last executing test programs: 16.113044377s ago: executing program 0 (id=1372): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0xd0bc, @remote, 0xfffffffc}}}, 0x3a) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r6}, &(0x7f0000001c00), &(0x7f0000001c40)=r7}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xd) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 9.233325101s ago: executing program 4 (id=1395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f"], 0x50) 9.181994681s ago: executing program 4 (id=1396): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20) socket$netlink(0x10, 0x3, 0xf) r6 = socket$netlink(0x10, 0x3, 0xf) socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xc2, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800460000b40000000000119078ac1e001f000000009404010000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8da4009"], 0x0) bind$netlink(r6, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) 8.73716022s ago: executing program 3 (id=1397): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005a80)={'syztnl1\x00', &(0x7f0000005a00)={'ip6gre0\x00', 0x0, 0x29, 0xac, 0x8, 0x101, 0x1, @local, @remote, 0x1, 0x8, 0x4, 0x2}}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000005ac0), 0x0, 0x0) 8.273610389s ago: executing program 2 (id=1399): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 8.055028763s ago: executing program 4 (id=1400): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) rename(&(0x7f00000000c0)='./file2\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") 7.012437113s ago: executing program 1 (id=1401): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/67, 0x0, 0x8080000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x840000000002, 0x3, 0xfa) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, 0x0, &(0x7f0000000300)='%+9llu \x00'}, 0x20) 6.607080461s ago: executing program 4 (id=1402): openat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x10040, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") 6.569229102s ago: executing program 3 (id=1403): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, 0x0, 0x0) 5.393037105s ago: executing program 3 (id=1404): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 5.333701986s ago: executing program 0 (id=1405): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") pwritev(r0, &(0x7f0000000700)=[{0x0}], 0x1, 0xc, 0x0) 4.983111263s ago: executing program 1 (id=1406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f"], 0x50) 4.962352853s ago: executing program 4 (id=1407): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) 4.894128074s ago: executing program 1 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) 4.882039755s ago: executing program 2 (id=1409): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 3.451029972s ago: executing program 4 (id=1410): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 2.861152744s ago: executing program 3 (id=1411): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='hrtimer_init\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x0) 2.854313764s ago: executing program 0 (id=1412): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) 2.413358422s ago: executing program 1 (id=1413): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) 2.201980277s ago: executing program 1 (id=1414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5512, &(0x7f000000e0c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) 2.201551507s ago: executing program 0 (id=1415): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x2e, 0x0, 0x1}, 0x28) pipe2$9p(&(0x7f00000001c0), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003800)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000020000000000"], 0x0, 0x3a, 0x0, 0x1}, 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000040)=@tcp=r1}, 0x20) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x4, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10001, 0x3, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffdf], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.130903868s ago: executing program 0 (id=1416): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") 1.969109961s ago: executing program 2 (id=1417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.968577751s ago: executing program 2 (id=1418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f"], 0x50) 1.882070003s ago: executing program 2 (id=1419): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702500000000fe1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0xd80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_FLAGS={0x8, 0x8, 0x702}, @IFA_ADDRESS={0x14, 0x1, @loopback={0xff00000000000000}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) clock_nanosleep(0x6, 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c696f636861727365743d6e6f6e652c73686f72746e616d6560506f7765722c756e695f786c6174653d302c6e6f6e756d7461696c3d302c636865636b3d7374726963742c646d61736b3d30303030303030303030303030b03030303030303030362c6e6f6e756d7461696c3d302c757466383d302c6e6f6e756d7461696c3d302c00"], 0x1, 0x363, &(0x7f0000000c80)="$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") 1.489818501s ago: executing program 3 (id=1420): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1.260440515s ago: executing program 1 (id=1421): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x4c00, 0x3) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) 810.245063ms ago: executing program 2 (id=1422): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 507.800349ms ago: executing program 3 (id=1423): ptrace(0x10, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20d41, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) umount2(0x0, 0x3) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 0s ago: executing program 0 (id=1424): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") kernel console output (not intermixed with test programs): 22133][ T348] usb 2-1: USB disconnect, device number 3 [ 304.404434][ T3237] fido_id[3237]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 305.045314][ T3241] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 305.045314][ T3241] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 305.045314][ T3241] [ 305.168713][ T3241] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue [ 308.489260][ T24] audit: type=1326 audit(1756834443.150:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3245 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 308.616572][ T24] audit: type=1326 audit(1756834443.150:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3245 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 308.640000][ T24] audit: type=1326 audit(1756834443.160:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3245 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 308.663243][ T24] audit: type=1326 audit(1756834443.160:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3245 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 308.689313][ T24] audit: type=1326 audit(1756834443.160:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3245 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 308.713313][ T24] audit: type=1326 audit(1756834443.170:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3245 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6764f61550 code=0x7ffc0000 [ 308.736945][ T24] audit: type=1326 audit(1756834443.170:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3245 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6764f627eb code=0x7ffc0000 [ 308.760583][ T24] audit: type=1326 audit(1756834443.180:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3245 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6764f627eb code=0x7ffc0000 [ 308.793236][ T24] audit: type=1326 audit(1756834443.180:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3245 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6764f627eb code=0x7ffc0000 [ 308.822719][ T24] audit: type=1326 audit(1756834443.180:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3245 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6764f627eb code=0x7ffc0000 [ 308.829371][ T3271] exfat: Deprecated parameter 'utf8' [ 308.869387][ T3271] exfat: Deprecated parameter 'namecase' [ 308.875272][ T3271] exfat: Deprecated parameter 'namecase' [ 308.881130][ T348] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 308.898505][ T3271] exfat: Deprecated parameter 'utf8' [ 309.087073][ T3271] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 310.225102][ T348] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 310.233140][ T348] usb 3-1: can't read configurations, error -71 [ 311.470024][ T3299] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 313.220813][ T3312] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 313.283126][ T3312] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 313.572357][ T3326] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 313.610623][ T3328] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 315.288100][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 315.288155][ T24] audit: type=1326 audit(1756834450.560:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3351 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 315.318687][ T24] audit: type=1326 audit(1756834450.560:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3351 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 315.468959][ T24] audit: type=1326 audit(1756834450.560:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3351 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 315.493879][ T24] audit: type=1326 audit(1756834450.560:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3351 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 316.138040][ T24] audit: type=1326 audit(1756834450.560:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3351 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 316.210275][ T3356] EXT4-fs (loop2): Ignoring removed oldalloc option [ 316.259728][ T24] audit: type=1326 audit(1756834450.570:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3351 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 316.392306][ T24] audit: type=1326 audit(1756834450.570:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3351 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 316.422515][ T3356] EXT4-fs (loop2): 1 truncate cleaned up [ 316.428190][ T3356] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,bsdgroups, [ 316.610850][ T24] audit: type=1326 audit(1756834450.570:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3351 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 316.643349][ T24] audit: type=1326 audit(1756834450.570:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3351 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 316.677273][ T24] audit: type=1326 audit(1756834450.570:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3351 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 317.232803][ T3373] EXT4-fs (loop2): Test dummy encryption mode enabled [ 317.267863][ T3373] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 317.476635][ T3378] overlayfs: overlapping lowerdir path [ 318.350322][ T3389] overlayfs: overlapping lowerdir path [ 318.521435][ T3390] EXT4-fs (loop0): Ignoring removed oldalloc option [ 318.693507][ T3390] EXT4-fs (loop0): 1 truncate cleaned up [ 318.699434][ T3390] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,bsdgroups, [ 322.116634][ T3406] FAT-fs (loop2): Unrecognized mount option "shortname`Power" or missing value [ 322.228183][ T3411] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 322.238165][ T3411] EXT4-fs (loop1): group descriptors corrupted! [ 323.106266][ T3412] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 323.118783][ T3422] netlink: 80 bytes leftover after parsing attributes in process `syz.1.635'. [ 324.989280][ T3450] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 325.025671][ T3450] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.640: bg 0: block 328: padding at end of block bitmap is not set [ 326.164147][ T3471] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 326.174040][ T3471] EXT4-fs (loop0): group descriptors corrupted! [ 326.569361][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 326.579489][ T24] audit: type=1400 audit(326.333:1259): avc: denied { write } for pid=3467 comm="syz.3.647" name="001" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 327.953012][ T3484] EXT4-fs (loop0): Test dummy encryption mode enabled [ 328.291385][ T3484] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 328.972033][ T3497] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 329.019142][ T3497] EXT4-fs (loop4): group descriptors corrupted! [ 329.399731][ T3510] device pim6reg1 entered promiscuous mode [ 329.657314][ T3506] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 330.039547][ T367] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 330.114608][ T3518] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 330.918020][ T367] usb 5-1: Using ep0 maxpacket: 16 [ 