ 29.609140][ T711] ? __bpf_trace_f2fs_fiemap+0x60/0x60 [ 29.614595][ T711] ? _raw_spin_lock+0x94/0xf0 [ 29.619268][ T711] ? show_regs_print_info+0x18/0x18 [ 29.624471][ T711] ? f2fs_init_extent_tree+0x7a0/0xc90 [ 29.629926][ T711] ? memcpy+0x56/0x70 [ 29.633909][ T711] dump_stack+0x15/0x1c [ 29.638062][ T711] f2fs_is_valid_blkaddr+0xc2f/0x1330 [ 29.643433][ T711] f2fs_iget+0x1a41/0x4af0 [ 29.647850][ T711] f2fs_lookup+0x419/0xd20 [ 29.652268][ T711] ? f2fs_encrypted_symlink_getattr+0x40/0x40 [ 29.658351][ T711] ? d_hash_and_lookup+0x1f0/0x1f0 [ 29.663461][ T711] ? __kasan_check_write+0x14/0x20 [ 29.668576][ T711] __lookup_slow+0x2b8/0x410 [ 29.673178][ T711] ? lookup_one_len+0x2d0/0x2d0 [ 29.678038][ T711] ? lookup_fast+0x316/0x740 [ 29.682629][ T711] ? __kasan_check_write+0x14/0x20 [ 29.687740][ T711] lookup_slow+0x57/0x70 [ 29.691981][ T711] walk_component+0x326/0x460 [ 29.696656][ T711] path_lookupat+0x155/0x430 [ 29.701245][ T711] filename_lookup+0x1fd/0x660 [ 29.706007][ T711] ? hashlen_string+0x120/0x120 [ 29.710870][ T711] ? getname_flags+0x205/0x510 [ 29.715634][ T711] user_path_at_empty+0x43/0x50 [ 29.720483][ T711] __se_sys_mount+0x2eb/0x390 [ 29.725162][ T711] ? __x64_sys_mount+0xd0/0xd0 [ 29.729930][ T711] ? ____fput+0x15/0x20 [ 29.734082][ T711] __x64_sys_mount+0xbf/0xd0 [ 29.738667][ T711] do_syscall_64+0x31/0x40 [ 29.743100][ T711] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.748977][ T711] RIP: 0033:0x7f2e62336159 [ 29.753369][ T711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.772951][ T711] RSP: 002b:00007f2e60d8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 29.781429][ T711] RAX: ffffffffffffffda RBX: 00007f2e625bdfa0 RCX: 00007f2e62336159 [ 29.789376][ T711] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 29.797324][ T711] RBP: 00007f2e623cd06b R08: 0000200000000640 R09: 0000000000000000 [ 29.805269][ T711] R10: 0000000000000c0c R11: 0000000000000246 R12: 0000000000000000 [ 29.813212][ T711] R13: 00007f2e625be038 R14: 00007f2e625bdfa0 R15: 00007ffcde7fd608 [ 29.821897][ T711] F2FS-fs (loop1): sanity_check_inode: inode (ino=8) extent info [14338, 0, 11206659] is incorrect, run fsck to fix [ 29.843303][ T724] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 29.857432][ T724] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 29.867371][ T724] F2FS-fs (loop4): invalid crc value [ 29.873872][ T724] F2FS-fs (loop4): Found nat_bits in checkpoint [ 29.895321][ T742] exfat: Deprecated parameter 'utf8' [ 29.902661][ T742] exfat: Deprecated parameter 'namecase' [ 29.908136][ T724] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 29.915482][ T724] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 29.984801][ T730] F2FS-fs (loop0): invalid crc value [ 29.989198][ T742] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x22a4dc03, utbl_chksum : 0xe619d30d) [ 30.063357][ T730] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.071237][ T755] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=755 comm=syz.2.179 [ 30.131653][ T730] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 30.215005][ T730] F2FS-fs (loop0): Corrupted max_depth of 3: 16842753 [ 30.394687][ T773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 30.470286][ T775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 30.498367][ T779] netlink: 'syz.4.190': attribute type 16 has an invalid length. [ 30.512276][ T779] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.190'. [ 30.613009][ T787] netlink: 20 bytes leftover after parsing attributes in process `syz.4.195'. [ 30.755158][ T807] exfat: Deprecated parameter 'namecase' [ 30.760834][ T807] exfat: Deprecated parameter 'utf8' [ 30.806214][ T807] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 30.833522][ T818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 31.015012][ T830] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x4368f20e, utbl_chksum : 0xe619d30d) [ 31.141665][ T849] netlink: 48 bytes leftover after parsing attributes in process `syz.3.222'. [ 31.302277][ T871] EXT4-fs (loop2): 1 truncate cleaned up [ 31.308411][ T871] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,lazytime, [ 31.341642][ T24] kauditd_printk_skb: 39 callbacks suppressed [ 31.341651][ T24] audit: type=1400 audit(1790051417.419:221): avc: denied { write } for pid=879 comm="syz.1.235" name="001" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.476037][ T889] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 31.476422][ T894] ip_tables: iptables: counters copy to user failed while replacing table [ 31.494932][ T892] cgroup: syz.2.241 (892) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 31.522674][ T24] audit: type=1400 audit(1790051417.599:222): avc: denied { read } for pid=888 comm="syz.1.240" name="file1" dev="loop1" ino=1048598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.528809][ T889] exFAT-fs (loop1): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442) [ 31.528809][ T889] [ 31.558093][ T889] exFAT-fs (loop1): Filesystem has been set read-only [ 31.565369][ T889] exFAT-fs (loop1): error, failed to bmap (inode : ffff888129b37670 iblock : 0, err : -5) [ 31.576695][ T892] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 31.670005][ T24] audit: type=1400 audit(1790051417.749:223): avc: denied { bind } for pid=906 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.714854][ T24] audit: type=1400 audit(1790051417.779:224): avc: denied { connect } for pid=906 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.772139][ T916] syz.2.253 invoked oom-killer: gfp_mask=0x8100cca(GFP_HIGHUSER_MOVABLE|0x8000000), order=0, oom_score_adj=1000 [ 31.787628][ T916] CPU: 1 PID: 916 Comm: syz.2.253 Tainted: G W syzkaller #0 [ 31.796229][ T916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.806286][ T916] Call Trace: [ 31.809581][ T916] __dump_stack+0x21/0x24 [ 31.813912][ T916] dump_stack_lvl+0x1a7/0x208 [ 31.818591][ T916] ? show_regs_print_info+0x18/0x18 [ 31.823792][ T916] ? ___ratelimit+0x421/0x5a0 [ 31.828468][ T916] ? _raw_spin_lock+0x94/0xf0 [ 31.833148][ T916] dump_stack+0x15/0x1c [ 31.837309][ T916] dump_header+0xd9/0x650 [ 31.841637][ T916] oom_kill_process+0x1fa/0x2c0 [ 31.846481][ T916] out_of_memory+0x879/0xce0 [ 31.851072][ T916] ? unregister_oom_notifier+0x20/0x20 [ 31.856523][ T916] ? mutex_lock_killable+0x92/0xf0 [ 31.861633][ T916] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 31.868136][ T916] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 31.873689][ T916] ? mem_cgroup_oom_trylock+0x340/0x340 [ 31.879234][ T916] ? _raw_spin_trylock_bh+0x150/0x150 [ 31.884607][ T916] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 31.890158][ T916] try_charge+0xfa9/0x1580 [ 31.894576][ T916] ? __memcg_kmem_charge+0x150/0x150 [ 31.899857][ T916] ? add_to_swap_cache+0x97c/0xaa0 [ 31.904972][ T916] ? _raw_spin_lock+0x94/0xf0 [ 31.909645][ T916] ? radix_tree_lookup+0x183/0x1d0 [ 31.914756][ T916] __mem_cgroup_charge+0x148/0x6d0 [ 31.919868][ T916] __read_swap_cache_async+0x405/0x5c0 [ 31.925318][ T916] swap_cluster_readahead+0x39e/0x5f0 [ 31.930670][ T916] ? read_swap_cache_async+0x80/0x80 [ 31.935949][ T916] ? page_cache_prev_miss+0x290/0x290 [ 31.941302][ T916] swapin_readahead+0xeb/0x870 [ 31.946046][ T916] ? exit_swap_address_space+0x160/0x160 [ 31.951662][ T916] ? kasan_set_free_info+0x23/0x40 [ 31.956759][ T916] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.962808][ T916] do_swap_page+0x87f/0x1de0 [ 31.967380][ T916] ? unmap_mapping_range+0x100/0x100 [ 31.972648][ T916] ? unmap_mapping_range+0x100/0x100 [ 31.977944][ T916] ? irqentry_nmi_exit+0x20/0x30 [ 31.982862][ T916] handle_pte_fault+0x3ff/0x3910 [ 31.987790][ T916] handle_mm_fault+0xf86/0x1720 [ 31.992618][ T916] ? mem_cgroup_exit_user_fault+0x55/0xa0 [ 31.998317][ T916] ? can_reuse_spf_vma+0xe0/0xe0 [ 32.003233][ T916] ? __kasan_check_write+0x14/0x20 [ 32.008320][ T916] ? down_read_trylock+0x106/0x160 [ 32.013407][ T916] ? __kasan_check_write+0x14/0x20 [ 32.018496][ T916] ? can_reuse_spf_vma+0xc8/0xe0 [ 32.023411][ T916] do_user_addr_fault+0x576/0xe20 [ 32.028415][ T916] ? do_kern_addr_fault+0x80/0x80 [ 32.033421][ T916] ? __kasan_check_read+0x11/0x20 [ 32.038424][ T916] exc_page_fault+0x5a/0xc0 [ 32.042905][ T916] ? asm_exc_page_fault+0x8/0x30 [ 32.047825][ T916] asm_exc_page_fault+0x1e/0x30 [ 32.052653][ T916] RIP: 0033:0x7f0cf1548161 [ 32.057050][ T916] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 32.076726][ T916] RSP: 002b:00007f0ceffa1028 EFLAGS: 00010207 [ 32.082770][ T916] RAX: 0000000000000001 RBX: 00007f0cf17cffa0 RCX: 00007f0cf1548159 [ 32.090722][ T916] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000003 [ 32.098671][ T916] RBP: 00007f0cf15df06b R08: 0000000000000000 R09: 0000000000000000 [ 32.106620][ T916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.114574][ T916] R13: 00007f0cf17d0038 R14: 00007f0cf17cffa0 R15: 00007ffe872a93a8 [ 32.135409][ T916] memory: usage 0kB, limit 0kB, failcnt 57 [ 32.141236][ T916] memory+swap: usage 188kB, limit 9007199254740988kB, failcnt 0 [ 32.175494][ T24] audit: type=1400 audit(1790051418.259:225): avc: denied { write } for pid=932 comm="syz.4.257" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.199665][ T933] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.199796][ T916] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 32.222691][ T24] audit: type=1400 audit(1790051418.289:226): avc: denied { open } for pid=932 comm="syz.4.257" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.224956][ T916] Memory cgroup stats for /syz2: [ 32.245664][ T916] anon 135168 [ 32.245664][ T916] file 0 [ 32.245664][ T916] kernel_stack 0 [ 32.245664][ T916] percpu 0 [ 32.245664][ T916] sock 0 [ 32.245664][ T916] shmem 0 [ 32.245664][ T916] file_mapped 0 [ 32.245664][ T916] file_dirty 135168 [ 32.245664][ T916] file_writeback 0 [ 32.245664][ T916] anon_thp 0 [ 32.245664][ T916] inactive_anon 135168 [ 32.245664][ T916] active_anon 0 [ 32.245664][ T916] inactive_file 32768 [ 32.245664][ T916] active_file 0 [ 32.245664][ T916] unevictable 0 [ 32.245664][ T916] slab_reclaimable 0 [ 32.245664][ T916] slab_unreclaimable 0 [ 32.245664][ T916] slab 0 [ 32.245664][ T916] workingset_refault_anon 0 [ 32.245664][ T916] workingset_refault_file 0 [ 32.245664][ T916] workingset_activate_anon 0 [ 32.245664][ T916] workingset_activate_file 0 [ 32.245664][ T916] workingset_restore_anon 0 [ 32.245664][ T916] workingset_restore_file 0 [ 32.245664][ T916] workingset_nodereclaim 0 [ 32.251077][ T24] audit: type=1400 audit(1790051418.289:227): avc: denied { ioctl } for pid=932 comm="syz.4.257" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.365677][ T916] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.253,pid=915,uid=0 [ 32.382242][ T916] Memory cgroup out of memory: Killed process 915 (syz.2.253) total-vm:94044kB, anon-rss:1196kB, file-rss:21864kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 32.394438][ T882] F2FS-fs (loop3): invalid crc value [ 32.400537][ T27] oom_reaper: reaped process 915 (syz.2.253), now anon-rss:0kB, file-rss:20992kB, shmem-rss:0kB [ 32.430902][ T281] syz-executor invoked oom-killer: gfp_mask=0x8100cca(GFP_HIGHUSER_MOVABLE|0x8000000), order=0, oom_score_adj=0 [ 32.443769][ T942] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 32.458860][ T281] CPU: 0 PID: 281 Comm: syz-executor Tainted: G W syzkaller #0 [ 32.463472][ T942] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.467711][ T281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.467715][ T281] Call Trace: [ 32.467730][ T281] __dump_stack+0x21/0x24 [ 32.467737][ T281] dump_stack_lvl+0x1a7/0x208 [ 32.467745][ T281] ? show_regs_print_info+0x18/0x18 [ 32.467756][ T281] ? ___ratelimit+0x421/0x5a0 [ 32.467765][ T281] ? _raw_spin_lock+0x94/0xf0 [ 32.467774][ T281] dump_stack+0x15/0x1c [ 32.467784][ T281] dump_header+0xd9/0x650 [ 32.467793][ T281] oom_kill_process+0x1fa/0x2c0 [ 32.467809][ T281] out_of_memory+0x879/0xce0 [ 32.532598][ T281] ? unregister_oom_notifier+0x20/0x20 [ 32.538035][ T281] ? mutex_lock_killable+0xdf/0xf0 [ 32.543123][ T281] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 32.549603][ T281] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 32.555124][ T281] ? mem_cgroup_oom_trylock+0x340/0x340 [ 32.560650][ T281] ? _raw_spin_trylock_bh+0x150/0x150 [ 32.565998][ T281] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 32.571519][ T281] try_charge+0xfa9/0x1580 [ 32.575916][ T281] ? __memcg_kmem_charge+0x150/0x150 [ 32.581177][ T281] ? add_to_swap_cache+0x97c/0xaa0 [ 32.586266][ T281] ? _raw_spin_lock+0x94/0xf0 [ 32.590918][ T281] ? radix_tree_lookup+0x183/0x1d0 [ 32.596008][ T281] __mem_cgroup_charge+0x148/0x6d0 [ 32.601095][ T281] __read_swap_cache_async+0x405/0x5c0 [ 32.606528][ T281] swap_cluster_readahead+0x39e/0x5f0 [ 32.611876][ T281] ? read_swap_cache_async+0x80/0x80 [ 32.617138][ T281] ? page_cache_prev_miss+0x290/0x290 [ 32.622487][ T281] swapin_readahead+0xeb/0x870 [ 32.627228][ T281] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 32.632833][ T281] ? exit_swap_address_space+0x160/0x160 [ 32.638442][ T281] ? __switch_to+0x53e/0x10a0 [ 32.643099][ T281] do_swap_page+0x87f/0x1de0 [ 32.647665][ T281] ? pick_next_task_fair+0x81d/0xa50 [ 32.652934][ T281] ? __kasan_check_write+0x14/0x20 [ 32.658023][ T281] ? unmap_mapping_range+0x100/0x100 [ 32.663282][ T281] ? __switch_to_asm+0x3a/0x60 [ 32.668028][ T281] ? __schedule+0xc0b/0x13e0 [ 32.672598][ T281] handle_pte_fault+0x3ff/0x3910 [ 32.677513][ T281] handle_mm_fault+0xf86/0x1720 [ 32.682342][ T281] ? can_reuse_spf_vma+0xe0/0xe0 [ 32.687256][ T281] ? __kasan_check_write+0x14/0x20 [ 32.692348][ T281] ? down_read_trylock+0x106/0x160 [ 32.697435][ T281] ? __init_rwsem+0x1c0/0x1c0 [ 32.702087][ T281] ? find_vma+0x30/0x150 [ 32.706310][ T281] do_user_addr_fault+0x576/0xe20 [ 32.711311][ T281] ? do_kern_addr_fault+0x80/0x80 [ 32.716314][ T281] ? __kasan_check_read+0x11/0x20 [ 32.721317][ T281] exc_page_fault+0x5a/0xc0 [ 32.725798][ T281] ? asm_exc_page_fault+0x8/0x30 [ 32.730708][ T281] asm_exc_page_fault+0x1e/0x30 [ 32.735533][ T281] RIP: 0033:0x7f0cf15032d7 [ 32.740030][ T281] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 32.759628][ T281] RSP: 002b:00007ffe872a96a0 EFLAGS: 00010202 [ 32.765681][ T281] RAX: 0000000000000000 RBX: 000055557223f500 RCX: 00007f0cf15032d7 [ 32.773630][ T281] RDX: 00007ffe872a96e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.781581][ T281] RBP: 00007ffe872a974c R08: 0000000000000000 R09: 0000000000000000 [ 32.789530][ T281] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 32.797485][ T281] R13: 00000000000927c0 R14: 0000000000007bea R15: 00007ffe872a97a0 [ 32.810695][ T281] memory: usage 0kB, limit 0kB, failcnt 182 [ 32.817145][ T281] memory+swap: usage 188kB, limit 9007199254740988kB, failcnt 0 [ 32.821837][ T882] F2FS-fs (loop3): Found nat_bits in checkpoint [ 32.835758][ T281] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 32.842605][ T281] Memory cgroup stats for /syz2: [ 32.842714][ T281] anon 135168 [ 32.842714][ T281] file 0 [ 32.842714][ T281] kernel_stack 0 [ 32.842714][ T281] percpu 0 [ 32.842714][ T281] sock 0 [ 32.842714][ T281] shmem 0 [ 32.842714][ T281] file_mapped 0 [ 32.842714][ T281] file_dirty 135168 [ 32.842714][ T281] file_writeback 0 [ 32.842714][ T281] anon_thp 0 [ 32.842714][ T281] inactive_anon 135168 [ 32.842714][ T281] active_anon 0 [ 32.842714][ T281] inactive_file 32768 [ 32.842714][ T281] active_file 0 [ 32.842714][ T281] unevictable 0 [ 32.842714][ T281] slab_reclaimable 0 [ 32.842714][ T281] slab_unreclaimable 0 [ 32.842714][ T281] slab 0 [ 32.842714][ T281] workingset_refault_anon 0 [ 32.842714][ T281] workingset_refault_file 0 [ 32.842714][ T281] workingset_activate_anon 0 [ 32.842714][ T281] workingset_activate_file 0 [ 32.842714][ T281] workingset_restore_anon 0 [ 32.842714][ T281] workingset_restore_file 0 [ 32.842714][ T281] workingset_nodereclaim 0 [ 32.926734][ T882] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 32.948611][ T281] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor,pid=281,uid=0 [ 32.964054][ T882] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 32.971793][ T281] Memory cgroup out of memory: Killed process 281 (syz-executor) total-vm:90072kB, anon-rss:1280kB, file-rss:21736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:0 [ 32.988838][ T953] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.989602][ T27] oom_reaper: reaped process 281 (syz-executor), now anon-rss:0kB, file-rss:20476kB, shmem-rss:0kB [ 32.996002][ T953] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.086172][ T965] xt_hashlimit: size too large, truncated to 1048576 [ 33.367822][ T24] audit: type=1400 audit(1790051419.449:228): avc: denied { mounton } for pid=973 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 33.451228][ T973] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.468555][ T973] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.484438][ T973] device bridge_slave_0 entered promiscuous mode [ 33.500043][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.509312][ T973] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.518710][ T973] device bridge_slave_1 entered promiscuous mode [ 33.570494][ T956] F2FS-fs (loop0): Test dummy encryption mode enabled [ 33.583586][ T956] F2FS-fs (loop0): invalid crc value [ 33.606016][ T956] F2FS-fs (loop0): Found nat_bits in checkpoint [ 33.646573][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.651025][ T956] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 33.653622][ T973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.668305][ T973] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.675326][ T973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.690325][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.697889][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.707079][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.714163][ T24] audit: type=1400 audit(1790051419.799:229): avc: denied { read } for pid=998 comm="syz.1.282" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.765117][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.780626][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.787683][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.795787][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.810211][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.817299][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.827728][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.836295][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.848756][ T1004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.284'. [ 33.881106][ T973] device veth0_vlan entered promiscuous mode [ 33.901178][ T24] audit: type=1400 audit(1790051419.979:230): avc: denied { map } for pid=1017 comm="syz.3.292" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.952568][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.961884][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.970022][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.977706][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.003537][ T1029] process 'syz.3.297' launched './file0' with NULL argv: empty string added [ 34.015149][ T973] device veth1_macvtap entered promiscuous mode [ 34.027052][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.040451][ T1034] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 34.060407][ T310] device bridge_slave_1 left promiscuous mode [ 34.072196][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.084980][ T1034] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 34.109062][ T310] device bridge_slave_0 left promiscuous mode [ 34.118248][ T1034] exFAT-fs (loop3): error, failed to bmap (inode : ffff888129b36a10 iblock : 8, err : -5) [ 34.128580][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.156979][ T1034] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 34.189984][ T1034] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 34.253829][ T1039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 34.263743][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.273443][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.283744][ T1044] netlink: 'syz.1.301': attribute type 13 has an invalid length. [ 34.292260][ T1044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.301'. [ 34.403253][ T1069] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 34.734695][ T1120] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 34.742567][ T1122] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.777690][ T1120] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 34.789247][ T1120] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0002] [ 34.794762][ T1122] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000001,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff [ 34.812300][ T1120] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 34.834639][ T1120] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 34.844100][ T1120] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nombcache,usrjquota=,jqfmt=vfsv0,barrier=0x000000000000d95a,jqfmt=vfsold,,errors=continue [ 34.884513][ T1139] EXT4-fs (loop5): Ignoring removed oldalloc option [ 34.925568][ T1139] EXT4-fs (loop5): mounted filesystem without journal. Opts: noquota,noquota,data_err=ignore,jqfmt=vfsv1,noquota,nojournal_checksum,oldalloc,bsdgroups,grpquota,user_xattr,abort,,errors=continue [ 35.172234][ T1129] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 35.194081][ T1129] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 35.203021][ T1129] F2FS-fs (loop0): invalid crc value [ 35.242688][ T1129] F2FS-fs (loop0): Found nat_bits in checkpoint [ 35.285028][ T1129] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 35.292246][ T1129] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 35.514749][ T1193] exfat: Deprecated parameter 'namecase' [ 35.526776][ T1193] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 35.536763][ T1193] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 35.541457][ T1197] netlink: 224 bytes leftover after parsing attributes in process `syz.5.361'. [ 35.654583][ T1202] exfat: Deprecated parameter 'utf8' [ 35.659898][ T1202] exfat: Deprecated parameter 'utf8' [ 35.665402][ T1202] exfat: Deprecated parameter 'namecase' [ 35.698847][ T1202] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 35.924546][ T1248] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 35.945707][ T1248] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.995729][ T1248] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 49 (only 1 groups) [ 36.063026][ T1285] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 36.088784][ T1285] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,nogrpid,nomblk_io_submit,,errors=continue [ 36.094634][ T1295] tipc: Started in network mode [ 36.105505][ T1285] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.150051][ T1295] tipc: Own node identity , cluster identity 4711 [ 36.158066][ T1295] tipc: Failed to obtain node identity [ 36.164585][ T1295] tipc: Enabling of bearer rejected, failed to enable media [ 36.284199][ T1302] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 36.481401][ T1333] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.492146][ T1333] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 36.502512][ T1333] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 36.536608][ T24] kauditd_printk_skb: 46 callbacks suppressed [ 36.536618][ T24] audit: type=1400 audit(1790051422.619:277): avc: denied { shutdown } for pid=1341 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.626593][ T24] audit: type=1400 audit(1790051422.709:278): avc: denied { create } for pid=1355 comm="syz.5.430" dev="anon_inodefs" ino=18405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.704065][ T24] audit: type=1400 audit(1790051422.729:279): avc: denied { read append } for pid=1363 comm="syz.4.435" name="usbmon8" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.748898][ T24] audit: type=1400 audit(1790051422.729:280): avc: denied { open } for pid=1363 comm="syz.4.435" path="/dev/usbmon8" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.773355][ T24] audit: type=1400 audit(1790051422.729:281): avc: denied { map } for pid=1363 comm="syz.4.435" path="/dev/usbmon8" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.797625][ T1381] exfat: Deprecated parameter 'utf8' [ 36.803340][ T1381] exfat: Deprecated parameter 'namecase' [ 36.809287][ T1381] exfat: Deprecated parameter 'namecase' [ 36.815067][ T24] audit: type=1400 audit(1790051422.729:282): avc: denied { execute } for pid=1363 comm="syz.4.435" path="/dev/usbmon8" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.839276][ T24] audit: type=1400 audit(1790051422.739:283): avc: denied { ioctl } for pid=1355 comm="syz.5.430" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18405 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.867108][ T1381] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 36.899416][ T24] audit: type=1400 audit(1790051422.979:284): avc: denied { ioctl } for pid=1389 comm="syz.0.448" path="socket:[18814]" dev="sockfs" ino=18814 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.966330][ T1397] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 37.000730][ T1373] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 37.020888][ T1373] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 37.029871][ T1373] F2FS-fs (loop5): invalid crc value [ 37.035263][ T24] audit: type=1400 audit(1790051423.119:285): avc: denied { getopt } for pid=1404 comm="syz.0.456" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.055874][ T24] audit: type=1400 audit(1790051423.119:286): avc: denied { watch watch_reads } for pid=1408 comm="syz.1.454" path="/78/cgroup" dev="tmpfs" ino=420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 37.107515][ T1373] F2FS-fs (loop5): Found nat_bits in checkpoint [ 37.162474][ T1373] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 37.162486][ T1373] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 37.251842][ T7] attempt to access beyond end of device [ 37.251842][ T7] loop5: rw=1, want=45224, limit=40427 [ 37.308466][ T1451] device macsec1 entered promiscuous mode [ 37.324386][ T1451] device bridge0 entered promiscuous mode [ 37.367160][ T1451] bridge0: port 3(macsec1) entered blocking state [ 37.379915][ T1451] bridge0: port 3(macsec1) entered disabled state [ 37.404502][ T1451] device bridge0 left promiscuous mode [ 37.521934][ T1467] 9p: Unknown Cache mode readahead [ 37.550342][ T1474] tipc: Enabling of bearer rejected, failed to enable media [ 37.627328][ T1475] EXT4-fs (loop4): Ignoring removed nobh option [ 37.646352][ T1475] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.700475][ T1475] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27 [ 37.709467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 37.712934][ T1475] EXT4-fs (loop4): Remounting filesystem read-only [ 37.728401][ T1475] EXT4-fs error (device loop4): ext4_dirty_inode:6181: inode #3: comm syz.4.484: mark_inode_dirty error [ 37.740094][ T1475] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27 [ 37.749900][ T1446] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 37.759054][ T1475] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #3: comm syz.4.484: mark_inode_dirty error [ 37.759132][ T1446] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 37.779192][ T1446] F2FS-fs (loop3): invalid crc value [ 37.786253][ T1446] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.786356][ T1475] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.484: Failed to acquire dquot type 0 [ 37.804038][ T1475] EXT4-fs (loop4): 1 truncate cleaned up [ 37.809883][ T1475] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh, [ 37.819711][ T1475] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.827218][ T1446] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.838275][ T1446] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 37.844276][ T1475] EXT4-fs error (device loop4): ext4_generic_delete_entry:2683: inode #12: block 13: comm syz.4.484: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 37.865688][ T1475] EXT4-fs (loop4): Remounting filesystem read-only [ 37.872611][ T1475] EXT4-fs error (device loop4) in ext4_delete_entry:2741: Corrupt filesystem [ 37.889224][ T7] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 37.899972][ T7] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 37.911125][ T7] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 37.921349][ T7] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 38.060055][ T1494] EXT4-fs (loop3): 1 truncate cleaned up [ 38.071071][ T1494] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,lazytime, [ 38.264720][ T1523] exfat: Deprecated parameter 'namecase' [ 38.271738][ T1523] exfat: Deprecated parameter 'utf8' [ 38.349969][ T1523] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 38.474773][ T1554] exfat: Deprecated parameter 'utf8' [ 38.480153][ T1554] exfat: Deprecated parameter 'utf8' [ 38.498912][ T1554] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 38.714092][ T301] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 38.834103][ T15] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.844631][ T1593] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 38.851239][ T1593] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 38.861570][ T1593] F2FS-fs (loop4): Found nat_bits in checkpoint [ 38.883236][ T1593] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 38.890417][ T1593] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 38.890492][ T54] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 38.929357][ T283] attempt to access beyond end of device [ 38.929357][ T283] loop4: rw=2049, want=45104, limit=40427 [ 39.082931][ T1610] device macsec1 entered promiscuous mode [ 39.088718][ T1610] device bridge0 entered promiscuous mode [ 39.104096][ T301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.114520][ T301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.144166][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 39.214135][ T301] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 39.223354][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 39.224312][ T15] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.231701][ T301] usb 2-1: SerialNumber: syz [ 39.246809][ T15] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.258203][ T1616] F2FS-fs (loop4): Invalid log blocks per segment (1) [ 39.261027][ T15] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.268956][ T1616] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 39.278986][ T15] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.285246][ T1616] F2FS-fs (loop4): fault_type options not supported [ 39.296428][ T54] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 39.302753][ T1616] F2FS-fs (loop4): fault_injection options not supported [ 39.314349][ T54] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.321220][ T1616] F2FS-fs (loop4): invalid crc value [ 39.333994][ T15] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 39.347868][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.354190][ T1616] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.356042][ T54] usb 4-1: config 0 interface 0 has no altsetting 0 [ 39.369543][ T54] usb 4-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00 [ 39.378726][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.387728][ T54] usb 4-1: config 0 descriptor?? [ 39.393931][ T1616] F2FS-fs (loop4): Start checkpoint disabled! [ 39.403617][ T1616] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 39.412917][ T1616] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 39.524730][ T301] usb 2-1: 0:2 : does not exist [ 39.539322][ T301] usb 2-1: USB disconnect, device number 2 [ 39.655512][ T1646] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 39.666640][ T1646] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.774419][ T1257] udevd[1257]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.845769][ T15] lg-g15 0003:046D:C222.0001: unbalanced collection at end of report description [ 39.855824][ T15] lg-g15: probe of 0003:046D:C222.0001 failed with error -22 [ 39.865915][ T54] input: HID 046d:c101 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C101.0002/input/input6 [ 39.885633][ T1640] F2FS-fs (loop4): Test dummy encryption mode enabled [ 39.896778][ T1640] F2FS-fs (loop4): invalid crc value [ 39.916865][ T1640] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.949171][ T54] logitech 0003:046D:C101.0002: input,hiddev96,hidraw0: USB HID v0.07 Device [HID 046d:c101] on usb-dummy_hcd.3-1/input0 [ 39.962583][ T1640] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 40.000109][ T1640] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 40.073282][ T274] usb 1-1: USB disconnect, device number 2 [ 40.080170][ T1682] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 40.104304][ C0] Illegal XDP return value 16128, expect packet loss! [ 