last executing test programs: 3m52.177756783s ago: executing program 4 (id=60): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000020000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3m50.240474163s ago: executing program 4 (id=63): fstat(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000010850000006d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 3m49.850474335s ago: executing program 4 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mount$bind(0x0, &(0x7f0000000280)='./file3\x00', &(0x7f0000000300), 0x20040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket(0x29, 0xa, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffd}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80047453, &(0x7f0000005280)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 3m47.767418496s ago: executing program 4 (id=73): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noinline_xattr,active_logs=4,active_logs=4,jqfmt=vfsv1,noinline_data,user_xattr,checkpoint=disable\x00fastboot,fsync_mode=strict,discarG_unit=section,\x00'], 0x21, 0x552d, &(0x7f000000abc0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, 0x0) 3m45.041078991s ago: executing program 4 (id=84): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x21081a, &(0x7f0000000300), 0x1, 0x507, &(0x7f0000000c00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x851800, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x1f, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) 3m42.967944463s ago: executing program 4 (id=92): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x9d}) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 3m27.678190016s ago: executing program 32 (id=92): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x9d}) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 6.054656017s ago: executing program 1 (id=1164): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) read$FUSE(0xffffffffffffffff, &(0x7f000000ac40)={0x2020}, 0x2020) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="500000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="0000ec8f412b0000280012800b0001006d616373656300001800028005000d0005", @ANYRES8, @ANYRESHEX=0x0], 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 5.342621111s ago: executing program 2 (id=1173): open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) 4.861767474s ago: executing program 1 (id=1175): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.875928589s ago: executing program 1 (id=1179): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r0, 0x0, 0x0) 3.851977739s ago: executing program 1 (id=1180): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x594, &(0x7f0000000640)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 3.72811444s ago: executing program 2 (id=1181): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x1800, r2, 0xa}) 3.485062981s ago: executing program 2 (id=1182): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000000080)='./file0\x00', 0x0) 3.397187592s ago: executing program 2 (id=1183): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@umask={'umask', 0x3d, 0x9}}, {@dmask={'dmask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@namecase}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") lstat(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 3.298110632s ago: executing program 1 (id=1184): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000540)={0x20, 0x3, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.297727332s ago: executing program 3 (id=1185): getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800faffffff00000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000951105d099ad8c8b5fdb62766cce3b2ffbec82d8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000400000000000800050008000020"], 0x24}}, 0x0) socket(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0xb0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0xfffffffffffffffe, 0x29) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 3.050233803s ago: executing program 2 (id=1188): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_create(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 2.914420904s ago: executing program 5 (id=1191): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2], 0x40}}, 0x0) 2.826158025s ago: executing program 5 (id=1193): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000000080)='./file0\x00', 0x0) 2.724695225s ago: executing program 5 (id=1194): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.535028466s ago: executing program 5 (id=1197): r0 = socket(0x28, 0x5, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8040) 2.513350696s ago: executing program 2 (id=1198): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) read$FUSE(0xffffffffffffffff, &(0x7f000000ac40)={0x2020}, 0x2020) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="500000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="0000ec8f412b0000280012800b0001006d616373656300001800028005000d0005", @ANYRES8, @ANYRESHEX=0x0], 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 2.446527847s ago: executing program 5 (id=1200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x9, 0x42, 0x40, 0xc0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000940)="bf8b280fd6804b513e45160b3d559ddf297dc5bf37d9c457b4073d14e7fef401b0df0b9f42d6004ea4e478b90d77dc42adab36d85f5823c98c48f2de232cec1b56176a7db715c7bcf2ead2701faccbd015aa74a66520880d3067a63b7a12f6b25547d24efde961568b64c1aad6450f2ae3adb5292775870831ce02adfe643116c20916c60ebbb96b833b8719de975d1d8889c991ac07b72ec703ec4e72cde7990c94a17675a57353a99e0001000000785cac9833d87209a6be8b98039dee8bd9d80e6eec6b56b15d", 0x0, 0x3, r0}, 0x38) 2.425110527s ago: executing program 3 (id=1201): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x4004700e, 0x0) 2.384671427s ago: executing program 0 (id=1202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000) 2.230685348s ago: executing program 3 (id=1203): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/181, 0xb5}], 0x1, 0xfffffffd, 0x0) lseek(r0, 0x7752, 0x0) epoll_wait(r0, 0x0, 0x0, 0xfffffff8) 2.230155538s ago: executing program 5 (id=1204): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540100001900010000000000000000001d010000080005002080000015000100040000e0080100002ae698ef0364b5b2020000001e01"], 0x154}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000001400)={0x83, 0xfffffffd, 0xffffffff}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="240000004a00010000000000000000000a00"], 0x24}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@sysvgroups}, {@debug}, {@auto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x2d}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@max_dir_size_kb}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}]}, 0x6, 0x64a, &(0x7f00000013c0)="$eJzs3c9rJFkdAPBvVSfZJBM3syLiBsWAh12QzSTj4qoXZ9eDc1hwwT2IeNiwScYwPT9IMuCMAybgQUFBxOsgc/Ef8C5z9yaCevPiRRhFZnBAh+mlfnSm0+lf+dWdpD4f6HTVq9f93rerX+q96n5dAVTWfPYnjXg94sVHScRsy7aZKDbOl/me/Of+x9ktiUbju/9OIinTmvmT8v5CuTIZEX96L+LTtf3lbt69d3253ij8JOLS1o3blzbv3ntr/cbytdVrqzeXLn/t7XcWv7709lJLRQ/vQnl/9f3vfP6XP/3hV9f+XH8riSvx4fiPV6ItjuMyH/PxogyxNX0sIt7JFjq8LmfNOQih0mrl+3E8Ij4bs1HL1wqzsf6LkVYOOFGNWkSjt6RfBuCs0ryhqpr9gObYfrBx8Icn3CsZnsfvFgOg/fGPlaccJvOx0fSTpGVkVJzbuHgM5WdlPL8/+eD5/bkHsec8xLPdvTN2DOV0s70TEZ/rFH+S1+1iHmkWf7pnrJ9ExGJETJT1+9YR6tA8b/SP4m7iCE91YAeJv3U/pBFxpbzP0t87ZPntp7VO4jwUALR79G55IN/O1l4e/7K+R7P/Ex36PzNH/0gmN+rjX/f+X/N4P5n3e9K2fljWZ/mg81OOtyf8/edXf92t/KL/N/egecvKb/YFh+HxTsRcW/w/y4It+z9Z/EmH/Z9l+ejKYGV8+y//utpt26jjbzyMeKPj+CfZzZMt9fh88tLaen11sfjbsYw//PEHv+tWfuf4X+ld6aeHjXa/bP9Pd4m/Zf+n7Y/LXpPbnZ9ypz3h9x88vNGt/Jm++z/950RSjDebA4Mf7WxtbSxFTCTvl1nK9OWtrY3LveMt8jxr5PdLRfxvfqlz+9/z/m+Laqr5L3MAt793/Um3bYd5/7d8mPyiMWAdusniX+m///e1/yztVwOW8d/v3/lCt2294p86SmAAAAAAAABQQWn+GWySLuwup+nCQjFf9jMxndZvbW59ee3WnZsrEW/m34ccTyNN8q+MzBbrydp6fXWp/D5sc/1y2/pXIuK1iPhNbSpfX/j4Vn1l1MEDAAAAAAAAAAAAAAAAAADAKXGhnP/fvE7101ox/x+oiP4XmNt3/QfgnDjJC0wCp1ve/nsd4l8dXl2A4XL8h+rS/qG6tH+oLu0fqkv7h+rS/qG6tH+oLu0fAAAAAM6l17746G9JRGx/Yyq/ZSbKbSb9wvk2fqDctROrBzB8WjRU1+5H/zr7UDkD9f//V/444MlXBxiBpFNi3jlo9G78jzo+8qWdo9cNAAAAAAAAAAAAACi88Xr3+f8HmxsMnDWm/UF1HWH+v58OgDPOT/9DdRnjA31m8cdktw395v8DAAAAAAAAAAAAAMdmJr8l6UI5F3gm0nRhIeJTEXExxpO19frqYkS8GhF/rY2/kq0vjbrSAAAAAAAAAAAAAAAAAAAAcM5s3r13fbleX91oXfj/vpTzvdC8Cmr/zI0B8vRc+GYc8FGRDP9lmYqIke+UE1sYa0lJIrazPX8qKraxGaejGvnCiP8xAQAAAAAAAAAAAAAAAABABbXMPe5s7rdDrhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADN/L6//3WViZLh4wUOa9C6OOEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4mz4JAAD//8NXO1I=") 1.304800223s ago: executing program 3 (id=1205): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r5, &(0x7f00000004c0), 