last executing test programs: 1m17.340396997s ago: executing program 32 (id=150): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wake_unlock', 0x82042, 0x12b) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffc98}]) 1m8.107851469s ago: executing program 2 (id=423): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{0x0}], 0x1) 1m8.038724041s ago: executing program 2 (id=434): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, 0x0, 0x0) 1m7.890606635s ago: executing program 2 (id=426): io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1m7.826492696s ago: executing program 2 (id=427): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x2800000, &(0x7f00000002c0)={[{@debug}, {@jqfmt_vfsv0}, {@test_dummy_encryption}, {@test_dummy_encryption}, {@noacl}, {@journal_dev={'journal_dev', 0x3d, 0x100}}, {@delalloc}, {@usrquota}, {@bh}, {@orlov}]}, 0x1, 0xbdd, &(0x7f0000000bc0)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) utime(&(0x7f0000000080)='./file0/file1\x00', 0x0) 1m7.350678998s ago: executing program 2 (id=436): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) 1m7.135374103s ago: executing program 2 (id=442): r0 = socket(0xa, 0x2, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000204e0000", 0x58}], 0x1) 1m7.135295533s ago: executing program 33 (id=442): r0 = socket(0xa, 0x2, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000204e0000", 0x58}], 0x1) 15.810003669s ago: executing program 4 (id=1261): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}}, 0x0) 15.735996671s ago: executing program 4 (id=1263): unshare(0x2000400) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x70d100, 0x0) splice(r0, 0x0, r1, 0x0, 0x1a, 0x0) 15.680188702s ago: executing program 4 (id=1253): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c100000000000224e0000", 0x58}], 0x1) 15.362062729s ago: executing program 4 (id=1265): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000240)={[{@nodiscard}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@nojournal_checksum}, {@acl}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x43, 0x4e8, &(0x7f0000000c40)="$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") mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) 15.088318686s ago: executing program 4 (id=1274): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000002b80)=""/4098, 0x1002}, {&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000002480)=""/92, 0x5c}, {&(0x7f00000007c0)=""/94, 0x5e}, {&(0x7f00000006c0)=""/187, 0xbb}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x6}, 0x80}], 0x1, 0x10122, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d2f25"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x810) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="20000000100001070000000000000000030000000c0002"], 0x20}}, 0x4000084) 14.953052319s ago: executing program 4 (id=1276): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001300010029bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="242400002248000008001300", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x0) 14.952871629s ago: executing program 34 (id=1276): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001300010029bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="242400002248000008001300", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x0) 11.722828417s ago: executing program 6 (id=1348): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f00000032c0)={0x14, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 11.662924979s ago: executing program 6 (id=1349): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_emit_ethernet(0x68, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x4, 0x5a, 0xfffe, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x800]}, {}, {0xdd86}, {0x8, 0x22eb, 0x2, {{}, 0x2, {0xfffffffe, 0xa0}}}}}}}}, 0x0) 11.622343809s ago: executing program 6 (id=1350): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1%0x7', 0x5) 11.18772342s ago: executing program 6 (id=1361): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000240)={[{@nodiscard}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@nojournal_checksum}, {@acl}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x43, 0x4e8, &(0x7f0000000c40)="$eJzs3E9sFNUfAPDvbFva8udHf4goiFpEYyOxhYLCwcRgNPGgiRET9di0hSCFGloSIahLYvBoSLwbj149eFUvxHgy8YpHE0NCDBfAxDhmdme62+1uS8u2C/bzSbb73pudee/tmzf75r3uBrBuDWZ/kmr4WkRsjYhS4wsGq0+3b14cv3Pz4niU0/TYn0llt1tZPJcfJjblkaFSROmzpLahzsz5C6fGpqYmz+bxkdnTH47MnL/w/Mm+POXIkUMHDxx+cfSF5VeqSX5ZvW7t+mR6987X37/y5nh3kV7kVl+PdhmMwWZFqXim3Zl12Ja6cNLdwYKwLNn5nzVXT6X/b42uWKzxymtYMmC1pWma9rbeXE4bXVqQAjywkuh0CYDOKD7os/vf4tFsILBhdYYfHXfjaPUGKKv37fwR8WQlsZgH6Wm4v22nwYh4r/zXV9kjVmkeAgCg3g9Hi5Fgw/hvoLoy8ve5qy9nz//L11AGIuL/EbEtIh6KiO0R8XBE7IiIRyLi0Ybjd0VEukj+jbPNc/nPLUKVrrepqk1l47+X8rWt2vhvXgEGuvLYlohiwDy5P39PhqKn9/jJqckDi+Tx46u/ftFqW/34L3tk+Rdjwbwc17sbJugmxmbHVlzhBjcuRezqbqx/0h2RzLVNEhE7I2LXMo47UBc++dw3u+ciPfNft3T9K9Km62htWGdKv454ttr+5ZjX/rUck3nrk6fHTkyemDwzOrc+OdIXU5P7R7KzYH/TPH7+5fJbrfJfsv7f/d64y2uHvz+W96x7l7X/xrrzP4r121r9B5KIZG69dmb5eVz+7fOW9zQrPf83JO9UwsV96Udjs7NnD0RsSN5YmD5a27eIZ89RrtZ/aG/z/r8t3yd7Jx6LiOwkfjwinojqHWJW9j0R8VRE7F2k/j+98vQHK6//6srqP9Fw/au2/Lz2r63Xtwok+dpgNaW/flPXqT3X7rS4eNxd+x+qhIbylIXXv6yEybxLRKuSFp92Wco/bXkHAQAA4P5XiojNdXNJm6NUGh6uzgFtj42lqemZ2X3Hp8+dmci2RQxET6mY6arOB/ckxfznQF18tCF+MJ83/rKrvxIfHp+emuhozYFNlT6flIYj3u2q6/+ZP9ozxQzcz3xfC9avxfp/NojfcWUNCwOsqbv//L/68aoWBFhzdf2/1Tf8yyv4vy/gAeD+H6hZ+od+XDPgwZfqy7CuLav/7/MjgPBf0h1vz4WrX3tO0/TTDhYIWDPG/7AuLfm9/nsKpL3NN/XFwhdH3+IH7IqVFaO/SV4dCWQjq47k3r+SvYpfU2j5migt74C90Z42PX6P70b57MyJHW0/+dP8f+Xb3YLfrkk/bRboyOUIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7f4NAAD//17h44U=") mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) 11.049617703s ago: executing program 6 (id=1362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) setresuid(0x0, 0xee00, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 10.914380457s ago: executing program 6 (id=1367): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0xd005}, {r0, 0x80}], 0x2, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x80) 10.888444817s ago: executing program 35 (id=1367): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0xd005}, {r0, 0x80}], 0x2, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x80) 10.880186938s ago: executing program 3 (id=1369): r0 = syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(r0, 0x0, 0x20000000, &(0x7f0000000380)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 10.667814763s ago: executing program 3 (id=1371): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0xa, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000009c0)={r0, &(0x7f0000000840), 0x0}, 0x20) 10.616046764s ago: executing program 3 (id=1381): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f0000a29000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) 10.416414849s ago: executing program 3 (id=1374): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000240)={[{@nodiscard}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@nojournal_checksum}, {@acl}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x43, 0x4e8, &(0x7f0000000c40)="$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") mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) 10.085181057s ago: executing program 3 (id=1379): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r1, 0x101}, 0x0, &(0x7f0000000080)="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", 0x0) 9.613461118s ago: executing program 3 (id=1385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x80000001, 0x0, 0x5, 0x7, 0x7fd, 0x80000003, 0x2}]}) 9.613163528s ago: executing program 36 (id=1385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x80000001, 0x0, 0x5, 0x7, 0x7fd, 0x80000003, 0x2}]}) 9.467452711s ago: executing program 7 (id=1387): r0 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xffffffff}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0) 9.426718722s ago: executing program 7 (id=1388): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1, 0x179}, 0x0, &(0x7f00000008c0)="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", 0x0) 9.395036654s ago: executing program 7 (id=1389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x15, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) 9.337906224s ago: executing program 7 (id=1392): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000240)={[{@nodiscard}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@nojournal_checksum}, {@acl}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x43, 0x4e8, &(0x7f0000000c40)="$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") mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) 9.12564054s ago: executing program 7 (id=1393): write(0xffffffffffffffff, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac", 0x21) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf251b00000008009a0001000000070021"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) 8.932989894s ago: executing program 7 (id=1397): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f000038e000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x1000) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000001d80)='\x00\x000\x10\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') 8.925448185s ago: executing program 37 (id=1397): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f000038e000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x1000) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000001d80)='\x00\x000\x10\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') 2.821758112s ago: executing program 9 (id=1583): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000140)={[{@debug}, {@barrier_val={'barrier', 0x3d, 0xc1ce}}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r0, &(0x7f0000007f40)=[{&(0x7f0000007fc0)=""/4110, 0x100e}], 0x1, 0x0, 0x5, 0xc) 2.671385465s ago: executing program 9 (id=1588): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9379, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [], "8029335287b7a081"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000ac0), 0x40000000000007f, 0x2000, 0x0) 2.572687767s ago: executing program 9 (id=1591): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x101902, 0x0) 1.497854483s ago: executing program 5 (id=1617): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x3, 0x4) 1.454610784s ago: executing program 1 (id=1618): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x3b5c, &(0x7f0000000200)={0x0, 0xcb14, 0x200, 0x0, 0x3a1}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.23128637s ago: executing program 1 (id=1620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 1.115037373s ago: executing program 5 (id=1621): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r0, 0xb51b711640d471cb, &(0x7f0000000080), &(0x7f0000000140)) 1.114900933s ago: executing program 1 (id=1622): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @loopback, @empty, @loopback}}}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[]) 999.341665ms ago: executing program 8 (id=1635): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) 998.423456ms ago: executing program 8 (id=1626): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x49, 0x0, 0x2}]}) 930.577397ms ago: executing program 0 (id=1628): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 924.085807ms ago: executing program 1 (id=1629): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x1, 0x0) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 912.318448ms ago: executing program 0 (id=1630): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0x3ff, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/30, &(0x7f0000000080)=0x1e) 886.378638ms ago: executing program 8 (id=1632): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x201, 0xfffffffffffffffe}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x5, &(0x7f0000000300)={0x1, 0x2, 0x3, 0x8}) 844.529169ms ago: executing program 1 (id=1633): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x3, 0x4) 840.588489ms ago: executing program 5 (id=1644): setresgid(0xee01, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x1c, 0x1, 0x2, {r1, r2}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r3}}}], 0x40}}], 0x1, 0x0) 839.43436ms ago: executing program 8 (id=1645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r1, r0}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 830.1828ms ago: executing program 0 (id=1634): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x797, &(0x7f0000000800)="$eJzs3M1rXFUbAPDn3mSafuR9J4IL3VShhRZKJ0mzaVfGjbgpFApua0huQshNpmQmNYmFpu4EoTYbFUF079KtUOof4E4KCu4F0RoX6mZkJpMP02Q6tpNMG38/uHPPuR/nOc+ZmcO9MHcC+M96tf6SRPRHxJWIKDa3pxFxpFE6GrGyftzaw5vj9SWJWu3qL0n9tFirFTfbSprrE9E4JV6KiPuFiHPvPRq3srQ8M5bn2XyzPlidvT5YWVo+Pz07NpVNZXPDI5eGLo6MXBwa6Viup9+6dOzut2+srn73VfXOyd7zSYw28o5mbh0LtM36mBRidMf2uf0I1kVJG8f0HkA/AABorX6d39O8NitEMXpaXaW5gAMAAIDnUq2v1q4/2z4SAAAAeMYk0e0eAAAAAPtr43cAG8/2HvRP/H9+PSIGtuJvPYfb23iGOOJoFCLi+Fryj8cPkvXT4Kms3I6Ie6O7fP7aeaK5taGt4rHOtEin3avPP6O7zT+F5hFHG68755/ejf9OeEp7z3/p5vzXs8f8d6XNGF9/9nJhz/i3K4vvn9wtfrIZP9kj/tttxr+z+sHdvfbVvog4E7vH3x6rxf9DDE5O57t9tTa7e/+vsw/2zj/i+CPxk6QRNdk9/5Vmn663mf+7a7/NrLSIf/ZU6/d/PX7ftrN6Gp+JD5v9SCPibnNdr6/uiHFq9vtvHo2crGzEn9hj/Hd//99s7o34vM38f/yyb7HNQwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAhjYj+SNLSZjlNS6WIExHxYhxP83Klem6yvDA3Ud8XMRCFdHI6z4YiorheT+r14UZ5q35hWz1J8mwkIl744dh60Ok8K42X84luJw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCmExHRH0laiog0In4vpmmp1O1eAQAAAB030O0OAAAAAPvO/T8AAAAcfk96/590uB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAoXbl8uX6Ult7eHO8Xp+4sbQwU75xfiKrzJRmF8ZL4+X566Wpcnkqz0rj5dnHtZdGxPClWFgcrGaV6mBlafnabHlhrnptenZsKruWFQ4kKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6t/saSpKWISBvlNC2VIv4XEQNRSCan82woIv4fEQ+Khb56fbjbnQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDjKkvLM2N5ns0/34Xa4Uqn7UIkER1ssKc5jB1q8JNmc62OSVYiuj6YabOj85Un/15EZIX2h+7WY4al24VXDnYaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGVFZWp4Zy/NsvtLtngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBd6U9JRNSXM8XT/Tv3Hkn+KDbWEfHOp1c/WhyrVueH69t/3dxe/bi5/cK2E28dZA4AAABw6L3WamfPjvrGffrGfTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC7KkvLM2N5ns3vYyFudztLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSfwdAAD//xBcrZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 756.053942ms ago: executing program 9 (id=1636): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x7ffffffe, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setpriority(0x0, 0x0, 0x2a14b58) 754.744191ms ago: executing program 5 (id=1637): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd02, &(0x7f0000000100)="0400000000000000140000003801") 754.629471ms ago: executing program 8 (id=1638): syz_open_dev$vcsa(0x0, 0x1, 0x102) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5412, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) 681.139093ms ago: executing program 5 (id=1639): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 680.409523ms ago: executing program 8 (id=1640): syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000000c0)=ANY=[], 0xfa, 0x10617, &(0x7f0000010a00)="$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") openat(0xffffffffffffff9c, 0x0, 0xa0c42, 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x185042, 0x1fb) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000100)) 596.861295ms ago: executing program 5 (id=1641): r0 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x235c, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000040)=[0x80, 0x3], 0x2) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 438.568669ms ago: executing program 1 (id=1642): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/167, 0xa7}], 0x1}, 0xfff}], 0x1, 0x122, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 250.538923ms ago: executing program 9 (id=1643): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) listen(r0, 0x10) shutdown(r0, 0x2) 221.164594ms ago: executing program 9 (id=1646): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r0, 0xb51b711640d471cb, &(0x7f0000000080), &(0x7f0000000140)) 220.080464ms ago: executing program 0 (id=1656): r0 = timerfd_create(0x9, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) 78.908438ms ago: executing program 0 (id=1647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000003000)={0x1, 0x0, [{0x4d0, 0x0, 0x1}]}) 0s ago: executing program 0 (id=1648): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 337][ T1385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.602471][ T307] usb 4-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 36.611238][ T307] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 36.644409][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.652178][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.660123][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.673888][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.682263][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.689335][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.697092][ T307] usb 4-1: failed to enable PITCH for EP 0x1 [ 36.703435][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.711679][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.718735][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.726346][ T307] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 36.744403][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.752750][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.783420][ T307] usb 4-1: USB disconnect, device number 5 [ 36.788555][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.806147][ T1385] device veth0_vlan entered promiscuous mode [ 36.812505][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.820538][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.828248][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.842122][ T1385] device veth1_macvtap entered promiscuous mode [ 36.850758][ T45] device bridge_slave_1 left promiscuous mode [ 36.857224][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.865451][ T45] device bridge_slave_0 left promiscuous mode [ 36.871613][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.879853][ T45] device veth1_macvtap left promiscuous mode [ 36.885959][ T45] device veth0_vlan left promiscuous mode [ 36.966006][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.988487][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.997231][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.134052][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.144539][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.161434][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.174130][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.493164][ T26] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 37.596515][ T1456] loop5: detected capacity change from 0 to 512 [ 37.634458][ T1456] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 37.643898][ T1456] EXT4-fs (loop5): invalid journal inode [ 37.649587][ T1456] EXT4-fs (loop5): can't get journal size [ 37.656748][ T1456] EXT4-fs (loop5): 1 truncate cleaned up [ 37.662405][ T1456] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 37.753608][ T26] usb 7-1: Using ep0 maxpacket: 32 [ 37.913274][ T26] usb 7-1: unable to get BOS descriptor or descriptor too short [ 37.992278][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 38.000767][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.008990][ T26] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 38.013623][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 38.022082][ T42] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 38.028458][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.045190][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.053391][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.061835][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.070826][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.200474][ T1483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 38.209578][ T1483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.488'. [ 38.223983][ T26] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 38.233229][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.241499][ T26] usb 7-1: Product: syz [ 38.246413][ T26] usb 7-1: Manufacturer: syz [ 38.253591][ T1491] loop3: detected capacity change from 0 to 256 [ 38.259945][ T26] usb 7-1: SerialNumber: syz [ 38.391355][ T1494] tun0: tun_chr_ioctl cmd 1074025675 [ 38.396789][ T1494] tun0: persist disabled [ 38.443627][ T1496] loop3: detected capacity change from 0 to 512 [ 38.483237][ T42] usb 6-1: unable to get BOS descriptor or descriptor too short [ 38.504948][ T1496] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 38.516455][ T1496] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.563302][ T42] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 38.605317][ T1506] syz.3.498 uses obsolete (PF_INET,SOCK_PACKET) [ 38.623314][ T26] usb 7-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 38.631808][ T26] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 38.641151][ T26] usb 7-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 38.650752][ T26] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 38.690113][ T1515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 38.699014][ T1515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.502'. [ 38.713291][ T26] usb 7-1: failed to enable PITCH for EP 0x1 [ 38.724405][ T1517] xt_hashlimit: size too large, truncated to 1048576 [ 38.733407][ T42] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 38.743627][ T26] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 38.750415][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.758764][ T42] usb 6-1: Product: syz [ 38.762976][ T42] usb 6-1: Manufacturer: syz [ 38.767936][ T42] usb 6-1: SerialNumber: syz [ 38.776973][ T26] usb 7-1: USB disconnect, device number 2 [ 38.889572][ T1522] loop3: detected capacity change from 0 to 512 [ 38.899431][ T1522] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 38.907846][ T1522] EXT4-fs (loop3): invalid journal inode [ 38.913554][ T1522] EXT4-fs (loop3): can't get journal size [ 38.920368][ T1522] EXT4-fs (loop3): 1 truncate cleaned up [ 38.926151][ T1522] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 39.003814][ T532] udevd[532]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.135952][ T1542] loop3: detected capacity change from 0 to 2048 [ 39.154575][ T42] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 39.172728][ T1542] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,noquota,,errors=continue. Quota mode: none. [ 39.173194][ T42] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 39.195857][ T1542] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.216802][ T42] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 39.225218][ T1542] fs-verity: sha512 using implementation "sha512-avx2" [ 39.233574][ T1542] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.513: bg 0: block 345: padding at end of block bitmap is not set [ 39.249360][ T1542] fs-verity (loop3, inode 13): Error -28 writing Merkle tree block 0 [ 39.257758][ T1542] fs-verity (loop3, inode 13): Error -28 building Merkle tree [ 39.265612][ T42] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 39.286618][ T1542] syz.3.513 (1542) used greatest stack depth: 20552 bytes left [ 39.303233][ T42] usb 6-1: USB disconnect, device number 2 [ 39.309685][ T329] udevd[329]: setting mode of /dev/snd/controlC0 to 020660 failed: No such file or directory [ 39.346499][ T329] udevd[329]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: No such file or directory [ 39.390443][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 39.743186][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 39.844103][ T1561] loop6: detected capacity change from 0 to 40427 [ 39.861328][ T1560] loop3: detected capacity change from 0 to 40427 [ 39.863958][ T1561] F2FS-fs (loop6): invalid crc value [ 39.886660][ T1561] F2FS-fs (loop6): Found nat_bits in checkpoint [ 39.921843][ T1560] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 39.929002][ T1560] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 39.941496][ T1561] F2FS-fs (loop6): Start checkpoint disabled! [ 39.958434][ T1560] F2FS-fs (loop3): invalid crc value [ 39.964153][ T1561] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 40.003978][ T1579] loop5: detected capacity change from 0 to 2048 [ 40.015993][ T1560] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 40.050510][ T1579] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,noquota,,errors=continue. Quota mode: none. [ 40.056172][ T1560] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 40.064915][ T1579] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.071904][ T1560] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 40.113005][ T1579] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.529: bg 0: block 345: padding at end of block bitmap is not set [ 40.148655][ T290] attempt to access beyond end of device [ 40.148655][ T290] loop3: rw=2049, want=45104, limit=40427 [ 40.162210][ T1579] fs-verity (loop5, inode 13): Error -28 writing Merkle tree block 0 [ 40.170480][ T1579] fs-verity (loop5, inode 13): Error -28 building Merkle tree [ 40.188083][ T1579] syz.5.529 (1579) used greatest stack depth: 19848 bytes left [ 40.235050][ T1588] loop6: detected capacity change from 0 to 512 [ 40.290091][ T1588] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5 [ 40.290091][ T1588] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 40.290091][ T1588] [ 40.313610][ T1588] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.331813][ T1588] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 40.340568][ T1588] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.533: invalid indirect mapped block 2683928664 (level 1) [ 40.355108][ T1588] EXT4-fs (loop6): 1 truncate cleaned up [ 40.360754][ T1588] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,nodiscard,inlinecrypt,usrjquota=.grpjquota=,jqfmt=vfsold,jqfmt=vfsv0,nouser_xattr,inode_readahead_blks=0x0000000000000800,acl,,,errors=continue. Quota mode: writeback. [ 40.399733][ T1588] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.533: invalid indirect mapped block 4294967295 (level 0) [ 40.414149][ T1588] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.533: invalid indirect mapped block 65536 (level 1) [ 40.763267][ T6] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 41.183255][ T6] usb 7-1: unable to get BOS descriptor or descriptor too short [ 41.263430][ T6] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 41.433314][ T6] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 41.442398][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.450505][ T6] usb 7-1: Product: syz [ 41.454693][ T6] usb 7-1: Manufacturer: syz [ 41.459267][ T6] usb 7-1: SerialNumber: syz [ 41.824263][ T6] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 41.843292][ T6] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 41.851823][ T6] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 41.873226][ T6] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 41.906470][ T6] usb 7-1: USB disconnect, device number 3 [ 42.113898][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.332421][ T1632] loop5: detected capacity change from 0 to 512 [ 42.365828][ T1632] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 42.365828][ T1632] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 42.365828][ T1632] [ 42.385151][ T1632] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.411012][ T1632] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 42.419674][ T1632] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.547: invalid indirect mapped block 2683928664 (level 1) [ 42.436050][ T1632] EXT4-fs (loop5): 1 truncate cleaned up [ 42.441712][ T1632] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,nodiscard,inlinecrypt,usrjquota=.grpjquota=,jqfmt=vfsold,jqfmt=vfsv0,nouser_xattr,inode_readahead_blks=0x0000000000000800,acl,,,errors=continue. Quota mode: writeback. [ 42.504052][ T1632] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.547: invalid indirect mapped block 4294967295 (level 0) [ 42.518447][ T1632] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.547: invalid indirect mapped block 65536 (level 1) [ 42.606930][ T1649] loop3: detected capacity change from 0 to 512 [ 42.637614][ T1651] loop5: detected capacity change from 0 to 512 [ 42.662720][ T1649] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 42.662720][ T1649] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 42.662720][ T1649] [ 42.686874][ T1649] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.718103][ T1649] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 42.726960][ T1651] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.727529][ T1649] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.564: invalid indirect mapped block 2683928664 (level 1) [ 42.757698][ T1649] EXT4-fs (loop3): 1 truncate cleaned up [ 42.763437][ T1649] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,nodiscard,inlinecrypt,usrjquota=.grpjquota=,jqfmt=vfsold,jqfmt=vfsv0,nouser_xattr,inode_readahead_blks=0x0000000000000800,acl,,,errors=continue. Quota mode: writeback. [ 42.850115][ T1649] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.564: invalid indirect mapped block 4294967295 (level 0) [ 42.872965][ T1649] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.564: invalid indirect mapped block 65536 (level 1) [ 42.961579][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 42.961593][ T30] audit: type=1326 audit(1788192291.942:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.3.566" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e4a6f159 code=0x7ffc0000 [ 42.968432][ T1674] loop6: detected capacity change from 0 to 128 [ 42.997360][ T30] audit: type=1326 audit(1788192291.942:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.3.566" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc7e4a6f159 code=0x7ffc0000 [ 43.024123][ T30] audit: type=1326 audit(1788192291.952:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.3.566" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e4a6f159 code=0x7ffc0000 [ 43.049849][ T30] audit: type=1326 audit(1788192291.992:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.3.566" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc7e4a6f159 code=0x7ffc0000 [ 43.076392][ T30] audit: type=1326 audit(1788192291.992:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.3.566" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc7e4a6eec2 code=0x7ffc0000 [ 43.103390][ T30] audit: type=1326 audit(1788192291.992:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.3.566" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc7e4a6eec2 code=0x7ffc0000 [ 43.129573][ T30] audit: type=1326 audit(1788192291.992:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.3.566" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e4a6f159 code=0x7ffc0000 [ 43.155015][ T30] audit: type=1326 audit(1788192291.992:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.3.566" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e4a6f159 code=0x7ffc0000 [ 43.180358][ T30] audit: type=1326 audit(1788192292.002:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.3.566" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc7e4a6f159 code=0x7ffc0000 [ 43.210429][ T30] audit: type=1326 audit(1788192292.002:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1673 comm="syz.3.566" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7e4a2f98e code=0x7ffc0000 [ 43.316199][ T1686] loop3: detected capacity change from 0 to 1024 [ 43.338529][ T1688] loop6: detected capacity change from 0 to 4096 [ 43.365072][ T1686] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 43.386526][ T1688] EXT4-fs (loop6): Test dummy encryption mode enabled [ 43.399509][ T1688] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 43.408551][ T1688] System zones: 0-5 [ 43.413953][ T1688] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,grpjquota=,inlinecrypt,test_dummy_encryption,nodelalloc,norecovery,delalloc,usrquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 43.563203][ T20] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 43.803223][ T20] usb 6-1: Using ep0 maxpacket: 32 [ 43.963274][ T20] usb 6-1: unable to get BOS descriptor or descriptor too short [ 44.043315][ T20] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 44.159654][ T1695] loop4: detected capacity change from 0 to 512 [ 44.168061][ T757] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.213271][ T20] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 44.222411][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.230752][ T20] usb 6-1: Product: syz [ 44.239711][ T1695] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 44.239711][ T1695] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 44.239711][ T1695] [ 44.263217][ T1695] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.270787][ T20] usb 6-1: Manufacturer: syz [ 44.280593][ T20] usb 6-1: SerialNumber: syz [ 44.292758][ T1695] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 44.301692][ T1695] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.572: invalid indirect mapped block 2683928664 (level 1) [ 44.316843][ T1695] EXT4-fs (loop4): 1 truncate cleaned up [ 44.322507][ T1695] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,nodiscard,inlinecrypt,usrjquota=.grpjquota=,jqfmt=vfsold,jqfmt=vfsv0,nouser_xattr,inode_readahead_blks=0x0000000000000800,acl,,,errors=continue. Quota mode: writeback. [ 44.383036][ T1695] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.572: invalid indirect mapped block 4294967295 (level 0) [ 44.398053][ T1695] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.572: invalid indirect mapped block 65536 (level 1) [ 44.462665][ T1703] loop4: detected capacity change from 0 to 512 [ 44.496912][ T1703] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.673314][ T20] usb 6-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 44.682750][ T20] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 44.691111][ T20] usb 6-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 44.700955][ T20] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 44.763266][ T20] usb 6-1: failed to enable PITCH for EP 0x1 [ 44.783668][ T20] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 44.835720][ T20] usb 6-1: USB disconnect, device number 3 [ 44.915238][ T1717] loop4: detected capacity change from 0 to 2048 [ 44.947632][ T1717] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,noquota,,errors=continue. Quota mode: none. [ 44.962003][ T1717] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.981185][ T1717] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.579: bg 0: block 345: padding at end of block bitmap is not set [ 44.996243][ T1717] fs-verity (loop4, inode 13): Error -28 writing Merkle tree block 0 [ 45.004755][ T1717] fs-verity (loop4, inode 13): Error -28 building Merkle tree [ 45.070156][ T1723] tipc: Started in network mode [ 45.075659][ T1723] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 45.119584][ T1725] loop5: detected capacity change from 0 to 4096 [ 45.134441][ T1729] loop4: detected capacity change from 0 to 1024 [ 45.144938][ T1725] EXT4-fs (loop5): Test dummy encryption mode enabled [ 45.173668][ T1725] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 45.192250][ T1725] System zones: 0-5 [ 45.202538][ T1725] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,grpjquota=,inlinecrypt,test_dummy_encryption,nodelalloc,norecovery,delalloc,usrquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 45.264369][ T1729] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 45.311471][ T1730] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 45.320071][ T1730] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 45.334069][ T1730] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.373523][ T1730] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 45.380662][ T1730] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 45.411011][ T1730] netlink: 300 bytes leftover after parsing attributes in process `syz.3.586'. [ 46.223233][ T307] Bluetooth: hci0: command 0x1003 tx timeout [ 46.229982][ T1269] Bluetooth: hci0: sending frame failed (-49) [ 46.259696][ T1777] sd 0:0:1:0: PR command failed: 2 [ 46.269581][ T1777] sd 0:0:1:0: Sense Key : 0x5 [current] [ 46.292902][ T1777] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 46.363247][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 46.618598][ T1780] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 46.633628][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 46.634306][ T1780] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 46.655774][ T1780] F2FS-fs (loop5): invalid crc value [ 46.663616][ T1780] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 46.709032][ T1780] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 46.716387][ T1780] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 46.813300][ T26] usb 5-1: unable to get BOS descriptor or descriptor too short [ 46.842875][ T689] attempt to access beyond end of device [ 46.842875][ T689] loop5: rw=2049, want=45104, limit=40427 [ 46.893452][ T26] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 47.084213][ T26] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 47.102581][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.116322][ T1794] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 47.121381][ T26] usb 5-1: Product: syz [ 47.152063][ T26] usb 5-1: Manufacturer: syz [ 47.154740][ T1794] overlayfs: filesystem on './bus' not supported as upperdir [ 47.162360][ T26] usb 5-1: SerialNumber: syz [ 47.443234][ T20] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 47.533241][ T26] usb 5-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 47.541678][ T26] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 47.549960][ T26] usb 5-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 47.558408][ T26] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 47.623245][ T26] usb 5-1: failed to enable PITCH for EP 0x1 [ 47.643267][ T26] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 47.668580][ T26] usb 5-1: USB disconnect, device number 4 [ 47.682863][ T527] udevd[527]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.823333][ T20] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.834302][ T20] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.847157][ T20] usb 4-1: config 0 interface 0 has no altsetting 0 [ 47.853801][ T20] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 47.862828][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.871510][ T20] usb 4-1: config 0 descriptor?? [ 47.983257][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 48.303199][ T307] Bluetooth: hci0: command 0x1001 tx timeout [ 48.309273][ T1269] Bluetooth: hci0: sending frame failed (-49) [ 48.354522][ T20] hid-multitouch 0003:0EEF:72C4.0005: No inputs registered, leaving [ 48.363360][ T20] hid-multitouch 0003:0EEF:72C4.0005: hidraw0: USB HID v0.00 Joystick [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 48.562406][ T20] usb 4-1: USB disconnect, device number 6 [ 50.383305][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 54.456829][ T1828] set_capacity_and_notify: 2 callbacks suppressed [ 54.456846][ T1828] loop3: detected capacity change from 0 to 2048 [ 54.540215][ T1828] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.558879][ T1828] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.651812][ T1840] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.623: bg 0: block 345: padding at end of block bitmap is not set [ 54.659553][ T1823] loop4: detected capacity change from 0 to 40427 [ 54.681679][ T1823] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 54.691517][ T1823] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 54.692388][ T1840] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 54.714229][ T1823] F2FS-fs (loop4): invalid crc value [ 54.728632][ T1840] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.728632][ T1840] [ 54.740006][ T1823] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 54.779902][ T1823] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 54.787162][ T1823] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 54.797466][ T348] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 186 with error 28 [ 54.816188][ T348] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.816188][ T348] [ 54.831684][ T348] EXT4-fs (loop3): Total free blocks count 0 [ 54.838153][ T348] EXT4-fs (loop3): Free/Dirty block details [ 54.844498][ T348] EXT4-fs (loop3): free_blocks=0 [ 54.849630][ T348] EXT4-fs (loop3): dirty_blocks=192 [ 54.855286][ T348] EXT4-fs (loop3): Block reservation details [ 54.861406][ T348] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 54.876110][ T288] attempt to access beyond end of device [ 54.876110][ T288] loop4: rw=2049, want=45104, limit=40427 [ 55.001469][ T1848] loop5: detected capacity change from 0 to 2048 [ 55.042520][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 55.042535][ T30] audit: type=1400 audit(1788192304.022:486): avc: denied { append } for pid=1858 comm="syz.3.634" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.068754][ T1865] loop3: detected capacity change from 0 to 256 [ 55.074203][ T1848] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.082490][ T1865] exfat: Deprecated parameter 'utf8' [ 55.103307][ T1865] exfat: Deprecated parameter 'utf8' [ 55.103309][ T30] audit: type=1400 audit(1788192304.022:487): avc: denied { open } for pid=1858 comm="syz.3.634" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.168374][ T1865] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 55.199169][ T30] audit: type=1400 audit(1788192304.182:488): avc: denied { setattr } for pid=1864 comm="syz.3.635" name="file0" dev="loop3" ino=1048612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.257766][ T30] audit: type=1400 audit(1788192304.242:489): avc: denied { getopt } for pid=1867 comm="syz.0.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.297893][ T30] audit: type=1326 audit(1788192304.272:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1871 comm="syz.0.640" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1299b88159 code=0x7ffc0000 [ 55.332368][ T30] audit: type=1326 audit(1788192304.272:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1871 comm="syz.0.640" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1299b88159 code=0x7ffc0000 [ 55.357824][ T30] audit: type=1326 audit(1788192304.272:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1871 comm="syz.0.640" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1299b88159 code=0x7ffc0000 [ 55.383252][ T30] audit: type=1326 audit(1788192304.272:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1871 comm="syz.0.640" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1299b88159 code=0x7ffc0000 [ 55.413218][ T30] audit: type=1326 audit(1788192304.272:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1871 comm="syz.0.640" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1299b87ec2 code=0x7ffc0000 [ 55.444680][ T30] audit: type=1326 audit(1788192304.282:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1871 comm="syz.0.640" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1299b4898e code=0x7ffc0000 [ 55.564123][ T1892] netlink: 64 bytes leftover after parsing attributes in process `syz.0.648'. [ 55.610972][ T1896] bridge0: bridge: STP does not work in non-root netns [ 55.633698][ T1898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.651'. [ 55.645550][ T1898] netlink: 64 bytes leftover after parsing attributes in process `syz.0.651'. [ 55.760921][ T1913] xt_hashlimit: size too large, truncated to 1048576 [ 55.793189][ T20] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 56.054388][ T1924] loop4: detected capacity change from 0 to 512 [ 56.105388][ T1924] EXT4-fs (loop4): #blocks per group too big: 24576 [ 56.163404][ T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.177578][ T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.200240][ T20] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 56.200269][ T20] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.204537][ T20] usb 7-1: config 0 descriptor?? [ 56.319401][ T1949] netem: change failed [ 56.573631][ T348] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.759341][ T1993] loop3: detected capacity change from 0 to 256 [ 57.123321][ T20] hid-led: probe of 0003:27B8:01ED.0006 failed with error -71 [ 57.138734][ T20] usb 7-1: USB disconnect, device number 4 [ 57.165491][ T2023] SELinux: ebitmap: map size 1719086182 does not match my size 64 (high bit was 1030712932) [ 57.177600][ T2023] SELinux: failed to load policy [ 57.185036][ T2027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.708'. [ 57.752903][ T2033] loop3: detected capacity change from 0 to 131072 [ 57.817701][ T2033] F2FS-fs (loop3): invalid crc value [ 57.842014][ T2033] F2FS-fs (loop3): Found nat_bits in checkpoint [ 57.881113][ T2060] loop4: detected capacity change from 0 to 1024 [ 57.895222][ T2060] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 57.898884][ T2033] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 57.905677][ T2060] EXT4-fs error (device loop4): ext4_get_journal_inode:5178: inode #32: comm syz.4.722: iget: special inode unallocated [ 57.933337][ T42] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 57.942007][ T2060] EXT4-fs (loop4): no journal found [ 57.947478][ T2060] EXT4-fs (loop4): can't get journal size [ 57.955508][ T2060] EXT4-fs (loop4): filesystem is read-only [ 57.961343][ T2060] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,noload,noblock_validity,noblock_validity,grpjquota=,,errors=continue. Quota mode: none. [ 58.076770][ T2067] loop4: detected capacity change from 0 to 16 [ 58.095445][ T2067] erofs: (device loop4): mounted with root inode @ nid 36. [ 58.213256][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 58.423256][ T42] usb 7-1: unable to get BOS descriptor or descriptor too short [ 58.445527][ T2077] loop3: detected capacity change from 0 to 512 [ 58.487284][ T2077] EXT4-fs (loop3): Test dummy encryption mode enabled [ 58.506617][ T2077] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,errors=remount-ro,. Quota mode: writeback. [ 58.571640][ T2077] EXT4-fs warning (device loop3): __ext4_ioctl:882: Setting inode version is not supported with metadata_csum enabled. [ 58.623308][ T899] Bluetooth: hci0: command 0x1003 tx timeout [ 58.630280][ T1978] Bluetooth: hci0: sending frame failed (-49) [ 58.713229][ T42] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 58.725740][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.733915][ T42] usb 7-1: Product: syz [ 58.738344][ T42] usb 7-1: Manufacturer: syz [ 58.743354][ T42] usb 7-1: SerialNumber: syz [ 58.889627][ T2108] EXT4-fs (loop3): 1 orphan inode deleted [ 58.895466][ T2108] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 58.910283][ T2108] ext4 filesystem being mounted at /119/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.115490][ T2112] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 59.126624][ T2112] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 59.136109][ T2112] F2FS-fs (loop3): invalid crc value [ 59.143668][ T2112] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 59.182430][ T2112] F2FS-fs (loop3): recover fsync data on readonly fs [ 59.189615][ T2112] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 59.199601][ T2112] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 59.207003][ T2112] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 59.247087][ T2112] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0 [ 59.254770][ T2112] F2FS-fs (loop3): switch discard_unit option is not allowed [ 59.263945][ T2112] F2FS-fs (loop3): switch discard_unit option is not allowed [ 59.563230][ T42] snd-usb-audio: probe of 7-1:1.0 failed with error -71 [ 59.576908][ T42] usb 7-1: USB disconnect, device number 5 [ 59.899914][ T2132] set_capacity_and_notify: 2 callbacks suppressed [ 59.899963][ T2132] loop4: detected capacity change from 0 to 131072 [ 59.918412][ T2132] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 59.927133][ T2132] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 59.939154][ T2132] F2FS-fs (loop4): invalid crc value [ 59.969256][ T2132] F2FS-fs (loop4): Found nat_bits in checkpoint [ 60.010573][ T2132] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 60.017978][ T2132] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 60.111194][ T2156] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831036522994172386 ! [ 60.444839][ T2167] SELinux: failed to load policy [ 60.703199][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 60.709293][ T1978] Bluetooth: hci0: sending frame failed (-49) [ 60.729333][ T2163] loop3: detected capacity change from 0 to 131072 [ 60.786608][ T2163] F2FS-fs (loop3): Test dummy encryption mode enabled [ 60.795099][ T2163] F2FS-fs (loop3): invalid crc value [ 60.803148][ T2163] F2FS-fs (loop3): Found nat_bits in checkpoint [ 60.838079][ T2163] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 61.529078][ T2189] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831036522994172386 ! [ 61.631354][ T2180] loop6: detected capacity change from 0 to 131072 [ 61.643344][ T2180] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 61.655317][ T2180] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 61.669699][ T2180] F2FS-fs (loop6): invalid crc value [ 61.689314][ T2180] F2FS-fs (loop6): Found nat_bits in checkpoint [ 61.730188][ T2197] SELinux: failed to load policy [ 61.732412][ T2180] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 61.742753][ T2180] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 62.040506][ T2205] loop6: detected capacity change from 0 to 40427 [ 62.097351][ T2205] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 62.104802][ T2205] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 62.114429][ T2205] F2FS-fs (loop6): invalid crc value [ 62.121573][ T2205] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 62.147684][ T2205] F2FS-fs (loop6): recover fsync data on readonly fs [ 62.154829][ T2205] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 62.161604][ T2205] F2FS-fs (loop6): Try to recover 1th superblock, ret: -30 [ 62.168861][ T2205] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 62.206232][ T2205] F2FS-fs (loop6): Try to recover all the superblocks, ret: 0 [ 62.213859][ T2205] F2FS-fs (loop6): switch discard_unit option is not allowed [ 62.222906][ T2205] F2FS-fs (loop6): switch discard_unit option is not allowed [ 62.411689][ T2210] loop6: detected capacity change from 0 to 512 [ 62.467706][ T2210] EXT4-fs (loop6): 1 orphan inode deleted [ 62.473848][ T2210] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 62.488872][ T2210] ext4 filesystem being mounted at /43/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.632420][ T2208] loop3: detected capacity change from 0 to 131072 [ 62.676128][ T2208] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 62.684464][ T2208] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 62.693925][ T2208] F2FS-fs (loop3): invalid crc value [ 62.701794][ T2208] F2FS-fs (loop3): Found nat_bits in checkpoint [ 62.735079][ T2208] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 62.742137][ T2208] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 62.783252][ T899] Bluetooth: hci0: command 0x1009 tx timeout [ 64.623746][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 67.203295][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 67.203310][ T30] audit: type=1400 audit(1788192316.192:523): avc: denied { write } for pid=2224 comm="syz.4.792" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.347322][ T30] audit: type=1400 audit(1788192316.332:524): avc: denied { append } for pid=2239 comm="syz.6.785" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.513250][ T899] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 67.608642][ T2251] loop5: detected capacity change from 0 to 2048 [ 67.621320][ T2246] SELinux: failed to load policy [ 67.664030][ T2251] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.682187][ T2251] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.700608][ T2256] loop6: detected capacity change from 0 to 512 [ 67.737469][ T2256] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.763243][ T899] usb 4-1: Using ep0 maxpacket: 32 [ 67.769682][ T2258] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.793: bg 0: block 345: padding at end of block bitmap is not set [ 67.789491][ T2258] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 67.829659][ T2258] EXT4-fs (loop5): This should not happen!! Data will be lost [ 67.829659][ T2258] [ 67.854622][ T2251] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 139 with error 28 [ 67.867757][ T2251] EXT4-fs (loop5): This should not happen!! Data will be lost [ 67.867757][ T2251] [ 67.878824][ T2251] EXT4-fs (loop5): Total free blocks count 0 [ 67.915750][ T2251] EXT4-fs (loop5): Free/Dirty block details [ 67.923418][ T899] usb 4-1: unable to get BOS descriptor or descriptor too short [ 67.933158][ T2251] EXT4-fs (loop5): free_blocks=0 [ 67.948407][ T2251] EXT4-fs (loop5): dirty_blocks=144 [ 67.959189][ T2251] EXT4-fs (loop5): Block reservation details [ 67.965830][ T2251] EXT4-fs (loop5): i_reserved_data_blocks=9 [ 68.099756][ T2274] loop6: detected capacity change from 0 to 512 [ 68.158883][ T2274] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.173478][ T899] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 68.182554][ T899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.195239][ T899] usb 4-1: Product: syz [ 68.199582][ T899] usb 4-1: Manufacturer: syz [ 68.205354][ T899] usb 4-1: SerialNumber: syz [ 68.279381][ T30] audit: type=1400 audit(1788192317.262:525): avc: denied { accept } for pid=2292 comm="syz.5.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.330488][ T2299] 9pnet: Insufficient options for proto=fd [ 68.364264][ T30] audit: type=1326 audit(1788192317.352:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2306 comm="syz.4.816" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2135a3159 code=0x7ffc0000 [ 68.405037][ T30] audit: type=1326 audit(1788192317.352:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2306 comm="syz.4.816" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2135a3159 code=0x7ffc0000 [ 68.445388][ T30] audit: type=1326 audit(1788192317.392:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2306 comm="syz.4.816" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2135a3159 code=0x7ffc0000 [ 68.490522][ T30] audit: type=1326 audit(1788192317.392:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2306 comm="syz.4.816" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2135a3159 code=0x7ffc0000 [ 68.515702][ T30] audit: type=1326 audit(1788192317.392:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2306 comm="syz.4.816" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff2135a3159 code=0x7ffc0000 [ 68.556614][ T30] audit: type=1326 audit(1788192317.392:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2306 comm="syz.4.816" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2135a3159 code=0x7ffc0000 [ 68.617635][ T2337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.829'. [ 68.624164][ T30] audit: type=1326 audit(1788192317.392:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2306 comm="syz.4.816" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2135a3159 code=0x7ffc0000 [ 68.963786][ T2374] input: syz1 as /devices/virtual/input/input9 [ 69.003317][ T899] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 69.021341][ T899] usb 4-1: USB disconnect, device number 7 [ 69.034717][ T2381] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.192366][ T2407] loop5: detected capacity change from 0 to 512 [ 69.227735][ T2411] loop3: detected capacity change from 0 to 256 [ 69.245265][ T2407] EXT4-fs (loop5): Ignoring removed nobh option [ 69.264210][ T2407] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 69.273626][ T2411] exfat: Deprecated parameter 'utf8' [ 69.279040][ T2411] exfat: Deprecated parameter 'namecase' [ 69.297997][ T2407] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.860: invalid indirect mapped block 256 (level 1) [ 69.318450][ T2411] exfat: Deprecated parameter 'namecase' [ 69.357689][ T2407] EXT4-fs (loop5): Remounting filesystem read-only [ 69.384428][ T2411] exfat: Deprecated parameter 'namecase' [ 69.401732][ T2407] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.860: invalid indirect mapped block 2683928664 (level 1) [ 69.428620][ T2411] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 69.445590][ T2407] EXT4-fs (loop5): Remounting filesystem read-only [ 69.479286][ T2407] EXT4-fs (loop5): 1 truncate cleaned up [ 69.499993][ T2407] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,auto_da_alloc=0x000000000000000c,nobh,nodioread_nolock,discard,usrjquota=.noload,errors=remount-ro,jqfmt=vfsv0,auto_da_alloc,,. Quota mode: writeback. [ 69.549213][ T2429] loop6: detected capacity change from 0 to 2048 [ 69.552086][ T2407] EXT4-fs warning (device loop5): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 69.597300][ T2429] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.722407][ T2447] netlink: 40 bytes leftover after parsing attributes in process `syz.4.879'. [ 69.801955][ T2453] loop5: detected capacity change from 0 to 512 [ 69.819165][ T2458] loop3: detected capacity change from 0 to 512 [ 69.892937][ T348] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 69.909228][ T2453] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.940249][ T348] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 69.959231][ T2458] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.968937][ T348] EXT4-fs (loop6): This should not happen!! Data will be lost [ 69.968937][ T348] [ 69.988335][ T348] EXT4-fs (loop6): Total free blocks count 0 [ 69.991856][ T2477] SELinux: failed to load policy [ 69.995664][ T348] EXT4-fs (loop6): Free/Dirty block details [ 70.005509][ T348] EXT4-fs (loop6): free_blocks=4096 [ 70.010805][ T348] EXT4-fs (loop6): dirty_blocks=512 [ 70.016148][ T348] EXT4-fs (loop6): Block reservation details [ 70.022241][ T348] EXT4-fs (loop6): i_reserved_data_blocks=32 [ 70.029272][ T348] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8421510 with max blocks 476 with error 28 [ 70.042940][ T348] EXT4-fs (loop6): This should not happen!! Data will be lost [ 70.042940][ T348] [ 70.207159][ T2492] loop5: detected capacity change from 0 to 512 [ 70.250546][ T2491] kvm [2490]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000051 [ 70.272460][ T2499] loop4: detected capacity change from 0 to 256 [ 70.295074][ T2492] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.899: inode has both inline data and extents flags [ 70.330340][ T2492] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.899: couldn't read orphan inode 15 (err -117) [ 70.378558][ T2499] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.408191][ T2492] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 70.422174][ T2506] exfat: Bad value for 'fmask' [ 70.430885][ T2503] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.460465][ T2503] EXT4-fs (loop3): 1 truncate cleaned up [ 70.514335][ T2499] raw_sendmsg: syz.4.902 forgot to set AF_INET. Fix it! [ 70.525952][ T2503] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.716951][ T2526] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 70.742135][ T2526] EXT4-fs (loop3): Ignoring removed nobh option [ 70.909702][ T2544] EXT4-fs (loop3): Ignoring removed oldalloc option [ 70.961576][ T2544] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,oldalloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 71.567211][ T2581] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 71.898234][ T2575] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 71.923474][ T2575] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 71.956446][ T2575] F2FS-fs (loop5): invalid crc value [ 71.993461][ T2575] F2FS-fs (loop5): Found nat_bits in checkpoint [ 72.091741][ T2575] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 72.103806][ T2575] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 72.120097][ T2597] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 72.155889][ T2597] F2FS-fs (loop3): invalid crc value [ 72.175281][ T2597] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.269511][ T2575] attempt to access beyond end of device [ 72.269511][ T2575] loop5: rw=2049, want=45104, limit=40427 [ 72.292376][ T2597] F2FS-fs (loop3): recover fsync data on readonly fs [ 72.301706][ T2597] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.421992][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 72.422008][ T30] audit: type=1400 audit(1788192321.402:576): avc: denied { read } for pid=2629 comm="syz.6.957" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 72.507154][ T30] audit: type=1400 audit(1788192321.442:577): avc: denied { open } for pid=2629 comm="syz.6.957" path="/85/proc/kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 72.568818][ T2626] attempt to access beyond end of device [ 72.568818][ T2626] loop5: rw=0, want=45104, limit=40427 [ 72.615176][ T2636] set_capacity_and_notify: 7 callbacks suppressed [ 72.615193][ T2636] loop6: detected capacity change from 0 to 512 [ 72.674130][ T2636] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 72.678158][ T2576] loop4: detected capacity change from 0 to 131072 [ 72.700138][ T2636] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.961: invalid block [ 72.701412][ T2576] F2FS-fs (loop4): Test dummy encryption mode enabled [ 72.720180][ T689] attempt to access beyond end of device [ 72.720180][ T689] loop5: rw=2049, want=40968, limit=40427 [ 72.723885][ T2576] F2FS-fs (loop4): invalid crc value [ 72.738450][ T2636] EXT4-fs (loop6): 1 truncate cleaned up [ 72.749289][ T2636] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,abort,mb_optimize_scan=0x0000000000000000,nolazytime,jqfmt=vfsv0,usrjquota=.",errors=continue. Quota mode: writeback. [ 72.759318][ T30] audit: type=1400 audit(1788192321.732:578): avc: denied { nlmsg_read } for pid=2641 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.843682][ T2576] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.844612][ T2636] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.961: invalid indirect mapped block 1024 (level 1) [ 72.918645][ T2576] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 72.981925][ T30] audit: type=1400 audit(1788192321.962:579): avc: denied { setattr } for pid=2574 comm="syz.4.932" name="file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.025556][ T2660] device veth0_to_bond entered promiscuous mode [ 73.041494][ T2660] device macsec1 entered promiscuous mode [ 73.145192][ T2669] loop6: detected capacity change from 0 to 512 [ 73.181279][ T2673] netlink: 'syz.5.976': attribute type 1 has an invalid length. [ 73.189604][ T2673] netlink: 8960 bytes leftover after parsing attributes in process `syz.5.976'. [ 73.238246][ T30] audit: type=1400 audit(1788192322.222:580): avc: denied { bind } for pid=2675 comm="syz.5.