331.369299][ T367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.399154][ T367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.429117][ T367] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 331.449262][ T367] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 331.471849][ T367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.498179][ T367] usb 5-1: config 0 descriptor?? [ 331.550641][ T3531] Unknown ioctl 21531 [ 331.584786][ T3533] F2FS-fs (loop3): invalid crc value [ 331.609052][ T3533] F2FS-fs (loop3): Found nat_bits in checkpoint [ 331.649946][ T3533] F2FS-fs (loop3): Start checkpoint disabled! [ 331.657032][ T3533] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 331.708803][ T3533] attempt to access beyond end of device [ 331.708803][ T3533] loop3: rw=2049, want=53792, limit=40427 [ 331.748029][ T7] attempt to access beyond end of device [ 331.748029][ T7] loop3: rw=2049, want=40976, limit=40427 [ 331.762063][ T1533] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 332.585239][ T1533] usb 3-1: Using ep0 maxpacket: 16 [ 332.585457][ T367] usbhid 5-1:0.0: can't add hid device: -71 [ 332.601558][ T367] usbhid: probe of 5-1:0.0 failed with error -71 [ 332.646850][ T367] usb 5-1: USB disconnect, device number 3 [ 332.722900][ T3553] exfat: Deprecated parameter 'utf8' [ 332.728508][ T3553] exfat: Deprecated parameter 'namecase' [ 332.734954][ T3553] exfat: Deprecated parameter 'namecase' [ 332.740973][ T3553] exfat: Deprecated parameter 'utf8' [ 332.749281][ T1533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.760576][ T1533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.785692][ T1533] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 332.798648][ T1533] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 332.807870][ T1533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.819018][ T3553] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 332.837101][ T1533] usb 3-1: config 0 descriptor?? [ 332.913153][ T3556] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 333.272746][ T3569] netlink: 80 bytes leftover after parsing attributes in process `syz.0.671'. [ 333.639230][ T1533] usbhid 3-1:0.0: can't add hid device: -71 [ 333.650633][ T1533] usbhid: probe of 3-1:0.0 failed with error -71 [ 333.673359][ T1533] usb 3-1: USB disconnect, device number 8 [ 335.121129][ T24] audit: type=1400 audit(334.813:1260): avc: denied { ioctl } for pid=3581 comm="syz.4.675" path="socket:[23060]" dev="sockfs" ino=23060 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 335.295873][ T3586] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 335.295873][ T3586] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 335.295873][ T3586] [ 335.410381][ T3586] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue [ 338.464635][ T3601] F2FS-fs (loop0): invalid crc value [ 338.631067][ T3601] F2FS-fs (loop0): Found nat_bits in checkpoint [ 338.666808][ T3601] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 339.346402][ T3601] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 339.799719][ T3622] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 339.843219][ T3622] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.682: bg 0: block 328: padding at end of block bitmap is not set [ 340.440937][ T3607] Unknown ioctl 21531 [ 340.560252][ T3625] EXT4-fs (loop4): Test dummy encryption mode enabled [ 340.633540][ T3625] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 341.609836][ T24] audit: type=1326 audit(341.236:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 341.658969][ T24] audit: type=1326 audit(341.236:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 341.682300][ T24] audit: type=1326 audit(341.256:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 341.715663][ T3631] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 342.245031][ T3631] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.686: Freeing blocks not in datazone - block = 0, count = 4096 [ 342.249278][ T24] audit: type=1326 audit(341.256:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 342.322099][ T3631] EXT4-fs (loop2): Remounting filesystem read-only [ 342.322133][ T24] audit: type=1326 audit(341.256:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 342.344276][ T3631] EXT4-fs (loop2): 1 orphan inode deleted [ 342.351859][ T24] audit: type=1326 audit(341.256:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 342.357952][ T1534] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 342.393440][ T24] audit: type=1326 audit(341.256:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 342.442635][ T3631] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,noblock_validity,grpjquota=,init_itable=0x0000000000000006,debug,errors=remount-ro, [ 342.513890][ T3652] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 342.523854][ T24] audit: type=1326 audit(341.266:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 342.605416][ T24] audit: type=1326 audit(341.266:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 343.122222][ T3665] EXT4-fs (loop4): Ignoring removed oldalloc option [ 343.213742][ T3665] EXT4-fs (loop4): 1 truncate cleaned up [ 343.219569][ T3665] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,bsdgroups, [ 345.218276][ T3680] EXT4-fs (loop3): Test dummy encryption mode enabled [ 345.431732][ T3680] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 346.069742][ T3690] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 346.095966][ T3690] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.697: Freeing blocks not in datazone - block = 0, count = 4096 [ 346.130974][ T3690] EXT4-fs (loop2): Remounting filesystem read-only [ 346.137983][ T3690] EXT4-fs (loop2): 1 orphan inode deleted [ 346.149347][ T49] EXT4-fs (loop2): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 346.161750][ T3696] Unknown ioctl 21531 [ 346.169238][ T3690] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,noblock_validity,grpjquota=,init_itable=0x0000000000000006,debug,errors=remount-ro, [ 346.290094][ T3690] EXT4-fs (loop2): Unrecognized mount option "Òê……Ågç.\>?±·þÿƒióJ÷X#dé©üÿa›é+ÒÏEÄΈø¬2ROOœ¾P):x" or missing value [ 346.559182][ T20] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 353.449186][ T20] usb 2-1: unable to read config index 0 descriptor/all [ 353.456371][ T20] usb 2-1: can't read configurations, error -71 [ 354.451751][ T3730] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 354.610414][ T3737] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 354.610414][ T3737] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 354.610414][ T3737] [ 355.272870][ T3730] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.706: Freeing blocks not in datazone - block = 0, count = 4096 [ 355.327843][ T3730] EXT4-fs (loop4): Remounting filesystem read-only [ 355.335047][ T3737] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1. [ 355.379667][ T3730] EXT4-fs (loop4): 1 orphan inode deleted [ 355.422727][ T3730] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,noblock_validity,grpjquota=,init_itable=0x0000000000000006,debug,errors=remount-ro, [ 355.753272][ T3748] EXT4-fs (loop2): Test dummy encryption mode enabled [ 355.762870][ T3748] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 356.683681][ T3726] Bluetooth: hci0: Frame reassembly failed (-84) [ 356.944233][ T3763] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 356.996469][ T3757] F2FS-fs (loop1): invalid crc value [ 357.040319][ T3757] F2FS-fs (loop1): Found nat_bits in checkpoint [ 357.180457][ T3757] F2FS-fs (loop1): Start checkpoint disabled! [ 357.298854][ T3757] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 357.956910][ T311] Bluetooth: hci1: Frame reassembly failed (-84) [ 358.610323][ T24] kauditd_printk_skb: 38 callbacks suppressed [ 358.610336][ T24] audit: type=1326 audit(358.026:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 358.640338][ T630] Bluetooth: hci0: command 0x1003 tx timeout [ 358.647319][ T2029] Bluetooth: hci0: sending frame failed (-49) [ 358.657274][ T24] audit: type=1326 audit(358.026:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 358.680459][ T24] audit: type=1326 audit(358.176:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 358.683514][ T3757] attempt to access beyond end of device [ 358.683514][ T3757] loop1: rw=2049, want=53792, limit=40427 [ 358.703563][ T24] audit: type=1326 audit(358.176:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 358.703581][ T24] audit: type=1326 audit(358.176:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 358.703596][ T24] audit: type=1326 audit(358.406:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 358.703618][ T24] audit: type=1326 audit(358.406:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 358.806932][ T24] audit: type=1326 audit(358.406:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 358.841424][ T24] audit: type=1326 audit(358.566:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 358.899369][ T24] audit: type=1326 audit(358.566:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 358.971919][ T311] attempt to access beyond end of device [ 358.971919][ T311] loop1: rw=2049, want=40976, limit=40427 [ 359.500631][ T3792] netlink: 80 bytes leftover after parsing attributes in process `syz.1.719'. [ 359.982913][ T2729] Bluetooth: hci1: command 0x1003 tx timeout [ 359.989187][ T2029] Bluetooth: hci1: sending frame failed (-49) [ 360.699093][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 360.706576][ T2029] Bluetooth: hci0: sending frame failed (-49) [ 361.639091][ T3811] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 362.980396][ T630] Bluetooth: hci1: command 0x1001 tx timeout [ 362.986577][ T2029] Bluetooth: hci1: sending frame failed (-49) [ 363.021974][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 364.393205][ T3832] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 364.416202][ T3828] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.728: bg 0: block 328: padding at end of block bitmap is not set [ 365.015454][ T3841] EXT4-fs (loop2): Test dummy encryption mode enabled [ 365.022533][ T20] Bluetooth: hci1: command 0x1009 tx timeout [ 365.049045][ T3841] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 366.049594][ T3859] netlink: 80 bytes leftover after parsing attributes in process `syz.2.733'. [ 366.219920][ T3868] EXT4-fs (loop3): Test dummy encryption mode enabled [ 366.256244][ T3868] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 366.610307][ T3877] EXT4-fs (loop1): Test dummy encryption mode enabled [ 366.620027][ T3877] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 367.518184][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 367.518315][ T24] audit: type=1326 audit(367.326:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 367.590795][ T24] audit: type=1326 audit(367.326:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 367.639129][ T24] audit: type=1326 audit(367.336:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 367.720663][ T24] audit: type=1326 audit(367.336:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 367.744010][ T24] audit: type=1326 audit(367.336:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 367.767418][ T24] audit: type=1326 audit(367.346:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 367.790374][ T24] audit: type=1326 audit(367.346:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 367.813433][ T24] audit: type=1326 audit(367.346:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 367.837034][ T24] audit: type=1326 audit(367.346:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 367.932318][ T24] audit: type=1326 audit(367.346:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 368.198740][ T3898] EXT4-fs (loop4): Test dummy encryption mode enabled [ 368.364496][ T3898] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 372.436352][ T3960] xt_socket: unknown flags 0x50 [ 374.005744][ T3954] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 374.005744][ T3954] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 374.005744][ T3954] [ 374.110043][ T3954] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue [ 377.596127][ T3967] F2FS-fs (loop3): invalid crc value [ 377.653925][ T3967] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 377.721515][ T4005] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 377.721515][ T4005] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 377.721515][ T4005] [ 377.934284][ T4005] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue [ 378.965269][ T4014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.770'. [ 379.379852][ T4022] xt_socket: unknown flags 0x50 [ 379.531765][ T4024] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue [ 379.733788][ T4024] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.774: bg 0: block 145: padding at end of block bitmap is not set [ 379.781559][ T4034] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 379.796893][ T4026] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 381.201870][ T4066] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 