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe2}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000)=0x4, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) bind$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) 1.165182144s ago: executing program 0 (id=1206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) 970.756104ms ago: executing program 0 (id=1207): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 845.107815ms ago: executing program 0 (id=1208): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_create(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 335.202378ms ago: executing program 3 (id=1209): ioperm(0x0, 0x8, 0x4) bpf$LINK_DETACH(0x22, 0x0, 0x0) 214.833429ms ago: executing program 3 (id=1210): getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000580)) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe2(&(0x7f0000001cc0), 0x800) 210.366729ms ago: executing program 0 (id=1211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000002c0)=0xeeee0000) 153.520509ms ago: executing program 1 (id=1212): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@grpid}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001d00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000940)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) renameat2(r0, &(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) 0s ago: executing program 0 (id=1213): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r2, &(0x7f0000000300)=""/150, 0x96, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x33, 0x38, 0x8, 0x18, 0x7, 0xfffffff8, 0x2, 0x76}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x1ff, 0x6580) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000240)={{r5}, r6, 0x14, @inherit={0x80, &(0x7f00000001c0)={0x1, 0x7, 0x7ff, 0xfffffffffffffffd, {0x2d, 0x6b58b0ec, 0x5e, 0x9, 0x100000000}, [0x8000, 0x7, 0x10000, 0xffffffff, 0x3, 0x9, 0x3]}}, @subvolid=0xffffffffffffff30}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000140)={"74221a88fee7bad6c948c4a3899ac3cb", r6, 0x0, {0x1}, {0x800, 0x40}, 0x6d8, [0x0, 0x9, 0x7fff, 0x0, 0xfffffffffffffc00, 0x0, 0x1000, 0x6, 0x6, 0x5, 0x7, 0xf6, 0x1, 0x8800000000000000, 0x9, 0x2]}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000001200)={{r1}, r6, 0x2, @unused=[0x0, 0x7fffffffffffffff, 0x5, 0x2], @subvolid=0x163383fc}) kernel console output (not intermixed with test programs): oop5): Directory bread(block 68) failed [ 141.096045][ T1759] FAT-fs (loop5): Directory bread(block 69) failed [ 141.102970][ T1759] FAT-fs (loop5): Directory bread(block 70) failed [ 141.109777][ T1759] FAT-fs (loop5): Directory bread(block 71) failed [ 141.116406][ T1759] FAT-fs (loop5): Directory bread(block 72) failed [ 141.123329][ T1759] FAT-fs (loop5): Directory bread(block 73) failed [ 141.258478][ T1777] overlayfs: failed to resolve './file0': -2 [ 141.785404][ T1786] EXT4-fs error (device loop0): ext4_orphan_get:1395: inode #15: comm syz.0.441: casefold flag without casefold feature [ 141.984444][ T1786] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.441: missing EA_INODE flag [ 142.402700][ T1786] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.441: error while reading EA inode 12 err=-117 [ 142.442697][ T1786] EXT4-fs (loop0): 1 orphan inode deleted [ 142.524177][ T1786] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 142.927979][ T24] audit: type=1400 audit(1732568939.650:341): avc: denied { mounton } for pid=1783 comm="syz.0.441" path="/98/file0/file0" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 142.964317][ T1800] EXT4-fs error (device loop3) in ext4_do_update_inode:5303: error 27 [ 142.996407][ T1800] EXT4-fs error (device loop3): ext4_dirty_inode:6107: inode #3: comm syz.3.444: mark_inode_dirty error [ 143.022298][ T24] audit: type=1400 audit(1732568939.650:342): avc: denied { mount } for pid=1783 comm="syz.0.441" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 143.251632][ T1800] EXT4-fs error (device loop3) in ext4_do_update_inode:5303: error 27 [ 143.300673][ T1800] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #3: comm syz.3.444: mark_inode_dirty error [ 143.504168][ T1800] Quota error (device loop3): write_blk: dquota write failed [ 143.521503][ T1800] Quota error (device loop3): qtree_write_dquot: Error -27 occurred while