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.258251][ T2669] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.975: invalid indirect mapped block 256 (level 2) [ 73.363217][ T2669] EXT4-fs (loop6): Remounting filesystem read-only [ 73.369954][ T2669] EXT4-fs (loop6): 2 truncates cleaned up [ 73.395033][ T2684] loop3: detected capacity change from 0 to 512 [ 73.409165][ T2669] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,mb_optimize_scan=0x0000000000000001,. Quota mode: writeback. [ 73.506194][ T2684] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.527677][ T2684] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.653503][ T2684] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 73.727789][ T2684] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 73.753701][ T2684] EXT4-fs (loop3): This should not happen!! Data will be lost [ 73.753701][ T2684] [ 73.793186][ T2684] EXT4-fs (loop3): Total free blocks count 0 [ 73.799239][ T2684] EXT4-fs (loop3): Free/Dirty block details [ 73.823131][ T2684] EXT4-fs (loop3): free_blocks=65280 [ 73.828522][ T2684] EXT4-fs (loop3): dirty_blocks=33 [ 73.853604][ T2684] EXT4-fs (loop3): Block reservation details [ 73.866249][ T2684] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 73.926584][ T2690] loop4: detected capacity change from 0 to 40427 [ 73.963799][ T2690] F2FS-fs (loop4): invalid crc value [ 74.001453][ T2690] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 74.084170][ T2690] F2FS-fs (loop4): recover fsync data on readonly fs [ 74.094357][ T2690] F2FS-fs (loop4): checkpoint=disable on readonly fs [ 74.328697][ T2701] loop3: detected capacity change from 0 to 40427 [ 74.349172][ T2701] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 74.367499][ T2701] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 74.424277][ T2701] F2FS-fs (loop3): invalid crc value [ 74.461525][ T2701] F2FS-fs (loop3): Found nat_bits in checkpoint [ 74.577135][ T2701] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 74.593144][ T2701] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 74.676496][ T2701] attempt to access beyond end of device [ 74.676496][ T2701] loop3: rw=2049, want=45104, limit=40427 [ 74.789052][ T2695] loop6: detected capacity change from 0 to 131072 [ 74.811515][ T2695] F2FS-fs (loop6): Test dummy encryption mode enabled [ 74.839596][ T2695] F2FS-fs (loop6): invalid crc value [ 74.885103][ T2695] F2FS-fs (loop6): Found nat_bits in checkpoint [ 74.974387][ T2701] attempt to access beyond end of device [ 74.974387][ T2701] loop3: rw=0, want=45104, limit=40427 [ 74.999366][ T2695] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 75.086096][ T290] attempt to access beyond end of device [ 75.086096][ T290] loop3: rw=2049, want=40968, limit=40427 [ 75.398716][ T2735] loop3: detected capacity change from 0 to 512 [ 75.539807][ T2735] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 75.553890][ T2735] EXT4-fs (loop3): 1 truncate cleaned up [ 75.566529][ T2735] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,abort,mb_optimize_scan=0x0000000000000000,nolazytime,jqfmt=vfsv0,usrjquota=.",errors=continue. Quota mode: writeback. [ 75.627846][ T2735] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.995: invalid indirect mapped block 1024 (level 1) [ 75.722799][ T2744] loop5: detected capacity change from 0 to 40427 [ 75.743010][ T2744] F2FS-fs (loop5): invalid crc value [ 75.757354][ T2744] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 75.829042][ T2744] F2FS-fs (loop5): recover fsync data on readonly fs [ 75.838703][ T2744] F2FS-fs (loop5): checkpoint=disable on readonly fs [ 76.115169][ T2769] loop4: detected capacity change from 0 to 512 [ 76.174335][ T2769] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1011: invalid indirect mapped block 256 (level 2) [ 76.205957][ T2769] EXT4-fs (loop4): Remounting filesystem read-only [ 76.216550][ T2763] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 76.224569][ T2769] EXT4-fs (loop4): 2 truncates cleaned up [ 76.232138][ T2769] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mb_optimize_scan=0x0000000000000001,. Quota mode: writeback. [ 76.233418][ T2763] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 76.284322][ T2763] F2FS-fs (loop6): invalid crc value [ 76.319371][ T2763] F2FS-fs (loop6): Found nat_bits in checkpoint [ 76.367343][ T2763] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 76.375138][ T2763] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 76.466083][ T2763] attempt to access beyond end of device [ 76.466083][ T2763] loop6: rw=2049, want=45104, limit=40427 [ 76.591780][ T2763] attempt to access beyond end of device [ 76.591780][ T2763] loop6: rw=0, want=45104, limit=40427 [ 76.603149][ T899] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 76.670758][ T1385] attempt to access beyond end of device [ 76.670758][ T1385] loop6: rw=2049, want=40968, limit=40427 [ 76.812322][ T2751] F2FS-fs (loop3): invalid crc value [ 76.849173][ T2751] F2FS-fs (loop3): Found nat_bits in checkpoint [ 76.863238][ T899] usb 6-1: Using ep0 maxpacket: 32 [ 76.885323][ T2751] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 76.892361][ T2751] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 76.983327][ T899] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 76.991648][ T899] usb 6-1: config 0 has no interface number 0 [ 76.998106][ T899] usb 6-1: config 0 interface 184 has no altsetting 0 [ 77.163772][ T899] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 77.172939][ T899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.197430][ T899] usb 6-1: Product: syz [ 77.203403][ T899] usb 6-1: Manufacturer: syz [ 77.208161][ T899] usb 6-1: SerialNumber: syz [ 77.214134][ T899] usb 6-1: config 0 descriptor?? [ 77.256851][ T30] audit: type=1400 audit(1788192326.242:581): avc: denied { ioctl } for pid=2797 comm="syz.4.1016" path="socket:[25627]" dev="sockfs" ino=25627 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.263841][ T899] smsc75xx v1.0.0 [ 77.421418][ T2823] ------------[ cut here ]------------ [ 77.427765][ T2823] trace type BPF program uses run-time allocation [ 77.434748][ T2823] WARNING: CPU: 1 PID: 2823 at kernel/bpf/verifier.c:11731 check_map_prog_compatibility+0x6cc/0x870 [ 77.448156][ T2823] Modules linked in: [ 77.452084][ T2823] CPU: 1 PID: 2823 Comm: syz.3.1031 Tainted: G W syzkaller #0 [ 77.464152][ T2823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.475232][ T2823] RIP: 0010:check_map_prog_compatibility+0x6cc/0x870 [ 77.475433][ T2827] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1033'. [ 77.494124][ T2823] Code: ee ff 48 c7 c6 e0 53 48 85 4c 8b 65 d0 e9 f9 fc ff ff e8 c7 27 ee ff c6 05 58 9b 6a 05 01 48 c7 c7 40 50 48 85 e8 44 2e 2f 03 <0f> 0b e9 83 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a7 f9 ff [ 77.543347][ T2823] RSP: 0018:ffffc9000118f450 EFLAGS: 00010246 [ 77.559216][ T2823] RAX: 55e66511b47d6b00 RBX: 0000000000000001 RCX: 0000000000080000 [ 77.570596][ T2823] RDX: ffffc90003b44000 RSI: 00000000000040e1 RDI: 00000000000040e2 [ 77.580267][ T2823] RBP: ffffc9000118f490 R08: ffff8881f7132f3f R09: 1ffff1103ee265e7 [ 77.597590][ T2823] R10: dffffc0000000000 R11: ffffed103ee265e8 R12: ffff88811f038000 [ 77.606050][ T2823] R13: 0000000000000002 R14: dffffc0000000000 R15: ffff8881176ae000 [ 77.621126][ T2823] FS: 00007fc7e34c86c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 77.630639][ T2823] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.644406][ T2823] CR2: 00007ff21382cdac CR3: 000000012c468000 CR4: 00000000003506a0 [ 77.652914][ T2823] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.661390][ T2823] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.679735][ T2823] Call Trace: [ 77.704278][ T2823] [ 77.707335][ T2823] resolve_pseudo_ldimm64+0x617/0x10f0 [ 77.713533][ T2823] ? check_attach_btf_id+0xd80/0xd80 [ 77.718983][ T2823] ? __mark_reg_known+0x1b0/0x1b0 [ 77.738126][ T2823] ? security_capable+0x87/0xb0 [ 77.752558][ T2823] bpf_check+0x2d02/0xf750 [ 77.758135][ T2823] ? is_bpf_text_address+0x177/0x190 [ 77.764658][ T2823] ? bpf_get_btf_vmlinux+0x60/0x60 [ 77.770678][ T2823] ? unwind_get_return_address+0x4d/0x90 [ 77.779657][ T2823] ? stack_trace_save+0xf0/0xf0 [ 77.785020][ T2823] ? arch_stack_walk+0xee/0x140 [ 77.798761][ T2823] ? stack_trace_save+0xa6/0xf0 [ 77.803954][ T2823] ? __stack_depot_save+0x34/0x480 [ 77.815569][ T2823] ? __kasan_kmalloc+0xe6/0x100 [ 77.820670][ T2823] ? __kasan_kmalloc+0xd4/0x100 [ 77.825913][ T2823] ? kmem_cache_alloc_trace+0x119/0x270 [ 77.840386][ T2823] ? selinux_bpf_prog_alloc+0x51/0x140 [ 77.846024][ T2823] ? security_bpf_prog_alloc+0x62/0x90 [ 77.848658][ T2864] netlink: 'syz.6.1051': attribute type 2 has an invalid length. [ 77.851503][ T2823] ? bpf_prog_load+0x9d4/0x1620 [ 77.851531][ T2823] ? __sys_bpf+0x51d/0x7d0 [ 77.869505][ T2823] ? __x64_sys_bpf+0x7c/0x90 [ 77.874209][ T2823] ? x64_sys_call+0x4b9/0x9a0 [ 77.878902][ T2823] ? do_syscall_64+0x4c/0xa0 [ 77.883678][ T2823] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.889793][ T2823] ? check_stack_object+0x81/0x150 [ 77.896236][ T2823] ? memset+0x35/0x40 [ 77.900262][ T2823] ? bpf_obj_name_cpy+0x193/0x1e0 [ 77.907596][ T2823] bpf_prog_load+0x10c5/0x1620 [ 77.912855][ T2823] ? map_freeze+0x370/0x370 [ 77.921843][ T2823] ? selinux_bpf+0xc7/0xf0 [ 77.927799][ T2823] ? security_bpf+0x82/0xa0 [ 77.932367][ T2823] __sys_bpf+0x51d/0x7d0 [ 77.936741][ T2823] ? bpf_link_show_fdinfo+0x330/0x330 [ 77.942278][ T2823] ? trace_event_raw_event_sys_enter+0x127/0x140 [ 77.965480][ T2823] __x64_sys_bpf+0x7c/0x90 [ 77.970186][ T2823] x64_sys_call+0x4b9/0x9a0 [ 77.975306][ T2823] do_syscall_64+0x4c/0xa0 [ 77.979880][ T2823] ? clear_bhb_loop+0x50/0xa0 [ 77.985079][ T2823] ? clear_bhb_loop+0x50/0xa0 [ 77.998688][ T2823] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.005620][ T2823] RIP: 0033:0x7fc7e4a6f159 [ 78.010208][ T2823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.030652][ T2823] RSP: 002b:00007fc7e34c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.039713][ T2823] RAX: ffffffffffffffda RBX: 00007fc7e4cf6fa0 RCX: 00007fc7e4a6f159 [ 78.056057][ T2823] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 78.067477][ T2823] RBP: 00007fc7e4b06024 R08: 0000000000000000 R09: 0000000000000000 [ 78.075797][ T2823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.084400][ T2823] R13: 00007fc7e4cf7038 R14: 00007fc7e4cf6fa0 R15: 00007ffc33cb3d88 [ 78.092566][ T2823] [ 78.096095][ T2823] ---[ end trace c752ec4b78b26a22 ]--- [ 78.143292][ T899] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 78.167568][ T899] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 78.193305][ T899] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 78.215545][ T899] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 78.235819][ T899] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 78.263141][ T899] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 78.273021][ T2873] set_capacity_and_notify: 2 callbacks suppressed [ 78.273036][ T2873] loop4: detected capacity change from 0 to 40427 [ 78.277688][ T899] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 78.289155][ T2873] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 78.298959][ T899] usb 6-1: USB disconnect, device number 4 [ 78.314667][ T2873] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 78.324354][ T2873] F2FS-fs (loop4): invalid crc value [ 78.332401][ T2873] F2FS-fs (loop4): Found nat_bits in checkpoint [ 78.388189][ T2873] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 78.403473][ T2873] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 78.408984][ T2896] netlink: 'syz.3.1062': attribute type 2 has an invalid length. [ 78.444774][ T2873] attempt to access beyond end of device [ 78.444774][ T2873] loop4: rw=2049, want=45104, limit=40427 [ 78.546911][ T2873] attempt to access beyond end of device [ 78.546911][ T2873] loop4: rw=0, want=45104, limit=40427 [ 78.635472][ T288] attempt to access beyond end of device [ 78.635472][ T288] loop4: rw=2049, want=40968, limit=40427 [ 78.759345][ T2921] netlink: 'syz.5.1075': attribute type 2 has an invalid length. [ 79.246980][ T2989] loop6: detected capacity change from 0 to 512 [ 79.291112][ T2989] EXT4-fs error (device loop6): ext4_iget_extra_inode:4604: inode #15: comm syz.6.1103: corrupted in-inode xattr [ 79.304429][ T2989] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1103: couldn't read orphan inode 15 (err -117) [ 79.317058][ T2989] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.360420][ T3001] loop4: detected capacity change from 0 to 512 [ 79.390116][ T3001] EXT4-fs error (device loop4): ext4_iget_extra_inode:4604: inode #15: comm syz.4.1123: corrupted in-inode xattr [ 79.402773][ T3001] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1123: couldn't read orphan inode 15 (err -117) [ 79.413192][ T20] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 79.415295][ T3001] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.513210][ T42] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 79.703231][ T20] usb 4-1: device descriptor read/64, error -71 [ 79.933243][ T42] usb 6-1: unable to get BOS descriptor or descriptor too short [ 79.973251][ T42] usb 6-1: not running at top speed; connect to a high speed hub [ 80.053269][ T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.063426][ T42] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.113197][ T20] usb 4-1: device descriptor read/64, error -71 [ 80.223323][ T42] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 80.232497][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.240533][ T42] usb 6-1: Product: syz [ 80.244742][ T42] usb 6-1: Manufacturer: syz [ 80.249328][ T42] usb 6-1: SerialNumber: syz [ 80.393271][ T20] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 80.633295][ T42] usb 6-1: 0:1 : does not exist [ 80.673226][ T20] usb 4-1: device descriptor read/64, error -71 [ 80.681070][ T42] usb 6-1: USB disconnect, device number 5 [ 81.063316][ T20] usb 4-1: device descriptor read/64, error -71 [ 81.183351][ T20] usb usb4-port1: attempt power cycle [ 81.593251][ T20] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 81.763291][ T20] usb 4-1: device descriptor read/8, error -71 [ 82.033248][ T20] usb 4-1: device descriptor read/8, error -71 [ 82.147919][ T3010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1125'. [ 82.225107][ T3019] loop4: detected capacity change from 0 to 1024 [ 82.247831][ T3019] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 82.270982][ T3019] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 82.286411][ T3019] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 82.498416][ T3059] input: syz1 as /devices/virtual/input/input10 [ 82.629565][ T30] audit: type=1400 audit(1788192331.612:582): avc: denied { getopt } for pid=3077 comm="syz.0.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.827227][ T3101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1161'. [ 82.963203][ T899] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 83.253214][ T899] usb 6-1: device descriptor read/64, error -71 [ 83.643221][ T899] usb 6-1: device descriptor read/64, error -71 [ 83.923294][ T899] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 84.193246][ T899] usb 6-1: device descriptor read/64, error -71 [ 84.583230][ T899] usb 6-1: device descriptor read/64, error -71 [ 84.703309][ T899] usb usb6-port1: attempt power cycle [ 85.123276][ T899] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 85.293301][ T899] usb 6-1: device descriptor read/8, error -71 [ 85.563290][ T899] usb 6-1: device descriptor read/8, error -71 [ 85.689284][ T3124] input: syz1 as /devices/virtual/input/input11 [ 85.807899][ T3139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1174'. [ 86.009666][ T30] audit: type=1326 audit(1788192334.992:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3162 comm="syz.4.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2135a3159 code=0x7ffc0000 [ 86.023219][ T3163] loop4: detected capacity change from 0 to 1024 [ 86.040941][ T30] audit: type=1326 audit(1788192334.992:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3162 comm="syz.4.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2135a3159 code=0x7ffc0000 [ 86.068040][ T30] audit: type=1326 audit(1788192334.992:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3162 comm="syz.4.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff2135a3159 code=0x7ffc0000 [ 86.094749][ T30] audit: type=1326 audit(1788192334.992:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3162 comm="syz.4.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2135a3159 code=0x7ffc0000 [ 86.123365][ T42] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 86.131132][ T3163] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 86.131206][ T3163] EXT4-fs (loop4): Ignoring removed bh option [ 86.149959][ T3165] input: syz1 as /devices/virtual/input/input12 [ 86.156550][ T30] audit: type=1326 audit(1788192334.992:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3162 comm="syz.4.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2135a3159 code=0x7ffc0000 [ 86.192737][ T30] audit: type=1326 audit(1788192334.992:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3162 comm="syz.4.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff2135a3159 code=0x7ffc0000 [ 86.235233][ T30] audit: type=1326 audit(1788192334.992:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3162 comm="syz.4.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff2135a2ec2 code=0x7ffc0000 [ 86.260683][ T30] audit: type=1326 audit(1788192334.992:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3162 comm="syz.4.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff21356398e code=0x7ffc0000 [ 86.285862][ T30] audit: type=1326 audit(1788192334.992:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3162 comm="syz.4.