381.382865][ T4066] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.781: bg 0: block 328: padding at end of block bitmap is not set [ 382.758991][ T4090] xt_socket: unknown flags 0x50 [ 382.767730][ T4079] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 382.985587][ T4064] F2FS-fs (loop4): invalid crc value [ 383.019731][ T4064] F2FS-fs (loop4): Found nat_bits in checkpoint [ 383.054647][ T4064] F2FS-fs (loop4): Start checkpoint disabled! [ 383.061788][ T4064] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 383.123856][ T4064] attempt to access beyond end of device [ 383.123856][ T4064] loop4: rw=2049, want=53792, limit=40427 [ 383.141954][ T4064] attempt to access beyond end of device [ 383.141954][ T4064] loop4: rw=2049, want=53792, limit=40427 [ 383.153698][ T4094] EXT4-fs (loop2): Test dummy encryption mode enabled [ 383.164559][ T4094] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 383.197637][ T3726] attempt to access beyond end of device [ 383.197637][ T3726] loop4: rw=2049, want=45104, limit=40427 [ 383.661887][ T4108] EXT4-fs (loop1): Test dummy encryption mode enabled [ 383.686141][ T4108] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 384.906717][ T4116] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 386.073375][ T4106] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 386.083457][ T4106] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.793: Freeing blocks not in datazone - block = 0, count = 4096 [ 386.097422][ T4106] EXT4-fs (loop0): Remounting filesystem read-only [ 386.104338][ T4106] EXT4-fs (loop0): 1 orphan inode deleted [ 386.110592][ T4106] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,noblock_validity,grpjquota=,init_itable=0x0000000000000006,debug,errors=remount-ro, [ 386.372345][ T3726] Bluetooth: hci0: Frame reassembly failed (-84) [ 386.724894][ T4137] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 386.844996][ T4143] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 386.880519][ T4143] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.799: bg 0: block 328: padding at end of block bitmap is not set [ 387.960009][ T4152] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 388.325076][ T4167] xt_socket: unknown flags 0x50 [ 388.379127][ T2729] Bluetooth: hci0: command 0x1003 tx timeout [ 388.386092][ T1405] Bluetooth: hci0: sending frame failed (-49) [ 388.498234][ T4164] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 388.801482][ T4171] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 388.818451][ T4171] EXT4-fs (loop1): group descriptors corrupted! [ 389.060288][ T4176] EXT4-fs (loop1): Test dummy encryption mode enabled [ 389.089830][ T4176] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 390.464471][ T348] Bluetooth: hci0: command 0x1001 tx timeout [ 390.471020][ T1405] Bluetooth: hci0: sending frame failed (-49) [ 390.514767][ T4200] EXT4-fs (loop2): Test dummy encryption mode enabled [ 390.527462][ T4200] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 390.775346][ T348] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 391.945076][ T4208] EXT4-fs (loop0): Ignoring removed oldalloc option [ 391.955237][ T4208] EXT4-fs (loop0): 1 truncate cleaned up [ 391.961024][ T4208] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,bsdgroups, [ 392.000067][ T4212] exfat: Deprecated parameter 'utf8' [ 392.009157][ T4212] exfat: Deprecated parameter 'namecase' [ 392.014950][ T4212] exfat: Deprecated parameter 'namecase' [ 392.020913][ T4212] exfat: Deprecated parameter 'utf8' [ 392.066567][ T4212] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 392.499232][ T348] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.549530][ T849] Bluetooth: hci0: command 0x1009 tx timeout [ 392.679288][ T348] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.689376][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.697456][ T348] usb 2-1: Product: syz [ 392.703027][ T348] usb 2-1: Manufacturer: syz [ 392.707716][ T348] usb 2-1: SerialNumber: syz [ 392.999378][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 392.999475][ T24] audit: type=1326 audit(392.966:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 393.641170][ T24] audit: type=1326 audit(392.966:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 393.678421][ T24] audit: type=1326 audit(393.016:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 393.802230][ T24] audit: type=1326 audit(393.016:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 393.826282][ T24] audit: type=1326 audit(393.016:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 393.849462][ T24] audit: type=1326 audit(393.026:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 394.285237][ T24] audit: type=1326 audit(393.026:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 394.310149][ T24] audit: type=1326 audit(393.026:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 394.341852][ T24] audit: type=1326 audit(393.026:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 395.079286][ T348] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 395.086416][ T348] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 395.095207][ T348] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 395.366042][ T348] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 395.373808][ T348] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 395.386508][ T348] usb 2-1: USB disconnect, device number 6 [ 395.392821][ T348] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 395.661463][ T4257] exfat: Deprecated parameter 'utf8' [ 395.690146][ T4257] exfat: Deprecated parameter 'namecase' [ 396.412067][ T4257] exfat: Deprecated parameter 'namecase' [ 396.417791][ T4257] exfat: Deprecated parameter 'utf8' [ 396.770002][ T4262] EXT4-fs (loop2): Ignoring removed oldalloc option [ 396.964323][ T4262] EXT4-fs (loop2): 1 truncate cleaned up [ 396.970078][ T4262] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,bsdgroups, [ 397.023038][ T4257] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 397.441167][ T24] audit: type=1400 audit(397.396:1369): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 397.479957][ T4269] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 397.598305][ T4269] EXT4-fs (loop4): group descriptors corrupted! [ 400.750879][ T4313] xt_socket: unknown flags 0x50 [ 401.145466][ T4319] EXT4-fs (loop0): Test dummy encryption mode enabled [ 401.154434][ T4319] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 402.291742][ T24] audit: type=1400 audit(402.266:1370): avc: denied { mount } for pid=4326 comm="syz.2.845" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 402.439309][ T24] audit: type=1400 audit(402.306:1371): avc: denied { search } for pid=4326 comm="syz.2.845" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 402.462718][ T4328] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 402.476831][ T4332] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 402.501305][ T4332] EXT4-fs (loop4): group descriptors corrupted! [ 402.553218][ T4328] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.843: bg 0: block 328: padding at end of block bitmap is not set [ 402.609716][ T24] audit: type=1400 audit(402.306:1372): avc: denied { read } for pid=4326 comm="syz.2.845" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 402.631296][ T24] audit: type=1400 audit(402.306:1373): avc: denied { open } for pid=4326 comm="syz.2.845" path="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 402.646727][ T4337] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 403.988417][ T4353] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 404.426418][ T4353] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.851: bg 0: block 328: padding at end of block bitmap is not set [ 405.600296][ T4358] exfat: Deprecated parameter 'utf8' [ 405.605726][ T4358] exfat: Deprecated parameter 'namecase' [ 405.625136][ T4358] exfat: Deprecated parameter 'namecase' [ 405.706928][ T4363] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 405.734928][ T4358] exfat: Deprecated parameter 'utf8' [ 406.296724][ T4358] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 407.098009][ T4370] EXT4-fs (loop1): Test dummy encryption mode enabled [ 407.356779][ T4370] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 408.199253][ T4387] netlink: 80 bytes leftover after parsing attributes in process `syz.2.858'. [ 408.348315][ T4379] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 409.560104][ T4403] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 409.619150][ T4403] EXT4-fs (loop4): group descriptors corrupted! [ 409.670622][ T4384] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 409.678920][ T4384] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 409.687518][ T4384] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x5f52010) [ 409.695848][ T4384] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 410.234401][ T4412] Unknown ioctl 21531 [ 412.622515][ T4426] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 412.819977][ T4426] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.865: bg 0: block 328: padding at end of block bitmap is not set [ 412.941344][ T4438] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 412.941344][ T4438] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 412.941344][ T4438] [ 413.123495][ T4438] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue [ 416.467301][ T4464] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 416.539414][ T4464] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.878: bg 0: block 328: padding at end of block bitmap is not set [ 417.660163][ T4468] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 417.690022][ T4468] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.871: bg 0: block 328: padding at end of block bitmap is not set [ 418.237488][ T4486] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 419.033110][ T4507] netlink: 80 bytes leftover after parsing attributes in process `syz.0.886'. [ 419.661746][ T3726] Bluetooth: hci0: Frame reassembly failed (-84) [ 421.220522][ T4530] device pim6reg1 entered promiscuous mode [ 421.598738][ T348] Bluetooth: hci0: command 0x1003 tx timeout [ 421.619675][ T1405] Bluetooth: hci0: sending frame failed (-49) [ 422.329025][ T24] audit: type=1326 audit(422.256:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 422.565760][ T24] audit: type=1326 audit(422.256:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 422.591587][ T24] audit: type=1326 audit(422.266:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 422.619212][ T24] audit: type=1326 audit(422.266:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 422.648109][ T24] audit: type=1326 audit(422.266:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 422.691291][ T24] audit: type=1326 audit(422.266:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 423.983943][ T25] Bluetooth: hci0: command 0x1001 tx timeout [ 423.997396][ T1405] Bluetooth: hci0: sending frame failed (-49) [ 424.005277][ T24] audit: type=1326 audit(422.266:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 424.035400][ T24] audit: type=1326 audit(422.266:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 424.060394][ T24] audit: type=1326 audit(422.266:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 424.116291][ T24] audit: type=1326 audit(422.266:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 424.683020][ T4567] EXT4-fs (loop2): Test dummy encryption mode enabled [ 424.693705][ T4567] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue [ 424.738359][ T4562] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 424.746429][ T4562] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 424.757854][ T4562] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 424.765960][ T4562] F2FS-fs (loop3): Found nat_bits in checkpoint [ 424.788297][ T4562] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 424.795509][ T4562] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 424.907827][ T4570] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 426.422250][ T348] Bluetooth: hci0: command 0x1009 tx timeout [ 428.692010][ T4604] EXT4-fs (loop2): Test dummy encryption mode enabled [ 428.876807][ T4604] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 429.183554][ T4619] device pim6reg1 entered promiscuous mode [ 429.611158][ T4622] EXT4-fs (loop0): Test dummy encryption mode enabled [ 429.620224][ T4622] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 431.238525][ T4647] netlink: 80 bytes leftover after parsing attributes in process `syz.2.919'. [ 431.428643][ T4649] EXT4-fs (loop0): Test dummy encryption mode enabled [ 431.479563][ T4649] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 431.830057][ T4647] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 431.849858][ T4647] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 432.017414][ T4647] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x5f52010) [ 432.025847][ T4647] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 433.482370][ T4665] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 