creating quota [ 143.531715][ T24] audit: type=1400 audit(1732568939.961:343): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 144.043260][ T1800] EXT4-fs error (device loop3): ext4_acquire_dquot:6219: comm syz.3.444: Failed to acquire dquot type 0 [ 144.056920][ T1800] EXT4-fs (loop3): 1 orphan inode deleted [ 144.062596][ T24] audit: type=1400 audit(1732568939.991:344): avc: denied { remove_name } for pid=287 comm="syz-executor" name="file0" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.100018][ T1800] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 144.116503][ T1800] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.127483][ T24] audit: type=1400 audit(1732568939.991:345): avc: denied { rmdir } for pid=287 comm="syz-executor" name="file0" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 144.617890][ T1818] FAT-fs (loop2): Directory bread(block 64) failed [ 144.624451][ T1818] FAT-fs (loop2): Directory bread(block 65) failed [ 144.631388][ T1818] FAT-fs (loop2): Directory bread(block 66) failed [ 144.638110][ T1818] FAT-fs (loop2): Directory bread(block 67) failed [ 144.654659][ T1824] overlayfs: failed to resolve './file0': -2 [ 144.662020][ T1818] FAT-fs (loop2): Directory bread(block 68) failed [ 144.668905][ T1818] FAT-fs (loop2): Directory bread(block 69) failed [ 144.675516][ T1818] FAT-fs (loop2): Directory bread(block 70) failed [ 144.682363][ T1818] FAT-fs (loop2): Directory bread(block 71) failed [ 144.689527][ T1818] FAT-fs (loop2): Directory bread(block 72) failed [ 144.696265][ T1818] FAT-fs (loop2): Directory bread(block 73) failed [ 145.692198][ T1835] Module has invalid ELF structures [ 146.296271][ T1833] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 146.314673][ T1833] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 146.388429][ T1833] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000efe,data=ordered,jqfmt=vfsold,barrier=0x0000000000000648,usrjquota=./file0,,errors=continue [ 146.419246][ T1839] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 146.463709][ T1839] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.517001][ T1852] FAT-fs (loop1): Directory bread(block 64) failed [ 146.523822][ T1852] FAT-fs (loop1): Directory bread(block 65) failed [ 146.537884][ T1852] FAT-fs (loop1): Directory bread(block 66) failed [ 146.584261][ T1852] FAT-fs (loop1): Directory bread(block 67) failed [ 146.590733][ T1852] FAT-fs (loop1): Directory bread(block 68) failed [ 146.606642][ T1852] FAT-fs (loop1): Directory bread(block 69) failed [ 146.613832][ T1852] FAT-fs (loop1): Directory bread(block 70) failed [ 146.622645][ T1852] FAT-fs (loop1): Directory bread(block 71) failed [ 146.651450][ T1852] FAT-fs (loop1): Directory bread(block 72) failed [ 146.682590][ T1852] FAT-fs (loop1): Directory bread(block 73) failed [ 146.785443][ T24] audit: type=1400 audit(1732568943.520:346): avc: denied { create } for pid=1860 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 146.888693][ T1863] overlayfs: failed to resolve './file0': -2 [ 147.094366][ T1871] Module has invalid ELF structures [ 147.679313][ T1879] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 148.017622][ T1879] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.398272][ T1888] FAT-fs (loop5): Directory bread(block 64) failed [ 148.410743][ T1888] FAT-fs (loop5): Directory bread(block 65) failed [ 148.417195][ T1888] FAT-fs (loop5): Directory bread(block 66) failed [ 148.434525][ T1888] FAT-fs (loop5): Directory bread(block 67) failed [ 148.527479][ T1888] FAT-fs (loop5): Directory bread(block 68) failed [ 148.611813][ T1888] FAT-fs (loop5): Directory bread(block 69) failed [ 148.708014][ T1888] FAT-fs (loop5): Directory bread(block 70) failed [ 148.835718][ T1888] FAT-fs (loop5): Directory bread(block 71) failed [ 148.919074][ T1888] FAT-fs (loop5): Directory bread(block 72) failed [ 149.255947][ T1888] FAT-fs (loop5): Directory bread(block 73) failed [ 149.519677][ T1867] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 149.535947][ T1867] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 149.551782][ T1867] F2FS-fs (loop2): invalid crc value [ 149.557307][ T1867] F2FS-fs (loop2): invalid crc value [ 149.562674][ T1867] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 149.703757][ T1861] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 149.720686][ T1861] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 149.839242][ T1906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 150.019233][ T24] audit: type=1400 audit(1732568946.716:347): avc: denied { read } for pid=1865 comm="syz.2.466" name="loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 152.045062][ T1861] F2FS-fs (loop3): invalid crc value [ 152.057283][ T1861] F2FS-fs (loop3): invalid crc value [ 152.377218][ T1906] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e802e118, mo2=0000] [ 152.385830][ T1906] System zones: 0-1, 3-12 [ 152.407768][ T1906] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.478: Invalid block bitmap block 0 in block_group 0 [ 152.428845][ T1906] Quota error (device loop1): write_blk: dquota write failed [ 152.436710][ T1906] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 152.446970][ T1906] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.478: Failed to acquire dquot type 0 [ 152.463004][ T1906] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.478: Freeing blocks not in datazone - block = 0, count = 4096 [ 152.479551][ T1906] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.478: Invalid inode bitmap blk 0 in block_group 0 [ 152.493136][ T1906] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 152.502588][ T310] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 152.512318][ T1906] EXT4-fs (loop1): 1 orphan inode deleted [ 152.518142][ T1906] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; sysvgroups,debug,auto_da_alloc,barrier=0x000000000000002d,journal_dev=0x0000000000000004,norecovery,max_dir_size_kb=0x0000000000000000,max_dir_size_kb=0x0000000000000009,,errors=continue [ 152.664689][ T310] EXT4-fs error (device loop1): ext4_release_dquot:6242: comm kworker/u4:3: Failed to release dquot type 0 [ 152.913683][ T1861] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 152.940341][ T24] audit: type=1400 audit(1732568946.726:348): avc: denied { open } for pid=1865 comm="syz.2.466" path="/dev/loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 153.018338][ T1915] Module has invalid ELF structures [ 153.054553][ T24] audit: type=1400 audit(1732568946.746:349): avc: denied { ioctl } for pid=1865 comm="syz.2.466" path="/dev/loop-control" dev="devtmpfs" ino=110 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 154.405565][ T1930] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 154.458428][ T1930] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 154.511504][ T1930] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.599286][ T1935] EXT4-fs (loop2): Test dummy encryption mode enabled [ 154.632040][ T1935] EXT4-fs (loop2): Ignoring removed orlov option [ 154.684152][ T1935] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 154.793173][ T24] audit: type=1400 audit(1732568951.543:350): avc: denied { create } for pid=1940 comm="syz.1.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.892571][ T24] audit: type=1400 audit(1732568951.583:351): avc: denied { connect } for pid=1940 comm="syz.1.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.971415][ T24] audit: type=1400 audit(1732568951.583:352): avc: denied { write } for pid=1940 comm="syz.1.488" path="socket:[19374]" dev="sockfs" ino=19374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.089124][ T1957] Module has invalid ELF structures [ 156.256869][ T1917] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 156.280879][ T1917] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 156.306542][ T24] audit: type=1400 audit(1732568953.054:353): avc: denied { relabelfrom } for pid=1963 comm="syz.0.496" name="" dev="pipefs" ino=19434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 156.332055][ T1966] SELinux: Context system_u:object_r:bin_t:s0 is not valid (left unmapped). [ 156.362610][ T1917] F2FS-fs (loop5): invalid crc value [ 156.391900][ T1917] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4) [ 156.410164][ T24] audit: type=1400 audit(1732568953.084:354): avc: denied { mac_admin } for pid=1963 comm="syz.0.496" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 156.443290][ T24] audit: type=1400 audit(1732568953.124:355): avc: denied { relabelto } for pid=1963 comm="syz.0.496" name="" dev="pipefs" ino=19434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:bin_t:s0" [ 