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff2135a2f87 code=0x7ffc0000 [ 86.288230][ T3163] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,mblk_io_submit,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 86.320523][ T3176] binder: 3175:3176 ioctl c018620c 0 returned -1 [ 86.419446][ T3179] loop5: detected capacity change from 0 to 1024 [ 86.466141][ T3179] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 2: comm syz.5.1197: lblock 2 mapped to illegal pblock 2 (length 1) [ 86.492982][ T3179] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 48: comm syz.5.1197: lblock 0 mapped to illegal pblock 48 (length 1) [ 86.510102][ T3179] EXT4-fs error (device loop5): ext4_acquire_dquot:6227: comm syz.5.1197: Failed to acquire dquot type 0 [ 86.522255][ T3179] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 86.532855][ T3179] EXT4-fs error (device loop5): ext4_evict_inode:285: inode #11: comm syz.5.1197: mark_inode_dirty error [ 86.545546][ T3179] EXT4-fs warning (device loop5): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 86.557595][ T3179] EXT4-fs (loop5): 1 orphan inode deleted [ 86.563691][ T3179] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 86.591129][ T306] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.606337][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 86.619433][ T306] EXT4-fs error (device loop5): ext4_release_dquot:6263: comm kworker/u4:3: Failed to release dquot type 0 [ 86.653225][ T42] usb 4-1: not running at top speed; connect to a high speed hub [ 86.678062][ T757] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.712098][ T757] EXT4-fs error (device loop5): ext4_release_dquot:6263: comm kworker/u4:5: Failed to release dquot type 0 [ 86.743977][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.762607][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.767533][ T689] EXT4-fs error (device loop5): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 86.810859][ T689] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 86.831842][ T689] EXT4-fs error (device loop5): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error [ 86.923327][ T42] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 86.942704][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.965922][ T42] usb 4-1: Product: syz [ 86.981932][ T42] usb 4-1: Manufacturer: syz [ 86.993416][ T42] usb 4-1: SerialNumber: syz [ 87.036543][ T3228] loop5: detected capacity change from 0 to 512 [ 87.115027][ T3228] EXT4-fs (loop5): Test dummy encryption mode enabled [ 87.145042][ T3243] SELinux: ebitmap: map size 1719086182 does not match my size 64 (high bit was 1030712932) [ 87.165534][ T3228] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,errors=remount-ro,. Quota mode: writeback. [ 87.167314][ T3243] SELinux: failed to load policy [ 87.321003][ T3228] EXT4-fs warning (device loop5): __ext4_ioctl:882: Setting inode version is not supported with metadata_csum enabled. [ 87.363274][ T42] usb 4-1: 0:1 : does not exist [ 87.415192][ T42] usb 4-1: USB disconnect, device number 12 [ 87.533331][ T3287] netem: change failed [ 87.570992][ T3294] loop5: detected capacity change from 0 to 256 [ 87.621739][ T3296] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1261'. [ 88.072974][ T3329] loop4: detected capacity change from 0 to 512 [ 88.095099][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 88.095112][ T30] audit: type=1400 audit(1788192337.082:609): avc: denied { map } for pid=3330 comm="syz.5.1266" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 88.125037][ T30] audit: type=1400 audit(1788192337.082:610): avc: denied { unmount } for pid=1385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 88.170223][ T3329] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1265: invalid block [ 88.195834][ T3329] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1265: invalid indirect mapped block 4294967295 (level 1) [ 88.213823][ T3329] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1265: invalid indirect mapped block 4294967295 (level 1) [ 88.224897][ T3344] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1271'. [ 88.245446][ T348] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.246413][ T3329] EXT4-fs (loop4): 2 truncates cleaned up [ 88.264880][ T3329] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,user_xattr,init_itable=0x0000000000004004,nojournal_checksum,acl,stripe=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 88.332778][ T288] EXT4-fs error (device loop4): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 88.346637][ T288] EXT4-fs error (device loop4): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 88.405218][ T10] tipc: Left network mode [ 88.587989][ T3351] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.595468][ T3351] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.603181][ T3351] device bridge_slave_0 entered promiscuous mode [ 88.612672][ T3351] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.620217][ T3351] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.628166][ T3351] device bridge_slave_1 entered promiscuous mode [ 88.711357][ T3351] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.718523][ T3351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.725904][ T3351] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.732948][ T3351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.784013][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.792087][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.800323][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.828171][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.842335][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.849537][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.862545][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.878224][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.885399][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.924003][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.939138][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.959282][ T10] device bridge_slave_1 left promiscuous mode [ 88.967510][ T3349] loop6: detected capacity change from 0 to 131072 [ 88.973560][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.982561][ T10] device bridge_slave_0 left promiscuous mode [ 88.995029][ T3349] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945) [ 88.998591][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.009738][ T3349] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 89.027578][ T3365] loop3: detected capacity change from 0 to 1024 [ 89.031152][ T10] device veth1_macvtap left promiscuous mode [ 89.034445][ T3349] F2FS-fs (loop6): invalid crc value [ 89.054166][ T10] device veth0_vlan left promiscuous mode [ 89.059006][ T3365] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.093526][ T3365] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x0000000000000000,errors=continue,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 89.123337][ T3349] F2FS-fs (loop6): Found nat_bits in checkpoint [ 89.165278][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.171034][ T3349] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 89.180974][ T3349] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 89.187691][ T3351] device veth0_vlan entered promiscuous mode [ 89.213561][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.244883][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.252507][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.268132][ T3351] device veth1_macvtap entered promiscuous mode [ 89.279758][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.306935][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.339760][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.500687][ T3387] device veth1_to_batadv entered promiscuous mode [ 89.833252][ T60] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 89.854550][ T3415] loop7: detected capacity change from 0 to 512 [ 89.895492][ T3415] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.070164][ T3429] loop7: detected capacity change from 0 to 2048 [ 90.154860][ T3429] EXT4-fs error (device loop7): __ext4_iget:4950: inode #2: block 127754: comm syz.7.1306: invalid block [ 90.167099][ T3429] EXT4-fs (loop7): get root inode failed [ 90.179252][ T3429] EXT4-fs (loop7): mount failed [ 90.193439][ T60] usb 7-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 90.205000][ T60] usb 7-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.218601][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 90.225871][ T60] usb 7-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 90.235103][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.246481][ T60] usb 7-1: config 0 descriptor?? [ 90.263391][ T3393] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.303921][ T899] Bluetooth: hci1: command 0x1003 tx timeout [ 90.310015][ T1978] Bluetooth: hci1: sending frame failed (-49) [ 90.317361][ T899] Bluetooth: hci0: command 0x1003 tx timeout [ 90.323574][ T1978] Bluetooth: hci0: sending frame failed (-49) [ 90.493820][ T3459] input: syz1 as /devices/virtual/input/input13 [ 90.601954][ T3474] loop7: detected capacity change from 0 to 256 [ 90.615255][ T3474] exfat: Deprecated parameter 'utf8' [ 90.632294][ T3474] exfat: Deprecated parameter 'namecase' [ 90.638672][ T3474] exfat: Deprecated parameter 'namecase' [ 90.644681][ T3474] exfat: Deprecated parameter 'namecase' [ 90.660790][ T3474] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 90.724330][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.731805][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.749993][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.763574][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.770497][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.777799][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.787236][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.794422][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.801300][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.808972][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.818051][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.826204][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.833281][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.840184][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.847309][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.854591][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.861892][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.869338][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.876573][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.890490][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.905557][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.912542][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.919581][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.927027][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.934580][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.941475][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.948490][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.955465][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.962581][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.969700][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.976697][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.983623][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.990500][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 90.997491][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 91.004640][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 91.011881][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 91.018894][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 91.026769][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 91.034097][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 91.041140][ T60] ortek 0003:1223:3F07.0007: unknown main item tag 0x0 [ 91.051721][ T60] ortek 0003:1223:3F07.0007: hidraw0: USB HID v1.64 Device [HID 1223:3f07] on usb-dummy_hcd.6-1/input0 [ 91.073063][ T60] usb 7-1: USB disconnect, device number 6 [ 91.091079][ T3503] kvm [3502]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000051 [ 91.123892][ T3505] fido_id[3505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 91.255336][ T3507] loop7: detected capacity change from 0 to 40427 [ 91.326527][ T3507] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 91.334578][ T3507] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 91.348508][ T3507] F2FS-fs (loop7): Found nat_bits in checkpoint [ 91.376536][ T3507] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 91.383733][ T3507] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 91.492662][ T3513] loop7: detected capacity change from 0 to 256 [ 91.527437][ T3513] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.529950][ T3517] loop6: detected capacity change from 0 to 512 [ 91.540648][ T3519] loop3: detected capacity change from 0 to 512 [ 91.557501][ T3517] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 91.575908][ T3517] EXT4-fs (loop6): 1 truncate cleaned up [ 91.582425][ T3517] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.604966][ T3519] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.679263][ T3525] loop7: detected capacity change from 0 to 256 [ 91.718990][ T3531] loop3: detected capacity change from 0 to 512 [ 91.767081][ T3525] exfat: Bad value for 'fmask' [ 91.783844][ T3531] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1346: inode has both inline data and extents flags [ 91.847152][ T3531] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1346: couldn't read orphan inode 15 (err -117) [ 91.880593][ T3531] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 92.246011][ T3563] loop6: detected capacity change from 0 to 512 [ 92.263285][ T3563] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1361: invalid block [ 92.278853][ T3563] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1361: invalid indirect mapped block 4294967295 (level 1) [ 92.293975][ T3563] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1361: invalid indirect mapped block 4294967295 (level 1) [ 92.309483][ T3563] EXT4-fs (loop6): 2 truncates cleaned up [ 92.315593][ T3563] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,user_xattr,init_itable=0x0000000000004004,nojournal_checksum,acl,stripe=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 92.370810][ T1385] EXT4-fs error (device loop6): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 92.383446][ T899] Bluetooth: hci0: command 0x1001 tx timeout [ 92.383491][ T899] Bluetooth: hci1: command 0x1001 tx timeout [ 92.383648][ T1978] Bluetooth: hci0: sending frame failed (-49) [ 92.403011][ T1385] EXT4-fs error (device loop6): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 92.403514][ T1978] Bluetooth: hci1: sending frame failed (-49) [ 92.482087][ T3574] tap0: tun_chr_ioctl cmd 1074025677 [ 92.489236][ T3574] tap0: linktype set to 773 [ 92.625217][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.632360][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.640621][ T3579] device bridge_slave_0 entered promiscuous mode [ 92.649662][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.656863][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.664410][ T3579] device bridge_slave_1 entered promiscuous mode [ 92.723589][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.730872][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.738359][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.745460][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.788920][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.797065][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.804581][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.825069][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.833935][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.841018][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.848570][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.857943][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.865089][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.885755][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.893996][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.912734][ T3579] device veth0_vlan entered promiscuous mode [ 92.920911][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.930371][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.943747][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.951400][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.998233][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.015465][ T3579] device veth1_macvtap entered promiscuous mode [ 93.031273][ T3598] loop3: detected capacity change from 0 to 512 [ 93.069162][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.083618][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.159651][ T3598] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1374: invalid indirect mapped block 4294967295 (level 1) [ 93.184799][ T348] device bridge_slave_1 left promiscuous mode [ 93.190990][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.199674][ T348] device bridge_slave_0 left promiscuous mode [ 93.206028][ T3598] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1374: invalid indirect mapped block 