last executing test programs: 5.609990965s ago: executing program 0 (id=13778): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@bridge_getlink={0x34, 0x12, 0x104fc4407ba7bf0b, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x201, 0x10000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x24008800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x9}, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000001d00)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r6, 0x0, 0x4000) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x2, 0x3, 0x0, 0x0, "61bcf34b016813cf"}}, 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getpid() sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 4.744036142s ago: executing program 0 (id=13784): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.321010351s ago: executing program 0 (id=13788): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.058764143s ago: executing program 0 (id=13789): syz_usb_connect(0x2, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000019792e20b4070a0102010002030109022b0001000000440904bd"], 0x0) 3.984386996s ago: executing program 4 (id=13793): r0 = syz_clone(0x40000, 0x0, 0xfffffffffffffc84, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180)=r0, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) r6 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) 3.924745398s ago: executing program 4 (id=13794): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.252679868s ago: executing program 2 (id=13798): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x1, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9930595c2cddcd07aee620a9a46577b92493bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e0014b2909b5e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f8d4ffffffffffffffb99e6b87de5f79d383d05bdaed400762a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r3 = gettid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x2, 0x5004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x2f7e, &(0x7f0000000180)=""/171) splice(r1, 0x0, r4, 0x0, 0xaf4, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0xc) 3.070058926s ago: executing program 4 (id=13800): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000d40)=ANY=[@ANYBLOB="12010000000000104c05f20d00002000000109022400010000000c09040000020300000009210900710122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x10, 0x7, {0x7, 0xa, "a18265cc32"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)={0x40, 0x15, 0x14, "2b6ff5266b961e28f05c102c32fe4e6da586bd7e"}, 0x0, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x42}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.831624576s ago: executing program 2 (id=13803): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) ioctl$TIOCSTI(r0, 0x5412, 0x0) 2.198921704s ago: executing program 0 (id=13806): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808"], 0x0, 0x4}, 0x94) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000032a9000070100f3ff8300"], 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b4c, &(0x7f0000000080)) 2.05692731s ago: executing program 3 (id=13813): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7e0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x616) 2.008723032s ago: executing program 3 (id=13814): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x4) 1.989484143s ago: executing program 2 (id=13815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}}, 0x40880) 1.982438193s ago: executing program 2 (id=13816): syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000000)="e0", 0x1) 1.184713808s ago: executing program 3 (id=13822): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.172405889s ago: executing program 3 (id=13823): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='htcp', 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 1.124762871s ago: executing program 3 (id=13824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a0001a05c191780fbdbdf250a8080000080"], 0x24}}, 0x20000050) 768.265546ms ago: executing program 1 (id=13826): writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 714.104529ms ago: executing program 1 (id=13827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 713.959909ms ago: executing program 1 (id=13828): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 664.681311ms ago: executing program 1 (id=13829): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) 616.479743ms ago: executing program 4 (id=13830): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1) 600.506963ms ago: executing program 4 (id=13831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x4, 0x1) 340.587185ms ago: executing program 4 (id=13832): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 276.736158ms ago: executing program 2 (id=13833): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 276.097427ms ago: executing program 3 (id=13834): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 38.927518ms ago: executing program 1 (id=13835): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}]}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0x0, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x2d9, {[@timestamp={0x8, 0xa, 0x0, 0x4ffffffe}]}}}}}}}, 0x0) 9.15999ms ago: executing program 1 (id=13836): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 8.917449ms ago: executing program 2 (id=13837): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 0s ago: executing program 0 (id=13838): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): ree_branches:1026: inode #11: comm syz.2.12809: invalid indirect mapped block 4294967295 (level 1) [ 3020.807577][T31111] print_req_error: 24 callbacks suppressed [ 3020.807592][T31111] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3020.810677][T31116] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3020.815555][T31111] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3020.828094][T31118] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3020.861896][T31118] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3020.873125][T31118] buffer_io_error: 18 callbacks suppressed [ 3020.873147][T31118] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3020.905109][T12293] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.12809: invalid indirect mapped block 4294967295 (level 1) [ 3021.005605][T12293] EXT4-fs (loop2): 2 truncates cleaned up [ 3021.011526][T12293] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3021.763157][T31116] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3021.774583][T31111] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3021.785387][T31111] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3021.801847][T31116] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3021.810056][T31116] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3021.821773][T31116] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3021.831921][T31116] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3021.843603][T31116] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3021.851947][T31111] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3021.860235][T31111] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3021.872499][T31111] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3022.062984][T31111] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3022.091510][T31116] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3022.187145][T31116] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3023.441234][T12319] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3023.881009][T12319] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,delalloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,block_validity,errors=remount-ro, [ 3025.528865][T12348] erofs: (device loop0): mounted with root inode @ nid 36. [ 3025.905175][T12368] erofs: (device loop2): mounted with root inode @ nid 36. [ 3026.891048][T12383] netlink: 'syz.0.12830': attribute type 6 has an invalid length. [ 3027.647083][T12393] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3027.788689][T12393] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.12832: invalid block [ 3027.802767][T12393] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.12832: invalid indirect mapped block 4294967295 (level 1) [ 3027.817581][T12393] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.12832: invalid indirect mapped block 4294967295 (level 1) [ 3027.833137][T12393] EXT4-fs (loop4): 2 truncates cleaned up [ 3027.838968][T12393] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3028.874949][T12407] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3028.960977][T31111] print_req_error: 7 callbacks suppressed [ 3028.961010][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3028.998125][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3029.045237][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3029.099836][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3029.112062][T31111] buffer_io_error: 4 callbacks suppressed [ 3029.115375][T12407] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,delalloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,block_validity,errors=remount-ro, [ 3029.196244][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3029.216522][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3029.227989][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3029.236964][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3029.248260][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3029.383414][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3029.414039][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3029.426196][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3029.442594][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3029.469288][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3029.605489][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3029.614907][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3029.626991][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3029.635298][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3029.645175][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3029.894566][T30222] Buffer I/O error on dev loop4p1, logical block 12, async page read [ 3030.835516][T12422] EXT4-fs (loop4): orphan cleanup on readonly fs [ 3030.845859][T12422] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.12838: bg 0: block 248: padding at end of block bitmap is not set [ 3030.861710][T12422] Quota error (device loop4): write_blk: dquota write failed [ 3030.869315][T12422] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 3030.879337][T12422] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.12838: Failed to acquire dquot type 1 [ 3030.893132][T12422] EXT4-fs (loop4): 1 truncate cleaned up [ 3030.913478][T12422] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3031.264265][T12438] netlink: 'syz.2.12844': attribute type 6 has an invalid length. [ 3031.286139][T12436] 9pnet: Insufficient options for proto=fd [ 3031.850758][T12442] erofs: (device loop0): mounted with root inode @ nid 36. [ 3034.165066][T12468] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3034.406389][T12468] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.12852: invalid indirect mapped block 4294967295 (level 1) [ 3034.421522][T12468] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.12852: invalid indirect mapped block 4294967295 (level 1) [ 3034.437651][T12468] EXT4-fs (loop2): 2 truncates cleaned up [ 3034.443408][T12468] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3036.792373][T12488] EXT4-fs (loop3): orphan cleanup on readonly fs [ 3036.799500][T12488] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.12854: bg 0: block 248: padding at end of block bitmap is not set [ 3036.814373][T12488] Quota error (device loop3): write_blk: dquota write failed [ 3036.821816][T12488] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 3036.831973][T12488] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.12854: Failed to acquire dquot type 1 [ 3036.844111][T12488] EXT4-fs (loop3): 1 truncate cleaned up [ 3036.850272][T12488] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3039.508990][T12499] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3039.516050][T12499] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.12858: bg 0: block 248: padding at end of block bitmap is not set [ 3039.531112][T12499] Quota error (device loop0): write_blk: dquota write failed [ 3039.538555][T12499] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 3039.548484][T12499] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.12858: Failed to acquire dquot type 1 [ 3039.560564][T12499] EXT4-fs (loop0): 1 truncate cleaned up [ 3039.566725][T12499] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3039.620586][T12500] EXT4-fs (loop2): orphan cleanup on readonly fs [ 3039.627634][T12500] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.12856: bg 0: block 248: padding at end of block bitmap is not set [ 3039.642322][T12500] Quota error (device loop2): write_blk: dquota write failed [ 3039.649856][T12500] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 3039.659803][T12500] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.12856: Failed to acquire dquot type 1 [ 3039.671985][T12500] EXT4-fs (loop2): 1 truncate cleaned up [ 3039.678164][T12500] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3041.411720][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12862'. [ 3042.628614][T12533] EXT4-fs (loop3): orphan cleanup on readonly fs [ 3042.674221][T12533] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.12866: bg 0: block 248: padding at end of block bitmap is not set [ 3042.689934][T12533] Quota error (device loop3): write_blk: dquota write failed [ 3042.697601][T12533] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 3042.707553][T12533] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.12866: Failed to acquire dquot type 1 [ 3042.719421][T12533] EXT4-fs (loop3): 1 truncate cleaned up [ 3042.725326][T12533] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3044.623430][T12544] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3044.632915][T12544] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3044.734097][T12549] erofs: (device loop2): mounted with root inode @ nid 36. [ 3044.781784][T31116] print_req_error: 54 callbacks suppressed [ 3044.781798][T31116] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3044.799417][T31116] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3044.800630][T31111] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3044.810931][T31116] buffer_io_error: 42 callbacks suppressed [ 3044.810940][T31116] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3045.469500][T31116] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3045.480676][T31116] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3045.489536][T31116] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3045.502395][T31116] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3045.514101][T31118] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3045.534420][T31118] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3045.578619][T31116] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3045.601361][T31118] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3045.610810][T31116] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3045.620950][T31111] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3045.648247][T31116] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3045.659476][T31116] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3045.891230][T31111] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3045.906654][T31111] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3046.102100][T31111] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3046.110505][T31111] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3046.684249][T12573] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 3046.693637][T12573] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3047.305989][T12583] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3047.417665][T12583] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.12872: invalid block [ 3047.431657][T12583] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.12872: invalid indirect mapped block 4294967295 (level 1) [ 3047.447774][T12583] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.12872: invalid indirect mapped block 4294967295 (level 1) [ 3047.464378][T12583] EXT4-fs (loop0): 2 truncates cleaned up [ 3047.470228][T12583] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3048.027519][T12590] binder: BINDER_SET_CONTEXT_MGR already set [ 3048.033559][T12590] binder: 12586:12590 ioctl 4018620d 2000000002c0 returned -16 [ 3048.921407][T12601] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3049.017676][T12601] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,delalloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,block_validity,errors=remount-ro, [ 3049.368475][T12611] 9p filesystem being mounted at /25/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 3050.897781][T12644] binder: BINDER_SET_CONTEXT_MGR already set [ 3050.903828][T12644] binder: 12639:12644 ioctl 4018620d 2000000002c0 returned -16 [ 3051.638642][T12648] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3051.767944][T12648] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.12894: invalid indirect mapped block 4294967295 (level 1) [ 3051.782858][T12648] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.12894: invalid indirect mapped block 4294967295 (level 1) [ 3051.798812][T12648] EXT4-fs (loop3): 2 truncates cleaned up [ 3051.804566][T12648] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3052.903525][T12665] 9p filesystem being mounted at /235/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 3054.452403][T30222] print_req_error: 75 callbacks suppressed [ 3054.452418][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3054.471719][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3054.485909][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3054.506680][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3054.518108][T30222] buffer_io_error: 60 callbacks suppressed [ 3054.518117][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3054.532253][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3054.543761][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3055.519224][T12691] netlink: 'syz.1.12905': attribute type 6 has an invalid length. [ 3055.548540][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3055.565694][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3055.586720][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3055.603715][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3055.700469][T12700] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3055.894413][T12700] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.12907: invalid indirect mapped block 4294967295 (level 1) [ 3055.909439][T12700] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.12907: invalid indirect mapped block 4294967295 (level 1) [ 3055.925641][T12700] EXT4-fs (loop4): 2 truncates cleaned up [ 3055.931398][T12700] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3056.541588][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3056.544452][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3056.566343][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3056.712405][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3056.809259][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3056.825937][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3056.841358][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3056.856809][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3056.893776][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3057.297585][T12736] erofs: (device loop2): mounted with root inode @ nid 36. [ 3057.425515][T12739] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3057.775679][T12739] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.12921: invalid indirect mapped block 4294967295 (level 1) [ 3057.790868][T12739] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.12921: invalid indirect mapped block 4294967295 (level 1) [ 3057.806927][T12739] EXT4-fs (loop3): 2 truncates cleaned up [ 3057.812717][T12739] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3060.053776][T12756] erofs: (device loop4): mounted with root inode @ nid 36. [ 3062.487936][T12772] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x368b264c, utbl_chksum : 0xe619d30d) [ 3062.500705][T12772] exFAT-fs (loop3): IO charset B not found [ 3063.437358][T30222] print_req_error: 65 callbacks suppressed [ 3063.437374][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3063.456886][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3063.470885][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3063.505531][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3063.514719][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3063.545832][T31116] buffer_io_error: 50 callbacks suppressed [ 3063.545842][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3063.554647][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3063.614510][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3063.622945][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3063.634676][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3063.642975][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3063.654316][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3063.694875][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3063.707490][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3063.715891][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3063.727455][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3063.838798][T12806] netlink: 'syz.4.12937': attribute type 6 has an invalid length. [ 3063.852863][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3064.078716][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3064.194529][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3064.220468][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3065.721052][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12946'. [ 3066.010859][T12833] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 3066.060389][T12833] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3068.056294][T12867] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3068.134590][T12867] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.12953: invalid indirect mapped block 4294967295 (level 1) [ 3068.149566][T12867] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.12953: invalid indirect mapped block 4294967295 (level 1) [ 3068.166083][T12867] EXT4-fs (loop0): 2 truncates cleaned up [ 3068.171873][T12867] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3071.215589][T12884] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 3071.225926][T12884] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3071.347364][T12890] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3071.474680][T12897] EXT4-fs (loop4): orphan cleanup on readonly fs [ 3071.484028][T12897] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.12961: bg 0: block 248: padding at end of block bitmap is not set [ 3071.499746][T12897] Quota error (device loop4): write_blk: dquota write failed [ 3071.507481][T12897] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 3071.517679][T12897] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.12961: Failed to acquire dquot type 1 [ 3071.539609][T12890] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.12959: invalid block [ 3071.541728][T12897] EXT4-fs (loop4): 1 truncate cleaned up [ 3071.558390][T12890] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.12959: invalid indirect mapped block 4294967295 (level 1) [ 3071.558468][T12897] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3072.360459][T12890] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.12959: invalid indirect mapped block 4294967295 (level 1) [ 3072.374808][T12890] EXT4-fs (loop0): 2 truncates cleaned up [ 3072.380703][T12890] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3072.436899][T12898] EXT4-fs: failed to create workqueue [ 3072.442309][T12898] EXT4-fs (loop2): mount failed [ 3076.275272][T12932] erofs: (device loop3): mounted with root inode @ nid 36. [ 3077.390542][T12947] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3077.399895][T12947] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.12973: bg 0: block 248: padding at end of block bitmap is not set [ 3077.415410][T12947] Quota error (device loop0): write_blk: dquota write failed [ 3077.422991][T12947] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 3077.433102][T12947] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.12973: Failed to acquire dquot type 1 [ 3077.446715][T12947] EXT4-fs (loop0): 1 truncate cleaned up [ 3077.453431][T12947] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3078.766419][T31111] print_req_error: 75 callbacks suppressed [ 3078.766460][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3078.806943][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3078.851106][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3078.871412][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3078.904883][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3078.909732][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3078.929861][T31111] buffer_io_error: 60 callbacks suppressed [ 3078.929889][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3078.946653][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3079.016697][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3079.080474][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3079.521944][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3079.534089][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3079.551999][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3079.565410][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3079.573634][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3079.584822][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3079.591677][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3079.593001][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3079.609348][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3080.220991][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3082.052036][T12993] overlayfs: failed to clone lowerpath [ 3083.588934][T13020] 9pnet: Could not find request transport: fd0x0000000000000006 [ 3083.680900][T13023] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3083.796644][T13023] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.12994: invalid block [ 3083.810868][T13023] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.12994: invalid indirect mapped block 4294967295 (level 1) [ 3083.826338][T13023] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.12994: invalid indirect mapped block 4294967295 (level 1) [ 3083.843407][T13023] EXT4-fs (loop2): 2 truncates cleaned up [ 3083.849201][T13023] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3084.407980][T31111] print_req_error: 41 callbacks suppressed [ 3084.407996][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3084.410468][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3084.415596][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3084.461972][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3084.489342][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3084.498946][T30222] buffer_io_error: 32 callbacks suppressed [ 3084.498957][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3084.531933][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3084.559649][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3084.562761][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3084.582515][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3084.593071][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3084.604364][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3084.612494][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3084.633636][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3084.645907][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3084.717576][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12998'. [ 3084.762368][T30222] blk_update_request: I/O error, dev loop4, sector 2059 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3085.024943][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3085.204214][T30222] Buffer I/O error on dev loop4p1, logical block 12, async page read [ 3085.395794][T30222] Buffer I/O error on dev loop4p1, logical block 13, async page read [ 3085.411142][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3085.532997][T13051] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3085.541986][T13051] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3085.839594][T13068] syz.0.13007[13068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3085.839652][T13068] syz.0.13007[13068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3088.388440][T13110] overlayfs: failed to clone lowerpath [ 3089.504637][T13107] EXT4-fs (loop4): orphan cleanup on readonly fs [ 3089.511811][T13107] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.13017: bg 0: block 248: padding at end of block bitmap is not set [ 3089.527434][T13107] Quota error (device loop4): write_blk: dquota write failed [ 3089.535111][T13107] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 3089.545120][T13107] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.13017: Failed to acquire dquot type 1 [ 3089.570121][T13107] EXT4-fs (loop4): 1 truncate cleaned up [ 3089.576174][T13107] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3090.343338][T13120] erofs: (device loop0): mounted with root inode @ nid 36. [ 3090.753013][T31111] print_req_error: 143 callbacks suppressed [ 3090.753029][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3090.772445][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3090.788870][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3090.866788][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3090.894746][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3090.908400][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3090.919718][T31111] buffer_io_error: 116 callbacks suppressed [ 3090.919729][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3090.934056][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3090.972214][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3090.981926][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3091.018895][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3091.030028][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3091.068585][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3091.238680][T13134] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3091.392669][T13134] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.13023: invalid indirect mapped block 4294967295 (level 1) [ 3091.408328][T13134] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.13023: invalid indirect mapped block 4294967295 (level 1) [ 3091.424927][T13134] EXT4-fs (loop4): 2 truncates cleaned up [ 3091.430729][T13134] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3093.003818][T13150] syz.0.13028[13150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3093.003876][T13150] syz.0.13028[13150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3093.173508][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13027'. [ 3095.005038][T13160] tipc: Enabling of bearer rejected, failed to enable media [ 3095.521019][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3095.525355][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3095.542976][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3095.556745][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3095.594187][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3095.634498][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3095.643186][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3095.969310][T30222] print_req_error: 6 callbacks suppressed [ 3095.969347][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3096.017043][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3096.349174][T13176] overlayfs: overlapping lowerdir path [ 3096.729351][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3096.763602][T13171] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3096.895293][T30222] blk_update_request: I/O error, dev loop4, sector 2059 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3096.934480][T13171] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.13032: invalid indirect mapped block 4294967295 (level 1) [ 3096.949291][T13171] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.13032: invalid indirect mapped block 4294967295 (level 1) [ 3096.965055][T13171] EXT4-fs (loop0): 2 truncates cleaned up [ 3096.970812][T13171] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3097.102829][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3099.239058][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3099.248217][T30222] blk_update_request: I/O error, dev loop4, sector 2060 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3099.260755][T30222] Buffer I/O error on dev loop4p1, logical block 12, async page read [ 3099.269556][T30222] blk_update_request: I/O error, dev loop4, sector 2061 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3099.300412][T30222] Buffer I/O error on dev loop4p1, logical block 13, async page read [ 3099.944908][T13196] tipc: Enabling of bearer rejected, failed to enable media [ 3103.069022][T13190] EXT4-fs: failed to create workqueue [ 3103.074477][T13190] EXT4-fs (loop4): mount failed [ 3105.034025][T13209] erofs: (device loop3): mounted with root inode @ nid 36. [ 3108.084326][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3108.100879][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3108.112422][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3108.126036][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3108.139424][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3108.156840][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3108.173786][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3108.185199][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3108.195157][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3108.206760][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3108.215690][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3108.231242][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3108.239747][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3108.265593][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3108.284122][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3108.295666][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3108.321357][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3108.332803][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3108.380929][T30222] Buffer I/O error on dev loop4p1, logical block 12, async page read [ 3108.392299][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3108.514573][T13255] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3108.779526][T13255] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.13054: invalid block [ 3108.792730][T13255] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.13054: invalid indirect mapped block 4294967295 (level 1) [ 3108.808760][T13255] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.13054: invalid indirect mapped block 4294967295 (level 1) [ 3108.824848][T13255] EXT4-fs (loop4): 2 truncates cleaned up [ 3108.830724][T13255] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3112.367143][T13281] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 3112.377984][T13281] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3113.641904][T30222] print_req_error: 75 callbacks suppressed [ 3113.641919][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3113.727721][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3113.739966][T30222] buffer_io_error: 60 callbacks suppressed [ 3113.739975][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3113.746550][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3115.498613][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3115.511581][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3115.513878][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3115.519947][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3115.540440][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3115.590892][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3115.611651][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3115.621598][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3115.646514][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3115.654833][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3115.674477][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3115.690892][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3115.699340][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3115.707685][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3115.717561][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3115.728133][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3116.056789][T13331] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3116.207798][T13331] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,delalloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,block_validity,errors=remount-ro, [ 3116.934845][T13346] 9pnet: Insufficient options for proto=fd [ 3117.288595][T13352] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 3117.299513][T13352] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3117.640271][T13360] EXT4-fs (loop4): orphan cleanup on readonly fs [ 3117.653753][T13360] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.13083: bg 0: block 248: padding at end of block bitmap is not set [ 3117.673971][T13360] Quota error (device loop4): write_blk: dquota write failed [ 3117.681627][T13360] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 3117.691648][T13360] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.13083: Failed to acquire dquot type 1 [ 3117.709431][T13360] EXT4-fs (loop4): 1 truncate cleaned up [ 3117.717769][T13360] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3118.596441][T13368] syz.4.13085[13368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3118.596885][T13368] syz.4.13085[13368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3119.035550][T13370] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3119.087810][T13370] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.13084: invalid block [ 3119.100726][T13370] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.13084: invalid indirect mapped block 4294967295 (level 1) [ 3119.116520][T13370] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.13084: invalid indirect mapped block 4294967295 (level 1) [ 3119.132707][T13370] EXT4-fs (loop2): 2 truncates cleaned up [ 3119.138489][T13370] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3119.502647][T30222] print_req_error: 92 callbacks suppressed [ 3119.502663][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3119.546819][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3119.561569][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3119.592380][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3119.636272][T31116] buffer_io_error: 74 callbacks suppressed [ 3119.636282][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3119.709413][T13377] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.13087: casefold flag without casefold feature [ 3119.741763][T13377] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.13087: couldn't read orphan inode 15 (err -117) [ 3119.761733][T13377] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 3120.234203][T13382] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3120.386388][T13382] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.13086: invalid indirect mapped block 4294967295 (level 1) [ 3120.401649][T13382] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.13086: invalid indirect mapped block 4294967295 (level 1) [ 3120.417185][T13382] EXT4-fs (loop3): 2 truncates cleaned up [ 