436.199363][ T4690] exfat: Deprecated parameter 'utf8' [ 436.210245][ T4690] exfat: Deprecated parameter 'namecase' [ 436.216056][ T4690] exfat: Deprecated parameter 'namecase' [ 436.223044][ T4690] exfat: Deprecated parameter 'utf8' [ 436.354665][ T4694] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 436.377256][ T4690] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 438.103171][ T4711] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 438.142182][ T367] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 438.619504][ T367] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.579395][ T367] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.601273][ T367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.309069][ T566] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 441.346301][ T367] usb 5-1: Product: syz [ 441.359118][ T367] usb 5-1: Manufacturer: syz [ 441.370185][ T4747] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 441.379962][ T4747] EXT4-fs (loop4): group descriptors corrupted! [ 441.396986][ T367] usb 5-1: SerialNumber: syz [ 441.429178][ T367] usb 5-1: can't set config #1, error -71 [ 441.438492][ T367] usb 5-1: USB disconnect, device number 4 [ 441.689278][ T4755] EXT4-fs (loop4): Test dummy encryption mode enabled [ 441.850509][ T4755] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 441.999742][ T566] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 442.010420][ T566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.020586][ T566] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 442.034023][ T566] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 442.043248][ T566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.496784][ T566] usb 4-1: config 0 descriptor?? [ 442.541019][ T566] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 443.123129][ T4776] EXT4-fs (loop0): Test dummy encryption mode enabled [ 443.175764][ T4776] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 443.387368][ T4771] F2FS-fs (loop2): invalid crc value [ 443.669829][ T4771] F2FS-fs (loop2): Found nat_bits in checkpoint [ 443.710266][ T4771] F2FS-fs (loop2): Start checkpoint disabled! [ 443.717797][ T4771] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 444.996376][ T370] usb 4-1: USB disconnect, device number 2 [ 446.468583][ T4809] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 446.489444][ T4809] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 446.519415][ T4809] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 446.527261][ T4809] F2FS-fs (loop1): Found nat_bits in checkpoint [ 446.550937][ T4817] EXT4-fs (loop3): Test dummy encryption mode enabled [ 446.572904][ T4817] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 447.173537][ T4809] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 447.245421][ T4809] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 447.519596][ T4836] EXT4-fs (loop4): Test dummy encryption mode enabled [ 447.953400][ T4836] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue [ 448.474964][ T4834] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 448.630657][ T4834] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 448.790225][ T4834] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x5f52010) [ 448.932189][ T4834] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 449.042218][ T4855] overlayfs: overlapping lowerdir path [ 449.922605][ T4862] F2FS-fs (loop3): invalid crc value [ 449.944763][ T4862] F2FS-fs (loop3): Found nat_bits in checkpoint [ 450.053847][ T4862] F2FS-fs (loop3): Start checkpoint disabled! [ 450.159177][ T4862] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 450.301371][ T4862] attempt to access beyond end of device [ 450.301371][ T4862] loop3: rw=2049, want=53792, limit=40427 [ 450.434656][ T1534] attempt to access beyond end of device [ 450.434656][ T1534] loop3: rw=2049, want=40976, limit=40427 [ 450.475550][ T4880] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 450.521925][ T4874] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 450.537925][ T4874] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 450.620361][ T4874] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 450.778951][ T4874] F2FS-fs (loop1): Found nat_bits in checkpoint [ 450.885286][ T4874] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 450.943424][ T4874] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 450.960381][ T4882] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 452.451951][ T276] attempt to access beyond end of device [ 452.451951][ T276] loop1: rw=2049, want=40968, limit=40427 [ 452.536447][ T4899] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 453.170648][ T4923] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 454.703529][ T4933] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 454.722577][ T4933] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.980: bg 0: block 328: padding at end of block bitmap is not set [ 457.206559][ T4950] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 457.330487][ T4939] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 457.606646][ T4939] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 457.707667][ T4939] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x5f52010) [ 457.722508][ T4939] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 460.101601][ T4972] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 460.138749][ T4972] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.992: bg 0: block 328: padding at end of block bitmap is not set [ 461.062751][ T4984] EXT4-fs (loop2): Test dummy encryption mode enabled [ 461.215853][ T4984] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 462.047014][ T4995] netlink: 25 bytes leftover after parsing attributes in process `syz.4.999'. [ 462.096814][ T4994] overlayfs: overlapping lowerdir path [ 464.196748][ T5013] device pim6reg1 entered promiscuous mode [ 465.453549][ T5026] EXT4-fs (loop1): Test dummy encryption mode enabled [ 465.470352][ T5026] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 466.327796][ T5033] EXT4-fs (loop4): Test dummy encryption mode enabled [ 466.385479][ T5033] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 466.745872][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 466.757297][ T24] audit: type=1326 audit(466.716:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 466.757679][ T5048] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 466.803598][ T24] audit: type=1326 audit(466.716:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 467.081536][ T24] audit: type=1326 audit(466.716:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 467.671463][ T24] audit: type=1326 audit(466.726:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 467.695675][ T24] audit: type=1326 audit(466.726:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 467.738947][ T24] audit: type=1326 audit(466.726:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 467.776141][ T5060] EXT4-fs (loop0): Test dummy encryption mode enabled [ 467.789961][ T5065] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 467.821397][ T5060] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 467.930403][ T24] audit: type=1326 audit(466.726:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 467.960210][ T5069] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue [ 468.039243][ T24] audit: type=1326 audit(466.726:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 468.083462][ T24] audit: type=1326 audit(466.726:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 468.107051][ T24] audit: type=1326 audit(466.726:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e02abe9 code=0x7ffc0000 [ 468.569266][ T5078] FAT-fs (loop4): Unrecognized mount option "shortname`Power" or missing value [ 468.625917][ T5069] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1017: bg 0: block 145: padding at end of block bitmap is not set [ 469.292486][ T5089] EXT4-fs (loop3): Ignoring removed oldalloc option [ 469.400549][ T5089] EXT4-fs (loop3): 1 truncate cleaned up [ 469.406286][ T5089] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,bsdgroups, [ 470.203232][ T5105] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 470.203232][ T5105] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 470.203232][ T5105] [ 470.303188][ T5105] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue [ 471.540395][ T5115] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 472.034691][ T5109] F2FS-fs (loop3): invalid crc value [ 472.042172][ T5109] F2FS-fs (loop3): Found nat_bits in checkpoint [ 472.065993][ T5120] F2FS-fs (loop2): invalid crc value [ 472.066920][ T5109] F2FS-fs (loop3): Start checkpoint disabled! [ 472.764362][ T5109] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 472.844074][ T5120] F2FS-fs (loop2): Found nat_bits in checkpoint [ 473.384306][ T5133] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 474.086048][ T5120] F2FS-fs (loop2): Start checkpoint disabled! [ 474.125159][ T5120] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 474.641305][ T5120] attempt to access beyond end of device [ 474.641305][ T5120] loop2: rw=2049, want=53792, limit=40427 [ 476.321520][ T5167] EXT4-fs (loop1): Ignoring removed oldalloc option [ 476.407051][ T5167] EXT4-fs (loop1): 1 truncate cleaned up [ 476.413057][ T5167] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,bsdgroups, [ 476.430727][ T5149] F2FS-fs (loop0): invalid crc value [ 476.490609][ T311] attempt to access beyond end of device [ 476.490609][ T311] loop2: rw=2049, want=45104, limit=40427 [ 477.010372][ T5149] F2FS-fs (loop0): Found nat_bits in checkpoint [ 477.161550][ T5149] F2FS-fs (loop0): Start checkpoint disabled! [ 477.464154][ T5183] FAT-fs (loop4): Unrecognized mount option "shortname`Power" or missing value [ 478.598955][ T5191] exfat: Deprecated parameter 'utf8' [ 478.615261][ T5191] exfat: Deprecated parameter 'namecase' [ 478.656735][ T5191] exfat: Deprecated parameter 'namecase' [ 478.680501][ T5191] exfat: Deprecated parameter 'utf8' [ 478.908350][ T5191] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 479.322526][ T5184] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 479.355732][ T5184] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 479.364115][ T5184] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x5f52010) [ 479.373826][ T5184] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 479.565557][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 479.565568][ T24] audit: type=1400 audit(479.536:1462): avc: denied { create } for pid=5212 comm="syz.4.1049" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 479.847564][ T24] audit: type=1326 audit(479.766:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5214 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 480.039951][ T24] audit: type=1326 audit(479.766:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5214 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 480.083298][ T24] audit: type=1326 audit(479.776:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5214 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 480.153052][ T24] audit: type=1326 audit(479.776:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5214 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 480.205683][ T24] audit: type=1326 audit(479.776:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5214 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 480.274800][ T24] audit: type=1326 audit(479.776:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5214 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 480.343086][ T24] audit: type=1326 audit(479.776:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5214 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 480.449059][ T24] audit: type=1326 audit(479.776:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5214 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 480.687506][ T5223] EXT4-fs (loop3): Ignoring removed oldalloc option [ 481.530867][ T24] audit: type=1326 audit(479.776:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5214 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 483.370667][ T5223] EXT4-fs: failed to create workqueue [ 483.376239][ T5223] EXT4-fs (loop3): mount failed [ 483.637088][ T5234] EXT4-fs (loop1): Test dummy encryption mode enabled [ 483.730336][ T5234] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue [ 485.989304][ T5246] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1057'. [ 486.861340][ T5256] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 487.432241][ T5258] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 489.449663][ T5293] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 490.329051][ T5281] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 490.432091][ T5281] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 490.440737][ T5281] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x5f52010) [ 490.449135][ T5281] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 490.638295][ T5302] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 