156.558834][ T15] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 156.639452][ T1973] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.651680][ T1973] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 156.828574][ T15] usb 2-1: Using ep0 maxpacket: 16 [ 156.858626][ T310] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 156.933955][ T1982] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 157.090366][ T1982] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 157.371156][ T1982] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000efe,data=ordered,jqfmt=vfsold,barrier=0x0000000000000648,usrjquota=./file0,,errors=continue [ 157.666265][ T15] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 157.759372][ T1995] Module has invalid ELF structures [ 157.799182][ T15] usb 2-1: config 0 has no interface number 0 [ 157.805184][ T15] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 14385, setting to 1024 [ 157.816266][ T15] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 157.947519][ T15] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 157.975567][ T1997] EXT4-fs (loop2): Test dummy encryption mode enabled [ 157.982596][ T1997] EXT4-fs (loop2): Ignoring removed orlov option [ 157.988933][ T15] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 158.016139][ T15] usb 2-1: Product: syz [ 158.020741][ T15] usb 2-1: SerialNumber: syz [ 158.031916][ T15] usb 2-1: config 0 descriptor?? [ 158.038486][ T1997] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 158.064800][ T24] audit: type=1400 audit(1732568954.786:356): avc: denied { create } for pid=2004 comm="syz.0.510" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.064852][ T24] audit: type=1400 audit(1732568954.786:357): avc: denied { link } for pid=2004 comm="syz.0.510" name="file1" dev="overlay" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.064899][ T24] audit: type=1400 audit(1732568954.786:358): avc: denied { setattr } for pid=2004 comm="syz.0.510" name="#1d" dev="tmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.064945][ T24] audit: type=1400 audit(1732568954.786:359): avc: denied { rename } for pid=2004 comm="syz.0.510" name="#1d" dev="tmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.064992][ T24] audit: type=1400 audit(1732568954.786:360): avc: denied { write } for pid=2004 comm="syz.0.510" name="bus" dev="tmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.065039][ T24] audit: type=1400 audit(1732568954.786:361): avc: denied { open } for pid=2004 comm="syz.0.510" path="/113/bus/bus" dev="overlay" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.069620][ T1967] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 158.968401][ T15] usb 2-1: invalid MIDI in EP 0 [ 158.974012][ T15] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 158.977610][ T2017] erofs: (device loop5): mounted with root inode @ nid 36. [ 158.985885][ T15] usb 2-1: USB disconnect, device number 4 [ 159.228194][ T2025] Module has invalid ELF structures [ 159.300905][ T2030] netlink: 48 bytes leftover after parsing attributes in process `syz.5.518'. [ 159.618682][ T2035] xt_limit: Overflow, try lower: 0/0 [ 159.702183][ T427] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 159.975686][ T427] usb 2-1: Using ep0 maxpacket: 16 [ 160.096517][ T427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.281328][ T427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.301614][ T427] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.321784][ T2016] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 160.340758][ T427] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 160.350219][ T2016] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 160.358918][ T427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.369305][ T2016] F2FS-fs (loop3): invalid crc value [ 160.382322][ T427] usb 2-1: config 0 descriptor?? [ 160.389507][ T2016] F2FS-fs (loop3): Found nat_bits in checkpoint [ 160.550952][ T2016] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 160.569028][ T2045] FAT-fs (loop2): Directory bread(block 64) failed [ 160.575393][ T2016] F2FS-fs (loop3): Start checkpoint disabled! [ 160.581557][ T2045] FAT-fs (loop2): Directory bread(block 65) failed [ 160.581989][ T2016] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 