3120.423068][T13382] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3120.955789][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3120.969713][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3120.985721][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3121.007423][T13398] 9pnet: Insufficient options for proto=fd [ 3121.081028][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3121.105348][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3121.120946][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3121.733511][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3121.744209][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3121.755436][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3121.758487][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3121.775762][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3121.778676][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3121.792365][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3121.794409][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3121.918736][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3122.038925][T13409] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3122.214300][T13409] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,delalloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,block_validity,errors=remount-ro, [ 3123.835301][T13421] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 3123.844685][T13421] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3124.036210][T13432] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.13100: casefold flag without casefold feature [ 3124.182461][T13432] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.13100: couldn't read orphan inode 15 (err -117) [ 3124.267888][T13432] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 3124.397639][T13448] 9pnet: Insufficient options for proto=fd [ 3124.689190][T13454] overlayfs: failed to clone lowerpath [ 3124.959954][T30222] print_req_error: 62 callbacks suppressed [ 3124.959969][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3124.989819][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3124.992307][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.013048][T30222] buffer_io_error: 47 callbacks suppressed [ 3125.013057][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3125.027063][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.027169][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.081988][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3125.092129][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.104389][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3125.135416][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.193305][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3125.224193][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3125.241498][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3125.249617][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.260862][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3125.270939][T30222] blk_update_request: I/O error, dev loop4, sector 2059 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.273699][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3125.295730][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3125.311317][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3125.326335][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3125.582134][T13474] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 3125.591244][T13474] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3126.319184][T13485] 9pnet: Insufficient options for proto=fd [ 3127.898491][T13499] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 3127.908069][T13499] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3128.617525][T13520] tipc: Enabling of bearer rejected, failed to enable media [ 3129.326895][T13527] 9pnet: Insufficient options for proto=fd [ 3129.746214][T13529] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3129.755875][T13529] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3130.324592][T13548] 9p filesystem being mounted at /247/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 3130.566943][T13564] 9pnet: Insufficient options for proto=fd [ 3131.021533][T13583] netlink: 'syz.0.13148': attribute type 6 has an invalid length. [ 3131.396255][T30222] print_req_error: 143 callbacks suppressed [ 3131.396270][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3131.416336][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3131.430711][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3131.459071][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3131.470989][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3131.482675][T31111] buffer_io_error: 116 callbacks suppressed [ 3131.482683][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3131.497476][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3131.498829][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3131.518881][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3131.533099][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3131.541520][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3131.552930][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3131.561353][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3131.572836][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3131.576141][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3131.581189][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3131.588879][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3131.617395][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3131.618147][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3131.644828][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3131.728921][T13600] 9pnet: Insufficient options for proto=fd [ 3133.643008][T13639] 9pnet: Insufficient options for proto=fd [ 3133.698253][T13644] 9pnet: Insufficient options for proto=fd [ 3135.200310][T13673] 9pnet: Insufficient options for proto=fd [ 3135.290742][T13680] syz.0.13183[13680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3135.290799][T13680] syz.0.13183[13680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3135.919272][T13697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13185'. [ 3136.376355][T13708] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3136.595873][T13708] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.13191: invalid indirect mapped block 4294967295 (level 1) [ 3136.611008][T13708] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.13191: invalid indirect mapped block 4294967295 (level 1) [ 3136.627069][T13708] EXT4-fs (loop2): 2 truncates cleaned up [ 3136.632853][T13708] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3137.943825][T13727] overlayfs: unrecognized mount option "/" or missing value [ 3138.798474][T13737] netlink: 'syz.2.13197': attribute type 6 has an invalid length. [ 3139.831768][T31111] print_req_error: 143 callbacks suppressed [ 3139.831783][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3139.843261][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3139.858525][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3139.873174][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3140.043858][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3140.061715][T31111] buffer_io_error: 116 callbacks suppressed [ 3140.061814][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3140.217406][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3140.242836][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3140.277414][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3140.410496][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3140.432529][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3140.563165][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3140.603312][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3140.834860][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3140.843205][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3140.848066][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3140.854352][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3140.854516][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3140.938008][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3140.946601][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3140.947095][T13764] EXT4-fs (loop2): orphan cleanup on readonly fs [ 3140.968757][T13764] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.13207: bg 0: block 248: padding at end of block bitmap is not set [ 3140.988449][T13764] Quota error (device loop2): write_blk: dquota write failed [ 3140.995910][T13764] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 3141.006057][T13764] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.13207: Failed to acquire dquot type 1 [ 3141.254041][T13764] EXT4-fs (loop2): 1 truncate cleaned up [ 3141.259925][T13764] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3141.397705][T13798] syz.1.13223[13798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3141.397758][T13798] syz.1.13223[13798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3141.967280][T13809] netlink: 'syz.4.13220': attribute type 6 has an invalid length. [ 3142.125188][T13814] netlink: 'syz.3.13228': attribute type 6 has an invalid length. [ 3142.343928][T13820] netlink: 'syz.2.13230': attribute type 6 has an invalid length. [ 3142.580661][T13828] 9pnet: Insufficient options for proto=fd [ 3144.426084][T13848] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x368b264c, utbl_chksum : 0xe619d30d) [ 3144.441376][T13848] exFAT-fs (loop4): IO charset B not found [ 3145.140567][T31111] print_req_error: 125 callbacks suppressed [ 3145.140583][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3145.159675][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3145.173805][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3145.247616][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3145.264541][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3145.289110][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3145.317273][T30222] buffer_io_error: 102 callbacks suppressed [ 3145.317284][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3145.318836][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3145.333930][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3145.351309][T13863] 9pnet: Insufficient options for proto=fd [ 3145.366460][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3145.374811][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3145.384098][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3145.386710][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3145.396663][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3145.420420][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3145.433793][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3145.442183][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3145.444297][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3145.461253][T30222] Buffer I/O error on dev loop4p1, logical block 12, async page read [ 3145.482081][T30222] Buffer I/O error on dev loop4p1, logical block 13, async page read [ 3146.764611][T13896] overlayfs: overlapping lowerdir path [ 3146.811104][T13897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13251'. [ 3147.317934][T13901] 9pnet: Insufficient options for proto=fd [ 3147.358432][T13907] 9pnet: Insufficient options for proto=fd [ 3147.417340][T13926] syz.1.13272[13926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3147.417397][T13926] syz.1.13272[13926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3147.714658][T13931] EXT4-fs (loop4): orphan cleanup on readonly fs [ 3147.736120][T13931] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.13266: bg 0: block 248: padding at end of block bitmap is not set [ 3147.752013][T13931] Quota error (device loop4): write_blk: dquota write failed [ 3147.759670][T13931] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 3147.769753][T13931] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.13266: Failed to acquire dquot type 1 [ 3147.783634][T13931] EXT4-fs (loop4): 1 truncate cleaned up [ 3147.790365][T13931] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3148.678983][T13949] syz.1.13279[13949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3148.679039][T13949] syz.1.13279[13949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3148.749072][T13955] netlink: 'syz.3.13276': attribute type 6 has an invalid length. [ 3149.690791][T13956] EXT4-fs (loop2): orphan cleanup on readonly fs [ 3150.060996][T13956] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.13278: bg 0: block 248: padding at end of block bitmap is not set [ 3150.094103][T13956] Quota error (device loop2): write_blk: dquota write failed [ 3150.102535][T13956] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 3150.112739][T13956] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.13278: Failed to acquire dquot type 1 [ 3150.302024][T13956] EXT4-fs (loop2): 1 truncate cleaned up [ 3150.308604][T13956] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3150.841600][T30222] print_req_error: 109 callbacks suppressed [ 3150.841614][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3150.869459][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3150.882618][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3150.930582][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3150.942130][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3150.943604][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3150.964639][T30222] buffer_io_error: 