491.107379][ T5319] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1074'. [ 491.157838][ T5317] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue [ 491.931472][ T5317] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1073: bg 0: block 145: padding at end of block bitmap is not set [ 492.623355][ T5334] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 492.657671][ T5334] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1075: bg 0: block 328: padding at end of block bitmap is not set [ 494.703438][ T5330] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 494.755915][ T5330] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 494.869707][ T5330] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 494.879227][ T5330] F2FS-fs (loop3): Found nat_bits in checkpoint [ 498.249899][ T5371] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 498.307183][ T5370] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1083: bg 0: block 328: padding at end of block bitmap is not set [ 498.322207][ T306] Bluetooth: hci0: Frame reassembly failed (-84) [ 498.328935][ T5380] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 498.328935][ T5380] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 498.328935][ T5380] [ 498.463219][ T5380] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue [ 498.656039][ T5388] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1088'. [ 499.589996][ T5402] overlayfs: overlapping lowerdir path [ 499.605541][ T5397] F2FS-fs (loop3): invalid crc value [ 499.639996][ T5397] F2FS-fs (loop3): Found nat_bits in checkpoint [ 499.679708][ T5397] F2FS-fs (loop3): Start checkpoint disabled! [ 499.701459][ T5397] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 499.745566][ T5397] attempt to access beyond end of device [ 499.745566][ T5397] loop3: rw=2049, want=53792, limit=40427 [ 499.764534][ T5397] attempt to access beyond end of device [ 499.764534][ T5397] loop3: rw=2049, want=53792, limit=40427 [ 499.849684][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1093'. [ 499.858589][ T5411] device bridge_slave_1 left promiscuous mode [ 499.864772][ T5411] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.872429][ T5411] device bridge_slave_0 left promiscuous mode [ 499.878565][ T5411] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.908804][ T3726] attempt to access beyond end of device [ 499.908804][ T3726] loop3: rw=2049, want=40976, limit=40427 [ 500.379074][ T367] Bluetooth: hci0: command 0x1003 tx timeout [ 500.385515][ T1405] Bluetooth: hci0: sending frame failed (-49) [ 501.859877][ T5428] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 502.515314][ T25] Bluetooth: hci0: command 0x1001 tx timeout [ 502.556142][ T1405] Bluetooth: hci0: sending frame failed (-49) [ 503.709618][ T5452] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1103'. [ 504.635080][ T25] Bluetooth: hci0: command 0x1009 tx timeout [ 505.431634][ T5465] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 505.521455][ T5462] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 508.186678][ T5495] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 508.225690][ T5495] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1112: bg 0: block 328: padding at end of block bitmap is not set [ 508.393661][ T5493] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue [ 509.688063][ T5493] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1113: bg 0: block 145: padding at end of block bitmap is not set [ 509.881061][ T5511] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 510.079146][ T24] kauditd_printk_skb: 36 callbacks suppressed [ 510.079194][ T24] audit: type=1326 audit(509.986:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 510.226117][ T24] audit: type=1326 audit(509.986:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 510.250883][ T24] audit: type=1326 audit(509.996:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 510.273969][ T24] audit: type=1326 audit(509.996:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 510.297183][ T24] audit: type=1326 audit(509.996:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 510.320473][ T24] audit: type=1326 audit(509.996:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 510.345070][ T24] audit: type=1326 audit(509.996:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 510.368360][ T24] audit: type=1326 audit(509.996:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 510.391556][ T370] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 510.399230][ T24] audit: type=1326 audit(509.996:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 510.423323][ T24] audit: type=1326 audit(509.996:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 510.610793][ T5533] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 510.659033][ T370] usb 4-1: Using ep0 maxpacket: 16 [ 510.769466][ T5538] FAT-fs (loop4): Unrecognized mount option "shortname`Power" or missing value [ 510.819071][ T370] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.839032][ T370] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 510.859060][ T370] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 510.868108][ T370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.892818][ T370] usb 4-1: config 0 descriptor?? [ 510.939583][ T370] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 511.013927][ T5540] F2FS-fs (loop1): invalid crc value [ 511.088181][ T5540] F2FS-fs (loop1): Found nat_bits in checkpoint [ 511.122405][ T5540] F2FS-fs (loop1): Start checkpoint disabled! [ 511.130832][ T5540] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 511.309407][ T306] Bluetooth: hci0: Frame reassembly failed (-84) [ 511.336053][ T306] Bluetooth: hci0: Frame reassembly failed (-84) [ 511.472064][ T5540] attempt to access beyond end of device [ 511.472064][ T5540] loop1: rw=2049, want=53792, limit=40427 [ 511.550686][ T306] attempt to access beyond end of device [ 511.550686][ T306] loop1: rw=2049, want=40976, limit=40427 [ 511.617108][ T5552] EXT4-fs (loop4): Test dummy encryption mode enabled [ 511.626550][ T5552] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 513.113484][ T367] usb 4-1: USB disconnect, device number 3 [ 513.260938][ T849] Bluetooth: hci0: command 0x1003 tx timeout [ 513.273771][ T1405] Bluetooth: hci0: sending frame failed (-49) [ 513.557177][ T5574] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 513.615783][ T5572] EXT4-fs (loop4): Test dummy encryption mode enabled [ 513.693002][ T5572] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue [ 514.942022][ T5593] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 515.339256][ T849] Bluetooth: hci0: command 0x1001 tx timeout [ 515.355623][ T1405] Bluetooth: hci0: sending frame failed (-49) [ 516.039587][ T5611] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 516.039587][ T5611] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 516.039587][ T5611] [ 516.086158][ T5611] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue [ 517.419072][ T2729] Bluetooth: hci0: command 0x1009 tx timeout [ 517.578685][ T5627] device pim6reg1 entered promiscuous mode [ 518.901238][ T5652] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 518.920370][ T5652] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 521.054606][ T5687] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 522.192863][ T5706] F2FS-fs (loop0): invalid crc value [ 522.216694][ T5706] F2FS-fs (loop0): Found nat_bits in checkpoint [ 522.237761][ T5706] F2FS-fs (loop0): Start checkpoint disabled! [ 522.252564][ T5706] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 522.297357][ T5706] attempt to access beyond end of device [ 522.297357][ T5706] loop0: rw=2049, want=53792, limit=40427 [ 522.338019][ T5706] attempt to access beyond end of device [ 522.338019][ T5706] loop0: rw=2049, want=53792, limit=40427 [ 522.399996][ T1534] attempt to access beyond end of device [ 522.399996][ T1534] loop0: rw=2049, want=40976, limit=40427 [ 522.499427][ T5730] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 522.620837][ T5735] EXT4-fs (loop3): Test dummy encryption mode enabled [ 522.704286][ T5735] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 523.447281][ T1534] Bluetooth: hci0: Frame reassembly failed (-84) [ 523.463755][ T5738] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 523.498940][ T5738] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1173: bg 0: block 328: padding at end of block bitmap is not set [ 523.664499][ T5742] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 524.347095][ T367] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 524.589078][ T367] usb 2-1: Using ep0 maxpacket: 16 [ 524.709118][ T367] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 524.722350][ T367] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 524.731457][ T367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.741907][ T367] usb 2-1: config 0 descriptor?? [ 524.779697][ T367] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 525.319665][ T5773] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 525.419037][ T370] Bluetooth: hci0: command 0x1003 tx timeout [ 525.425198][ T1405] Bluetooth: hci0: sending frame failed (-49) [ 525.829678][ T5785] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 527.011605][ T367] usb 2-1: USB disconnect, device number 7 [ 527.195191][ T5792] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 527.410534][ T5790] F2FS-fs (loop3): invalid crc value [ 527.420480][ T5790] F2FS-fs (loop3): Found nat_bits in checkpoint [ 527.499039][ T370] Bluetooth: hci0: command 0x1001 tx timeout [ 527.515299][ T1405] Bluetooth: hci0: sending frame failed (-49) [ 527.537270][ T5802] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 527.543753][ T5790] F2FS-fs (loop3): Start checkpoint disabled! [ 527.553473][ T5790] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 527.621496][ T5801] F2FS-fs (loop4): invalid crc value [ 527.674559][ T5801] F2FS-fs (loop4): Found nat_bits in checkpoint [ 527.755575][ T5790] attempt to access beyond end of device [ 527.755575][ T5790] loop3: rw=2049, want=53792, limit=40427 [ 527.780168][ T5801] F2FS-fs (loop4): Start checkpoint disabled! [ 527.807037][ T5801] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 527.873944][ T306] attempt to access beyond end of device [ 527.873944][ T306] loop3: rw=2049, want=40976, limit=40427 [ 527.883264][ T5801] attempt to access beyond end of device [ 527.883264][ T5801] loop4: rw=2049, want=53792, limit=40427 [ 527.928228][ T306] attempt to access beyond end of device [ 527.928228][ T306] loop4: rw=2049, want=40976, limit=40427 [ 528.282685][ T5822] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 528.899068][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 528.899106][ T24] audit: type=1326 audit(528.776:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 529.077065][ T24] audit: type=1326 audit(528.776:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 529.104370][ T24] audit: type=1326 audit(528.776:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 529.129038][ T24] audit: type=1326 audit(528.776:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 529.153172][ T24] audit: type=1326 audit(528.776:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 529.179130][ T24] audit: type=1326 audit(528.786:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 529.208149][ T24] audit: type=1326 audit(528.786:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 529.232559][ T24] audit: type=1326 audit(528.786:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 529.256348][ T24] audit: type=1326 audit(528.786:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 529.289144][ T24] audit: type=1326 audit(528.786:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 529.660029][ T731] Bluetooth: hci0: command 0x1009 tx timeout [ 529.920604][ T5839] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 529.980244][ T5843] EXT4-fs (loop1): Test dummy encryption mode enabled [ 530.000837][ T5843] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 530.751516][ T5861] F2FS-fs (loop0): invalid crc value [ 530.788779][ T5861] F2FS-fs (loop0): Found nat_bits in checkpoint [ 530.838747][ T5861] F2FS-fs (loop0): Start checkpoint disabled! [ 530.855039][ T5861] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 531.055035][ T5861] attempt to access beyond end of device [ 531.055035][ T5861] loop0: rw=2049, want=53792, limit=40427 [ 531.124219][ T1534] attempt to access beyond end of device [ 531.124219][ T1534] loop0: rw=2049, want=40976, limit=40427 [ 531.548489][ T5878] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 531.820891][ T5882] F2FS-fs (loop0): invalid crc value [ 531.840073][ T5882] F2FS-fs (loop0): Found nat_bits in checkpoint [ 531.931808][ T5882] F2FS-fs (loop0): Start checkpoint disabled! [ 531.963339][ T5882] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 532.093609][ T5882] attempt to access beyond end of device [ 532.093609][ T5882] loop0: rw=2049, want=53792, limit=40427 [ 532.133651][ T5882] attempt to