160.588869][ T2045] FAT-fs (loop2): Directory bread(block 66) failed [ 160.601736][ T2045] FAT-fs (loop2): Directory bread(block 67) failed [ 160.608555][ T2045] FAT-fs (loop2): Directory bread(block 68) failed [ 160.614937][ T2016] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 160.635521][ T2045] FAT-fs (loop2): Directory bread(block 69) failed [ 160.641974][ T2045] FAT-fs (loop2): Directory bread(block 70) failed [ 160.648562][ T2045] FAT-fs (loop2): Directory bread(block 71) failed [ 160.655451][ T2045] FAT-fs (loop2): Directory bread(block 72) failed [ 160.661995][ T2045] FAT-fs (loop2): Directory bread(block 73) failed [ 160.804716][ T310] attempt to access beyond end of device [ 160.804716][ T310] loop3: rw=2049, want=40984, limit=40427 [ 161.011427][ T2054] input: syz0 as /devices/virtual/input/input27 [ 161.144442][ T427] usbhid 2-1:0.0: can't add hid device: -71 [ 161.150543][ T427] usbhid: probe of 2-1:0.0 failed with error -71 [ 161.326634][ T427] usb 2-1: USB disconnect, device number 5 [ 161.589599][ T2068] EXT4-fs (loop3): Test dummy encryption mode enabled [ 161.596614][ T2068] EXT4-fs (loop3): Ignoring removed orlov option [ 161.610947][ T2068] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 161.684932][ T2073] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 161.726672][ T2073] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 161.753946][ T2073] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.882806][ T2075] FAT-fs (loop0): Directory bread(block 64) failed [ 161.924057][ T24] audit: type=1400 audit(1732568958.650:362): avc: denied { rename } for pid=2072 comm="syz.2.533" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.946095][ T2075] FAT-fs (loop0): Directory bread(block 65) failed [ 161.953895][ T2075] FAT-fs (loop0): Directory bread(block 66) failed [ 161.960289][ T2075] FAT-fs (loop0): Directory bread(block 67) failed [ 161.979570][ T2075] FAT-fs (loop0): Directory bread(block 68) failed [ 161.996454][ T2075] FAT-fs (loop0): Directory bread(block 69) failed [ 162.006801][ T2075] FAT-fs (loop0): Directory bread(block 70) failed [ 162.013303][ T2075] FAT-fs (loop0): Directory bread(block 71) failed [ 162.097950][ T2075] FAT-fs (loop0): Directory bread(block 72) failed [ 162.112129][ T2075] FAT-fs (loop0): Directory bread(block 73) failed [ 162.833222][ T24] audit: type=1400 audit(1732568959.570:363): avc: denied { write } for pid=2100 comm="syz.3.544" name="binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 162.876213][ T2106] binder: 2100:2106 unknown command 553635840 [ 162.882211][ T2106] binder: 2100:2106 ioctl c0306201 20000300 returned -22 [ 162.913025][ T24] audit: type=1400 audit(1732568959.570:364): avc: denied { open } for pid=2100 comm="syz.3.544" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.062915][ T24] audit: type=1400 audit(1732568959.570:365): avc: denied { ioctl } for pid=2100 comm="syz.3.544" path="/dev/binderfs/binder0" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.123288][ T24] audit: type=1400 audit(1732568959.570:366): avc: denied { set_context_mgr } for pid=2100 comm="syz.3.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 163.247287][ T24] audit: type=1400 audit(1732568959.570:367): avc: denied { read append } for pid=2100 comm="syz.3.544" name="binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.291530][ T2117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 163.310443][ T24] audit: type=1400 audit(1732568959.580:368): avc: denied { map } for pid=2100 comm="syz.3.544" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.334489][ T24] audit: type=1400 audit(1732568959.630:369): avc: denied { call } for pid=2100 comm="syz.3.