88 callbacks suppressed [ 3150.964647][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3150.978943][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3150.990294][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3150.998427][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3151.006896][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3151.015272][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3151.026933][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3151.035429][T30222] blk_update_request: I/O error, dev loop4, sector 2059 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3151.046849][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3151.055092][T30222] blk_update_request: I/O error, dev loop4, sector 2060 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3151.095068][T30222] Buffer I/O error on dev loop4p1, logical block 12, async page read [ 3151.111186][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3151.128902][T30222] Buffer I/O error on dev loop4p1, logical block 13, async page read [ 3151.137467][T30222] Buffer I/O error on dev loop4p1, logical block 14, async page read [ 3151.275143][T13973] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3151.299742][T13973] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3151.663842][T13992] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3151.874266][T13992] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.13288: invalid indirect mapped block 4294967295 (level 1) [ 3151.889605][T13992] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.13288: invalid indirect mapped block 4294967295 (level 1) [ 3151.906296][T13992] EXT4-fs (loop2): 2 truncates cleaned up [ 3151.912075][T13992] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue [ 3152.442752][T14000] fuse: Unknown parameter 'grou00000000000000000000' [ 3152.670729][T14015] netlink: 'syz.3.13296': attribute type 6 has an invalid length. [ 3153.041830][T14008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13295'. [ 3154.668540][T14063] overlayfs: overlapping lowerdir path [ 3155.418631][T14075] netlink: 'syz.1.13314': attribute type 6 has an invalid length. [ 3155.527287][T14080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13316'. [ 3158.548514][T30222] print_req_error: 74 callbacks suppressed [ 3158.548529][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3158.571000][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3158.584696][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3158.656928][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3158.668507][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3158.733500][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3158.776078][T30222] buffer_io_error: 60 callbacks suppressed [ 3158.776089][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3158.790015][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3158.801291][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3158.822134][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3158.830268][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3158.841441][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3158.852608][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3158.863615][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3159.781074][T14108] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x368b264c, utbl_chksum : 0xe619d30d) [ 3159.798063][T14108] exFAT-fs (loop4): IO charset B not found [ 3160.702400][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3160.926339][T14121] netlink: 'syz.2.13328': attribute type 6 has an invalid length. [ 3161.664706][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3161.677212][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3161.692210][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3161.708819][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3161.717178][ T24] audit: type=1400 audit(6055048668.947:1697): avc: denied { search } for pid=14120 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3161.745824][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3161.768445][ T24] audit: type=1400 audit(6055048668.987:1698): avc: denied { write } for pid=14128 comm="rm" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3161.797841][ T24] audit: type=1400 audit(6055048668.987:1699): avc: denied { remove_name } for pid=14128 comm="rm" name="eth0.dhcp" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3161.874085][ T24] audit: type=1400 audit(6055048668.987:1700): avc: denied { getattr } for pid=14120 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3161.943394][ T24] audit: type=1400 audit(6055048668.987:1701): avc: denied { add_name } for pid=14120 comm="dhcpcd-run-hook" name="eth0.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3161.979959][ T24] audit: type=1400 audit(6055048668.997:1702): avc: denied { read } for pid=14129 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3162.036143][ T24] audit: type=1400 audit(6055048668.997:1703): avc: denied { open } for pid=14129 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3162.144462][T14159] netlink: 'syz.0.13336': attribute type 6 has an invalid length. [ 3162.442857][T14169] overlayfs: failed to clone lowerpath [ 3162.536518][T14172] netlink: 'syz.1.13341': attribute type 6 has an invalid length. [ 3163.137826][T14179] syz.3.13344[14179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3163.137885][T14179] syz.3.13344[14179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3164.285464][T14206] EXT4-fs (loop4): orphan cleanup on readonly fs [ 3164.306554][T14206] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.13353: bg 0: block 248: padding at end of block bitmap is not set [ 3164.322377][T14206] Quota error (device loop4): write_blk: dquota write failed [ 3164.330035][T14206] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 3164.340031][T14206] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.13353: Failed to acquire dquot type 1 [ 3164.357181][T14206] EXT4-fs (loop4): 1 truncate cleaned up [ 3164.364184][T14206] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3165.455995][T14220] 9pnet: Insufficient options for proto=fd [ 3165.609368][T31111] print_req_error: 182 callbacks suppressed [ 3165.609396][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3165.631656][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3165.672508][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3165.812434][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3165.871645][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3166.066712][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3166.088269][T30222] buffer_io_error: 148 callbacks suppressed [ 3166.088279][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3166.152871][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3166.162392][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3166.172198][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3166.184315][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3166.197549][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3166.205789][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3166.214156][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3166.225635][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3166.241688][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3166.258424][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3166.283542][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3166.300233][T30222] Buffer I/O error on dev loop4p1, logical block 12, async page read [ 3166.300239][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3167.494096][T14252] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3167.503355][T14252] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.13366: bg 0: block 248: padding at end of block bitmap is not set [ 3167.518896][T14252] Quota error (device loop0): write_blk: dquota write failed [ 3167.526429][T14252] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 3167.536453][T14252] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.13366: Failed to acquire dquot type 1 [ 3167.613250][T14252] EXT4-fs (loop0): 1 truncate cleaned up [ 3167.625103][T14252] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3169.907609][T14298] netlink: 'syz.3.13376': attribute type 6 has an invalid length. [ 3170.872397][T14312] fuse: Invalid rootmode [ 3171.057699][T30222] print_req_error: 41 callbacks suppressed [ 3171.057714][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3171.080399][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3171.163356][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3171.267345][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3171.417582][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3171.439086][T31111] buffer_io_error: 32 callbacks suppressed [ 3171.439096][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3171.455808][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3171.664417][T14350] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3171.759252][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3171.807605][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3171.822643][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3171.865353][T14350] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,delalloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,block_validity,errors=remount-ro, [ 3172.110191][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3172.421744][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3172.429963][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3172.441185][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3172.449339][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3172.460936][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3172.469124][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3172.485236][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3172.523819][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3172.555254][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3172.693881][T14369] netlink: 'syz.2.13402': attribute type 6 has an invalid length. [ 3172.711530][T14368] 9p filesystem being mounted at /343/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 3174.684619][T14410] 9p filesystem being mounted at /372/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 3176.199457][T14447] 9p filesystem being mounted at /259/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 3176.232135][T30222] print_req_error: 74 callbacks suppressed [ 3176.232150][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3176.268857][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3176.294305][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3176.307391][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3176.335197][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3176.352135][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3176.363640][T30222] blk_update_request: I/O error, dev loop4, sector 2059 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3176.412526][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3176.437083][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3176.453701][T31111] buffer_io_error: 64 callbacks suppressed [ 3176.453711][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3176.465237][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3176.478940][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3176.487111][T30222] Buffer I/O error on dev loop4p1, logical block 12, async page read [ 3176.495258][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3176.507283][T30222] Buffer I/O error on dev loop4p1, logical block 13, async page read [ 3176.518182][T30222] Buffer I/O error on dev loop4p1, logical block 14, async page read [ 3176.527169][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3176.534248][T30222] Buffer I/O error on dev loop4p1, logical block 15, async page read [ 3176.544253][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3176.554219][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3178.479172][T14478] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3178.488741][T14478] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.13445: bg 0: block 248: padding at end of block bitmap is not set [ 3178.504355][T14478] Quota error (device loop0): write_blk: dquota write failed [ 3178.511964][T14478] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 3178.521982][T14478] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.13445: Failed to acquire dquot type 1 [ 3178.535711][T14478] EXT4-fs (loop0): 1 truncate cleaned up [ 3178.542142][T14478] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3179.979949][T14517] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x368b264c, utbl_chksum : 0xe619d30d) [ 3180.004814][T14517] exFAT-fs (loop4): IO charset B not found [ 3180.096896][T14520] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x368b264c, utbl_chksum : 0xe619d30d) [ 3180.143584][T14520] exFAT-fs (loop2): IO charset B not found [ 3181.307671][T30222] print_req_error: 41 callbacks suppressed [ 