access beyond end of device [ 532.133651][ T5882] loop0: rw=2049, want=53792, limit=40427 [ 532.219483][ T306] attempt to access beyond end of device [ 532.219483][ T306] loop0: rw=2049, want=40976, limit=40427 [ 532.479286][ T5889] F2FS-fs (loop3): invalid crc value [ 532.502595][ T5889] F2FS-fs (loop3): Found nat_bits in checkpoint [ 532.686492][ T5889] F2FS-fs (loop3): Start checkpoint disabled! [ 532.694376][ T5889] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 532.738389][ T5889] attempt to access beyond end of device [ 532.738389][ T5889] loop3: rw=2049, want=53792, limit=40427 [ 532.783926][ T5898] EXT4-fs (loop0): Ignoring removed oldalloc option [ 532.794038][ T306] handle_bad_sector: 1 callbacks suppressed [ 532.794050][ T306] attempt to access beyond end of device [ 532.794050][ T306] loop3: rw=2049, want=40976, limit=40427 [ 532.812479][ T5898] EXT4-fs (loop0): 1 truncate cleaned up [ 532.818147][ T5898] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,bsdgroups, [ 532.949039][ T370] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 533.056153][ T5905] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 534.037706][ T370] usb 5-1: Using ep0 maxpacket: 16 [ 535.376624][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 535.376637][ T24] audit: type=1326 audit(534.406:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 535.407730][ T370] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 535.439060][ T370] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 535.453107][ T370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.461406][ T24] audit: type=1326 audit(534.406:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 535.488747][ T370] usb 5-1: config 0 descriptor?? [ 535.494191][ T24] audit: type=1326 audit(534.426:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 535.517530][ T24] audit: type=1326 audit(534.426:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 535.541331][ T370] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 535.550364][ T24] audit: type=1326 audit(534.426:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 535.576090][ T24] audit: type=1326 audit(534.446:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 535.599430][ T24] audit: type=1326 audit(534.446:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 535.623929][ T24] audit: type=1326 audit(534.446:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 535.647105][ T24] audit: type=1326 audit(534.456:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 535.670474][ T24] audit: type=1326 audit(534.456:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 535.704532][ T370] usb 5-1: USB disconnect, device number 5 [ 536.000943][ T5929] F2FS-fs (loop3): invalid crc value [ 536.007271][ T5929] F2FS-fs (loop3): Found nat_bits in checkpoint [ 536.027426][ T5929] F2FS-fs (loop3): Start checkpoint disabled! [ 536.074174][ T5929] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 536.132496][ T370] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 536.167206][ T5929] attempt to access beyond end of device [ 536.167206][ T5929] loop3: rw=2049, want=53792, limit=40427 [ 536.529711][ T306] attempt to access beyond end of device [ 536.529711][ T306] loop3: rw=2049, want=40976, limit=40427 [ 536.769111][ T370] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 537.021551][ T306] Bluetooth: hci0: Frame reassembly failed (-84) [ 537.085892][ T370] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 537.163364][ T370] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 537.176544][ T370] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 537.190849][ T370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.457937][ T370] usb 5-1: config 0 descriptor?? [ 537.499973][ T370] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 537.609053][ T731] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 537.969064][ T731] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 537.977217][ T731] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 537.987817][ T731] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 538.000942][ T731] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.009996][ T731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.018426][ T731] usb 4-1: config 0 descriptor?? [ 538.024218][ T5965] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 538.032211][ T5965] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 538.042033][ T5965] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 538.059806][ T731] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 538.067286][ T5965] F2FS-fs (loop2): Found nat_bits in checkpoint [ 538.091963][ T5965] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 538.099068][ T5965] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 538.319556][ T5973] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 538.326192][ T5973] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 538.363783][ T5973] F2FS-fs (loop0): Found nat_bits in checkpoint [ 538.399076][ T5973] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 538.406170][ T5973] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 538.621908][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1234'. [ 538.776302][ T281] attempt to access beyond end of device [ 538.776302][ T281] loop2: rw=2049, want=40968, limit=40427 [ 539.019118][ T849] Bluetooth: hci0: command 0x1003 tx timeout [ 539.051185][ T1405] Bluetooth: hci0: sending frame failed (-49) [ 539.078786][ T277] attempt to access beyond end of device [ 539.078786][ T277] loop0: rw=2049, want=45104, limit=40427 [ 539.495181][ T731] usb 5-1: USB disconnect, device number 6 [ 540.054001][ T731] usb 4-1: USB disconnect, device number 4 [ 540.179108][ T6000] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 540.885085][ T6016] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 541.111194][ T6021] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 541.209965][ T6021] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 541.439112][ T2729] Bluetooth: hci0: command 0x1001 tx timeout [ 541.445201][ T1405] Bluetooth: hci0: sending frame failed (-49) [ 542.995698][ T6034] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 543.023318][ T6037] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 543.145808][ T6044] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 543.274204][ T6044] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1246: bg 0: block 328: padding at end of block bitmap is not set [ 543.818281][ T2729] Bluetooth: hci0: command 0x1009 tx timeout [ 543.886468][ T6040] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 543.916211][ T6040] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 543.925632][ T6040] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 543.933723][ T6040] F2FS-fs (loop2): Found nat_bits in checkpoint [ 543.970354][ T6040] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 543.977764][ T6040] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 545.002250][ T6062] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 545.022478][ T281] attempt to access beyond end of device [ 545.022478][ T281] loop2: rw=2049, want=40968, limit=40427 [ 545.385111][ T6064] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 545.401757][ T6064] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 545.441053][ T6064] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 545.458401][ T6064] F2FS-fs (loop0): Found nat_bits in checkpoint [ 545.518464][ T6064] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 545.525617][ T6064] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 545.569078][ T731] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 545.730431][ T6072] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 545.741996][ T277] attempt to access beyond end of device [ 545.741996][ T277] loop0: rw=2049, want=40968, limit=40427 [ 546.659094][ T731] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 546.677467][ T731] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 546.689034][ T731] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 546.702258][ T731] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 546.711423][ T731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.720564][ T731] usb 3-1: config 0 descriptor?? [ 546.791387][ T6099] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 547.021180][ T731] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 548.313124][ T6115] overlayfs: overlapping lowerdir path [ 548.813661][ T6117] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 548.821627][ T6117] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 548.852215][ T6117] F2FS-fs (loop3): Found nat_bits in checkpoint [ 548.942559][ T6117] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 548.959042][ T6117] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 549.117226][ T1533] usb 3-1: USB disconnect, device number 9 [ 549.313432][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'. [ 549.807386][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 549.807397][ T24] audit: type=1326 audit(549.426:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 549.875494][ T24] audit: type=1326 audit(549.426:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 549.901967][ T282] attempt to access beyond end of device [ 549.901967][ T282] loop3: rw=2049, want=45104, limit=40427 [ 549.913473][ T24] audit: type=1326 audit(549.436:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 549.913490][ T24] audit: type=1326 audit(549.436:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 549.913505][ T24] audit: type=1326 audit(549.436:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 549.913521][ T24] audit: type=1326 audit(549.436:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 549.913536][ T24] audit: type=1326 audit(549.436:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 549.913556][ T24] audit: type=1326 audit(549.436:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 550.051176][ T1533] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 550.059686][ T24] audit: type=1326 audit(549.446:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 550.109150][ T24] audit: type=1326 audit(549.446:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf119d5be9 code=0x7ffc0000 [ 550.693022][ T6146] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 551.099035][ T1533] usb 3-1: Using ep0 maxpacket: 16 [ 551.239084][ T1533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.444269][ T6155] FAT-fs (loop0): Unrecognized mount option "shortname`Power" or missing value [ 551.509015][ T1533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.529018][ T1533] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 551.549016][ T1533] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 551.558056][ T1533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.579772][ T1533] usb 3-1: config 0 descriptor?? [ 551.608357][ T6152] FAT-fs (loop4): Unrecognized mount option "shortname`Power" or missing value [ 551.641166][ T6142] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 551.649033][ T6142] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 551.681901][ T6142] F2FS-fs (loop1): Found nat_bits in checkpoint [ 551.729489][ T6142] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 551.736658][ T6142] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 552.379085][ T1533] usbhid 3-1:0.0: can't add hid device: -71 [ 552.385214][ T1533] usbhid: probe of 3-1:0.0 failed with error -71 [ 552.405448][ T1533] usb 3-1: USB disconnect, device number 10 [ 552.418652][ T276] attempt to access beyond end of device [ 552.418652][ T276] loop1: rw=2049, want=45104, limit=40427 [ 552.680629][ T6167] EXT4-fs (loop4): Test dummy encryption mode enabled [ 552.725349][ T6167] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 553.634708][ T6179] F2FS-fs (loop0): invalid crc value [ 553.650805][ T6179] F2FS-fs (loop0): Found nat_bits in checkpoint [ 553.776396][ T6179] F2FS-fs (loop0): Start checkpoint disabled! [ 553.843144][ T6179] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 554.582506][ T6179] attempt to access beyond end of device [ 554.582506][ T6179] loop0: rw=2049, want=53792, limit=40427 [ 554.749380][ T311] attempt to access beyond end of device [ 554.749380][ T311] loop0: rw=2049, want=40976, limit=40427 [ 555.316951][ T6193] F2FS-fs (loop4): invalid crc value [ 555.348096][ T6193] F2FS-fs (loop4): Found nat_bits in checkpoint [ 555.465927][ T6193] F2FS-fs (loop4): Start checkpoint disabled! [ 555.474371][ T6193] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 555.894260][ T6193] attempt to access beyond end of device [ 555.894260][ T6193] loop4: rw=2049, want=53792, limit=40427 [ 555.965279][ T7] attempt to access beyond end of device [ 555.965279][ T7] loop4: rw=2049, want=40976, limit=40427 [ 556.120574][ T6218] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 556.134223][ T6217] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 556.155946][ T6217] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 556.176643][ T6217] F2FS-fs (loop3): Found nat_bits in checkpoint [ 556.248363][ T6217] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 556.272168][ T6217] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 556.670343][ T6231] EXT4-fs (loop0): Test dummy encryption mode enabled [ 556.699246][ T6231] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 556.752535][ T6224] F2FS-fs (loop4): invalid crc value [ 556.780401][ T6224] F2FS-fs (loop4): Found nat_bits in checkpoint [ 556.865312][ T6224] F2FS-fs (loop4): Start checkpoint disabled! [ 556.874415][ T6224] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 557.258473][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 557.276452][ T6243] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 557.581779][ T6224] attempt to access beyond end of device [ 557.581779][ T6224] loop4: rw=2049, want=53792, limit=40427 [ 557.644714][ T282] attempt to access beyond end of device [ 557.644714][ T282] loop3: rw=2049, want=45104, limit=40427 [ 557.711071][ T1534] attempt to access beyond end of device [ 557.711071][ T1534] loop4: rw=2049, want=40976, limit=40427 [ 558.394768][ T6256] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 558.440272][ T6261] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 558.893296][ T6267] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 558.893296][ T6267] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 558.893296][ T6267] [ 559.189384][ T6267] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue [ 560.962955][ T6300] EXT4-fs (loop1): Test dummy encryption mode enabled [ 561.013136][ T6300] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue [ 561.145514][ T849] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 561.242190][ T6293] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 561.262045][ T6293] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 561.317300][ T6293] F2FS-fs (loop0): Found nat_bits in checkpoint [ 561.357587][ T6293] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 561.369570][ T6293] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 561.442283][ T849] usb 4-1: Using ep0 maxpacket: 16 [ 561.599099][ T849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.615435][ T849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.648008][ T849] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 561.678410][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'. [ 561.725704][ T849] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 561.759488][ T849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.892690][ T6306] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 561.912058][ T6306] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 561.920437][ T6306] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x5f52010) [ 561.928990][ T6306] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 561.975623][ T277] attempt to access beyond end of device [ 561.975623][ T277] loop0: rw=2049, want=45104, limit=40427 [ 561.976005][ T849] usb 4-1: config 0 descriptor?? [ 563.913032][ T6334] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 564.205213][ T849] usbhid 4-1:0.0: can't add hid device: -71 [ 564.446517][ T849] usbhid: probe of 4-1:0.0 failed with error -71 [ 564.454459][ T849] usb 4-1: USB disconnect, device number 5 [ 566.545629][ T6347] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 566.603757][ T6356] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 566.677446][ T6356] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 566.987567][ T6367] F2FS-fs (loop0): invalid crc value [ 567.017445][ T6367] F2FS-fs (loop0): Found nat_bits in checkpoint [ 567.048516][ T6381] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 567.088062][ T6381] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 567.128867][ T6367] F2FS-fs (loop0): Start checkpoint disabled! [ 567.194659][ T6367] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 567.280936][ T6367] attempt to access beyond end of device [ 567.280936][ T6367] loop0: rw=2049, want=53792, limit=40427 [ 567.336871][ T6367] attempt to access beyond end of device [ 567.336871][ T6367] loop0: rw=2049, want=53792, limit=40427 [ 567.423528][ T1534] attempt to access beyond end of device [ 567.423528][ T1534] loop0: rw=2049, want=40976, limit=40427 [ 567.544570][ T6390] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 567.989599][ T6400] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 568.324589][ T6396] F2FS-fs (loop1): invalid crc value [ 568.364831][ T6396] F2FS-fs (loop1): Found nat_bits in checkpoint [ 568.439067][ T6396] F2FS-fs (loop1): Start checkpoint disabled! [ 568.462754][ T6396] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 568.519549][ T6410] EXT4-fs (loop3): Test dummy encryption mode enabled [ 568.538644][ T6410] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 568.604710][ T6396] attempt to access beyond end of device [ 568.604710][ T6396] loop1: rw=2049, want=53792, limit=40427 [ 568.668164][ T6396] attempt to access beyond end of device [ 568.668164][ T6396] loop1: rw=2049, want=53792, limit=40427 [ 568.707744][ T1534] attempt to access beyond end of device [ 568.707744][ T1534] loop1: rw=2049, want=40976, limit=40427 [ 568.731060][ T6403] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 568.739301][ T6403] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 568.779622][ T6403] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x5f52010) [ 568.859590][ T6403] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 568.869054][ T6420] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 569.261373][ T6437] EXT4-fs (loop1): Test dummy encryption mode enabled [ 569.283432][ T6437] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 569.692239][ T6439] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 571.331191][ T6468] EXT4-fs (loop0): Test dummy encryption mode enabled [ 571.367937][ T6468] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 572.053102][ T24] kauditd_printk_skb: 35 callbacks suppressed [ 572.053123][ T24] audit: type=1326 audit(571.976:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 572.275211][ T24] audit: type=1326 audit(571.976:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 572.298542][ T24] audit: type=1326 audit(571.986:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 572.321499][ T24] audit: type=1326 audit(571.986:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 572.344945][ T24] audit: type=1326 audit(571.986:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 572.368354][ T24] audit: type=1326 audit(571.986:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 572.422157][ T24] audit: type=1326 audit(571.986:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 572.593041][ T24] audit: type=1326 audit(571.986:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 572.657159][ T24] audit: type=1326 audit(571.986:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 572.746956][ T24] audit: type=1326 audit(571.996:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764f62be9 code=0x7ffc0000 [ 572.953353][ T1534] Bluetooth: hci0: Frame reassembly failed (-84) [ 572.962072][ T1534] Bluetooth: hci0: Frame reassembly failed (-84) [ 573.199649][ T731] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 573.559089][ T731] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 573.576198][ T731] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 573.593459][ T731] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 573.606580][ T731] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 573.615737][ T731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.624536][ T731] usb 1-1: config 0 descriptor?? [ 573.679584][ T731] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 573.859502][ T6507] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 573.859502][ T6507] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 573.859502][ T6507] [ 573.905142][ T6507] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue [ 574.017472][ T6505] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 574.614225][ T6520] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 575.019020][ T367] Bluetooth: hci0: command 0x1003 tx timeout [ 575.025266][ T1405] Bluetooth: hci0: sending frame failed (-49) [ 575.121845][ T6523] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1361'. [ 575.572291][ T367] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 576.158183][ T731] usb 1-1: USB disconnect, device number 2 [ 576.173414][ T1534] Bluetooth: hci1: Frame reassembly failed (-84) [ 576.328024][ T6535] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 577.099078][ T731] Bluetooth: hci0: command 0x1001 tx timeout [ 577.105348][ T2029] Bluetooth: hci0: sending frame failed (-49) [ 577.189268][ T367] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 577.198320][ T367] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 577.209121][ T367] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 577.222485][ T367] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 577.231605][ T367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.299906][ T367] usb 4-1: config 0 descriptor?? [ 577.319151][ T6525] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 577.349662][ T367] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 577.591502][ T6547] FAT-fs (loop1): Unrecognized mount option "shortname`Power" or missing value [ 577.899895][ T6552] EXT4-fs (loop0): Test dummy encryption mode enabled [ 577.908584][ T6552] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 578.219032][ T363] Bluetooth: hci1: command 0x1003 tx timeout [ 578.225492][ T2029] Bluetooth: hci1: sending frame failed (-49) [ 578.590089][ T6565] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 579.114360][ T1534] Bluetooth: hci2: Frame reassembly failed (-84) [ 579.179042][ T367] Bluetooth: hci0: command 0x1009 tx timeout [ 579.464308][ T367] usb 4-1: USB disconnect, device number 6 [ 579.733096][ T6579] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 580.184941][ T6586] EXT4-fs (loop1): Test dummy encryption mode enabled [ 580.292735][ T6586] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 580.317716][ T25] Bluetooth: hci1: command 0x1001 tx timeout [ 580.324576][ T6573] Bluetooth: hci1: sending frame failed (-49) [ 580.913822][ T6594] EXT4-fs (loop3): Test dummy encryption mode enabled [ 580.928163][ T6594] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 581.492307][ T731] Bluetooth: hci2: command 0x1003 tx timeout [ 581.498685][ T6573] Bluetooth: hci2: sending frame failed (-49) [ 582.060587][ T6606] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 582.379515][ T849] Bluetooth: hci1: command 0x1009 tx timeout [ 582.392577][ T6614] EXT4-fs (loop1): Test dummy encryption mode enabled [ 582.400987][ T6614] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 583.578997][ T363] Bluetooth: hci2: command 0x1001 tx timeout [ 583.586213][ T40] Bluetooth: hci2: sending frame failed (-49) [ 583.792985][ T6635] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 583.799918][ T6635] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 583.810733][ T6635] F2FS-fs (loop3): Found nat_bits in checkpoint [ 583.833000][ T6635] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 583.840204][ T6635] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 584.046912][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1388'. [ 584.431412][ T6644] EXT4-fs (loop1): Test dummy encryption mode enabled [ 584.613195][ T282] attempt to access beyond end of device [ 584.613195][ T282] loop3: rw=2049, want=45104, limit=40427 [ 584.646101][ T6644] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 585.036623][ T6650] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 585.659514][ T630] Bluetooth: hci2: command 0x1009 tx timeout [ 585.779521][ T6669] overlayfs: overlapping lowerdir path [ 585.852839][ T6665] F2FS-fs (loop1): invalid crc value [ 585.871472][ T6665] F2FS-fs (loop1): Found nat_bits in checkpoint [ 586.039449][ T6665] F2FS-fs (loop1): Start checkpoint disabled! [ 586.056191][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 586.056204][ T24] audit: type=1326 audit(586.026:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.4.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 586.133548][ T6665] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 586.186653][ T6665] attempt to access beyond end of device [ 586.186653][ T6665] loop1: rw=2049, want=53792, limit=40427 [ 586.198029][ T24] audit: type=1326 audit(586.096:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.4.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 586.228306][ T6665] attempt to access beyond end of device [ 586.228306][ T6665] loop1: rw=2049, want=53792, limit=40427 [ 586.240327][ T24] audit: type=1326 audit(586.106:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.4.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 586.273709][ T24] audit: type=1326 audit(586.106:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.4.