40.113666][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 40.114653][ T1682] EXT4-fs (loop5): mounted filesystem without journal. Opts: mblk_io_submit,acl,,errors=continue [ 40.132177][ T1682] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.166777][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.183732][ T1682] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz.5.571: corrupted xattr block 6 [ 40.186179][ T301] usb 4-1: USB disconnect, device number 2 [ 40.202615][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 40.211998][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.221961][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.230202][ T1682] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 40.230488][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.247639][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.255767][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.265980][ T1682] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz.5.571: corrupted xattr block 6 [ 40.283286][ T1682] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 40.313371][ T1682] EXT4-fs error (device loop5): ext4_get_inode_usage:831: inode #12: comm syz.5.571: corrupted xattr block 6 [ 40.325536][ T1694] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz.5.571: corrupted xattr block 6 [ 40.337710][ T1694] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 40.346740][ T1694] EXT4-fs error (device loop5): ext4_get_inode_usage:831: inode #12: comm syz.5.571: corrupted xattr block 6 [ 40.844834][ T1736] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,grpquota,noinit_itable,barrier,,errors=continue [ 40.867714][ T1736] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.934058][ T54] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.968946][ T1728] mmap: syz.3.591 (1728) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 41.001765][ T1701] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 41.032498][ T1701] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 41.041410][ T1701] F2FS-fs (loop4): invalid crc value [ 41.050464][ T1702] F2FS-fs (loop1): invalid crc value [ 41.057808][ T1702] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.061599][ T1701] F2FS-fs (loop4): Found nat_bits in checkpoint [ 41.117044][ T1701] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 41.125829][ T1701] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 41.133553][ T1702] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 41.304292][ T54] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 41.337782][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.368986][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.399236][ T54] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 41.514106][ T54] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 41.533540][ T54] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 41.544622][ T54] usb 1-1: Manufacturer: syz [ 41.562359][ T54] usb 1-1: config 0 descriptor?? [ 41.619833][ T1768] F2FS-fs (loop5): Invalid log_blocksize (64), supports only 12 [ 41.652799][ T1768] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 41.674238][ T1768] F2FS-fs (loop5): invalid crc value [ 41.690000][ T1768] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 41.744757][ T1768] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 41.751396][ T1768] F2FS-fs (loop5): Start checkpoint disabled! [ 41.764871][ T1768] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 41.771923][ T1768] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 41.846269][ T1786] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 41.854075][ T1786] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 41.869589][ T1786] F2FS-fs (loop3): invalid crc value [ 41.876021][ T1786] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 41.903779][ T1786] F2FS-fs (loop3): Start checkpoint disabled! [ 41.910658][ T1786] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 41.917786][ T1786] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 41.940681][ T1766] F2FS-fs (loop1): invalid crc value [ 41.966552][ T1766] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.977399][ T380] attempt to access beyond end of device [ 41.977399][ T380] loop3: rw=2049, want=45104, limit=40427 [ 42.009185][ T1766] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 42.017230][ T1766] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 42.044845][ T54] appleir 0003:05AC:8243.0003: item fetching failed at offset 0/1 [ 42.052853][ T54] appleir 0003:05AC:8243.0003: parse failed [ 42.058858][ T54] appleir: probe of 0003:05AC:8243.0003 failed with error -22 [ 42.104907][ T24] kauditd_printk_skb: 37 callbacks suppressed [ 42.104915][ T24] audit: type=1400 audit(1790051428.189:315): avc: denied { rename } for pid=1765 comm="syz.1.599" name="file1" dev="loop1" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.169904][ T1798] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 42.177481][ T1798] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 42.186532][ T1798] F2FS-fs (loop5): invalid crc value [ 42.192840][ T1798] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 42.241737][ T1798] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 42.246236][ T301] usb 1-1: USB disconnect, device number 3 [ 42.249803][ T1798] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 42.269793][ T24] audit: type=1400 audit(1790051428.349:316): avc: denied { remount } for pid=1797 comm="syz.5.613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.397699][ T1814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.618'. [ 42.401475][ T24] audit: type=1400 audit(1790051428.479:317): avc: denied { create } for pid=1815 comm="syz.5.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.451299][ T1820] exfat: Deprecated parameter 'utf8' [ 42.456972][ T24] audit: type=1400 audit(1790051428.509:318): avc: denied { setopt } for pid=1815 comm="syz.5.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.477691][ T24] audit: type=1400 audit(1790051428.549:319): avc: denied { mount } for pid=1824 comm="syz.1.619" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 42.500799][ T24] audit: type=1400 audit(1790051428.549:320): avc: denied { search } for pid=1824 comm="syz.1.619" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 42.523229][ T24] audit: type=1400 audit(1790051428.549:321): avc: denied { read } for pid=1824 comm="syz.1.619" name="available_tracers" dev="tracefs" ino=12648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 42.547031][ T24] audit: type=1400 audit(1790051428.549:322): avc: denied { open } for pid=1824 comm="syz.1.619" path="/101/tracefs/available_tracers" dev="tracefs" ino=12648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 42.572214][ T24] audit: type=1400 audit(1790051428.549:323): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 42.599778][ T1820] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 42.804601][ T1832] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 42.811278][ T1832] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 42.820182][ T1832] F2FS-fs (loop1): invalid crc value [ 42.826633][ T1832] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.848753][ T1837] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 42.854776][ T1839] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 42.857408][ T1832] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 42.874595][ T1839] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.884148][ T1837] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 42.897719][ T1832] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.916963][ T1837] F2FS-fs (loop5): invalid crc value [ 42.922458][ T1839] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 42.934164][ T1839] System zones: 0-1, 3-36 [ 42.946408][ T1839] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue [ 42.977308][ T1837] F2FS-fs (loop5): Found nat_bits in checkpoint [ 43.008488][ T24] audit: type=1326 audit(1790051429.089:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1801 comm="syz.3.614" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7373f6b159 code=0x7fc00000 [ 43.064332][ T1837] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 43.071397][ T1837] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 43.079520][ T280] attempt to access beyond end of device [ 43.079520][ T280] loop1: rw=2049, want=45104, limit=40427 [ 43.104521][ T1839] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 43.330893][ T1857] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 43.340939][ T1857] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 43.356213][ T1857] F2FS-fs (loop3): invalid crc value [ 43.359436][ T1862] EXT4-fs (loop4): Ignoring removed bh option [ 43.411112][ T1862] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.434582][ T1857] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 43.455030][ T1862] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,nogrpid,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue [ 43.490303][ T1857] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 43.504050][ T1857] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 43.515082][ T1851] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 43.523603][ T1851] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 43.548061][ T1862] SELinux: failed to load policy [ 43.614966][ T1851] F2FS-fs (loop0): invalid crc value [ 43.631868][ T1851] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.714284][ T1851] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 43.723647][ T1851] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 43.825295][ T1857] F2FS-fs (loop3): Start checkpoint disabled! [ 43.857464][ T1887] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 43.866728][ T1887] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.877611][ T1869] F2FS-fs (loop1): fault_injection options not supported [ 43.885848][ T1869] F2FS-fs (loop1): invalid crc value [ 43.892021][ T1869] F2FS-fs (loop1): Found nat_bits in checkpoint [ 43.927763][ T1869] F2FS-fs (loop1): Start checkpoint disabled! [ 43.945490][ T1887] EXT4-fs error (device loop4): ext4_get_first_dir_block:3730: inode #12: comm syz.4.640: directory missing '..' [ 43.981787][ T1869] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 44.091309][ T380] attempt to access beyond end of device [ 44.091309][ T380] loop1: rw=2049, want=40976, limit=40427 [ 44.118724][ T1872] F2FS-fs (loop5): invalid crc value [ 44.148576][ T1872] F2FS-fs (loop5): Found nat_bits in checkpoint [ 44.168154][ T1872] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 44.181238][ T1872] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 44.192848][ T1899] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 44.203121][ T1899] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.434993][ T1933] EXT4-fs (loop4): Test dummy encryption mode enabled [ 44.445029][ T1933] EXT4-fs (loop4): Ignoring removed orlov option [ 44.451990][ T1933] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.487001][ T1933] EXT4-fs (loop4): 1 truncate cleaned up [ 44.492672][ T1933] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000006,orlov,,errors=continue [ 44.571353][ T1962] netlink: 'syz.5.670': attribute type 1 has an invalid length. [ 44.579491][ T1962] netlink: 'syz.5.670': attribute type 1 has an invalid length. [ 44.734477][ T1975] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.746730][ T1975] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.748890][ T1989] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 44.763121][ T1989] syzkaller1: linktype set to 6 [ 44.954690][ T2016] xt_hashlimit: size too large, truncated to 1048576 [ 44.994896][ T2024] exfat: Deprecated parameter 'utf8' [ 45.013304][ T2024] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 45.259481][ T2051] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 45.275519][ T2051] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.288100][ T2051] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 45.301907][ T2051] System zones: 0-1, 3-36 [ 45.321041][ T2051] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue [ 45.361855][ T2051] EXT4-fs (loop4): Cannot change journaled quota options when quota turned on [ 45.464052][ T20] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 45.766898][ T2065] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.781289][ T2065] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 45.791147][ T2065] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 45.803381][ T20] usb 6-1: not running at top speed; connect to a high speed hub [ 45.818304][ T2065] exFAT-fs (loop4): hint_cluster is invalid (17) [ 45.825940][ T2065] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff) [ 45.833961][ T2065] exFAT-fs (loop4): Filesystem has been set read-only [ 45.904104][ T20] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.915580][ T20] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 45.924926][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.994958][ T20] uvcvideo: Found UVC 1.00 device (046d:0825) [ 46.010740][ T2089] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 46.019185][ T2089] System zones: 0-2, 18-18, 34-35 [ 46.025055][ T2089] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 46.039395][ T2089] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.121031][ T2097] netlink: 'syz.0.724': attribute type 1 has an invalid length. [ 46.177154][ T2105] netlink: 30 bytes leftover after parsing attributes in process `syz.1.728'. [ 46.242698][ T2108] SELinux: failed to load policy [ 46.338557][ T487] wacom 0003:056A:003F.0004: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 46.414490][ T2153] exfat: Deprecated parameter 'utf8' [ 46.467192][ T2153] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 46.556580][ T2172] user requested TSC rate below hardware speed [ 46.581970][ T2175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=2175 comm=syz.1.758 [ 46.644125][ T20] uvcvideo: Failed to set UVC probe control : -71 (exp. 26). [ 46.674564][ T20] uvcvideo: Failed to query (129) UVC probe control : -71 (exp. 26). [ 46.682704][ T20] uvcvideo: Failed to initialize the device (-5). [ 46.690770][ T20] usb 6-1: USB disconnect, device number 2 [ 46.720861][ T2188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 46.744275][ T54] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 46.794073][ T487] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 46.962412][ T2208] device team_slave_0 entered promiscuous mode [ 46.968981][ T2207] device team_slave_0 left promiscuous mode [ 47.034035][ T487] usb 4-1: Using ep0 maxpacket: 32 [ 47.104140][ T54] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.115282][ T54] usb 1-1: config 0 interface 0 has no altsetting 0 [ 47.121876][ T54] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 47.128428][ T2213] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 47.131143][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.155120][ T2213] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 47.158912][ T54] usb 1-1: config 0 descriptor?? [ 47.164306][ T2213] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.174540][ T487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.174796][ T2213] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.775: Inode bitmap for bg 0 marked uninitialized [ 47.185633][ T487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.207949][ T487] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 47.217191][ T487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.217245][ T2213] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,stripe=0x0000000000000086,nojournal_checksum,acl,,errors=continue [ 47.225879][ T487] usb 4-1: config 0 descriptor?? [ 47.267244][ T2213] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 47.434060][ T20] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 47.600211][ T24] kauditd_printk_skb: 19 callbacks suppressed [ 47.600222][ T24] audit: type=1326 audit(1790051433.679:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2193 comm="syz.1.767" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e62336159 code=0x7fc00000 [ 47.639218][ T2228] netlink: 87 bytes leftover after parsing attributes in process `syz.1.781'. [ 47.645259][ T54] logitech-djreceiver 0003:046D:C532.0005: unknown main item tag 0x0 [ 47.658524][ T54] logitech-djreceiver 0003:046D:C532.0005: unknown main item tag 0x0 [ 47.666790][ T54] logitech-djreceiver 0003:046D:C532.0005: unknown main item tag 0x0 [ 47.673949][ T24] audit: type=1400 audit(1790051433.759:345): avc: denied { bind } for pid=2231 comm="syz.1.783" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.675044][ T54] logitech-djreceiver 0003:046D:C532.0005: unknown main item tag 0x0 [ 47.695035][ T20] usb 6-1: Using ep0 maxpacket: 8 [ 47.708801][ T24] audit: type=1400 audit(1790051433.789:346): avc: denied { name_bind } for pid=2231 comm="syz.1.783" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 47.730190][ T24] audit: type=1400 audit(1790051433.789:347): avc: denied { node_bind } for pid=2231 comm="syz.1.783" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 47.753178][ T487] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 47.760025][ T487] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 47.766881][ T487] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 47.773637][ T487] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 47.780472][ T487] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 47.787372][ T487] savu 0003:1E7D:2D5A.0006: unbalanced collection at end of report description [ 47.795403][ T2234] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 47.796508][ T487] savu 0003:1E7D:2D5A.0006: parse failed [ 47.805539][ T2234] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.810826][ T487] savu: probe of 0003:1E7D:2D5A.0006 failed with error -22 [ 47.834102][ T20] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.845279][ T20] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 47.856102][ T54] usb 1-1: USB disconnect, device number 4 [ 47.856663][ T20] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.874954][ T20] usb 6-1: config 0 interface 0 has no altsetting 0 [ 47.881648][ T20] usb 6-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 47.890873][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.901241][ T20] usb 6-1: config 0 descriptor?? [ 47.934105][ T2217] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 47.982062][ T656] usb 4-1: USB disconnect, device number 3 [ 48.210122][ T24] audit: type=1400 audit(1790051434.289:348): avc: denied { create } for pid=2254 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.230307][ T24] audit: type=1400 audit(1790051434.299:349): avc: denied { bind } for pid=2254 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.253458][ T2257] MTRR 1 not used [ 48.257257][ T24] audit: type=1400 audit(1790051434.329:350): avc: denied { read write } for pid=2256 comm="syz.4.794" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 48.280418][ T301] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 48.285373][ T24] audit: type=1400 audit(1790051434.329:351): avc: denied { open } for pid=2256 comm="syz.4.794" path="/178/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 48.312035][ T24] audit: type=1400 audit(1790051434.329:352): avc: denied { ioctl } for pid=2256 comm="syz.4.794" path="/178/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 48.353710][ T2263] kvm [2262]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x1000400 [ 48.386588][ T20] input: HID 1b96:000a as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:1B96:000A.0007/input/input11 [ 48.407925][ T20] ntrig 0003:1B96:000A.0007: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:000a] on usb-dummy_hcd.5-1/input0 [ 48.424177][ T24] audit: type=1400 audit(1790051434.499:353): avc: denied { view } for pid=2271 comm="syz.0.801" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 48.530245][ T2286] EXT4-fs (loop4): Ignoring removed bh option [ 48.542189][ T2286] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.808: invalid indirect mapped block 234881024 (level 0) [ 48.556952][ T2286] EXT4-fs (loop4): Remounting filesystem read-only [ 48.563574][ T2286] EXT4-fs (loop4): 1 truncate cleaned up [ 48.569720][ T2286] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,dioread_lock,auto_da_alloc,stripe=0x00000000000000f0,journal_ioprio=0x0000000000000001,bh,noblock_validity, [ 48.604103][ T20] ntrig 0003:1B96:000A.0007: Firmware version: 0.10.28.39.1 (eb00 e98c) [ 48.620311][ T2286] EXT4-fs (loop4): shut down requested (2) [ 48.668614][ T2303] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 48.681239][ T2303] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 48.714116][ T301] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.725219][ T301] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 48.737150][ T301] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.750298][ T301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 48.763792][ T301] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 48.773096][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.783534][ T2310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.818'. [ 48.793302][ T301] usb 2-1: config 0 descriptor?? [ 48.798953][ T2310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.818'. [ 48.808896][ T2310] Zero length message leads to an empty skb [ 48.819897][ T20] usb 6-1: USB disconnect, device number 3 [ 48.825804][ T2245] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 48.845594][ T2298] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 48.861401][ T2298] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 48.870538][ T2298] F2FS-fs (loop3): invalid crc value [ 48.877191][ T2298] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.905312][ T2313] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,errors=continue,stripe=0x000000000004ffff,norecovery,min_batch_time=0x0000000000000002,max_batch_time=0x000000000000186b,,errors=continue [ 48.909791][ T2298] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 48.936330][ T2298] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 49.083469][ T2329] tipc: Started in network mode [ 49.088883][ T2329] tipc: Own node identity aaaaaaaaaaaa, cluster identity 4711 [ 49.097211][ T2329] tipc: Enabled bearer , priority 0 [ 49.179948][ T2337] input: syz0 as /devices/virtual/input/input12 [ 49.285010][ T301] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x5 [ 49.292268][ T301] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 49.299992][ T301] greenasia 0003:0E8F:0012.0008: No inputs registered, leaving [ 49.320452][ T301] greenasia 0003:0E8F:0012.0008: hidraw0: USB HID v0.00 Keyboard [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0 [ 49.332195][ T301] greenasia 0003:0E8F:0012.0008: no inputs found [ 49.505288][ T301] usb 2-1: USB disconnect, device number 3 [ 49.689093][ T2383] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 49.695480][ T2383] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 49.711348][ T2383] F2FS-fs (loop5): invalid crc value [ 49.731499][ T2383] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 49.764272][ T2383] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 49.771488][ T2383] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 49.783923][ T301] kernel write not supported for file /vcsa (pid: 301 comm: kworker/1:3) [ 49.841164][ T2405] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.859958][ T2405] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.897614][ T7] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.025524][ T2383] F2FS-fs (loop5): Start checkpoint disabled! [ 50.214484][ T20] tipc: 32-bit node address hash set to aaaa0000 [ 50.257235][ T2451] netlink: 'syz.5.877': attribute type 22 has an invalid length. [ 50.265778][ T2451] netlink: 'syz.5.877': attribute type 22 has an invalid length. [ 50.273683][ T2451] netlink: 36 bytes leftover after parsing attributes in process `syz.5.877'. [ 50.376044][ T2466] binder: 2465:2466 ioctl c018620c 200000000140 returned -1 [ 50.513528][ T2456] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 50.528422][ T2456] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 50.537453][ T2456] F2FS-fs (loop0): invalid crc value [ 50.549192][ T2456] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 50.569395][ T2456] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 50.581649][ T2456] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 50.582852][ T2481] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.892: Invalid block bitmap block 0 in block_group 0 [ 50.621064][ T2491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'. [ 50.650025][ T2481] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.892: Failed to acquire dquot type 0 [ 50.687025][ T2481] EXT4-fs error (device loop5): ext4_free_blocks:5690: comm syz.5.892: Freeing blocks not in datazone - block = 0, count = 4096 [ 50.725514][ T2481] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.892: Invalid inode bitmap blk 0 in block_group 0 [ 50.744302][ T7] EXT4-fs error (device loop5): ext4_release_dquot:6266: comm kworker/u4:0: Failed to release dquot type 0 [ 50.778761][ T2481] EXT4-fs error (device loop5) in ext4_free_inode:360: Corrupt filesystem [ 50.790089][ T2481] EXT4-fs (loop5): 1 orphan inode deleted [ 50.796064][ T2481] EXT4-fs (loop5): mounted filesystem without journal. Opts: €; max_dir_size_kb=0x0000000000000009,,errors=continue [ 50.796697][ T2501] device gretap0 entered promiscuous mode [ 50.835582][ T2501] device gretap0 left promiscuous mode [ 50.841290][ T2456] F2FS-fs (loop0): Start checkpoint disabled! [ 50.942005][ T2504] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 50.957683][ T2504] EXT4-fs error (device loop3): ext4_readdir:223: inode #2: comm syz.3.900: path /205/file1: directory fails checksum at offset 0 [ 51.025905][ T2518] usb usb8: usbfs: process 2518 (syz.3.905) did not claim interface 0 before use [ 51.088901][ T2524] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 51.099925][ T2524] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.138620][ T2524] fscrypt (loop0, inode 12): Unsupported encryption flags (0x47) [ 51.266139][ T2545] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 51.443849][ T2560] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 51.455241][ T2560] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.556798][ T2560] fs-verity (loop5, inode 15): Unrecognized descriptor size: 0 bytes [ 51.600666][ T2577] device-mapper: ioctl: name not supplied when creating device [ 51.737202][ T2583] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.811456][ T2583] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue [ 51.839551][ T2612] netlink: 'syz.0.943': attribute type 1 has an invalid length. [ 51.847578][ T2612] netlink: 'syz.0.943': attribute type 2 has an invalid length. [ 51.857001][ T2612] netlink: 'syz.0.943': attribute type 1 has an invalid length. [ 51.865762][ T2612] netlink: 'syz.0.943': attribute type 2 has an invalid length. [ 51.980627][ T2625] netlink: 'syz.3.947': attribute type 32 has an invalid length. [ 52.003691][ T2619] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.052549][ T2630] EXT4-fs (loop0): Test dummy encryption mode enabled [ 52.063279][ T2630] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 52.089995][ T2630] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 52.105490][ T2630] System zones: 0-5 [ 52.110937][ T2630] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008, [ 52.154417][ T2647] exfat: Deprecated parameter 'utf8' [ 52.212281][ T2647] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 52.409416][ T2683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'. [ 52.450341][ T2678] FAT-fs (loop3): Directory bread(block 199916) failed [ 52.457446][ T2678] FAT-fs (loop3): Directory bread(block 199917) failed [ 52.464354][ T2678] FAT-fs (loop3): Directory bread(block 199918) failed [ 52.471196][ T2678] FAT-fs (loop3): Directory bread(block 199919) failed [ 52.478071][ T2678] FAT-fs (loop3): Directory bread(block 199920) failed [ 52.484928][ T2678] FAT-fs (loop3): Directory bread(block 199921) failed [ 52.491758][ T2678] FAT-fs (loop3): Directory bread(block 199922) failed [ 52.498619][ T2678] FAT-fs (loop3): Directory bread(block 199923) failed [ 52.530512][ T2686] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 52.541808][ T2686] FAT-fs (loop1): Filesystem has been set read-only [ 52.548924][ T2686] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 52.559240][ T2678] FAT-fs (loop3): Directory bread(block 199916) failed [ 52.567007][ T2678] FAT-fs (loop3): Directory bread(block 199917) failed [ 52.718784][ T2693] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 52.726670][ T2693] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 52.737963][ T2693] F2FS-fs (loop5): invalid crc value [ 52.755099][ T2693] F2FS-fs (loop5): Found nat_bits in checkpoint [ 52.759816][ T2706] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,errors=remount-ro, [ 52.771731][ T2706] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.790288][ T2693] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 52.797561][ T2693] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 52.844036][ T54] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 52.984105][ T487] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 52.987173][ T2712] F2FS-fs (loop3): invalid crc value [ 52.998287][ T2712] F2FS-fs (loop3): Found nat_bits in checkpoint [ 53.015602][ T2714] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.024570][ T2712] F2FS-fs (loop3): Start checkpoint disabled! [ 53.032772][ T2714] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 53.041498][ T2712] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 53.043089][ T2714] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 53.073271][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 53.073282][ T24] audit: type=1400 audit(1790051439.149:378): avc: denied { remove_name } for pid=2713 comm="syz.5.983" name="file1" dev="loop5" ino=1048660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.103260][ T284] attempt to access beyond end of device [ 53.103260][ T284] loop3: rw=524288, want=45072, limit=40427 [ 53.103299][ T24] audit: type=1400 audit(1790051439.149:379): avc: denied { rmdir } for pid=2713 comm="syz.5.983" name="file1" dev="loop5" ino=1048660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.115349][ T284] attempt to access beyond end of device [ 53.115349][ T284] loop3: rw=0, want=45072, limit=40427 [ 53.138090][ T24] audit: type=1400 audit(1790051439.169:380): avc: denied { mounton } for pid=2711 comm="syz.3.982" path="/224/bus/file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.170660][ T24] audit: type=1400 audit(1790051439.169:381): avc: denied { write } for pid=2711 comm="syz.3.982" name="bus" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.192070][ T24] audit: type=1400 audit(1790051439.169:382): avc: denied { add_name } for pid=2711 comm="syz.3.982" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.212218][ T24] audit: type=1400 audit(1790051439.169:383): avc: denied { setattr } for pid=2711 comm="syz.3.982" name="work" dev="loop3" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.212295][ T284] tipc: Resetting bearer [ 53.237493][ T24] audit: type=1400 audit(1790051439.169:384): avc: denied { remove_name } for pid=2711 comm="syz.3.982" name="#5" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.261315][ T24] audit: type=1400 audit(1790051439.169:385): avc: denied { rename } for pid=2711 comm="syz.3.982" name="#5" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.286679][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.287751][ T24] audit: type=1400 audit(1790051439.169:386): avc: denied { unlink } for pid=2711 comm="syz.3.982" name="#5" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.305188][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.319901][ T24] audit: type=1400 audit(1790051439.169:387): avc: denied { unlink } for pid=2711 comm="syz.3.982" name="#6" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.330202][ T54] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 53.361106][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.369694][ T54] usb 1-1: config 0 descriptor?? [ 53.374830][ T2724] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 53.375503][ T284] tipc: Disabling bearer [ 53.387455][ T2724] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.405097][ T2724] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,nojournal_checksum,minixdf,grpjquota=,journal_ioprio=0x0000000000000000,dioread_nolock,nomblk_io_submit,noinit_itable,nogrpid,,errors=continue [ 53.426537][ T487] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.434851][ T2724] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.439743][ T487] usb 2-1: config 0 interface 0 has no altsetting 0 [ 53.457004][ T487] usb 2-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice= 0.00 [ 53.466408][ T487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.466973][ T2724] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.989: bg 0: block 112: padding at end of block bitmap is not set [ 53.479749][ T310] attempt to access beyond end of device [ 53.479749][ T310] loop3: rw=2049, want=40968, limit=40427 [ 53.489097][ T2724] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 53.500936][ T310] attempt to access beyond end of device [ 53.500936][ T310] loop3: rw=2049, want=40984, limit=40427 [ 53.512449][ T2724] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.512449][ T2724] [ 53.523900][ T487] usb 2-1: config 0 descriptor?? [ 53.538199][ T2724] EXT4-fs (loop4): Total free blocks count 0 [ 53.544457][ T2724] EXT4-fs (loop4): Free/Dirty block details [ 53.550391][ T2724] EXT4-fs (loop4): free_blocks=0 [ 53.555388][ T2724] EXT4-fs (loop4): dirty_blocks=0 [ 53.560423][ T2724] EXT4-fs (loop4): Block reservation details [ 53.566639][ T2724] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 53.572908][ T380] tipc: Left network mode [ 53.679275][ T2736] erofs: (device loop5): mounted with root inode @ nid 36. [ 53.721283][ T2740] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.728559][ T2740] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.736114][ T2740] device bridge_slave_0 entered promiscuous mode [ 53.750020][ T2740] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.757204][ T2740] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.764750][ T2740] device bridge_slave_1 entered promiscuous mode [ 53.852239][ T2740] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.859313][ T2740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.866594][ T2740] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.873601][ T2740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.895074][ T54] playstation 0003:054C:0DF2.0009: item fetching failed at offset 3/5 [ 53.905666][ T54] playstation 0003:054C:0DF2.0009: Parse failed [ 53.919340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.926857][ T54] playstation: probe of 0003:054C:0DF2.0009 failed with error -22 [ 53.938017][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.945566][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.986417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.997238][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.004298][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.015087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.016819][ T487] input: HID 046d:c09b as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C09B.000A/input/input14 [ 54.023284][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.041474][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.070205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.079340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.104786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.120784][ T2740] device veth0_vlan entered promiscuous mode [ 54.134527][ T487] hid-generic 0003:046D:C09B.000A: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c09b] on usb-dummy_hcd.1-1/input0 [ 54.134656][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.155962][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.164921][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.186754][ T2740] device veth1_macvtap entered promiscuous mode [ 54.194970][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.233837][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.238891][ T487] usb 1-1: USB disconnect, device number 5 [ 54.254724][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.257683][ T301] usb 2-1: USB disconnect, device number 4 [ 54.317014][ T380] device bridge_slave_1 left promiscuous mode [ 54.328876][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.336851][ T380] device bridge_slave_0 left promiscuous mode [ 54.343221][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.351544][ T380] device veth1_macvtap left promiscuous mode [ 54.359409][ T380] device veth0_vlan left promiscuous mode [ 54.524045][ T2060] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 54.574871][ T2819] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 54.582711][ T2819] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 54.591982][ T2819] F2FS-fs (loop4): invalid crc value [ 54.598816][ T2819] F2FS-fs (loop4): Found nat_bits in checkpoint [ 54.623984][ T2819] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 54.631345][ T2819] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 54.774881][ T2826] EXT4-fs (loop4): Test dummy encryption mode enabled [ 54.782909][ T2826] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 54.795221][ T2826] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 54.803359][ T2826] System zones: 0-5 [ 54.808115][ T2826] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008, [ 54.814636][ T2829] EXT4-fs (loop0): Test dummy encryption mode enabled [ 54.855606][ T2829] EXT4-fs (loop0): bad block size 16384 [ 54.884109][ T2060] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.893902][ T2060] usb 6-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00 [ 54.902983][ T2060] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.911737][ T2060] usb 6-1: config 0 descriptor?? [ 55.024818][ T2855] netlink: 'syz.4.1042': attribute type 15 has an invalid length. [ 55.210998][ T2870] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,,errors=continue [ 55.273218][ T2877] EXT4-fs (loop6): 1 orphan inode deleted [ 55.284155][ T2877] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,,errors=continue [ 55.295202][ T2877] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.348171][ T2877] EXT4-fs error (device loop6): ext4_empty_dir:3115: inode #12: block 13: comm syz.6.1052: bad entry in directory: inode out of bounds - offset=24, inode=4294836237, rec_len=16, size=4096 fake=0 [ 55.394817][ T2060] speedlink 0003:1AE7:9001.000B: unknown main item tag 0x0 [ 55.407868][ T2060] speedlink 0003:1AE7:9001.000B: unknown main item tag 0x0 [ 55.415282][ T2060] speedlink 0003:1AE7:9001.000B: unknown main item tag 0x0 [ 55.422510][ T2060] speedlink 0003:1AE7:9001.000B: unknown main item tag 0x0 [ 55.430078][ T2060] speedlink 0003:1AE7:9001.000B: unknown main item tag 0x0 [ 55.437528][ T2060] speedlink 0003:1AE7:9001.000B: unknown main item tag 0x0 [ 55.445048][ T2060] speedlink 0003:1AE7:9001.000B: unknown main item tag 0x0 [ 55.454135][ T2060] speedlink 0003:1AE7:9001.000B: unknown main item tag 0x0 [ 55.457523][ T2893] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 55.468026][ T2060] speedlink 0003:1AE7:9001.000B: hidraw0: USB HID v0.00 Device [HID 1ae7:9001] on usb-dummy_hcd.5-1/input0 [ 55.483123][ T2893] SELinux: failed to load policy [ 55.601957][ T2060] usb 6-1: USB disconnect, device number 4 [ 55.627901][ T2900] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 55.646993][ T2900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802c018, mo2=0002] [ 55.657690][ T2900] System zones: 1-12 [ 55.665619][ T2914] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 55.675169][ T2900] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 55.687937][ T2900] EXT4-fs error (device loop1) in ext4_orphan_del:3292: error 27 [ 55.705878][ T2900] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 55.714824][ T2900] EXT4-fs error (device loop1): ext4_evict_inode:333: inode #15: comm syz.1.1062: mark_inode_dirty error [ 55.726874][ T2900] EXT4-fs (loop1): 1 orphan inode deleted [ 55.732705][ T2900] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,debug,debug_want_extra_isize=0x0000000000000004,noinit_itable,barrier,,errors=continue [ 55.772552][ T2922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'. [ 56.070691][ T2957] input: syz0 as /devices/virtual/input/input15 [ 56.244037][ T2969] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 56.516513][ T2990] binder: 2989:2990 ioctl c0306201 200000000080 returned -14 [ 56.584406][ T2943] F2FS-fs (loop6): invalid crc value [ 56.625099][ T2993] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.1103: invalid block [ 56.637554][ T2993] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.1103: Invalid block bitmap block 0 in block_group 0 [ 56.651530][ T2993] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 56.662528][ T2943] F2FS-fs (loop6): Found nat_bits in checkpoint [ 56.664091][ T2993] EXT4-fs error (device loop1): ext4_clear_blocks:880: inode #13: comm syz.1.1103: attempt to clear invalid blocks 983261 len 1 [ 56.693895][ T2993] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.1103: invalid indirect mapped block 2683928664 (level 0) [ 56.710845][ T2993] EXT4-fs error (device loop1): __ext4_get_inode_loc:4451: comm syz.1.1103: Invalid inode table block 0 in block_group 0 [ 56.723763][ T2943] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 56.731674][ T2993] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 56.741638][ T2993] EXT4-fs error (device loop1) in ext4_orphan_del:3292: Corrupt filesystem [ 56.750355][ T2943] F2FS-fs (loop6): Corrupted max_depth of 3: 16842753 [ 56.758288][ T2993] EXT4-fs error (device loop1): __ext4_get_inode_loc:4451: comm syz.1.1103: Invalid inode table block 0 in block_group 0 [ 56.797460][ T2993] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 56.819678][ T2993] EXT4-fs error (device loop1): ext4_truncate:4403: inode #13: comm syz.1.1103: mark_inode_dirty error [ 56.871654][ T2993] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3106: Corrupt filesystem [ 56.894275][ T2993] EXT4-fs error (device loop1): __ext4_get_inode_loc:4451: comm syz.1.1103: Invalid inode table block 0 in block_group 0 [ 56.917628][ T2993] EXT4-fs (loop1): 1 truncate cleaned up [ 56.929769][ T2993] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,nojournal_checksum,,errors=continue [ 57.000928][ T2993] EXT4-fs error (device loop1): __ext4_get_inode_loc:4451: comm syz.1.1103: Invalid inode table block 0 in block_group 0 [ 57.023925][ T2993] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 57.044108][ T2993] EXT4-fs error (device loop1): ext4_setattr:5590: inode #2: comm syz.1.1103: mark_inode_dirty error [ 57.148618][ T3006] kvm [3005]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0xffffffffffffffff [ 57.243266][ T3020] pimreg: tun_chr_ioctl cmd 1074025672 [ 57.260519][ T3020] pimreg: ignored: set checksum disabled [ 57.277089][ T3024] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 57.320260][ T310] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 57.451860][ T3031] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 57.461662][ T3031] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.482262][ T3033] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 57.494334][ T3033] EXT4-fs (loop1): Test dummy encryption mode enabled [ 57.512056][ T3033] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,noinit_itable,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 57.609724][ T3042] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 57.628296][ T3033] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 57.637641][ T3042] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue [ 57.647421][ T3033] EXT4-fs (loop1): re-mounted. Opts: (null) [ 57.887262][ T3072] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 57.893735][ T3072] syzkaller0: linktype set to 825 [ 58.074044][ T3100] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1146'. [ 58.080550][ T3097] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 58.164098][ T274] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 58.284070][ T15] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 58.324556][ T3113] loop5: p1 p2 p3 < p5 p6 p7 > [ 58.330008][ T3113] loop5: p2 size 16775168 extends beyond EOD, truncated [ 58.337903][ T3113] loop5: p5 start 4294970168 is beyond EOD, truncated [ 58.348133][ T3119] F2FS-fs (loop1): invalid crc value [ 58.360103][ T3119] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 58.360107][ T95] loop5: p1 p2 p3 < p5 p6 p7 > [ 58.362827][ T95] loop5: p2 size 16775168 extends beyond EOD, truncated [ 58.384388][ T95] loop5: p5 start 4294970168 is beyond EOD, truncated [ 58.386791][ T3119] F2FS-fs (loop1): Start checkpoint disabled! [ 58.397879][ T3119] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 58.432346][ T24] kauditd_printk_skb: 28 callbacks suppressed [ 58.432362][ T24] audit: type=1400 audit(1790051444.509:416): avc: denied { create } for pid=3118 comm="syz.1.1154" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 58.458256][ T1253] udevd[1253]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 58.482433][ T1257] udevd[1257]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 58.496246][ T1255] udevd[1255]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 58.511084][ T366] udevd[366]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 58.512385][ T380] attempt to access beyond end of device [ 58.512385][ T380] loop1: rw=2049, want=40984, limit=40427 [ 58.522856][ T1258] udevd[1258]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 58.542107][ T274] usb 7-1: config index 0 descriptor too short (expected 112, got 45) [ 58.554163][ T15] usb 1-1: Using ep0 maxpacket: 8 [ 58.563561][ T1253] udevd[1253]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 58.596357][ T1257] udevd[1257]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 58.606933][ T1255] udevd[1255]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 58.617434][ T366] udevd[366]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 58.627881][ T1256] udevd[1256]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 58.643836][ T24] audit: type=1400 audit(1790051444.729:417): avc: denied { remount } for pid=3126 comm="syz.1.1156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.676130][ T656] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 58.684136][ T15] usb 1-1: config 1 interface 0 altsetting 81 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.688507][ T3131] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 58.697350][ T15] usb 1-1: config 1 interface 0 has no altsetting 0 [ 58.707923][ T3131] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.724513][ T274] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 58.733539][ T274] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.741824][ T274] usb 7-1: Product: syz [ 58.746276][ T274] usb 7-1: Manufacturer: syz [ 58.750867][ T274] usb 7-1: SerialNumber: syz [ 58.770110][ T3131] EXT4-fs error (device loop1): ext4_empty_dir:3077: inode #12: comm syz.1.1158: Directory hole found for htree leaf block 0 [ 58.864169][ T15] usb 1-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice= 0.40 [ 58.873270][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.881338][ T15] usb 1-1: Product: syz [ 58.885794][ T15] usb 1-1: Manufacturer: syz [ 58.890392][ T15] usb 1-1: SerialNumber: syz [ 58.924054][ T656] usb 6-1: Using ep0 maxpacket: 16 [ 59.044121][ T656] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 59.204116][ T656] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 59.213184][ T656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.221604][ T656] usb 6-1: Product: syz [ 59.225955][ T656] usb 6-1: Manufacturer: syz [ 59.230529][ T656] usb 6-1: SerialNumber: syz [ 59.235751][ T656] usb 6-1: config 0 descriptor?? [ 59.244071][ T487] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 59.274572][ T656] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 59.282305][ T656] usb 6-1: Detected FT232RL [ 59.289359][ T3148] EXT4-fs (loop4): Test dummy encryption mode enabled [ 59.297083][ T3148] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue [ 59.309910][ T3148] ext4 filesystem being mounted at /233/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.354070][ T15] usbhid 1-1:1.0: can't add hid device: -71 [ 59.360104][ T15] usbhid: probe of 1-1:1.0 failed with error -71 [ 59.371290][ T15] usb 1-1: USB disconnect, device number 6 [ 59.438282][ T3152] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 59.464768][ T9] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 59.484079][ T656] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 59.504083][ T487] usb 2-1: Using ep0 maxpacket: 32 [ 59.624213][ T487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.634351][ T3163] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.636711][ T487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.655528][ T487] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 59.671543][ T487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.687380][ T487] usb 2-1: config 0 descriptor?? [ 59.745254][ T3181] dyndbg: expected <4096 bytes into control [ 59.751385][ T656] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 59.768002][ T458] kernel write not supported for file /input/event0 (pid: 458 comm: kworker/1:4) [ 59.894421][ T3188] exfat: Deprecated parameter 'namecase' [ 59.900087][ T3188] exfat: Deprecated parameter 'utf8' [ 59.906137][ T3170] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 59.946277][ T656] usb 6-1: USB disconnect, device number 5 [ 59.962789][ T3188] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 59.981656][ T656] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 59.991782][ T656] ftdi_sio 6-1:0.0: device disconnected [ 60.125396][ T3203] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,,errors=continue [ 60.158880][ T3203] EXT4-fs warning (device loop0): empty_inline_dir:1865: bad inline directory (dir #12) - no `..' [ 60.170417][ T487] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x0 [ 60.181617][ T487] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x0 [ 60.188763][ T487] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x0 [ 60.195924][ T487] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x0 [ 60.202775][ T487] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x0 [ 60.209849][ T487] savu 0003:1E7D:2D5A.000C: unbalanced collection at end of report description [ 60.218991][ T487] savu 0003:1E7D:2D5A.000C: parse failed [ 60.224824][ T487] savu: probe of 0003:1E7D:2D5A.000C failed with error -22 [ 60.314988][ T3221] xt_hashlimit: size too large, truncated to 1048576 [ 60.399918][ T458] usb 2-1: USB disconnect, device number 5 [ 60.402881][ T3191] F2FS-fs (loop4): invalid crc value [ 60.430434][ T3191] F2FS-fs (loop4): Found nat_bits in checkpoint [ 60.495916][ T3191] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 60.578719][ T24] audit: type=1400 audit(1790051446.659:418): avc: denied { create } for pid=3190 comm="syz.4.1183" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.599496][ T24] audit: type=1400 audit(1790051446.659:419): avc: denied { read write open } for pid=3190 comm="syz.4.1183" path="/240/file1/file1" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.832773][ T24] audit: type=1400 audit(1790051446.909:420): avc: denied { search } for pid=3273 comm="syz.6.1218" name="/" dev="configfs" ino=14100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.857891][ T24] audit: type=1400 audit(1790051446.939:421): avc: denied { unmount } for pid=2740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 60.888740][ T24] audit: type=1400 audit(1790051446.959:422): avc: denied { read } for pid=3278 comm="syz.6.1220" name="file0" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.971374][ T3283] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.986248][ T3294] sd 0:0:1:0: PR command failed: 134217730 [ 60.991063][ T3283] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1222: bg 0: block 384: padding at end of block bitmap is not set [ 60.992091][ T3294] sd 0:0:1:0: Sense Key : 0x5 [current] [ 61.008525][ T3283] EXT4-fs (loop4): Remounting filesystem read-only [ 61.012732][ T3294] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 61.019038][ T3283] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 61.032749][ T3283] EXT4-fs error (device loop4): ext4_clear_blocks:880: inode #11: comm syz.4.1222: attempt to clear invalid blocks 983260 len 1 [ 61.053230][ T3290] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 61.064269][ T3290] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 61.071626][ T3290] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 61.084163][ T3283] EXT4-fs error (device loop4): __ext4_get_inode_loc:4451: comm syz.4.1222: Invalid inode table block 0 in block_group 0 [ 61.110169][ T3283] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 61.111359][ T3290] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,noblock_validity,nomblk_io_submit,i_version,grpquota,nomblk_io_submit,noinit_itable,dioread_nolock, [ 61.139913][ T3290] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.150438][ T3283] EXT4-fs error (device loop4) in ext4_orphan_del:3292: Corrupt filesystem [ 61.168707][ T3283] EXT4-fs error (device loop4): __ext4_get_inode_loc:4451: comm syz.4.1222: Invalid inode table block 0 in block_group 0 [ 61.182109][ T3283] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 61.195094][ T3301] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 61.208688][ T3283] EXT4-fs error (device loop4): ext4_truncate:4403: inode #11: comm syz.4.1222: mark_inode_dirty error [ 61.244065][ T274] rtl8150 7-1:1.0: couldn't reset the device [ 61.244150][ T274] rtl8150: probe of 7-1:1.0 failed with error -5 [ 61.245362][ T274] usb 7-1: USB disconnect, device number 2 [ 61.258247][ T24] audit: type=1400 audit(1790051447.339:423): avc: denied { ioctl } for pid=3312 comm="syz.0.1233" path="socket:[25862]" dev="sockfs" ino=25862 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.258469][ T3283] EXT4-fs error (device loop4) in ext4_orphan_cleanup:3106: Corrupt filesystem [ 61.258645][ T3283] EXT4-fs (loop4): 1 truncate cleaned up [ 61.258661][ T3283] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity, [ 61.286213][ T3283] EXT4-fs error (device loop4): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz.4.1222: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=0, size=1024 fake=0 [ 61.293165][ T3283] EXT4-fs (loop4): Remounting filesystem read-only [ 61.299201][ T3318] device bridge_slave_0 left promiscuous mode [ 61.394819][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.403190][ T3318] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 61.507247][ T3326] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.571741][ T3326] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.585234][ T3326] EXT4-fs (loop0): 1 truncate cleaned up [ 61.592093][ T3326] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum, [ 61.695476][ T3290] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #15: comm syz.1.1224: lblock 0 mapped to illegal pblock 0 (length 6) [ 61.709345][ T3290] EXT4-fs (loop1): Remounting filesystem read-only [ 61.709593][ T3338] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 61.723257][ T3338] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 61.723257][ T3338] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 61.723257][ T3338] [ 61.741127][ T3338] EXT4-fs (loop4): Test dummy encryption mode enabled [ 61.748072][ T3338] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.758840][ T3323] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 61.766890][ T3323] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 61.776545][ T3323] F2FS-fs (loop5): invalid crc value [ 61.776613][ T3338] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.1243: bad orphan inode 131083 [ 61.782959][ T3323] F2FS-fs (loop5): Found nat_bits in checkpoint [ 61.792568][ T3338] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,lazytime,inlinecrypt,nomblk_io_submit,noquota,nodioread_nolock,noacl,test_dummy_encryption=v1,usrquota,,errors=continue [ 61.866576][ T24] audit: type=1400 audit(1790051447.949:424): avc: denied { read } for pid=3349 comm="syz.1.1246" laddr=fe80::a02f:84ff:fe1d:ceea lport=6 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.889338][ T3355] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1249'. [ 61.900674][ T3323] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 61.908005][ T3323] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 61.956690][ T24] audit: type=1400 audit(1790051448.039:425): avc: denied { setattr } for pid=3319 comm="syz.5.1237" name="file0" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.988082][ T3358] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 62.128192][ T3380] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 62.278962][ T5] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 62.290184][ T3402] syz.1.1267 uses obsolete (PF_INET,SOCK_PACKET) [ 62.393901][ T3423] binder: 3422:3423 ioctl c00c620f 200000000140 returned -22 [ 62.404361][ T656] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 62.541106][ T3441] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 62.557594][ T3441] EXT4-fs error (device loop4): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 62.572867][ T3441] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 62.585726][ T3441] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.585726][ T3441] [ 62.600359][ T3441] EXT4-fs (loop4): Total free blocks count 0 [ 62.608703][ T3441] EXT4-fs (loop4): Free/Dirty block details [ 62.614932][ T3441] EXT4-fs (loop4): free_blocks=66060288 [ 62.620532][ T3441] EXT4-fs (loop4): dirty_blocks=32 [ 62.626105][ T3441] EXT4-fs (loop4): Block reservation details [ 62.632123][ T3441] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 62.695837][ T5] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.714961][ T5] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.725670][ T5] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.743502][ T5] usb 7-1: config 0 interface 0 has no altsetting 0 [ 62.750178][ T5] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 62.763199][ T5] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.775091][ T5] usb 7-1: config 0 descriptor?? [ 63.009304][ T3466] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 63.017007][ T3466] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 63.026355][ T3466] F2FS-fs (loop0): invalid crc value [ 63.033074][ T3466] F2FS-fs (loop0): Found nat_bits in checkpoint [ 63.055482][ T3466] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 63.062561][ T3466] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 63.083448][ T282] F2FS-fs (loop0): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 63.234740][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.241802][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.249011][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.256655][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.263867][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.270947][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.277826][ T3485] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 63.278086][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.292910][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.300112][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.307432][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.314599][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.321638][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.328872][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.336106][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.343160][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.350390][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.357577][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.364650][ T5] samsung 0003:0419:0600.000D: unknown main item tag 0x0 [ 63.372330][ T5] samsung 0003:0419:0600.000D: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.6-1/input0 [ 63.458007][ T487] usb 7-1: USB disconnect, device number 3 [ 63.574769][ T3503] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 63.586369][ T3503] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue [ 63.600340][ T24] kauditd_printk_skb: 67 callbacks suppressed [ 63.600351][ T24] audit: type=1400 audit(1790051449.679:493): avc: denied { append } for pid=3502 comm="syz.0.1309" path="/277/file0/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.630423][ T24] audit: type=1400 audit(1790051449.679:494): avc: denied { map } for pid=3502 comm="syz.0.1309" path="/277/file0/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.654194][ T24] audit: type=1400 audit(1790051449.689:495): avc: denied { ioctl } for pid=3502 comm="syz.0.1309" path="/277/file0/cgroup.controllers" dev="loop0" ino=18 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.743740][ T3519] input: syz0 as /devices/virtual/input/input17 [ 63.753679][ T24] audit: type=1400 audit(1790051449.839:496): avc: denied { read } for pid=3520 comm="syz.4.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 63.842831][ T3525] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000005,errors=remount-ro,sysvgroups, [ 63.860047][ T3525] EXT4-fs (loop5): shut down requested (2) [ 63.884293][ T3539] exfat: Deprecated parameter 'namecase' [ 63.889985][ T3539] exfat: Deprecated parameter 'namecase' [ 63.946685][ T3539] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 64.046764][ T24] audit: type=1400 audit(1790051450.119:497): avc: denied { mounton } for pid=3538 comm="syz.4.1324" path=2F3237302FE91F7189591E9233614B2F627573 dev="loop4" ino=1048676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.073302][ T3548] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 64.088404][ T3548] System zones: 1-3, 19-19, 35-36 [ 64.093863][ T3548] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,debug,,errors=continue [ 64.104430][ T3548] ext4 filesystem being mounted at /215/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.153718][ T656] kernel write not supported for file /rfkill (pid: 656 comm: kworker/0:5) [ 64.170868][ T24] audit: type=1400 audit(1790051450.249:498): avc: denied { rename } for pid=3547 comm="syz.5.1328" name="#7" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.171826][ T3548] overlayfs: Failed to create volatile/dirty file. [ 64.206956][ T24] audit: type=1400 audit(1790051450.249:499): avc: denied { unlink } for pid=3547 comm="syz.5.1328" name="#8" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.232527][ T24] audit: type=1400 audit(1790051450.279:500): avc: denied { ioctl } for pid=3567 comm="syz.4.1333" path="/dev/fuse" dev="devtmpfs" ino=90 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 64.310908][ T3583] xt_hashlimit: size too large, truncated to 1048576 [ 64.319930][ T24] audit: type=1400 audit(1790051450.409:501): avc: denied { map } for pid=3584 comm="syz.0.1343" path="socket:[27134]" dev="sockfs" ino=27134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.476488][ T3604] exfat: Deprecated parameter 'namecase' [ 64.506277][ T3604] exfat: Bad value for 'namecase' [ 64.621805][ T3598] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.384091][ T26] INFO: task jbd2/sda1-8:58 blocked for more than 122 seconds. [ 205.391760][ T26] Tainted: G W syzkaller #0 [ 205.398131][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 205.406810][ T26] task:jbd2/sda1-8 state:D stack: 0 pid: 58 ppid: 2 flags:0x00004000 [ 205.416053][ T26] Call Trace: [ 205.419359][ T26] __schedule+0xc03/0x13e0 [ 205.423759][ T26] ? __sched_text_start+0x8/0x8 [ 205.428623][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 205.434091][ T26] ? _raw_spin_lock+0xf0/0xf0 [ 205.438823][ T26] schedule+0x13c/0x1d0 [ 205.443014][ T26] io_schedule+0x84/0xe0 [ 205.447300][ T26] bit_wait_io+0x13/0xd0 [ 205.451991][ T26] out_of_line_wait_on_bit+0x16f/0x230 [ 205.457478][ T26] ? bit_wait+0xd0/0xd0 [ 205.461711][ T26] ? __wait_on_bit+0x180/0x180 [ 205.466507][ T26] ? bit_waitqueue+0x30/0x30 [ 205.471089][ T26] ? _raw_write_trylock+0x150/0x150 [ 205.476298][ T26] ? _raw_read_unlock+0x25/0x40 [ 205.481139][ T26] __wait_on_buffer+0x77/0x80 [ 205.485835][ T26] jbd2_journal_commit_transaction+0x2ff4/0x57a0 [ 205.492183][ T26] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 205.498969][ T26] ? compat_start_thread+0x80/0x80 [ 205.504086][ T26] ? __kasan_check_write+0x14/0x20 [ 205.509350][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 205.514832][ T26] ? __schedule+0xc0b/0x13e0 [ 205.519410][ T26] ? detach_if_pending+0x18f/0x300 [ 205.524529][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 205.530427][ T26] ? del_timer_sync+0x144/0x1a0 [ 205.535291][ T26] kjournald2+0x43d/0x850 [ 205.539606][ T26] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 205.544812][ T26] ? io_schedule+0xe0/0xe0 [ 205.549218][ T26] ? __kasan_check_read+0x11/0x20 [ 205.554245][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 205.559171][ T26] kthread+0x324/0x3b0 [ 205.563231][ T26] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 205.568457][ T26] ? kthread_blkcg+0xd0/0xd0 [ 205.573050][ T26] ret_from_fork+0x1f/0x30 [ 205.577507][ T26] INFO: task syz-executor:271 blocked for more than 123 seconds. [ 205.585353][ T26] Tainted: G W syzkaller #0 [ 205.591767][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 205.600477][ T26] task:syz-executor state:D stack: 0 pid: 271 ppid: 270 flags:0x00004000 [ 205.609706][ T26] Call Trace: [ 205.612990][ T26] __schedule+0xc03/0x13e0 [ 205.617444][ T26] ? __sched_text_start+0x8/0x8 [ 205.622300][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 205.627778][ T26] ? _raw_spin_lock+0xf0/0xf0 [ 205.632445][ T26] ? _raw_spin_lock+0x94/0xf0 [ 205.637133][ T26] ? pagecache_get_page+0x844/0x930 [ 205.642423][ T26] schedule+0x13c/0x1d0 [ 205.646585][ T26] io_schedule+0x84/0xe0 [ 205.650810][ T26] bit_wait_io+0x13/0xd0 [ 205.655086][ T26] out_of_line_wait_on_bit+0x16f/0x230 [ 205.660551][ T26] ? bit_wait+0xd0/0xd0 [ 205.664714][ T26] ? __wait_on_bit+0x180/0x180 [ 205.669486][ T26] ? bit_waitqueue+0x30/0x30 [ 205.674087][ T26] do_get_write_access+0x135/0xde0 [ 205.679288][ T26] jbd2_journal_get_write_access+0x199/0x2f0 [ 205.685306][ T26] __ext4_journal_get_write_access+0x230/0x4a0 [ 205.691451][ T26] ? ext4_get_inode_loc+0x130/0x130 [ 205.696667][ T26] ? __ext4_journal_ensure_credits+0x470/0x470 [ 205.702815][ T26] ? slab_post_alloc_hook+0x7d/0x2f0 [ 205.708112][ T26] ? jbd2__journal_start+0x13d/0x6e0 [ 205.713390][ T26] ext4_reserve_inode_write+0x20a/0x2f0 [ 205.719007][ T26] __ext4_mark_inode_dirty+0xb5/0x610 [ 205.724433][ T26] ext4_dirty_inode+0xe0/0x120 [ 205.729204][ T26] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 205.735058][ T26] __mark_inode_dirty+0xbb/0x960 [ 205.739996][ T26] ? memcpy+0x56/0x70 [ 205.744004][ T26] generic_update_time+0x20f/0x230 [ 205.749132][ T26] file_update_time+0x3c0/0x440 [ 205.754011][ T26] ? file_remove_privs+0x590/0x590 [ 205.759115][ T26] ? avc_has_perm+0x27f/0x3d0 [ 205.763774][ T26] ext4_page_mkwrite+0x254/0x12f0 [ 205.768823][ T26] ? memcpy+0x56/0x70 [ 205.772801][ T26] ? avc_has_perm+0x27f/0x3d0 [ 205.777497][ T26] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 205.783737][ T26] wp_page_shared+0x45f/0x740 [ 205.788441][ T26] do_wp_page+0xb68/0xd00 [ 205.792907][ T26] handle_pte_fault+0xbc3/0x3910 [ 205.797870][ T26] handle_mm_fault+0xf86/0x1720 [ 205.802716][ T26] ? kernel_sock_ip_overhead+0x240/0x240 [ 205.808381][ T26] ? can_reuse_spf_vma+0xe0/0xe0 [ 205.813310][ T26] ? __kasan_check_write+0x14/0x20 [ 205.818450][ T26] ? down_read_trylock+0x106/0x160 [ 205.823578][ T26] ? __init_rwsem+0x1c0/0x1c0 [ 205.828269][ T26] ? find_vma+0x30/0x150 [ 205.832510][ T26] do_user_addr_fault+0x576/0xe20 [ 205.837563][ T26] ? do_kern_addr_fault+0x80/0x80 [ 205.842577][ T26] ? debug_smp_processor_id+0x17/0x20 [ 205.847964][ T26] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 205.854044][ T26] exc_page_fault+0x5a/0xc0 [ 205.858529][ T26] ? asm_exc_page_fault+0x8/0x30 [ 205.863545][ T26] asm_exc_page_fault+0x1e/0x30 [ 205.868463][ T26] RIP: 0033:0x7f83b36116e2 [ 205.872873][ T26] RSP: 002b:00007ffd7fe88fc0 EFLAGS: 00010202 [ 205.878950][ T26] RAX: 00007f83b15d1000 RBX: 000055555d3d1ad0 RCX: 0000000000000003 [ 205.886931][ T26] RDX: 0000000000002eeb RSI: 000055555d3d4e48 RDI: 0000000000000008 [ 205.894913][ T26] RBP: 00007ffd7fe894c0 R08: 000055555d3d5588 R09: 0000000000000038 [ 205.902884][ T26] R10: 0000000000000008 R11: 0000000000000003 R12: 00007ffd7fe89300 [ 205.910915][ T26] R13: 00007ffd7fe890f0 R14: 585858582e7a7973 R15: 00007ffd7fe89040 [ 205.918948][ T26] INFO: task kworker/u4:4:380 blocked for more than 123 seconds. [ 205.926681][ T26] Tainted: G W syzkaller #0 [ 205.932987][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 205.941661][ T26] task:kworker/u4:4 state:D stack: 0 pid: 380 ppid: 2 flags:0x00004000 [ 205.950995][ T26] Workqueue: writeback wb_workfn (flush-8:0) [ 205.957171][ T26] Call Trace: [ 205.960450][ T26] __schedule+0xc03/0x13e0 [ 205.964879][ T26] ? __sched_text_start+0x8/0x8 [ 205.969714][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 205.975176][ T26] ? _raw_spin_lock+0xf0/0xf0 [ 205.979837][ T26] ? wq_worker_sleeping+0x60/0x200 [ 205.984953][ T26] schedule+0x13c/0x1d0 [ 205.989116][ T26] io_schedule+0x84/0xe0 [ 205.993332][ T26] bit_wait_io+0x13/0xd0 [ 205.997580][ T26] out_of_line_wait_on_bit+0x16f/0x230 [ 206.003038][ T26] ? bit_wait+0xd0/0xd0 [ 206.007196][ T26] ? __wait_on_bit+0x180/0x180 [ 206.011943][ T26] ? bit_waitqueue+0x30/0x30 [ 206.016532][ T26] ? __kasan_check_write+0x14/0x20 [ 206.021628][ T26] ? __find_get_block+0xe96/0xfb0 [ 206.026721][ T26] do_get_write_access+0x135/0xde0 [ 206.031931][ T26] jbd2_journal_get_write_access+0x199/0x2f0 [ 206.037925][ T26] __ext4_journal_get_write_access+0x230/0x4a0 [ 206.044135][ T26] ? __ext4_journal_ensure_credits+0x470/0x470 [ 206.050271][ T26] ? __kasan_check_read+0x11/0x20 [ 206.055347][ T26] ? ext4_wait_block_bitmap+0x6a/0x1d0 [ 206.060802][ T26] ext4_mb_mark_diskspace_used+0x1ac/0x1250 [ 206.066745][ T26] ? ext4_discard_allocated_blocks+0x5b0/0x5b0 [ 206.072983][ T26] ext4_mb_new_blocks+0x10c4/0x4190 [ 206.078202][ T26] ? memset+0x35/0x40 [ 206.082273][ T26] ? ext4_mb_pa_callback+0xd0/0xd0 [ 206.087416][ T26] ? ext4_ext_check_overlap+0x308/0x550 [ 206.092983][ T26] ? ext4_ext_find_goal+0x108/0x200 [ 206.098208][ T26] ext4_ext_map_blocks+0x15b6/0x5da0 [ 206.103513][ T26] ? __kasan_slab_alloc+0xc9/0xe0 [ 206.108547][ T26] ? __kasan_slab_alloc+0xb7/0xe0 [ 206.113564][ T26] ? slab_post_alloc_hook+0x5d/0x2f0 [ 206.118872][ T26] ? kmem_cache_alloc+0x15a/0x2d0 [ 206.123884][ T26] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 206.129270][ T26] ? ext4_writepages+0xf19/0x2f00 [ 206.134293][ T26] ? do_writepages+0x12e/0x280 [ 206.139059][ T26] ? wb_workfn+0xa49/0xf30 [ 206.143451][ T26] ? process_one_work+0x6fd/0xbc0 [ 206.148492][ T26] ? worker_thread+0xa8e/0x13c0 [ 206.153329][ T26] ? ext4_ext_release+0x10/0x10 [ 206.158293][ T26] ? ext4_es_lookup_extent+0x563/0x900 [ 206.163738][ T26] ext4_map_blocks+0x979/0x1b10 [ 206.168616][ T26] ? slab_post_alloc_hook+0x7d/0x2f0 [ 206.173886][ T26] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 206.179315][ T26] ? ext4_issue_zeroout+0x1a0/0x1a0 [ 206.184515][ T26] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 206.189865][ T26] ? ext4_inode_journal_mode+0x38e/0x470 [ 206.195521][ T26] ext4_writepages+0x1238/0x2f00 [ 206.200447][ T26] ? ext4_readpage+0x220/0x220 [ 206.205227][ T26] ? __local_bh_enable_ip+0x53/0x80 [ 206.210423][ T26] ? local_bh_enable+0x1f/0x30 [ 206.215198][ T26] ? __dev_queue_xmit+0x1569/0x2500 [ 206.220384][ T26] ? crypto_poly1305_setdctxkey+0x4f/0x3f0 [ 206.226202][ T26] ? selinux_ip_postroute+0x2b9/0xe90 [ 206.231562][ T26] ? ext4_readpage+0x220/0x220 [ 206.236363][ T26] do_writepages+0x12e/0x280 [ 206.240942][ T26] ? ip_finish_output2+0xf00/0xf00 [ 206.246079][ T26] ? __writepage+0x130/0x130 [ 206.250709][ T26] ? __kasan_check_write+0x14/0x20 [ 206.255838][ T26] ? __kasan_check_write+0x14/0x20 [ 206.260939][ T26] ? _raw_spin_lock+0x94/0xf0 [ 206.265667][ T26] __writeback_single_inode+0xd9/0xa30 [ 206.271148][ T26] ? wbc_attach_and_unlock_inode+0x171/0x590 [ 206.277155][ T26] ? wb_io_lists_depopulated+0x8c/0x180 [ 206.282705][ T26] writeback_sb_inodes+0x96d/0x1680 [ 206.287917][ T26] ? queue_io+0x4b0/0x4b0 [ 206.292243][ T26] ? __kasan_check_write+0x14/0x20 [ 206.297385][ T26] ? __kasan_check_read+0x11/0x20 [ 206.302409][ T26] wb_writeback+0x4be/0xb80 [ 206.306944][ T26] ? wb_io_lists_depopulated+0x180/0x180 [ 206.312566][ T26] ? set_worker_desc+0x1ba/0x1f0 [ 206.317532][ T26] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 206.323150][ T26] ? __kasan_check_write+0x14/0x20 [ 206.328272][ T26] ? cpumask_next+0x25/0x30 [ 206.332763][ T26] wb_workfn+0xa49/0xf30 [ 206.337027][ T26] ? inode_wait_for_writeback+0x220/0x220 [ 206.342743][ T26] ? __update_idle_core+0x280/0x280 [ 206.347961][ T26] ? finish_task_switch+0x12e/0x5a0 [ 206.353289][ T26] ? __switch_to_asm+0x3a/0x60 [ 206.358205][ T26] ? __kasan_check_read+0x11/0x20 [ 206.363223][ T26] ? read_word_at_a_time+0x12/0x20 [ 206.368363][ T26] ? strscpy+0x9b/0x290 [ 206.372506][ T26] process_one_work+0x6fd/0xbc0 [ 206.377366][ T26] worker_thread+0xa8e/0x13c0 [ 206.382035][ T26] kthread+0x324/0x3b0 [ 206.386114][ T26] ? worker_clr_flags+0x190/0x190 [ 206.391124][ T26] ? kthread_blkcg+0xd0/0xd0 [ 206.395720][ T26] ret_from_fork+0x1f/0x30 [ 206.400161][ T26] INFO: task syz.0.1350:3596 blocked for more than 123 seconds. [ 206.407798][ T26] Tainted: G W syzkaller #0 [ 206.414126][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 206.422768][ T26] task:syz.0.1350 state:D stack: 0 pid: 3596 ppid: 282 flags:0x00004004 [ 206.431971][ T26] Call Trace: [ 206.435261][ T26] __schedule+0xc03/0x13e0 [ 206.439654][ T26] ? __sched_text_start+0x8/0x8 [ 206.444512][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 206.449953][ T26] ? _raw_spin_lock+0xf0/0xf0 [ 206.454660][ T26] ? _raw_spin_lock+0x94/0xf0 [ 206.459331][ T26] ? pagecache_get_page+0x844/0x930 [ 206.464535][ T26] schedule+0x13c/0x1d0 [ 206.468675][ T26] io_schedule+0x84/0xe0 [ 206.472892][ T26] bit_wait_io+0x13/0xd0 [ 206.477170][ T26] out_of_line_wait_on_bit+0x16f/0x230 [ 206.482619][ T26] ? bit_wait+0xd0/0xd0 [ 206.486802][ T26] ? __wait_on_bit+0x180/0x180 [ 206.491553][ T26] ? bit_waitqueue+0x30/0x30 [ 206.496153][ T26] do_get_write_access+0x135/0xde0 [ 206.501257][ T26] jbd2_journal_get_write_access+0x199/0x2f0 [ 206.507249][ T26] __ext4_journal_get_write_access+0x230/0x4a0 [ 206.513384][ T26] ? ext4_get_inode_loc+0x130/0x130 [ 206.518586][ T26] ? __ext4_journal_ensure_credits+0x470/0x470 [ 206.524768][ T26] ? slab_post_alloc_hook+0x7d/0x2f0 [ 206.530030][ T26] ext4_reserve_inode_write+0x20a/0x2f0 [ 206.535605][ T26] __ext4_mark_inode_dirty+0xb5/0x610 [ 206.540989][ T26] ext4_dirty_inode+0xe0/0x120 [ 206.545773][ T26] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 206.551575][ T26] __mark_inode_dirty+0xbb/0x960 [ 206.556549][ T26] ? memcpy+0x56/0x70 [ 206.560520][ T26] generic_update_time+0x20f/0x230 [ 206.565647][ T26] file_update_time+0x3c0/0x440 [ 206.570485][ T26] ? file_remove_privs+0x590/0x590 [ 206.575634][ T26] ext4_page_mkwrite+0x254/0x12f0 [ 206.580651][ T26] ? rotate_reclaimable_page+0x4b0/0x4b0 [ 206.586290][ T26] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 206.592525][ T26] handle_pte_fault+0x1dde/0x3910 [ 206.597599][ T26] handle_mm_fault+0xf86/0x1720 [ 206.602455][ T26] ? can_reuse_spf_vma+0xe0/0xe0 [ 206.607419][ T26] ? __kasan_check_write+0x14/0x20 [ 206.612523][ T26] ? down_read_trylock+0x106/0x160 [ 206.617692][ T26] ? __kasan_check_write+0x14/0x20 [ 206.622802][ T26] ? can_reuse_spf_vma+0xc8/0xe0 [ 206.627760][ T26] do_user_addr_fault+0x576/0xe20 [ 206.632773][ T26] ? do_kern_addr_fault+0x80/0x80 [ 206.637816][ T26] ? debug_smp_processor_id+0x17/0x20 [ 206.643197][ T26] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 206.649273][ T26] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 206.654924][ T26] exc_page_fault+0x5a/0xc0 [ 206.659404][ T26] ? asm_exc_page_fault+0x8/0x30 [ 206.664369][ T26] asm_exc_page_fault+0x1e/0x30 [ 206.669203][ T26] RIP: 0033:0x7fbe204137a9 [ 206.673602][ T26] RSP: 002b:00007ffe92a02f40 EFLAGS: 00010202 [ 206.679676][ T26] RAX: 0000001b2e524000 RBX: ffffffff81af615a RCX: 0000001b2e523ff8 [ 206.687668][ T26] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007fbe212f6700 [ 206.695753][ T26] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007fbe207b3000 [ 206.703710][ T26] R10: 00007fbe212f6700 R11: 0000000000000000 R12: 00007fbe207c7038 [ 206.711720][ T26] R13: 0000000000000000 R14: ffffffff81af6830 R15: 00007fbe212f6720 [ 206.719794][ T26] ? __x64_sys_mount+0x20/0xd0 [ 206.724566][ T26] ? lock_mnt_tree+0x1aa/0x1d0 [ 206.729460][ T26] INFO: task syz.5.1353:3603 blocked for more than 124 seconds. [ 206.737121][ T26] Tainted: G W syzkaller #0 [ 206.743443][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 206.752204][ T26] task:syz.5.1353 state:D stack: 0 pid: 3603 ppid: 973 flags:0x00004004 [ 206.761439][ T26] Call Trace: [ 206.764739][ T26] __schedule+0xc03/0x13e0 [ 206.769143][ T26] ? __sched_text_start+0x8/0x8 [ 206.774007][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 206.779450][ T26] ? _raw_spin_lock+0xf0/0xf0 [ 206.784131][ T26] ? _raw_spin_lock+0x94/0xf0 [ 206.788794][ T26] ? pagecache_get_page+0x844/0x930 [ 206.794001][ T26] schedule+0x13c/0x1d0 [ 206.798143][ T26] io_schedule+0x84/0xe0 [ 206.802366][ T26] bit_wait_io+0x13/0xd0 [ 206.806622][ T26] out_of_line_wait_on_bit+0x16f/0x230 [ 206.812068][ T26] ? bit_wait+0xd0/0xd0 [ 206.816226][ T26] ? __wait_on_bit+0x180/0x180 [ 206.820990][ T26] ? bit_waitqueue+0x30/0x30 [ 206.825629][ T26] do_get_write_access+0x135/0xde0 [ 206.830727][ T26] jbd2_journal_get_write_access+0x199/0x2f0 [ 206.836740][ T26] __ext4_journal_get_write_access+0x230/0x4a0 [ 206.842918][ T26] ? ext4_get_inode_loc+0x130/0x130 [ 206.848251][ T26] ? __ext4_journal_ensure_credits+0x470/0x470 [ 206.854436][ T26] ? slab_post_alloc_hook+0x7d/0x2f0 [ 206.859697][ T26] ? jbd2__journal_start+0x13d/0x6e0 [ 206.865019][ T26] ext4_reserve_inode_write+0x20a/0x2f0 [ 206.870551][ T26] __ext4_mark_inode_dirty+0xb5/0x610 [ 206.875942][ T26] ext4_dirty_inode+0xe0/0x120 [ 206.880703][ T26] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 206.886536][ T26] __mark_inode_dirty+0xbb/0x960 [ 206.891461][ T26] ? memcpy+0x56/0x70 [ 206.895454][ T26] generic_update_time+0x20f/0x230 [ 206.900550][ T26] file_update_time+0x3c0/0x440 [ 206.905409][ T26] ? file_remove_privs+0x590/0x590 [ 206.910510][ T26] ext4_page_mkwrite+0x254/0x12f0 [ 206.915556][ T26] ? futex_wait+0x5b5/0x6f0 [ 206.920052][ T26] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 206.926309][ T26] handle_pte_fault+0x1dde/0x3910 [ 206.931320][ T26] handle_mm_fault+0xf86/0x1720 [ 206.936190][ T26] ? can_reuse_spf_vma+0xe0/0xe0 [ 206.941113][ T26] ? __kasan_check_write+0x14/0x20 [ 206.946226][ T26] ? down_read_trylock+0x106/0x160 [ 206.951323][ T26] ? __kasan_check_write+0x14/0x20 [ 206.956439][ T26] ? can_reuse_spf_vma+0xc8/0xe0 [ 206.961360][ T26] do_user_addr_fault+0x576/0xe20 [ 206.966423][ T26] ? do_kern_addr_fault+0x80/0x80 [ 206.971434][ T26] ? __kasan_check_read+0x11/0x20 [ 206.976464][ T26] exc_page_fault+0x5a/0xc0 [ 206.980954][ T26] ? asm_exc_page_fault+0x8/0x30 [ 206.985922][ T26] asm_exc_page_fault+0x1e/0x30 [ 206.990867][ T26] RIP: 0033:0x7f6573a757a9 [ 206.995324][ T26] RSP: 002b:00007ffe023958f0 EFLAGS: 00010202 [ 207.001379][ T26] RAX: 0000001b31923000 RBX: ffffffff825bdc4c RCX: 0000001b31922ff8 [ 207.009355][ T26] RDX: 0000001b3132421c RSI: 0000000000000008 RDI: 00007f6574958720 [ 207.017615][ T26] RBP: 0000000000000123 R08: 00007f6573e13000 R09: 00007f6573e15000 [ 207.025598][ T26] R10: 00000000825bdc50 R11: 0000000000000001 R12: 00007f6573e29038 [ 207.033561][ T26] R13: 000000000000021e R14: ffffffff825bd1c3 R15: 00007f6574958720 [ 207.041557][ T26] ? string+0x23/0x2a0 [ 207.045635][ T26] ? pointer+0x80c/0xc40 [ 207.049855][ T26] INFO: task syz.6.1357:3614 blocked for more than 124 seconds. [ 207.057489][ T26] Tainted: G W syzkaller #0 [ 207.063800][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 207.072629][ T26] task:syz.6.1357 state:D stack: 0 pid: 3614 ppid: 2740 flags:0x00004004 [ 207.081892][ T26] Call Trace: [ 207.085210][ T26] __schedule+0xc03/0x13e0 [ 207.089639][ T26] ? __sched_text_start+0x8/0x8 [ 207.094542][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 207.099989][ T26] ? _raw_spin_lock+0xf0/0xf0 [ 207.104677][ T26] schedule+0x13c/0x1d0 [ 207.108819][ T26] io_schedule+0x84/0xe0 [ 207.113033][ T26] bit_wait_io+0x13/0xd0 [ 207.117280][ T26] out_of_line_wait_on_bit+0x16f/0x230 [ 207.122735][ T26] ? bit_wait+0xd0/0xd0 [ 207.126920][ T26] ? __wait_on_bit+0x180/0x180 [ 207.131667][ T26] ? bit_waitqueue+0x30/0x30 [ 207.136277][ T26] do_get_write_access+0x135/0xde0 [ 207.141380][ T26] jbd2_journal_get_write_access+0x199/0x2f0 [ 207.147366][ T26] __ext4_journal_get_write_access+0x230/0x4a0 [ 207.153534][ T26] ? ext4_get_inode_loc+0x130/0x130 [ 207.158793][ T26] ? __ext4_journal_ensure_credits+0x470/0x470 [ 207.164956][ T26] ? slab_post_alloc_hook+0x7d/0x2f0 [ 207.170215][ T26] ? jbd2__journal_start+0x13d/0x6e0 [ 207.175511][ T26] ext4_reserve_inode_write+0x20a/0x2f0 [ 207.181042][ T26] __ext4_mark_inode_dirty+0xb5/0x610 [ 207.186432][ T26] ext4_dirty_inode+0xe0/0x120 [ 207.191191][ T26] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 207.197009][ T26] __mark_inode_dirty+0xbb/0x960 [ 207.201935][ T26] ? memcpy+0x56/0x70 [ 207.205944][ T26] generic_update_time+0x20f/0x230 [ 207.211084][ T26] file_update_time+0x3c0/0x440 [ 207.215998][ T26] ? file_remove_privs+0x590/0x590 [ 207.221109][ T26] ext4_page_mkwrite+0x254/0x12f0 [ 207.226178][ T26] ? __alloc_pages_nodemask+0x29a/0x640 [ 207.231729][ T26] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 207.237300][ T26] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 207.243539][ T26] handle_pte_fault+0x1dde/0x3910 [ 207.248608][ T26] ? _raw_spin_unlock+0x4d/0x70 [ 207.253453][ T26] handle_mm_fault+0xf86/0x1720 [ 207.258329][ T26] ? mmap_region+0xf12/0x19c0 [ 207.263013][ T26] ? can_reuse_spf_vma+0xe0/0xe0 [ 207.268063][ T26] ? __kasan_check_write+0x14/0x20 [ 207.273188][ T26] ? down_read_trylock+0x106/0x160 [ 207.278333][ T26] ? __init_rwsem+0x1c0/0x1c0 [ 207.283002][ T26] ? vmacache_update+0xb7/0x120 [ 207.287866][ T26] ? find_vma+0x13b/0x150 [ 207.292188][ T26] do_user_addr_fault+0x576/0xe20 [ 207.297229][ T26] ? do_kern_addr_fault+0x80/0x80 [ 207.302271][ T26] ? debug_smp_processor_id+0x17/0x20 [ 207.307685][ T26] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 207.313756][ T26] exc_page_fault+0x5a/0xc0 [ 207.318344][ T26] ? asm_exc_page_fault+0x8/0x30 [ 207.323298][ T26] asm_exc_page_fault+0x1e/0x30 [ 207.328305][ T26] RIP: 0033:0x7f0fb4ab9aa3 [ 207.332715][ T26] RSP: 002b:00007ffc0f12f7d0 EFLAGS: 00010246 [ 207.338816][ T26] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2fa64000 [ 207.346903][ T26] RDX: 0000001b2fa24000 RSI: 0000000000400000 RDI: 00007f0fb4e2e708 [ 207.354888][ T26] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.362854][ T26] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 207.370976][ T26] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc0f12fa60 [ 207.378966][ T26] INFO: task syz.4.1358:3615 blocked for more than 124 seconds. [ 207.386600][ T26] Tainted: G W syzkaller #0 [ 207.392910][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 207.401595][ T26] task:syz.4.1358 state:D stack: 0 pid: 3615 ppid: 283 flags:0x00004004 [ 207.410829][ T26] Call Trace: [ 207.414140][ T26] __schedule+0xc03/0x13e0 [ 207.418565][ T26] ? __sched_text_start+0x8/0x8 [ 207.423391][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 207.428867][ T26] ? _raw_spin_lock+0xf0/0xf0 [ 207.433555][ T26] ? _raw_spin_lock+0x94/0xf0 [ 207.438242][ T26] ? pagecache_get_page+0x844/0x930 [ 207.443425][ T26] schedule+0x13c/0x1d0 [ 207.447597][ T26] io_schedule+0x84/0xe0 [ 207.451830][ T26] bit_wait_io+0x13/0xd0 [ 207.456081][ T26] out_of_line_wait_on_bit+0x16f/0x230 [ 207.461649][ T26] ? bit_wait+0xd0/0xd0 [ 207.465839][ T26] ? __wait_on_bit+0x180/0x180 [ 207.470597][ T26] ? bit_waitqueue+0x30/0x30 [ 207.475202][ T26] do_get_write_access+0x135/0xde0 [ 207.480314][ T26] jbd2_journal_get_write_access+0x199/0x2f0 [ 207.486304][ T26] __ext4_journal_get_write_access+0x230/0x4a0 [ 207.492450][ T26] ? ext4_get_inode_loc+0x130/0x130 [ 207.497658][ T26] ? __ext4_journal_ensure_credits+0x470/0x470 [ 207.503797][ T26] ? slab_post_alloc_hook+0x7d/0x2f0 [ 207.509086][ T26] ? jbd2__journal_start+0x13d/0x6e0 [ 207.514374][ T26] ext4_reserve_inode_write+0x20a/0x2f0 [ 207.519901][ T26] __ext4_mark_inode_dirty+0xb5/0x610 [ 207.525281][ T26] ext4_dirty_inode+0xe0/0x120 [ 207.530028][ T26] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 207.535842][ T26] __mark_inode_dirty+0xbb/0x960 [ 207.540765][ T26] ? memcpy+0x56/0x70 [ 207.544759][ T26] generic_update_time+0x20f/0x230 [ 207.549861][ T26] file_update_time+0x3c0/0x440 [ 207.554741][ T26] ? file_remove_privs+0x590/0x590 [ 207.559833][ T26] ext4_page_mkwrite+0x254/0x12f0 [ 207.564901][ T26] ? __alloc_pages_nodemask+0x29a/0x640 [ 207.570437][ T26] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 207.576006][ T26] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 207.582245][ T26] handle_pte_fault+0x1dde/0x3910 [ 207.587294][ T26] ? _raw_spin_unlock+0x4d/0x70 [ 207.592141][ T26] handle_mm_fault+0xf86/0x1720 [ 207.597028][ T26] ? mmap_region+0xf12/0x19c0 [ 207.601770][ T26] ? can_reuse_spf_vma+0xe0/0xe0 [ 207.606751][ T26] ? __kasan_check_write+0x14/0x20 [ 207.611879][ T26] ? down_read_trylock+0x106/0x160 [ 207.617007][ T26] ? __init_rwsem+0x1c0/0x1c0 [ 207.621739][ T26] ? vmacache_update+0xb7/0x120 [ 207.626608][ T26] ? find_vma+0x13b/0x150 [ 207.630928][ T26] do_user_addr_fault+0x576/0xe20 [ 207.635987][ T26] ? do_kern_addr_fault+0x80/0x80 [ 207.641025][ T26] ? debug_smp_processor_id+0x17/0x20 [ 207.646419][ T26] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 207.652474][ T26] exc_page_fault+0x5a/0xc0 [ 207.657008][ T26] ? asm_exc_page_fault+0x8/0x30 [ 207.661941][ T26] asm_exc_page_fault+0x1e/0x30 [ 207.666823][ T26] RIP: 0033:0x7efff707baa3 [ 207.671222][ T26] RSP: 002b:00007ffcac3125c0 EFLAGS: 00010246 [ 207.677302][ T26] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2e364000 [ 207.685285][ T26] RDX: 0000001b2e324000 RSI: 0000000000600000 RDI: 00007efff73f0708 [ 207.693235][ T26] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.701217][ T26] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 207.709236][ T26] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcac312850 [ 207.717255][ T26] INFO: task syz.1.1359:3616 blocked for more than 125 seconds. [ 207.724883][ T26] Tainted: G W syzkaller #0 [ 207.731186][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 207.739887][ T26] task:syz.1.1359 state:D stack: 0 pid: 3616 ppid: 280 flags:0x00004004 [ 207.749093][ T26] Call Trace: [ 207.752365][ T26] __schedule+0xc03/0x13e0 [ 207.756808][ T26] ? __sched_text_start+0x8/0x8 [ 207.761660][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 207.767133][ T26] ? _raw_spin_lock+0xf0/0xf0 [ 207.771800][ T26] ? _raw_spin_lock+0x94/0xf0 [ 207.776508][ T26] ? pagecache_get_page+0x844/0x930 [ 207.781704][ T26] schedule+0x13c/0x1d0 [ 207.785875][ T26] io_schedule+0x84/0xe0 [ 207.790107][ T26] bit_wait_io+0x13/0xd0 [ 207.794381][ T26] out_of_line_wait_on_bit+0x16f/0x230 [ 207.799825][ T26] ? bit_wait+0xd0/0xd0 [ 207.804004][ T26] ? __wait_on_bit+0x180/0x180 [ 207.808757][ T26] ? bit_waitqueue+0x30/0x30 [ 207.813429][ T26] do_get_write_access+0x135/0xde0 [ 207.818582][ T26] jbd2_journal_get_write_access+0x199/0x2f0 [ 207.824741][ T26] __ext4_journal_get_write_access+0x230/0x4a0 [ 207.830876][ T26] ? ext4_get_inode_loc+0x130/0x130 [ 207.836088][ T26] ? __ext4_journal_ensure_credits+0x470/0x470 [ 207.842224][ T26] ? slab_post_alloc_hook+0x7d/0x2f0 [ 207.847526][ T26] ? jbd2__journal_start+0x13d/0x6e0 [ 207.852797][ T26] ext4_reserve_inode_write+0x20a/0x2f0 [ 207.858452][ T26] __ext4_mark_inode_dirty+0xb5/0x610 [ 207.863827][ T26] ext4_dirty_inode+0xe0/0x120 [ 207.868725][ T26] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 207.874542][ T26] __mark_inode_dirty+0xbb/0x960 [ 207.879459][ T26] ? memcpy+0x56/0x70 [ 207.883434][ T26] generic_update_time+0x20f/0x230 [ 207.888573][ T26] file_update_time+0x3c0/0x440 [ 207.893416][ T26] ? file_remove_privs+0x590/0x590 [ 207.898537][ T26] ext4_page_mkwrite+0x254/0x12f0 [ 207.903547][ T26] ? __alloc_pages_nodemask+0x29a/0x640 [ 207.909101][ T26] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 207.914727][ T26] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 207.920956][ T26] handle_pte_fault+0x1dde/0x3910 [ 207.925990][ T26] ? _raw_spin_unlock+0x4d/0x70 [ 207.930823][ T26] handle_mm_fault+0xf86/0x1720 [ 207.935723][ T26] ? mmap_region+0xf12/0x19c0 [ 207.940400][ T26] ? can_reuse_spf_vma+0xe0/0xe0 [ 207.945365][ T26] ? __kasan_check_write+0x14/0x20 [ 207.950462][ T26] ? down_read_trylock+0x106/0x160 [ 207.955681][ T26] ? __init_rwsem+0x1c0/0x1c0 [ 207.960347][ T26] ? vmacache_update+0xb7/0x120 [ 207.965339][ T26] ? find_vma+0x13b/0x150 [ 207.969722][ T26] do_user_addr_fault+0x576/0xe20 [ 207.974768][ T26] ? do_kern_addr_fault+0x80/0x80 [ 207.979788][ T26] ? debug_smp_processor_id+0x17/0x20 [ 207.985189][ T26] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 207.991252][ T26] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 207.998851][ T26] exc_page_fault+0x5a/0xc0 [ 208.003348][ T26] ? asm_exc_page_fault+0x8/0x30 [ 208.008315][ T26] asm_exc_page_fault+0x1e/0x30 [ 208.013323][ T26] RIP: 0033:0x7f2e62203aa3 [ 208.017761][ T26] RSP: 002b:00007ffcde7fd770 EFLAGS: 00010246 [ 208.023829][ T26] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2e064000 [ 208.031971][ T26] RDX: 0000001b2e024000 RSI: 0000000000400000 RDI: 00007f2e62578708 [ 208.040000][ T26] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.048192][ T26] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 208.056222][ T26] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcde7fda00 [ 208.064241][ T26] NMI backtrace for cpu 1 [ 208.068558][ T26] CPU: 1 PID: 26 Comm: khungtaskd Tainted: G W syzkaller #0 [ 208.077118][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.087181][ T26] Call Trace: [ 208.090466][ T26] __dump_stack+0x21/0x24 [ 208.094773][ T26] dump_stack_lvl+0x1a7/0x208 [ 208.099425][ T26] ? show_regs_print_info+0x18/0x18 [ 208.104598][ T26] ? rcu_read_unlock_special+0x177/0x430 [ 208.110211][ T26] ? sched_show_task+0x31c/0x480 [ 208.115122][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 208.120040][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 208.126085][ T26] dump_stack+0x15/0x1c [ 208.130219][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 208.136170][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 208.142039][ T26] watchdog+0xe14/0xf60 [ 208.146169][ T26] ? hungtask_pm_notify+0x50/0x50 [ 208.151214][ T26] ? __kasan_check_read+0x11/0x20 [ 208.156212][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 208.161121][ T26] kthread+0x324/0x3b0 [ 208.165166][ T26] ? hungtask_pm_notify+0x50/0x50 [ 208.170161][ T26] ? kthread_blkcg+0xd0/0xd0 [ 208.174722][ T26] ret_from_fork+0x1f/0x30 [ 208.179197][ T26] Sending NMI from CPU 1 to CPUs 0: [ 208.184450][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0x12/0x20 [ 228.424138][ T26] INFO: task jbd2/sda1-8:58 blocked for more than 145 seconds. [ 228.431787][ T26] Tainted: G W syzkaller #0 [ 228.438145][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 228.446821][ T26] task:jbd2/sda1-8 state:D stack: 0 pid: 58 ppid: 2 flags:0x00004000 [ 228.456025][ T26] Call Trace: [ 228.459302][ T26] __schedule+0xc03/0x13e0 [ 228.463694][ T26] ? __sched_text_start+0x8/0x8 [ 228.468571][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 228.474041][ T26] ? _raw_spin_lock+0xf0/0xf0 [ 228.478694][ T26] schedule+0x13c/0x1d0 [ 228.482823][ T26] io_schedule+0x84/0xe0 [ 228.487068][ T26] bit_wait_io+0x13/0xd0 [ 228.491295][ T26] out_of_line_wait_on_bit+0x16f/0x230 [ 228.496765][ T26] ? bit_wait+0xd0/0xd0 [ 228.500904][ T26] ? __wait_on_bit+0x180/0x180 [ 228.505668][ T26] ? bit_waitqueue+0x30/0x30 [ 228.510237][ T26] ? _raw_write_trylock+0x150/0x150 [ 228.515431][ T26] ? _raw_read_unlock+0x25/0x40 [ 228.520270][ T26] __wait_on_buffer+0x77/0x80 [ 228.525246][ T26] jbd2_journal_commit_transaction+0x2ff4/0x57a0 [ 228.531595][ T26] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 228.538363][ T26] ? compat_start_thread+0x80/0x80 [ 228.543465][ T26] ? __kasan_check_write+0x14/0x20 [ 228.548585][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 228.554044][ T26] ? __schedule+0xc0b/0x13e0 [ 228.558610][ T26] ? detach_if_pending+0x18f/0x300 [ 228.563692][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 228.569505][ T26] ? del_timer_sync+0x144/0x1a0 [ 228.574403][ T26] kjournald2+0x43d/0x850 [ 228.578733][ T26] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 228.583964][ T26] ? io_schedule+0xe0/0xe0 [ 228.588375][ T26] ? __kasan_check_read+0x11/0x20 [ 228.593492][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 228.598450][ T26] kthread+0x324/0x3b0 [ 228.602511][ T26] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 228.607724][ T26] ? kthread_blkcg+0xd0/0xd0 [ 228.612310][ T26] ret_from_fork+0x1f/0x30 [ 228.616786][ T26] INFO: task syz-executor:271 blocked for more than 146 seconds. [ 228.624520][ T26] Tainted: G W syzkaller #0 [ 228.630820][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 228.639505][ T26] task:syz-executor state:D stack: 0 pid: 271 ppid: 270 flags:0x00004000 [ 228.648813][ T26] Call Trace: [ 228.652090][ T26] __schedule+0xc03/0x13e0 [ 228.656521][ T26] ? __sched_text_start+0x8/0x8 [ 228.661354][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 228.666837][ T26] ? _raw_spin_lock+0xf0/0xf0 [ 228.671506][ T26] ? _raw_spin_lock+0x94/0xf0 [ 228.676286][ T26] ? pagecache_get_page+0x844/0x930 [ 228.681470][ T26] schedule+0x13c/0x1d0 [ 228.685654][ T26] io_schedule+0x84/0xe0 [ 228.689883][ T26] bit_wait_io+0x13/0xd0 [ 228.694135][ T26] out_of_line_wait_on_bit+0x16f/0x230 [ 228.699579][ T26] ? bit_wait+0xd0/0xd0 [ 228.703706][ T26] ? __wait_on_bit+0x180/0x180 [ 228.708495][ T26] ? bit_waitqueue+0x30/0x30 [ 228.713076][ T26] do_get_write_access+0x135/0xde0 [ 228.718215][ T26] jbd2_journal_get_write_access+0x199/0x2f0 [ 228.724192][ T26] __ext4_journal_get_write_access+0x230/0x4a0 [ 228.730319][ T26] ? ext4_get_inode_loc+0x130/0x130 [ 228.735542][ T26] ? __ext4_journal_ensure_credits+0x470/0x470 [ 228.741704][ T26] ? slab_post_alloc_hook+0x7d/0x2f0 [ 228.747010][ T26] ? jbd2__journal_start+0x13d/0x6e0 [ 228.752283][ T26] ext4_reserve_inode_write+0x20a/0x2f0 [ 228.757839][ T26] __ext4_mark_inode_dirty+0xb5/0x610 [ 228.763194][ T26] ext4_dirty_inode+0xe0/0x120 [ 228.767962][ T26] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 228.773756][ T26] __mark_inode_dirty+0xbb/0x960 [ 228.778703][ T26] ? memcpy+0x56/0x70 [ 228.782672][ T26] generic_update_time+0x20f/0x230 [ 228.787787][ T26] file_update_time+0x3c0/0x440 [ 228.792626][ T26] ? file_remove_privs+0x590/0x590 [ 228.797752][ T26] ? avc_has_perm+0x27f/0x3d0 [ 228.802549][ T26] ext4_page_mkwrite+0x254/0x12f0 [ 228.807600][ T26] ? memcpy+0x56/0x70 [ 228.811574][ T26] ? avc_has_perm+0x27f/0x3d0 [ 228.816374][ T26] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 228.822604][ T26] wp_page_shared+0x45f/0x740 [ 228.827435][ T26] do_wp_page+0xb68/0xd00 [ 228.831762][ T26] handle_pte_fault+0xbc3/0x3910 [ 228.836937][ T26] handle_mm_fault+0xf86/0x1720 [ 228.841783][ T26] ? kernel_sock_ip_overhead+0x240/0x240 [ 228.847429][ T26] ? can_reuse_spf_vma+0xe0/0xe0 [ 228.852354][ T26] ? __kasan_check_write+0x14/0x20 [ 228.857469][ T26] ? down_read_trylock+0x106/0x160 [ 228.862566][ T26] ? __init_rwsem+0x1c0/0x1c0 [ 228.867255][ T26] ? find_vma+0x30/0x150 [ 228.871483][ T26] do_user_addr_fault+0x576/0xe20 [ 228.876521][ T26] ? do_kern_addr_fault+0x80/0x80 [ 228.881530][ T26] ? debug_smp_processor_id+0x17/0x20 [ 228.886909][ T26] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 228.892962][ T26] exc_page_fault+0x5a/0xc0 [ 228.897475][ T26] ? asm_exc_page_fault+0x8/0x30 [ 228.902395][ T26] asm_exc_page_fault+0x1e/0x30 [ 228.907359][ T26] RIP: 0033:0x7f83b36116e2 [ 228.911763][ T26] RSP: 002b:00007ffd7fe88fc0 EFLAGS: 00010202 [ 228.917831][ T26] RAX: 00007f83b15d1000 RBX: 000055555d3d1ad0 RCX: 0000000000000003 [ 228.925809][ T26] RDX: 0000000000002eeb RSI: 000055555d3d4e48 RDI: 0000000000000008 [ 228.933774][ T26] RBP: 00007ffd7fe894c0 R08: 000055555d3d5588 R09: 0000000000000038 [ 228.941752][ T26] R10: 0000000000000008 R11: 0000000000000003 R12: 00007ffd7fe89300 [ 228.949758][ T26] R13: 00007ffd7fe890f0 R14: 585858582e7a7973 R15: 00007ffd7fe89040 [ 228.957794][ T26] NMI backtrace for cpu 1 [ 228.962108][ T26] CPU: 1 PID: 26 Comm: khungtaskd Tainted: G W syzkaller #0 [ 228.970663][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.980692][ T26] Call Trace: [ 228.983961][ T26] __dump_stack+0x21/0x24 [ 228.988264][ T26] dump_stack_lvl+0x1a7/0x208 [ 228.992908][ T26] ? show_regs_print_info+0x18/0x18 [ 228.998074][ T26] ? rcu_read_unlock_special+0x177/0x430 [ 229.003680][ T26] ? sched_show_task+0x31c/0x480 [ 229.008583][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 229.013491][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 229.019524][ T26] dump_stack+0x15/0x1c [ 229.023647][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 229.029593][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 229.035450][ T26] watchdog+0xe14/0xf60 [ 229.039573][ T26] ? hungtask_pm_notify+0x50/0x50 [ 229.044563][ T26] ? __kasan_check_read+0x11/0x20 [ 229.049552][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 229.054455][ T26] kthread+0x324/0x3b0 [ 229.058489][ T26] ? hungtask_pm_notify+0x50/0x50 [ 229.063487][ T26] ? kthread_blkcg+0xd0/0xd0 [ 229.068058][ T26] ret_from_fork+0x1f/0x30 [ 229.072549][ T26] Sending NMI from CPU 1 to CPUs 0: [ 229.077818][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0x12/0x20