3181.307696][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3181.327295][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3181.341043][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3181.342114][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3181.364181][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3181.375889][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3181.436585][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3181.462252][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3181.491920][T30222] buffer_io_error: 30 callbacks suppressed [ 3181.491930][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3181.501450][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3181.512100][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3181.569176][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3181.584128][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3181.624135][T14543] netlink: 'syz.4.13459': attribute type 6 has an invalid length. [ 3181.634632][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3181.645562][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3181.673532][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3181.686147][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3181.711625][T30222] Buffer I/O error on dev loop4p1, logical block 12, async page read [ 3181.714845][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3181.743023][T30222] Buffer I/O error on dev loop4p1, logical block 13, async page read [ 3182.153878][T14551] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3182.163923][T14551] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.13467: bg 0: block 248: padding at end of block bitmap is not set [ 3182.179877][T14551] Quota error (device loop0): write_blk: dquota write failed [ 3182.187458][T14551] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 3182.197484][T14551] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.13467: Failed to acquire dquot type 1 [ 3182.211407][T14551] EXT4-fs (loop0): 1 truncate cleaned up [ 3182.218029][T14551] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3184.872256][T14589] device veth1_macvtap left promiscuous mode [ 3184.888637][T14589] device macsec0 entered promiscuous mode [ 3184.929817][ T24] audit: type=1326 audit(6055048692.188:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.1.13479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce053f2749 code=0x7ffc0000 [ 3184.962012][ T24] audit: type=1326 audit(6055048692.218:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.1.13479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fce053f2749 code=0x7ffc0000 [ 3184.990095][ T24] audit: type=1326 audit(6055048692.218:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.1.13479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce053f2749 code=0x7ffc0000 [ 3185.018046][ T24] audit: type=1326 audit(6055048692.218:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.1.13479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce053f2749 code=0x7ffc0000 [ 3186.844092][T31111] print_req_error: 41 callbacks suppressed [ 3186.844116][T31111] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3186.864212][T14604] EXT4-fs (loop2): orphan cleanup on readonly fs [ 3186.874692][T14604] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.13484: bg 0: block 248: padding at end of block bitmap is not set [ 3186.890558][T14604] Quota error (device loop2): write_blk: dquota write failed [ 3186.898031][T14604] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 3186.908067][T14604] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.13484: Failed to acquire dquot type 1 [ 3186.922785][T14604] EXT4-fs (loop2): 1 truncate cleaned up [ 3186.938897][T14604] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3187.093445][T31111] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3187.106147][T31111] buffer_io_error: 30 callbacks suppressed [ 3187.106158][T31111] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3187.123505][T31116] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3187.136931][T31118] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3187.150430][T31116] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3187.158707][T31118] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3187.185083][T31116] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3187.206627][T31116] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3187.222271][T31111] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3187.222791][T31118] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3187.236418][T31116] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3187.249979][T31111] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3187.258272][T31111] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3187.269668][T31116] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3187.281274][T31111] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3187.290063][T31116] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3187.298483][T31111] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3187.311364][T31111] Buffer I/O error on dev loop4p1, logical block 12, async page read [ 3187.338357][T31111] Buffer I/O error on dev loop4p1, logical block 13, async page read [ 3187.910163][T14639] EXT4-fs (loop2): orphan cleanup on readonly fs [ 3187.920818][T14639] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.13493: bg 0: block 248: padding at end of block bitmap is not set [ 3187.936382][T14639] Quota error (device loop2): write_blk: dquota write failed [ 3187.943953][T14639] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 3187.954054][T14639] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.13493: Failed to acquire dquot type 1 [ 3187.969063][T14639] EXT4-fs (loop2): 1 truncate cleaned up [ 3187.975332][T14639] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3188.932241][ T24] audit: type=1326 audit(6055048696.190:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14662 comm="syz.4.13502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76edfbf749 code=0x7ffc0000 [ 3188.970535][ T24] audit: type=1326 audit(6055048696.190:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14662 comm="syz.4.13502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f76edfbf749 code=0x7ffc0000 [ 3189.000834][T14666] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3189.049687][T14666] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3189.458460][T14680] binder_alloc: 14677: binder_alloc_buf, no vma [ 3190.640570][T14709] overlayfs: failed to clone lowerpath [ 3193.214211][T30222] print_req_error: 143 callbacks suppressed [ 3193.214226][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3193.234204][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3193.257489][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3193.278578][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3193.292452][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3193.307549][T31111] buffer_io_error: 116 callbacks suppressed [ 3193.307558][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3193.324231][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3193.342008][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3193.355474][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3193.366201][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3193.378579][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3193.402966][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3193.410169][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3193.411315][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3193.430947][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3193.431764][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3193.439326][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3193.470882][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3193.487691][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3193.498371][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3193.639008][T14745] syz.0.13527[14745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3193.639576][T14745] syz.0.13527[14745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3194.026480][T14756] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3194.077770][T14756] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.13529: bg 0: block 248: padding at end of block bitmap is not set [ 3194.099428][T14756] __quota_error: 2 callbacks suppressed [ 3194.099448][T14756] Quota error (device loop0): write_blk: dquota write failed [ 3194.112569][T14756] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 3194.122589][T14756] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.13529: Failed to acquire dquot type 1 [ 3194.136390][T14756] EXT4-fs (loop0): 1 truncate cleaned up [ 3194.226280][T14756] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3195.289052][T14794] overlayfs: overlapping lowerdir path [ 3196.108825][T14791] EXT4-fs (loop4): orphan cleanup on readonly fs [ 3196.118617][T14791] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.13537: bg 0: block 248: padding at end of block bitmap is not set [ 3196.134240][T14791] Quota error (device loop4): write_blk: dquota write failed [ 3196.141808][T14791] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 3196.151834][T14791] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.13537: Failed to acquire dquot type 1 [ 3196.165887][T14791] EXT4-fs (loop4): 1 truncate cleaned up [ 3196.172487][T14791] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 3199.956911][T30222] print_req_error: 75 callbacks suppressed [ 3199.956926][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3199.977527][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3199.993742][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3200.024946][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3200.036698][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3200.079854][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3200.089786][T31111] buffer_io_error: 60 callbacks suppressed [ 3200.089797][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3200.108689][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3200.121540][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3200.141403][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3200.145878][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3200.149629][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3200.177178][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3200.195243][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3200.204055][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3200.213938][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3200.225779][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3200.235809][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3200.241374][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3200.253067][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3200.573249][ T24] audit: type=1326 audit(6055048707.826:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14869 comm="syz.0.13574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a82ae749 code=0x7ffc0000 [ 3200.616943][ T24] audit: type=1326 audit(6055048707.826:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14869 comm="syz.0.13574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f78a82ae749 code=0x7ffc0000 [ 3200.643308][T14866] netlink: 100 bytes leftover after parsing attributes in process `syz.4.13569'. [ 3200.655536][ T24] audit: type=1326 audit(6055048707.826:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14869 comm="syz.0.13574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a82ae749 code=0x7ffc0000 [ 3203.502276][T14966] netlink: 'syz.4.13609': attribute type 6 has an invalid length. [ 3204.989785][T30222] print_req_error: 228 callbacks suppressed [ 3204.989982][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3205.029693][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3205.053111][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3205.635244][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3205.649325][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3205.678707][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3205.696831][T31116] buffer_io_error: 186 callbacks suppressed [ 3205.696841][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3205.707742][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3205.719208][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3205.719266][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3205.760489][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3205.772109][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3205.790200][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3205.798292][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3205.820250][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3205.849177][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3205.863324][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3205.888632][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3205.890120][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3205.930750][T30222] Buffer I/O error on dev loop4p1, logical block 12, async page read [ 3206.701732][T15031] netlink: 'syz.0.13625': attribute type 6 has an invalid length. [ 3207.543416][ T24] audit: type=1326 audit(6055048714.810:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15043 comm="syz.4.13641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76edfbf749 code=0x7ffc0000 [ 3207.625670][ T24] audit: type=1326 audit(6055048714.840:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15043 