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 586.312089][ T24] audit: type=1326 audit(586.106:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.4.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 586.352027][ T311] attempt to access beyond end of device [ 586.352027][ T311] loop1: rw=2049, want=40976, limit=40427 [ 586.359069][ T24] audit: type=1326 audit(586.106:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.4.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 586.425326][ T24] audit: type=1326 audit(586.106:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.4.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 586.484683][ T24] audit: type=1326 audit(586.106:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.4.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 586.549013][ T24] audit: type=1326 audit(586.106:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.4.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 586.605899][ T24] audit: type=1326 audit(586.106:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.4.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50963cbe9 code=0x7ffc0000 [ 586.660509][ T6679] EXT4-fs (loop2): Test dummy encryption mode enabled [ 586.680426][ T6679] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 589.485958][ T6708] EXT4-fs (loop3): Test dummy encryption mode enabled [ 589.627207][ T6708] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 589.922372][ T6714] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 592.405567][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 592.979879][ T6759] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 593.067611][ T6753] F2FS-fs (loop1): invalid crc value [ 593.116853][ T6753] F2FS-fs (loop1): Found nat_bits in checkpoint [ 593.309240][ T6753] F2FS-fs (loop1): Start checkpoint disabled! [ 593.339191][ T6753] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 593.369379][ T6770] FAT-fs (loop2): Unrecognized mount option "shortname`Power" or missing value [ 593.521125][ T6774] EXT4-fs (loop3): Test dummy encryption mode enabled [ 593.535760][ T6774] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 593.546766][ T6753] attempt to access beyond end of device [ 593.546766][ T6753] loop1: rw=2049, want=53792, limit=40427 [ 593.660195][ T1534] attempt to access beyond end of device [ 593.660195][ T1534] loop1: rw=2049, want=40976, limit=40427 [ 594.183283][ T6780] EXT4-fs (loop2): Test dummy encryption mode enabled [ 594.290544][ T6780] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue [ 594.390516][ T6783] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 594.463130][ T3588] Bluetooth: hci0: command 0x1003 tx timeout [ 594.469472][ T1405] Bluetooth: hci0: sending frame failed (-49) [ 594.476394][ T6783] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 594.790765][ T6793] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 594.959375][ T306] ================================================================== [ 594.967486][ T306] BUG: KASAN: use-after-free in down_read_trylock+0x83/0x150 [ 594.975298][ T306] Write of size 8 at addr ffff8881161f6070 by task kworker/u4:4/306 [ 594.983298][ T306] [ 594.985642][ T306] CPU: 0 PID: 306 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 594.993094][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 595.003347][ T306] Workqueue: writeback wb_workfn (flush-7:4) [ 595.009319][ T306] Call Trace: [ 595.012601][ T306] __dump_stack+0x21/0x24 [ 595.016925][ T306] dump_stack_lvl+0x169/0x1d8 [ 595.021767][ T306] ? show_regs_print_info+0x18/0x18 [ 595.026951][ T306] ? thaw_kernel_threads+0x220/0x220 [ 595.032225][ T306] ? search_extable+0x8c/0xd0 [ 595.036918][ T306] ? __kasan_check_write+0x14/0x20 [ 595.042029][ T306] print_address_description+0x7f/0x2c0 [ 595.047563][ T306] ? down_read_trylock+0x83/0x150 [ 595.052600][ T306] kasan_report+0xe2/0x130 [ 595.057025][ T306] ? down_read_trylock+0x83/0x150 [ 595.062047][ T306] kasan_check_range+0x280/0x290 [ 595.066976][ T306] __kasan_check_write+0x14/0x20 [ 595.072000][ T306] down_read_trylock+0x83/0x150 [ 595.076868][ T306] ? __init_rwsem+0x1c0/0x1c0 [ 595.081638][ T306] ? __kasan_check_write+0x14/0x20 [ 595.086743][ T306] ? _raw_spin_lock+0x8e/0xe0 [ 595.091421][ T306] ? __kasan_check_read+0x11/0x20 [ 595.096436][ T306] trylock_super+0x1f/0xf0 [ 595.100846][ T306] wb_writeback+0x485/0xb90 [ 595.105376][ T306] ? wb_io_lists_depopulated+0x180/0x180 [ 595.111018][ T306] ? set_worker_desc+0x155/0x1c0 [ 595.116036][ T306] ? __kasan_check_write+0x14/0x20 [ 595.121137][ T306] ? cpumask_next+0x25/0x30 [ 595.125632][ T306] wb_workfn+0x9ae/0xe20 [ 595.129866][ T306] ? inode_wait_for_writeback+0x200/0x200 [ 595.135572][ T306] ? __this_cpu_preempt_check+0x13/0x20 [ 595.141213][ T306] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 595.147891][ T306] ? __switch_to_asm+0x34/0x60 [ 595.152659][ T306] ? __schedule+0xb4f/0x1310 [ 595.157330][ T306] ? __kasan_check_read+0x11/0x20 [ 595.162367][ T306] ? read_word_at_a_time+0x12/0x20 [ 595.167474][ T306] ? strscpy+0x9b/0x290 [ 595.171622][ T306] process_one_work+0x6e1/0xba0 [ 595.176462][ T306] worker_thread+0xa6a/0x13b0 [ 595.181390][ T306] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 595.186836][ T306] kthread+0x346/0x3d0 [ 595.190893][ T306] ? worker_clr_flags+0x190/0x190 [ 595.195922][ T306] ? kthread_blkcg+0xd0/0xd0 [ 595.200497][ T306] ret_from_fork+0x1f/0x30 [ 595.204985][ T306] [ 595.207298][ T306] Allocated by task 6396: [ 595.211621][ T306] __kasan_kmalloc+0xda/0x110 [ 595.216291][ T306] kmem_cache_alloc_trace+0x184/0x2e0 [ 595.221653][ T306] f2fs_build_segment_manager+0x19ae/0x48f0 [ 595.227546][ T306] f2fs_fill_super+0x42d1/0x6c70 [ 595.232654][ T306] mount_bdev+0x28b/0x3a0 [ 595.236970][ T306] f2fs_mount+0x34/0x40 [ 595.241112][ T306] legacy_get_tree+0xed/0x190 [ 595.245776][ T306] vfs_get_tree+0x89/0x260 [ 595.250184][ T306] do_new_mount+0x25a/0xa20 [ 595.254684][ T306] path_mount+0x572/0xc80 [ 595.259010][ T306] __se_sys_mount+0x318/0x380 [ 595.263673][ T306] __x64_sys_mount+0xbf/0xd0 [ 595.268351][ T306] do_syscall_64+0x31/0x40 [ 595.272781][ T306] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 595.278660][ T306] [ 595.280979][ T306] Freed by task 276: [ 595.284875][ T306] kasan_set_track+0x4a/0x70 [ 595.289453][ T306] kasan_set_free_info+0x23/0x40 [ 595.294376][ T306] ____kasan_slab_free+0x125/0x160 [ 595.299475][ T306] __kasan_slab_free+0x11/0x20 [ 595.304229][ T306] slab_free_freelist_hook+0xc5/0x190 [ 595.309588][ T306] kfree+0xc0/0x270 [ 595.313383][ T306] f2fs_destroy_segment_manager+0xa11/0xd70 [ 595.319348][ T306] f2fs_put_super+0x6bd/0xc00 [ 595.324118][ T306] generic_shutdown_super+0x149/0x320 [ 595.329484][ T306] kill_block_super+0x7f/0xf0 [ 595.334212][ T306] kill_f2fs_super+0x2e7/0x390 [ 595.338964][ T306] deactivate_locked_super+0xa0/0x100 [ 595.344329][ T306] deactivate_super+0xaf/0xe0 [ 595.348999][ T306] cleanup_mnt+0x446/0x500 [ 595.353405][ T306] __cleanup_mnt+0x19/0x20 [ 595.357808][ T306] task_work_run+0x127/0x190 [ 595.362388][ T306] exit_to_user_mode_loop+0xcb/0xe0 [ 595.367572][ T306] syscall_exit_to_user_mode+0x68/0x90 [ 595.373017][ T306] do_syscall_64+0x3d/0x40 [ 595.377421][ T306] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 595.383293][ T306] [ 595.385621][ T306] Last potentially related work creation: [ 595.391331][ T306] kasan_save_stack+0x3a/0x60 [ 595.395997][ T306] __kasan_record_aux_stack+0xd2/0x100 [ 595.401441][ T306] kasan_record_aux_stack_noalloc+0xb/0x10 [ 595.407323][ T306] insert_work+0x52/0x310 [ 595.411638][ T306] __queue_work+0x923/0xca0 [ 595.416136][ T306] queue_work_on+0xd5/0x130 [ 595.420625][ T306] destroy_super_rcu+0xd1/0xe0 [ 595.425372][ T306] rcu_do_batch+0x4df/0xa80 [ 595.429860][ T306] rcu_core+0x55f/0xd60 [ 595.434003][ T306] rcu_core_si+0x9/0x10 [ 595.438182][ T306] __do_softirq+0x255/0x563 [ 595.442663][ T306] [ 595.444982][ T306] Second to last potentially related work creation: [ 595.451556][ T306] kasan_save_stack+0x3a/0x60 [ 595.456221][ T306] __kasan_record_aux_stack+0xd2/0x100 [ 595.461663][ T306] kasan_record_aux_stack_noalloc+0xb/0x10 [ 595.467479][ T306] call_rcu+0x10e/0x1050 [ 595.471707][ T306] __put_super+0x254/0x2b0 [ 595.476110][ T306] deactivate_locked_super+0xd4/0x100 [ 595.481552][ T306] deactivate_super+0xaf/0xe0 [ 595.486231][ T306] cleanup_mnt+0x446/0x500 [ 595.490632][ T306] __cleanup_mnt+0x19/0x20 [ 595.495034][ T306] task_work_run+0x127/0x190 [ 595.499709][ T306] exit_to_user_mode_loop+0xcb/0xe0 [ 595.504982][ T306] syscall_exit_to_user_mode+0x68/0x90 [ 595.510530][ T306] do_syscall_64+0x3d/0x40 [ 595.514933][ T306] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 595.520892][ T306] [ 595.523213][ T306] The buggy address belongs to the object at ffff8881161f6000 [ 595.523213][ T306] which belongs to the cache kmalloc-2k of size 2048 [ 595.537264][ T306] The buggy address is located 112 bytes inside of [ 595.537264][ T306] 2048-byte region [ffff8881161f6000, ffff8881161f6800) [ 595.550694][ T306] The buggy address belongs to the page: [ 595.556323][ T306] page:ffffea0004587c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1161f0 [ 595.566562][ T306] head:ffffea0004587c00 order:3 compound_mapcount:0 compound_pincount:0 [ 595.574873][ T306] flags: 0x4000000000010200(slab|head) [ 595.580512][ T306] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042d80 [ 595.589093][ T306] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 595.597663][ T306] page dumped because: kasan: bad access detected [ 595.604096][ T306] page_owner tracks the page as allocated [ 595.609985][ T306] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 608, ts 60289735792, free_ts 60177711977 [ 595.630371][ T306] prep_new_page+0x179/0x180 [ 595.635055][ T306] get_page_from_freelist+0x2235/0x23d0 [ 595.640624][ T306] __alloc_pages_nodemask+0x268/0x5f0 [ 595.645999][ T306] new_slab+0x84/0x3f0 [ 595.650185][ T306] ___slab_alloc+0x2a6/0x450 [ 595.654760][ T306] __slab_alloc+0x63/0xa0 [ 595.659185][ T306] __kmalloc_track_caller+0x1ef/0x320 [ 595.664544][ T306] __alloc_skb+0xdc/0x520 [ 595.669390][ T306] audit_log_start+0x3df/0x860 [ 595.674197][ T306] audit_seccomp+0x62/0x160 [ 595.678692][ T306] __seccomp_filter+0xb4c/0x1990 [ 595.683620][ T306] __secure_computing+0xea/0x290 [ 595.688543][ T306] syscall_trace_enter+0xb5/0x170 [ 595.693555][ T306] syscall_enter_from_user_mode+0x20/0x30 [ 595.699263][ T306] do_syscall_64+0x13/0x40 [ 595.703677][ T306] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 595.709557][ T306] page last free stack trace: [ 595.714316][ T306] free_unref_page_prepare+0x2b7/0x2d0 [ 595.719762][ T306] free_unref_page_list+0x12e/0x9b0 [ 595.724945][ T306] release_pages+0xe38/0xe80 [ 595.729524][ T306] __pagevec_release+0x71/0xe0 [ 595.734298][ T306] truncate_inode_pages_range+0x771/0x15b0 [ 595.740095][ T306] truncate_inode_pages+0x24/0x30 [ 595.745282][ T306] __blkdev_put+0x317/0x750 [ 595.749770][ T306] blkdev_put+0x2d6/0x3c0 [ 595.754107][ T306] kill_block_super+0xb8/0xf0 [ 595.758772][ T306] kill_f2fs_super+0x2e7/0x390 [ 595.763520][ T306] deactivate_locked_super+0xa0/0x100 [ 595.768890][ T306] deactivate_super+0xaf/0xe0 [ 595.773726][ T306] cleanup_mnt+0x446/0x500 [ 595.778130][ T306] __cleanup_mnt+0x19/0x20 [ 595.782530][ T306] task_work_run+0x127/0x190 [ 595.787106][ T306] exit_to_user_mode_loop+0xcb/0xe0 [ 595.792283][ T306] [ 595.794638][ T306] Memory state around the buggy address: [ 595.800261][ T306] ffff8881161f5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 595.808309][ T306] ffff8881161f5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 595.816374][ T306] >ffff8881161f6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 595.824437][ T306] ^ [ 595.832407][ T306] ffff8881161f6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 595.840458][ T306] ffff8881161f6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 595.848516][ T306] ================================================================== [ 595.856651][ T306] Disabling lock debugging due to kernel taint [ 595.911394][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 595.911406][ T24] audit: type=1400 audit(595.886:1759): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 595.941194][ T24] audit: type=1400 audit(595.916:1760): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.962845][ T24] audit: type=1400 audit(595.916:1761): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.983908][ T24] audit: type=1400 audit(595.916:1762): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.004298][ T24] audit: type=1400 audit(595.916:1763): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 596.024854][ T24] audit: type=1400 audit(595.916:1764): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 596.049769][ T24] audit: type=1400 audit(595.916:1765): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 596.250430][ T6799] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 596.539070][ T1533] Bluetooth: hci0: command 0x1001 tx timeout [ 596.545173][ T1405] Bluetooth: hci0: sending frame failed (-49) [ 598.619098][ T3588] Bluetooth: hci0: command 0x1009 tx timeout