4294967295 (level 1) [ 93.208999][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.240026][ T3598] EXT4-fs (loop3): 2 truncates cleaned up [ 93.252951][ T3598] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,user_xattr,init_itable=0x0000000000004004,nojournal_checksum,acl,stripe=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 93.273489][ T348] device veth0_to_bond left promiscuous mode [ 93.279553][ T348] device veth1_macvtap left promiscuous mode [ 93.286205][ T348] device veth0_vlan left promiscuous mode [ 93.334117][ T290] EXT4-fs error (device loop3): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 93.352163][ T290] EXT4-fs error (device loop3): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 93.414298][ T3614] loop7: detected capacity change from 0 to 1024 [ 93.427773][ T3614] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 93.440979][ T3614] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.458660][ T3614] EXT4-fs error (device loop7): ext4_free_blocks:6231: comm syz.7.1382: Freeing blocks not in datazone - block = 0, count = 16 [ 93.490839][ T30] audit: type=1326 audit(1788192342.472:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.8.1383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75425ae159 code=0x7ffc0000 [ 93.508557][ T3618] loop8: detected capacity change from 0 to 1024 [ 93.522481][ T30] audit: type=1326 audit(1788192342.472:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.8.1383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75425ae159 code=0x7ffc0000 [ 93.547410][ T30] audit: type=1326 audit(1788192342.472:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.8.1383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f75425ae159 code=0x7ffc0000 [ 93.548033][ T45] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set [ 93.588284][ T30] audit: type=1326 audit(1788192342.472:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.8.1383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75425ae159 code=0x7ffc0000 [ 93.589254][ T45] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 93.625440][ T30] audit: type=1326 audit(1788192342.472:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.8.1383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75425ae159 code=0x7ffc0000 [ 93.628272][ T45] EXT4-fs (loop7): This should not happen!! Data will be lost [ 93.628272][ T45] [ 93.651182][ T30] audit: type=1326 audit(1788192342.472:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.8.1383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f75425ae159 code=0x7ffc0000 [ 93.685686][ T45] EXT4-fs (loop7): Total free blocks count 0 [ 93.685706][ T45] EXT4-fs (loop7): Free/Dirty block details [ 93.685717][ T45] EXT4-fs (loop7): free_blocks=16 [ 93.685726][ T45] EXT4-fs (loop7): dirty_blocks=16 [ 93.685735][ T45] EXT4-fs (loop7): Block reservation details [ 93.685744][ T45] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 93.689521][ T3618] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 93.697441][ T30] audit: type=1326 audit(1788192342.472:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.8.1383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f75425adec2 code=0x7ffc0000 [ 93.698904][ T3618] EXT4-fs (loop8): Ignoring removed bh option [ 93.704176][ T30] audit: type=1326 audit(1788192342.472:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.8.1383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f754256e98e code=0x7ffc0000 [ 93.781328][ T3618] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,dioread_lock,mblk_io_submit,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 93.783771][ T30] audit: type=1326 audit(1788192342.472:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.8.1383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f75425adf87 code=0x7ffc0000 [ 93.834330][ T30] audit: type=1326 audit(1788192342.472:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.8.1383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f754256e98e code=0x7ffc0000 [ 93.936878][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.944426][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.953547][ T3624] device bridge_slave_0 entered promiscuous mode [ 93.961228][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.968516][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.976310][ T3624] device bridge_slave_1 entered promiscuous mode [ 94.048701][ T348] tipc: Disabling bearer [ 94.055770][ T348] tipc: Left network mode [ 94.142395][ T3640] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1392: invalid indirect mapped block 4294967295 (level 1) [ 94.164312][ T3640] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1392: invalid indirect mapped block 4294967295 (level 1) [ 94.179832][ T3640] EXT4-fs (loop7): 2 truncates cleaned up [ 94.187325][ T3640] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodiscard,user_xattr,init_itable=0x0000000000004004,nojournal_checksum,acl,stripe=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 94.249738][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.256889][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.264427][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.267694][ T3351] EXT4-fs error (device loop7): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 94.271579][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.284720][ T3351] EXT4-fs error (device loop7): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 94.353210][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.361613][ T757] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.369481][ T757] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.394349][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.402682][ T757] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.409751][ T757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.417371][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.427402][ T757] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.434680][ T757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.452087][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.463622][ T20] Bluetooth: hci1: command 0x1009 tx timeout [ 94.469753][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 94.488840][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.518372][ T3653] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1399'. [ 94.532234][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.549343][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.575251][ T3624] device veth0_vlan entered promiscuous mode [ 94.581524][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.590196][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.604312][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.622203][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.637832][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.648789][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.687822][ T3624] device veth1_macvtap entered promiscuous mode [ 94.719415][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.727706][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.736515][ T3657] exfat: Bad value for 'fmask' [ 94.741957][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.772841][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.781955][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.816646][ T348] device bridge_slave_1 left promiscuous mode [ 94.822919][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.835206][ T348] device bridge_slave_0 left promiscuous mode [ 94.841516][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.851059][ T348] device veth1_macvtap left promiscuous mode [ 94.858180][ T348] device veth0_vlan left promiscuous mode [ 95.019479][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.058008][ T3656] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.065939][ T3656] device bridge_slave_0 entered promiscuous mode [ 95.074697][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.081740][ T3656] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.089624][ T3656] device bridge_slave_1 entered promiscuous mode [ 95.192554][ T3663] F2FS-fs (loop9): invalid crc value [ 95.212460][ T3663] F2FS-fs (loop9): Found nat_bits in checkpoint [ 95.214378][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.226036][ T3656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.233375][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.240536][ T3656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.284520][ T3663] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 95.313915][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.329909][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.340337][ T3663] attempt to access beyond end of device [ 95.340337][ T3663] loop9: rw=2049, want=45104, limit=40427 [ 95.348125][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.361610][ T3624] attempt to access beyond end of device [ 95.361610][ T3624] loop9: rw=2049, want=45112, limit=40427 [ 95.414883][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.428686][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.461250][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.479526][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.502098][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.512204][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.527880][ T3656] device veth0_vlan entered promiscuous mode [ 95.543718][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.552399][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.569183][ T3656] device veth1_macvtap entered promiscuous mode [ 95.590459][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.601244][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.622478][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.631608][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.640247][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.854205][ T348] device bridge_slave_1 left promiscuous mode [ 95.860421][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.907960][ T348] device bridge_slave_0 left promiscuous mode [ 95.917438][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.937233][ T3732] serio: Serial port ttyS3 [ 95.941971][ T348] device veth1_to_batadv left promiscuous mode [ 95.949032][ T348] device veth1_macvtap left promiscuous mode [ 95.955639][ T348] device veth0_vlan left promiscuous mode [ 96.170949][ T3756] EXT4-fs (loop9): Ignoring removed bh option [ 96.195300][ T3756] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 96.240218][ T3756] EXT4-fs error (device loop9): ext4_find_dest_de:2115: inode #12: block 7: comm syz.9.1440: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 96.268169][ T3756] EXT4-fs (loop9): Remounting filesystem read-only [ 96.280255][ T3756] EXT4-fs error (device loop9): ext4_check_all_de:667: inode #12: block 7: comm syz.9.1440: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 96.301011][ T3756] EXT4-fs (loop9): Remounting filesystem read-only [ 96.604129][ T3768] serio: Serial port ttyS3 [ 97.196249][ T3805] input: syz1 as /devices/virtual/input/input15 [ 97.236269][ T3807] set_capacity_and_notify: 4 callbacks suppressed [ 97.236285][ T3807] loop9: detected capacity change from 0 to 256 [ 97.263192][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 97.276944][ T3788] loop8: detected capacity change from 0 to 131072 [ 97.350648][ T3788] F2FS-fs (loop8): Invalid segment/section count (458783, 24 x 150994945) [ 97.364136][ T3788] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 97.373455][ T3788] F2FS-fs (loop8): invalid crc value [ 97.393803][ T3788] F2FS-fs (loop8): Found nat_bits in checkpoint [ 97.427122][ T3788] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 97.434370][ T3788] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 97.673215][ T509] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.063305][ T509] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 98.090474][ T509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.102508][ T509] usb 2-1: config 0 descriptor?? [ 98.184857][ T3870] loop9: detected capacity change from 0 to 512 [ 98.244067][ T3870] EXT4-fs (loop9): Test dummy encryption mode enabled [ 98.266580][ T3870] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,errors=remount-ro,. Quota mode: writeback. [ 98.348865][ T3883] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1495'. [ 98.358107][ T3883] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1495'. [ 98.359212][ T3870] EXT4-fs warning (device loop9): __ext4_ioctl:882: Setting inode version is not supported with metadata_csum enabled. [ 98.386625][ T3885] loop8: detected capacity change from 0 to 512 [ 98.436605][ T3885] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 98.459648][ T3885] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 98.473733][ T3885] EXT4-fs (loop8): orphan cleanup on readonly fs [ 98.480511][ T3885] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.1496: bg 0: block 15: invalid block bitmap [ 98.494973][ T3885] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 98.504219][ T3885] EXT4-fs (loop8): 1 truncate cleaned up [ 98.509904][ T3885] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,noload,noblock_validity,dioread_lock,nouid32,data_err=ignore,,errors=continue. Quota mode: none. [ 98.535950][ T3885] EXT4-fs (loop8): shut down requested (2) [ 98.542377][ T3885] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 98.551822][ T3885] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 98.583260][ T509] usb 2-1: Cannot set MAC address [ 98.588379][ T509] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 98.603529][ T509] usb 2-1: USB disconnect, device number 2 [ 98.742607][ T3916] WARNING! power/level is deprecated; use power/control instead [ 98.831822][ T3926] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1515'. [ 98.907224][ T3938] loop8: detected capacity change from 0 to 256 [ 98.947273][ T3943] loop9: detected capacity change from 0 to 256 [ 98.965711][ T3943] exfat: Deprecated parameter 'utf8' [ 98.978800][ T3943] exfat: Deprecated parameter 'namecase' [ 98.985286][ T3943] exfat: Deprecated parameter 'namecase' [ 98.991053][ T3943] exfat: Deprecated parameter 'utf8' [ 99.012725][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 99.012753][ T30] audit: type=1400 audit(1788192347.992:640): avc: denied { sys_module } for pid=3928 comm="syz.5.1517" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.062729][ T3943] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 99.083723][ T3929] Invalid ELF header magic: != ELF [ 99.098314][ T30] audit: type=1400 audit(1788192347.992:641): avc: denied { module_load } for pid=3928 comm="syz.5.1517" path="/sys/kernel/btf/vmlinux" dev="sysfs" ino=4664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 99.136636][ T30] audit: type=1400 audit(1788192348.112:642): avc: denied { add_name } for pid=3942 comm="syz.9.1524" name=3F0CB265933BAAAAAAAAAABB08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.185807][ T30] audit: type=1400 audit(1788192348.112:643): avc: denied { associate } for pid=3942 comm="syz.9.1524" name=3F0CB265933BAAAAAAAAAABB08 scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.278254][ T3964] loop1: detected capacity change from 0 to 1024 [ 99.295683][ T3970] mmap: syz.0.1535 (3970) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 99.377380][ T3984] loop8: detected capacity change from 0 to 256 [ 99.389259][ T3964] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 2: comm syz.1.1533: lblock 2 mapped to illegal pblock 2 (length 1) [ 99.405110][ T3964] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 99.413795][ T3964] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 48: comm syz.1.1533: lblock 0 mapped to illegal pblock 48 (length 1) [ 99.429042][ T3964] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 99.438800][ T3964] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.1533: Failed to acquire dquot type 0 [ 99.440295][ T30] audit: type=1400 audit(1788192348.432:644): avc: denied { bind } for pid=3989 comm="syz.5.