comm="syz.4.13641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f76edfbf749 code=0x7ffc0000 [ 3207.656368][ T24] audit: type=1326 audit(6055048714.840:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15043 comm="syz.4.13641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76edfbf749 code=0x7ffc0000 [ 3208.070008][T15074] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x368b264c, utbl_chksum : 0xe619d30d) [ 3208.084403][T15074] exFAT-fs (loop4): IO charset B not found [ 3210.655605][T30222] print_req_error: 194 callbacks suppressed [ 3210.655620][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3210.667894][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3210.687582][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3210.700958][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3210.712913][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3210.724552][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3210.736189][T30222] buffer_io_error: 158 callbacks suppressed [ 3210.736199][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3210.859467][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3210.996156][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3211.007426][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3211.015539][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3211.026775][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3211.036311][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3211.053509][T30222] blk_update_request: I/O error, dev loop4, sector 2059 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3211.065044][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3211.073426][T30222] blk_update_request: I/O error, dev loop4, sector 2060 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3211.074804][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3211.084728][T30222] Buffer I/O error on dev loop4p1, logical block 12, async page read [ 3211.101608][T30222] Buffer I/O error on dev loop4p1, logical block 13, async page read [ 3211.110042][T30222] Buffer I/O error on dev loop4p1, logical block 14, async page read [ 3211.175706][T15112] netlink: 'syz.3.13663': attribute type 6 has an invalid length. [ 3211.791381][T15131] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 3213.020700][T15165] netlink: 'syz.0.13682': attribute type 6 has an invalid length. [ 3213.430506][T15173] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 3214.818212][T15213] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 3215.912861][T30222] print_req_error: 124 callbacks suppressed [ 3215.912877][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3215.932365][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3215.949381][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3216.003379][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3216.015817][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3216.305162][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3216.335642][T30222] buffer_io_error: 101 callbacks suppressed [ 3216.335653][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3216.359849][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3216.382317][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3216.412948][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3216.428592][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3216.437165][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3216.533706][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3216.547610][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3216.706547][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3216.730015][T30222] blk_update_request: I/O error, dev loop4, sector 2059 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3217.324673][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3217.401809][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3217.419426][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3217.433074][T30222] Buffer I/O error on dev loop4p1, logical block 12, async page read [ 3217.589731][ T24] audit: type=1400 audit(6055048724.855:1718): avc: denied { sys_module } for pid=15244 comm="syz.0.13709" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 3218.252477][T15281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13724'. [ 3218.281105][T15281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13724'. [ 3218.672380][ T24] audit: type=1326 audit(6055048725.935:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.4.13730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76edfbf749 code=0x7ffc0000 [ 3218.868163][ T24] audit: type=1326 audit(6055048725.935:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.4.13730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76edfbf749 code=0x7ffc0000 [ 3219.221011][ T24] audit: type=1326 audit(6055048725.935:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.4.13730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f76edfbf749 code=0x7ffc0000 [ 3219.255992][ T24] audit: type=1326 audit(6055048725.935:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.4.13730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76edfbf749 code=0x7ffc0000 [ 3219.333515][T15322] xt_hashlimit: size too large, truncated to 1048576 [ 3219.636257][ T24] audit: type=1326 audit(6055048725.935:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.4.13730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76edfbf749 code=0x7ffc0000 [ 3219.721633][ T24] audit: type=1400 audit(6055048726.255:1724): avc: denied { write } for pid=15312 comm="syz.0.13736" name="file0" dev="tmpfs" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3219.891840][ T24] audit: type=1400 audit(6055048726.265:1725): avc: denied { open } for pid=15312 comm="syz.0.13736" path="/363/file0" dev="tmpfs" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3219.917228][ T24] audit: type=1400 audit(6055048726.265:1726): avc: denied { ioctl } for pid=15312 comm="syz.0.13736" path="/363/file0" dev="tmpfs" ino=1954 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3219.942174][ T24] audit: type=1400 audit(6055048726.946:1727): avc: denied { bind } for pid=15326 comm="syz.0.13739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3220.081479][ T8196] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 3220.128894][T15348] binder: 15347:15348 ioctl 400c620e 2000000001c0 returned -22 [ 3220.750285][ T2797] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 3221.121483][ T8196] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 3221.130674][ T8196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3221.139541][ T8196] usb 5-1: Product: syz [ 3221.143931][ T8196] usb 5-1: Manufacturer: syz [ 3221.144715][T15379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3221.148580][ T8196] usb 5-1: SerialNumber: syz [ 3221.155783][T15379] IPv6: NLM_F_CREATE should be set when creating new route [ 3221.165351][ T8196] usb 5-1: config 0 descriptor?? [ 3221.209279][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13761'. [ 3221.230351][T15384] tipc: Enabling of bearer rejected, failed to enable media [ 3221.341872][ T2797] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3221.511460][ T2797] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3221.529236][ T2797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3221.891433][ T2797] usb 3-1: Product: syz [ 3221.891924][T22986] usb 5-1: USB disconnect, device number 24 [ 3221.902352][ T2797] usb 3-1: Manufacturer: syz [ 3222.042700][ T2797] usb 3-1: SerialNumber: syz [ 3222.526819][ T2797] usb 3-1: config 0 descriptor?? [ 3222.588190][ T2797] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 3223.241860][T30222] print_req_error: 159 callbacks suppressed [ 3223.241899][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3223.359693][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3223.386806][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3223.422203][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3223.449258][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3223.451994][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3223.488189][T31116] buffer_io_error: 129 callbacks suppressed [ 3223.496239][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3223.738165][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3223.835320][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3223.847702][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3223.889557][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3223.900748][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3223.907746][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3223.909144][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3223.929682][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3223.938023][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3223.945537][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3223.950064][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3223.965624][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3223.974874][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3224.297175][ T2797] usb 3-1: USB disconnect, device number 21 [ 3224.929457][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 3224.929468][ T24] audit: type=1400 audit(6055048732.194:1732): avc: denied { transfer } for pid=15471 comm="syz.4.13794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 3224.957748][ T24] audit: type=1400 audit(6055048732.234:1733): avc: denied { write } for pid=15461 comm="syz.1.13790" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 3225.101429][ T2797] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 3225.393763][T15479] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3225.472015][ T2797] usb 1-1: config 0 has an invalid interface number: 189 but max is 0 [ 3225.492897][ T2797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3225.503805][ T2797] usb 1-1: config 0 has no interface number 0 [ 3225.724620][T15487] tmpfs: Unknown parameter 'quota' [ 3225.756069][ T2797] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 3225.765703][ T2797] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 3225.775722][ T2797] usb 1-1: Product: syz [ 3225.779914][ T2797] usb 1-1: SerialNumber: syz [ 3225.785894][ T2797] usb 1-1: config 0 descriptor?? [ 3225.822164][ T2797] ums-alauda 1-1:0.189: USB Mass Storage device detected [ 3225.880941][ T24] audit: type=1326 audit(6055048733.144:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.3.13802" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7421ef3749 code=0x0 [ 3226.027335][ T2797] usb 1-1: USB disconnect, device number 16 [ 3226.061437][T18439] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 3226.301462][T18439] usb 5-1: Using ep0 maxpacket: 16 [ 3226.421520][T18439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3226.432685][T18439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3226.533594][ T24] audit: type=1400 audit(6055048733.794:1735): avc: denied { connect } for pid=15506 comm="syz.1.13805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3226.617142][T18439] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3226.701455][T18439] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 3226.710783][T18439] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 3226.719332][T18439] usb 5-1: Manufacturer: syz [ 3226.728370][T18439] usb 5-1: config 0 descriptor?? [ 3226.742976][ T24] audit: type=1400 audit(6055048734.014:1736): avc: denied { ioctl } for pid=15518 comm="syz.3.13810" path="socket:[145254]" dev="sockfs" ino=145254 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 3226.933355][T11659] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 3227.121425][T17033] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 3227.201396][T11659] usb 1-1: Using ep0 maxpacket: 16 [ 3227.213236][T18439] playstation 0003:054C:0DF2.0030: hidraw0: USB HID v0.09 Device [syz] on usb-dummy_hcd.4-1/input0 [ 3227.321465][T11659] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3227.332423][T11659] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3227.342186][T11659] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3227.355133][T11659] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3227.364167][T11659] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3227.372888][T11659] usb 1-1: config 0 descriptor?? [ 3227.431508][T18439] playstation 0003:054C:0DF2.0030: Invalid reportID received, expected 9 got 43 [ 3227.440615][T18439] playstation 0003:054C:0DF2.0030: Failed to retrieve DualSense pairing info: -22 [ 3227.449842][T18439] playstation 0003:054C:0DF2.0030: Failed to get MAC address from DualSense [ 3227.458558][T18439] playstation 0003:054C:0DF2.0030: Failed to create dualsense. [ 3227.466749][T18439] playstation: probe of 0003:054C:0DF2.0030 failed with error -22 [ 3227.521430][T17033] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 3227.529591][T17033] usb 3-1: config 0 has no interface number 0 [ 3227.535716][T17033] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 3227.546368][T17033] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 3227.557021][T17033] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 3227.567648][T17033] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3227.580640][T17033] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3227.589706][T17033] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3227.598536][T17033] usb 3-1: config 0 descriptor?? [ 