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.470614][ T30] audit: type=1400 audit(1788192348.452:645): avc: denied { name_bind } for pid=3989 comm="syz.5.1543" src=20007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 99.471993][ T3984] exfat: Deprecated parameter 'namecase' [ 99.491512][ T30] audit: type=1400 audit(1788192348.452:646): avc: denied { node_bind } for pid=3989 comm="syz.5.1543" saddr=255.255.255.255 src=20007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 99.497556][ T3964] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 99.543466][ T3984] exfat: Deprecated parameter 'namecase' [ 99.551903][ T3964] EXT4-fs error (device loop1): ext4_evict_inode:285: inode #11: comm syz.1.1533: mark_inode_dirty error [ 99.570872][ T3964] EXT4-fs warning (device loop1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 99.595769][ T3984] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d) [ 99.631065][ T3964] EXT4-fs (loop1): 1 orphan inode deleted [ 99.644434][ T10] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.647984][ T3964] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 99.703502][ T10] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 99.711974][ T10] EXT4-fs error (device loop1): ext4_release_dquot:6263: comm kworker/u4:1: Failed to release dquot type 0 [ 99.744136][ T3984] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1541'. [ 99.841210][ T4019] loop8: detected capacity change from 0 to 512 [ 99.848965][ T45] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.880982][ T45] EXT4-fs error (device loop1): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0 [ 99.896869][ T4019] EXT4-fs (loop8): Ignoring removed oldalloc option [ 99.937873][ T4019] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.942836][ T3656] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 99.991456][ T3656] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 100.009480][ T3656] EXT4-fs error (device loop1): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error [ 100.020984][ T4019] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 100.047803][ T4019] EXT4-fs error (device loop8): ext4_orphan_get:1432: comm syz.8.1547: bad orphan inode 3855 [ 100.059212][ T4019] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,oldalloc,jqfmt=vfsold,inlinecrypt,auto_da_alloc,,errors=continue. Quota mode: none. [ 100.122161][ T4049] capability: warning: `syz.5.1562' uses 32-bit capabilities (legacy support in use) [ 100.170644][ T4056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1564'. [ 100.182165][ T4052] loop5: detected capacity change from 0 to 2048 [ 100.193413][ T4056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1564'. [ 100.219780][ T4054] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.237797][ T4054] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.264808][ T4052] EXT4-fs error (device loop5): __ext4_iget:4950: inode #2: block 127754: comm syz.5.1566: invalid block [ 100.322377][ T4052] EXT4-fs (loop5): get root inode failed [ 100.333334][ T4052] EXT4-fs (loop5): mount failed [ 100.339148][ T4072] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1565: bg 0: block 345: padding at end of block bitmap is not set [ 100.357556][ T4072] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 100.370372][ T4072] EXT4-fs (loop8): This should not happen!! Data will be lost [ 100.370372][ T4072] [ 100.388517][ T4054] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 229 with error 28 [ 100.408876][ T4054] EXT4-fs (loop8): This should not happen!! Data will be lost [ 100.408876][ T4054] [ 100.433552][ T4054] EXT4-fs (loop8): Total free blocks count 0 [ 100.442103][ T4054] EXT4-fs (loop8): Free/Dirty block details [ 100.448739][ T4054] EXT4-fs (loop8): free_blocks=0 [ 100.454027][ T4054] EXT4-fs (loop8): dirty_blocks=240 [ 100.459400][ T4054] EXT4-fs (loop8): Block reservation details [ 100.488385][ T4054] EXT4-fs (loop8): i_reserved_data_blocks=15 [ 100.565533][ T4095] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1581'. [ 100.638444][ T4099] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 100.672598][ T4099] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 100.687870][ T4099] System zones: 0-5 [ 100.695015][ T4099] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,barrier=0x000000000000c1ce,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 100.753529][ T4109] device ifb1 entered promiscuous mode [ 100.759048][ T4109] device vlan0 entered promiscuous mode [ 101.133185][ T42] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 101.165433][ T4142] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 101.173818][ T4142] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 101.198198][ T4142] EXT4-fs (loop1): orphan cleanup on readonly fs [ 101.211994][ T4142] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1600: bg 0: block 15: invalid block bitmap [ 101.225278][ T4142] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 101.239975][ T4142] EXT4-fs (loop1): 1 truncate cleaned up [ 101.245952][ T4142] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noload,noblock_validity,dioread_lock,nouid32,data_err=ignore,,errors=continue. Quota mode: none. [ 101.264959][ T4149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.290989][ T4142] EXT4-fs (loop1): shut down requested (2) [ 101.300769][ T4142] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 101.310076][ T4142] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 101.553301][ T42] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.567573][ T42] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.583182][ T42] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 101.603269][ T42] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.698688][ T4169] exfat: Deprecated parameter 'namecase' [ 101.715040][ T4169] exfat: Deprecated parameter 'namecase' [ 101.766555][ T4169] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d) [ 101.803332][ T42] usb 10-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 101.823450][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.832511][ T42] usb 10-1: Product: syz [ 101.838302][ T4169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1609'. [ 101.840429][ T42] usb 10-1: Manufacturer: syz [ 101.858568][ T42] usb 10-1: SerialNumber: syz [ 101.904172][ T42] usbserial_generic 10-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 101.952760][ T42] usbserial_generic 10-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 101.983527][ T42] usbserial_generic 10-1:1.0: generic converter detected [ 102.012412][ T42] usb 10-1: generic converter now attached to ttyUSB0 [ 102.109970][ T42] usb 10-1: USB disconnect, device number 2 [ 102.124421][ T42] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 102.163354][ T42] usbserial_generic 10-1:1.0: device disconnected [ 102.319512][ T4198] set_capacity_and_notify: 4 callbacks suppressed [ 102.319529][ T4198] loop1: detected capacity change from 0 to 512 [ 102.425758][ T4210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1625'. [ 102.439889][ T4198] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 102.455117][ T4198] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.438394][ T4252] ================================================================== [ 103.446495][ T4252] BUG: KASAN: use-after-free in tipc_skb_dump+0x125e/0x1780 [ 103.453767][ T4252] Read of size 4 at addr ffff88812109e0c4 by task syz.1.1642/4252 [ 103.461563][ T4252] [ 103.463867][ T4252] CPU: 1 PID: 4252 Comm: syz.1.1642 Tainted: G W syzkaller #0 [ 103.472602][ T4252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.482640][ T4252] Call Trace: [ 103.485900][ T4252] [ 103.488817][ T4252] __dump_stack+0x21/0x30 [ 103.493130][ T4252] dump_stack_lvl+0x110/0x170 [ 103.497793][ T4252] ? show_regs_print_info+0x20/0x20 [ 103.503054][ T4252] ? load_image+0x3f0/0x3f0 [ 103.507539][ T4252] ? scnprintf+0x100/0x180 [ 103.511932][ T4252] print_address_description+0x7f/0x2c0 [ 103.517457][ T4252] ? tipc_skb_dump+0x125e/0x1780 [ 103.522369][ T4252] kasan_report+0x10f/0x150 [ 103.526942][ T4252] ? tipc_skb_dump+0x125e/0x1780 [ 103.531858][ T4252] __asan_report_load4_noabort+0x14/0x20 [ 103.537466][ T4252] tipc_skb_dump+0x125e/0x1780 [ 103.542211][ T4252] tipc_list_dump+0x22b/0x2f0 [ 103.546870][ T4252] tipc_sk_dump+0xa12/0xfb0 [ 103.551368][ T4252] trace_event_raw_event_tipc_sk_class+0x283/0x4e0 [ 103.557847][ T4252] ? perf_trace_tipc_list_class+0x420/0x420 [ 103.563718][ T4252] ? _raw_spin_lock_irq+0xf0/0xf0 [ 103.568727][ T4252] tipc_sk_rcv+0x16b0/0x2ca0 [ 103.573295][ T4252] ? vsnprintf+0x14e/0x1990 [ 103.577783][ T4252] ? __skb_queue_purge+0x170/0x170 [ 103.582872][ T4252] ? trace_buffer_unlock_commit_regs+0x12e/0x5f0 [ 103.589189][ T4252] tipc_node_xmit+0x36f/0xd80 [ 103.593845][ T4252] ? trace_event_raw_event_tipc_sk_class+0x353/0x4e0 [ 103.600496][ T4252] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 103.606018][ T4252] ? perf_trace_tipc_list_class+0x420/0x420 [ 103.611891][ T4252] __tipc_sendmsg+0x1b1a/0x2860 [ 103.616721][ T4252] ? local_bh_enable+0x30/0x30 [ 103.621467][ T4252] ? avc_has_perm+0x163/0x250 [ 103.626124][ T4252] ? avc_has_perm_noaudit+0x490/0x490 [ 103.631477][ T4252] ? __kasan_check_write+0x14/0x20 [ 103.636568][ T4252] ? _raw_spin_lock_bh+0x94/0xf0 [ 103.641487][ T4252] ? _raw_spin_lock_irq+0xf0/0xf0 [ 103.646487][ T4252] ? __local_bh_enable_ip+0x58/0x80 [ 103.651666][ T4252] ? lock_sock_nested+0x217/0x2a0 [ 103.656673][ T4252] ? sock_init_data+0xc0/0xc0 [ 103.661328][ T4252] ? wait_woken+0x170/0x170 [ 103.665811][ T4252] ? trace_buffer_unlock_commit_regs+0x12e/0x5f0 [ 103.672129][ T4252] tipc_sendmsg+0x55/0x70 [ 103.676436][ T4252] ? tipc_recvmsg+0x13a0/0x13a0 [ 103.681280][ T4252] ____sys_sendmsg+0x5be/0x8f0 [ 103.686020][ T4252] ? __sys_sendmsg_sock+0x40/0x40 [ 103.691027][ T4252] ? import_iovec+0x7c/0xb0 [ 103.695508][ T4252] ___sys_sendmsg+0x236/0x2e0 [ 103.700164][ T4252] ? __sys_sendmsg+0x280/0x280 [ 103.704925][ T4252] __sys_sendmmsg+0x2ba/0x4e0 [ 103.709582][ T4252] ? __ia32_sys_sendmsg+0x2d0/0x2d0 [ 103.714767][ T4252] ? trace_buffer_unlock_commit_regs+0x12e/0x5f0 [ 103.721090][ T4252] ? trace_event_raw_event_sys_enter+0x127/0x140 [ 103.727395][ T4252] __x64_sys_sendmmsg+0xa0/0xb0 [ 103.732243][ T4252] x64_sys_call+0x6c6/0x9a0 [ 103.736731][ T4252] do_syscall_64+0x4c/0xa0 [ 103.741128][ T4252] ? clear_bhb_loop+0x50/0xa0 [ 103.745783][ T4252] ? clear_bhb_loop+0x50/0xa0 [ 103.750452][ T4252] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.756321][ T4252] RIP: 0033:0x7fb01c44d159 [ 103.760717][ T4252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.780297][ T4252] RSP: 002b:00007fb01ae85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 103.788700][ T4252] RAX: ffffffffffffffda RBX: 00007fb01c6d5090 RCX: 00007fb01c44d159 [ 103.796653][ T4252] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 103.804603][ T4252] RBP: 00007fb01c4e4024 R08: 0000000000000000 R09: 0000000000000000 [ 103.812576][ T4252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.820538][ T4252] R13: 00007fb01c6d5128 R14: 00007fb01c6d5090 R15: 00007ffdde504608 [ 103.828495][ T4252] [ 103.831495][ T4252] [ 103.833798][ T4252] Allocated by task 4252: [ 103.838104][ T4252] __kasan_kmalloc+0xd4/0x100 [ 103.842774][ T4252] __kmalloc_track_caller+0x13c/0x2c0 [ 103.848124][ T4252] __alloc_skb+0x210/0x730 [ 103.852516][ T4252] tipc_msg_build+0xce/0xf30 [ 103.857098][ T4252] __tipc_sendmsg+0x167c/0x2860 [ 103.861925][ T4252] tipc_sendmsg+0x55/0x70 [ 103.866228][ T4252] ____sys_sendmsg+0x5be/0x8f0 [ 103.870967][ T4252] ___sys_sendmsg+0x236/0x2e0 [ 103.875615][ T4252] __sys_sendmmsg+0x2ba/0x4e0 [ 103.880276][ T4252] __x64_sys_sendmmsg+0xa0/0xb0 [ 103.885118][ T4252] x64_sys_call+0x6c6/0x9a0 [ 103.889597][ T4252] do_syscall_64+0x4c/0xa0 [ 103.893989][ T4252] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.899866][ T4252] [ 103.902182][ T4252] Freed by task 4251: [ 103.906139][ T4252] kasan_set_track+0x4a/0x70 [ 103.910816][ T4252] kasan_set_free_info+0x23/0x40 [ 103.915734][ T4252] ____kasan_slab_free+0x125/0x160 [ 103.920828][ T4252] __kasan_slab_free+0x11/0x20 [ 103.925592][ T4252] slab_free_freelist_hook+0xc2/0x190 [ 103.930944][ T4252] kfree+0xc4/0x270 [ 103.934749][ T4252] skb_release_data+0x7bd/0xa20 [ 103.939579][ T4252] kfree_skb+0xb9/0x2f0 [ 103.943714][ T4252] tsk_advance_rx_queue+0x10f/0x240 [ 103.948907][ T4252] tipc_recvmsg+0x304/0x13a0 [ 103.953492][ T4252] ____sys_recvmsg+0x2ca/0x5b0 [ 103.958239][ T4252] ___sys_recvmsg+0x213/0x5c0 [ 103.962898][ T4252] do_recvmmsg+0x360/0x7d0 [ 103.967291][ T4252] __x64_sys_recvmmsg+0x195/0x250 [ 103.972308][ T4252] x64_sys_call+0x297/0x9a0 [ 103.976787][ T4252] do_syscall_64+0x4c/0xa0 [ 103.981180][ T4252] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.987055][ T4252] [ 103.989358][ T4252] The buggy address belongs to the object at ffff88812109e000 [ 103.989358][ T4252] which belongs to the cache kmalloc-1k of size 1024 [ 104.003390][ T4252] The buggy address is located 196 bytes inside of [ 104.003390][ T4252] 1024-byte region [ffff88812109e000, ffff88812109e400) [ 104.016737][ T4252] The buggy address belongs to the page: [ 104.022366][ T4252] page:ffffea0004842600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x121098 [ 104.032585][ T4252] head:ffffea0004842600 order:3 compound_mapcount:0 compound_pincount:0 [ 104.040895][ T4252] flags: 0x4000000000010200(slab|head|zone=1) [ 104.046955][ T4252] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 104.055526][ T4252] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 104.064159][ T4252] page dumped because: kasan: bad access detected [ 104.070578][ T4252] page_owner tracks the page as allocated [ 104.076293][ T4252] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3656, ts 95296621607, free_ts 95264182567 [ 104.096770][ T4252] post_alloc_hook+0x192/0x1b0 [ 104.101547][ T4252] prep_new_page+0x1c/0x110 [ 104.106036][ T4252] get_page_from_freelist+0x2c3a/0x2cd0 [ 104.111564][ T4252] __alloc_pages+0x1a2/0x460 [ 104.116135][ T4252] new_slab+0xa0/0x4d0 [ 104.120181][ T4252] ___slab_alloc+0x3ac/0x840 [ 104.124762][ T4252] __slab_alloc+0x49/0x90 [ 104.129074][ T4252] __kmalloc_track_caller+0x169/0x2c0 [ 104.134437][ T4252] __alloc_skb+0x210/0x730 [ 104.138835][ T4252] rtmsg_fib+0x5fe/0xe20 [ 104.143055][ T4252] fib_table_insert+0xb76/0x1e80 [ 104.147974][ T4252] fib_add_ifaddr+0xa54/0xdb0 [ 104.152628][ T4252] fib_netdev_event+0x22e/0x5b0 [ 104.157456][ T4252] raw_notifier_call_chain+0x90/0x100 [ 104.162815][ T4252] __dev_notify_flags+0x2f4/0x5b0 [ 104.167823][ T4252] dev_change_flags+0xe3/0x1a0 [ 104.172567][ T4252] page last free stack trace: [ 104.177217][ T4252] free_unref_page_prepare+0x5fa/0x600 [ 104.182656][ T4252] free_unref_page+0xae/0x540 [ 104.187322][ T4252] __free_pages+0x6c/0x100 [ 104.191737][ T4252] __free_slab+0xe5/0x1e0 [ 104.196058][ T4252] __unfreeze_partials+0x15a/0x190 [ 104.201158][ T4252] put_cpu_partial+0xc6/0x120 [ 104.205812][ T4252] __slab_free+0x1d4/0x290 [ 104.210214][ T4252] ___cache_free+0x104/0x120 [ 104.214823][ T4252] qlink_free+0x4d/0x90 [ 104.218964][ T4252] qlist_free_all+0x5f/0xb0 [ 104.223450][ T4252] kasan_quarantine_reduce+0x14a/0x170 [ 104.228896][ T4252] __kasan_slab_alloc+0x2f/0xe0 [ 104.233736][ T4252] slab_post_alloc_hook+0x4f/0x2b0 [ 104.238859][ T4252] kmem_cache_alloc_trace+0xfb/0x270 [ 104.244153][ T4252] ____ip_mc_inc_group+0x1a5/0x7f0 [ 104.249290][ T4252] ip_mc_up+0x112/0x1f0 [ 104.253439][ T4252] [ 104.255747][ T4252] Memory state around the buggy address: [ 104.261367][ T4252] ffff88812109df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.269585][ T4252] ffff88812109e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.277640][ T4252] >ffff88812109e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.285689][ T4252] ^ [ 104.291830][ T4252] ffff88812109e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.299873][ T4252] ffff88812109e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.308001][ T4252] ================================================================== [ 104.316039][ T4252] Disabling lock debugging due to kernel taint [ 104.369510][ T4267] loop5: detected capacity change from 0 to 512 [ 104.454575][ T4267] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.610118][ T4244] loop8: detected capacity change from 0 to 131072 [ 104.686147][ T4244] F2FS-fs (loop8): Invalid segment/section count (458783, 24 x 150994945) [ 104.694989][ T4244] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 104.704438][ T4244] F2FS-fs (loop8): invalid crc value [ 104.712499][ T4244] F2FS-fs (loop8): Found nat_bits in checkpoint [ 104.751695][ T4244] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 104.759441][ T4244] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4