3227.621762][T15531] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 3227.628961][T15531] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 3227.643753][T18439] usb 5-1: USB disconnect, device number 25 [ 3227.966140][T11659] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 3227.973768][T11659] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 3227.975202][ T24] audit: type=1400 audit(6055048735.244:1737): avc: denied { map } for pid=15553 comm="syz.1.13825" path="socket:[145348]" dev="sockfs" ino=145348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3227.980994][T11659] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 3228.013835][T11659] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 3228.021064][T11659] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 3228.028688][ T24] audit: type=1400 audit(6055048735.274:1738): avc: denied { read } for pid=15553 comm="syz.1.13825" path="socket:[145348]" dev="sockfs" ino=145348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3228.052456][T11659] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 3228.059688][T11659] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 3228.067221][T11659] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 3228.074935][T11659] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 3228.082219][T11659] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 3228.093154][T11659] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0031/input/input47 [ 3228.104898][T18439] usb 3-1: USB disconnect, device number 22 [ 3228.173255][T11659] microsoft 0003:045E:07DA.0031: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 3228.188569][T11659] usb 1-1: USB disconnect, device number 17 [ 3228.206262][T15564] fido_id[15564]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 3228.463520][T30222] print_req_error: 126 callbacks suppressed [ 3228.463535][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3228.483063][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3228.495281][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3228.539963][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3228.551691][T31116] blk_update_request: I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3228.562645][T30222] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3228.563039][T31116] buffer_io_error: 102 callbacks suppressed [ 3228.563049][T31116] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 3228.574042][T30222] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 3228.582274][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3228.588509][T30222] blk_update_request: I/O error, dev loop4, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3228.605228][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3228.627589][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3228.637517][T31111] blk_update_request: I/O error, dev loop4, sector 4110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3228.665861][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13832'. [ 3228.683325][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13832'. [ 3228.693163][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13832'. [ 3228.744645][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3228.758751][T30222] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 3228.766835][T30222] blk_update_request: I/O error, dev loop4, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3228.779822][T30222] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 3228.788210][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3228.797457][T30222] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 3228.809344][T31111] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 3228.826650][T15582] device bridge_slave_0 left promiscuous mode [ 3228.833819][ T24] audit: type=1400 audit(6055048736.104:1739): avc: denied { setopt } for pid=15584 comm="syz.0.13838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3228.836785][T15582] bridge0: port 1(bridge_slave_0) entered disabled state [ 3228.855537][T15585] ================================================================== [ 3228.868550][T15585] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 3228.877718][T15585] Read of size 1 at addr ffff88810986dbd8 by task syz.0.13838/15585 [ 3228.885668][T15585] [ 3228.887987][T15585] CPU: 1 PID: 15585 Comm: syz.0.13838 Not tainted syzkaller #0 [ 3228.895524][T15585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3228.905568][T15585] Call Trace: [ 3228.908841][T15585] __dump_stack+0x21/0x24 [ 3228.913157][T15585] dump_stack_lvl+0x169/0x1d8 [ 3228.917826][T15585] ? show_regs_print_info+0x18/0x18 [ 3228.923026][T15585] ? thaw_kernel_threads+0x220/0x220 [ 3228.928288][T15585] ? unwind_get_return_address+0x4d/0x90 [ 3228.933897][T15585] print_address_description+0x7f/0x2c0 [ 3228.939418][T15585] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 3228.945897][T15585] kasan_report+0xe2/0x130 [ 3228.950288][T15585] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 3228.956766][T15585] __asan_report_load1_noabort+0x14/0x20 [ 3228.962376][T15585] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 3228.968676][T15585] ? __this_cpu_preempt_check+0x13/0x20 [ 3228.974197][T15585] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 3228.980322][T15585] ? xfrm_netlink_rcv+0x72/0x90 [ 3228.985151][T15585] ? netlink_unicast+0x876/0xa40 [ 3228.990081][T15585] ? netlink_sendmsg+0x88d/0xb30 [ 3228.994996][T15585] ? ____sys_sendmsg+0x5a2/0x8c0 [ 3228.999905][T15585] ? ___sys_sendmsg+0x1f0/0x260 [ 3229.004731][T15585] ? do_syscall_64+0x31/0x40 [ 3229.009296][T15585] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 3229.015425][T15585] xfrm_policy_inexact_insert+0x70/0x1130 [ 3229.021123][T15585] ? __get_hash_thresh+0x10c/0x420 [ 3229.026208][T15585] ? policy_hash_bysel+0x110/0x4f0 [ 3229.031294][T15585] xfrm_policy_insert+0x126/0x9a0 [ 3229.036404][T15585] ? xfrm_policy_construct+0x54f/0x1f00 [ 3229.041934][T15585] xfrm_add_policy+0x4d1/0x830 [ 3229.046770][T15585] ? xfrm_dump_sa_done+0xc0/0xc0 [ 3229.051688][T15585] xfrm_user_rcv_msg+0x450/0x6d0 [ 3229.056605][T15585] ? xfrm_netlink_rcv+0x90/0x90 [ 3229.061437][T15585] ? selinux_nlmsg_lookup+0x219/0x4a0 [ 3229.066791][T15585] netlink_rcv_skb+0x1e0/0x430 [ 3229.071540][T15585] ? xfrm_netlink_rcv+0x90/0x90 [ 3229.076367][T15585] ? netlink_ack+0xb80/0xb80 [ 3229.080982][T15585] ? mutex_trylock+0xa0/0xa0 [ 3229.085551][T15585] ? __netlink_lookup+0x387/0x3b0 [ 3229.090619][T15585] xfrm_netlink_rcv+0x72/0x90 [ 3229.095274][T15585] netlink_unicast+0x876/0xa40 [ 3229.100030][T15585] netlink_sendmsg+0x88d/0xb30 [ 3229.104773][T15585] ? schedule_preempt_disabled+0x20/0x20 [ 3229.110380][T15585] ? netlink_getsockopt+0x530/0x530 [ 3229.115552][T15585] ? security_socket_sendmsg+0x82/0xa0 [ 3229.120981][T15585] ? netlink_getsockopt+0x530/0x530 [ 3229.126154][T15585] ____sys_sendmsg+0x5a2/0x8c0 [ 3229.130894][T15585] ? __sys_sendmsg_sock+0x40/0x40 [ 3229.135892][T15585] ? import_iovec+0x7c/0xb0 [ 3229.140365][T15585] ___sys_sendmsg+0x1f0/0x260 [ 3229.145015][T15585] ? __sys_sendmsg+0x250/0x250 [ 3229.149756][T15585] ? __fdget+0x1a1/0x230 [ 3229.153969][T15585] __x64_sys_sendmsg+0x1e2/0x2a0 [ 3229.158881][T15585] ? __kasan_check_write+0x14/0x20 [ 3229.163971][T15585] ? ___sys_sendmsg+0x260/0x260 [ 3229.168801][T15585] ? __kasan_check_read+0x11/0x20 [ 3229.173801][T15585] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 3229.179410][T15585] do_syscall_64+0x31/0x40 [ 3229.183801][T15585] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3229.189673][T15585] RIP: 0033:0x7f78a82ae749 [ 3229.194092][T15585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3229.213681][T15585] RSP: 002b:00007f78a6d16038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3229.222070][T15585] RAX: ffffffffffffffda RBX: 00007f78a8504fa0 RCX: 00007f78a82ae749 [ 3229.230015][T15585] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 3229.237960][T15585] RBP: 00007f78a8332f91 R08: 0000000000000000 R09: 0000000000000000 [ 3229.245906][T15585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3229.253854][T15585] R13: 00007f78a8505038 R14: 00007f78a8504fa0 R15: 00007ffe3a1cc658 [ 3229.261803][T15585] [ 3229.264102][T15585] Allocated by task 15585: [ 3229.268492][T15585] __kasan_kmalloc+0xda/0x110 [ 3229.273142][T15585] __kmalloc+0x1a7/0x330 [ 3229.277357][T15585] sk_prot_alloc+0xb2/0x340 [ 3229.281833][T15585] sk_alloc+0x38/0x4e0 [ 3229.285887][T15585] pfkey_create+0x12a/0x660 [ 3229.290363][T15585] __sock_create+0x38d/0x770 [ 3229.294926][T15585] __sys_socket+0xec/0x190 [ 3229.299312][T15585] __x64_sys_socket+0x7a/0x90 [ 3229.303958][T15585] do_syscall_64+0x31/0x40 [ 3229.308380][T15585] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3229.314239][T15585] [ 3229.316549][T15585] Last potentially related work creation: [ 3229.322254][T15585] kasan_save_stack+0x3a/0x60 [ 3229.326921][T15585] __kasan_record_aux_stack+0xd2/0x100 [ 3229.332356][T15585] kasan_record_aux_stack_noalloc+0xb/0x10 [ 3229.338134][T15585] kvfree_call_rcu+0x10c/0x620 [ 3229.342873][T15585] drop_sysctl_table+0x2ef/0x410 [ 3229.347785][T15585] unregister_sysctl_table+0x75/0x120 [ 3229.353132][T15585] unregister_net_sysctl_table+0x15/0x20 [ 3229.358734][T15585] neigh_sysctl_unregister+0x78/0x90 [ 3229.363990][T15585] addrconf_ifdown+0x1598/0x1800 [ 3229.368899][T15585] addrconf_notify+0x3bd/0xe90 [ 3229.373728][T15585] raw_notifier_call_chain+0x90/0x100 [ 3229.379082][T15585] unregister_netdevice_many+0xf8b/0x1980 [ 3229.384774][T15585] ip6gre_exit_batch_net+0x5a5/0x5f0 [ 3229.390032][T15585] cleanup_net+0x5fb/0xb70 [ 3229.394419][T15585] process_one_work+0x6e1/0xba0 [ 3229.399248][T15585] worker_thread+0xa6a/0x13b0 [ 3229.403895][T15585] kthread+0x346/0x3d0 [ 3229.407939][T15585] ret_from_fork+0x1f/0x30 [ 3229.412321][T15585] [ 3229.414620][T15585] Second to last potentially related work creation: [ 3229.421181][T15585] kasan_save_stack+0x3a/0x60 [ 3229.425829][T15585] __kasan_record_aux_stack+0xd2/0x100 [ 3229.431263][T15585] kasan_record_aux_stack_noalloc+0xb/0x10 [ 3229.437062][T15585] insert_work+0x52/0x310 [ 3229.441380][T15585] __queue_work+0x923/0xca0 [ 3229.445856][T15585] queue_work_on+0xd5/0x130 [ 3229.450330][T15585] bpf_prog_free+0x139/0x150 [ 3229.454887][T15585] __bpf_prog_put_rcu+0x14b/0x170 [ 3229.459890][T15585] rcu_do_batch+0x4df/0xa80 [ 3229.464465][T15585] rcu_core+0x55f/0xd60 [ 3229.468590][T15585] rcu_core_si+0x9/0x10 [ 3229.472731][T15585] __do_softirq+0x255/0x563 [ 3229.477204][T15585] [ 3229.479505][T15585] The buggy address belongs to the object at ffff88810986d800 [ 3229.479505][T15585] which belongs to the cache kmalloc-1k of size 1024 [ 3229.493788][T15585] The buggy address is located 984 bytes inside of [ 3229.493788][T15585] 1024-byte region [ffff88810986d800, ffff88810986dc00) [ 3229.507116][T15585] The buggy address belongs to the page: [ 3229.512725][T15585] page:ffffea0004261a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109868 [ 3229.523018][T15585] head:ffffea0004261a00 order:3 compound_mapcount:0 compound_pincount:0 [ 3229.531316][T15585] flags: 0x4000000000010200(slab|head) [ 3229.536752][T15585] raw: 4000000000010200 ffffea000493b800 0000000300000003 ffff888100042f00 [ 3229.545337][T15585] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 3229.553905][T15585] page dumped because: kasan: bad access detected [ 3229.560301][T15585] page_owner tracks the page as allocated [ 3229.565998][T15585] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 1799210185, free_ts 0 [ 3229.583857][T15585] prep_new_page+0x179/0x180 [ 3229.588423][T15585] get_page_from_freelist+0x2235/0x23d0 [ 3229.593938][T15585] __alloc_pages_nodemask+0x268/0x5f0 [ 3229.599279][T15585] new_slab+0x84/0x3f0 [ 3229.603320][T15585] ___slab_alloc+0x2a6/0x450 [ 3229.607882][T15585] __slab_alloc+0x63/0xa0 [ 3229.612198][T15585] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 3229.617543][T15585] device_create+0x12c/0x2f0 [ 3229.622115][T15585] bdi_register_va+0x90/0x5f0 [ 3229.626797][T15585] bdi_register+0xd1/0x120 [ 3229.631188][T15585] __device_add_disk+0x548/0x1020 [ 3229.636201][T15585] device_add_disk+0x2a/0x40 [ 3229.640762][T15585] loop_add+0x5bd/0x7b0 [ 3229.644899][T15585] loop_init+0x1bf/0x1ff [ 3229.649113][T15585] do_one_initcall+0x187/0x510 [ 3229.653850][T15585] do_initcall_level+0x16f/0x2cf [ 3229.658765][T15585] page_owner free stack trace missing [ 3229.664122][T15585] [ 3229.666439][T15585] Memory state around the buggy address: [ 3229.672068][T15585] ffff88810986da80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3229.680133][T15585] ffff88810986db00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3229.688209][T15585] >ffff88810986db80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 3229.696336][T15585] ^ [ 3229.703456][T15585] ffff88810986dc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3229.711612][T15585] ffff88810986dc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3229.719665][T15585] ================================================================== [ 3229.727714][T15585] Disabling lock debugging due to kernel taint [ 3229.735724][T15582] device bridge_slave_1 left promiscuous mode [ 3229.747900][ T24] audit: type=1400 audit(6055048737.014:1740): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 3229.772545][T15582] bridge0: port 2(bridge_slave_1) entered disabled state [ 3229.794005][ T24] audit: type=1400 audit(6055048737.014:1741): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1