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 163.483145][ T2117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e802e118, mo2=0000] [ 163.492010][ T2117] System zones: 0-1, 3-12 [ 163.515921][ T2117] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.547: Invalid block bitmap block 0 in block_group 0 [ 163.531729][ T2117] Quota error (device loop0): write_blk: dquota write failed [ 163.539385][ T2117] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 163.549734][ T2117] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.547: Failed to acquire dquot type 0 [ 163.562895][ T2117] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.547: Freeing blocks not in datazone - block = 0, count = 4096 [ 163.578804][ T2117] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.547: Invalid inode bitmap blk 0 in block_group 0 [ 163.592977][ T2117] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 163.602900][ T2117] EXT4-fs (loop0): 1 orphan inode deleted [ 163.608761][ T2117] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; sysvgroups,debug,auto_da_alloc,barrier=0x000000000000002d,journal_dev=0x0000000000000004,norecovery,max_dir_size_kb=0x0000000000000000,max_dir_size_kb=0x0000000000000009,,errors=continue [ 163.677626][ T431] EXT4-fs error (device loop0): ext4_release_dquot:6242: comm kworker/u4:4: Failed to release dquot type 0 [ 164.282049][ T2080] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 164.288896][ T2080] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 164.366639][ T2080] F2FS-fs (loop5): invalid crc value [ 164.433807][ T2080] F2FS-fs (loop5): Found nat_bits in checkpoint [ 164.765790][ T2080] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 164.784242][ T2080] F2FS-fs (loop5): Start checkpoint disabled! [ 165.043103][ T2150] cgroup: syz.3.556 (2150) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 165.059314][ T2150] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 166.057620][ T2161] overlayfs: missing 'lowerdir' [ 166.140208][ T2160] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.561: inode #1: comm syz.0.561: iget: illegal inode # [ 166.153605][ T2160] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.561: error while reading EA inode 1 err=-117 [ 166.176116][ T2160] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.561: inode #1: comm syz.0.561: iget: illegal inode # [ 166.191637][ T2160] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.561: error while reading EA inode 1 err=-117 [ 166.242924][ T2160] EXT4-fs (loop0): 1 orphan inode deleted [ 166.248544][ T2160] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nogrpid,debug_want_extra_isize=0x0000000000000058,noauto_da_alloc,noauto_da_alloc,grpquota,usrjquota=,,errors=continue [ 166.406966][ T2182] xt_bpf: check failed: parse error [ 166.623222][ T2190] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 166.668078][ T2190] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 166.709280][ T2195] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 166.738745][ T2195] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.740873][ T2190] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.029003][ T2179] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 167.060447][ T2179] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 167.071606][ T2179] F2FS-fs (loop5): invalid crc value [ 167.122398][ T2179] F2FS-fs (loop5): Found nat_bits in checkpoint [ 167.303182][ T2217] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.584: inode #1: comm syz.0.584: iget: illegal inode # [ 167.318181][ T2179] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 167.328315][ T2179] F2FS-fs (loop5): Start checkpoint disabled! [ 167.342806][ T2179] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 167.343143][ T2217] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.584: error while reading EA inode 1 err=-117 [ 167.351640][ T2179] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 167.370621][ T2217] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.584: inode #1: comm syz.0.584: iget: illegal inode # [ 167.450421][ T2217] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.584: error while reading EA inode 1 err=-117 [ 167.464669][ T24] kauditd_printk_skb: 33 callbacks suppressed [ 167.464707][ T24] audit: type=1400 audit(1732568964.223:402): avc: denied { ioctl } for pid=2178 comm="syz.5.570" path="/74/file4/bus" dev="loop5" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 167.520762][ T2217] EXT4-fs (loop0): 1 orphan inode deleted [ 167.526377][ T2217] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nogrpid,debug_want_extra_isize=0x0000000000000058,noauto_da_alloc,noauto_da_alloc,grpquota,usrjquota=,,errors=continue [ 167.686185][ T310] attempt to access beyond end of device [ 167.686185][ T310] loop5: rw=2049, want=40984, limit=40427 [ 167.869367][ T2228] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 167.912425][ T24] audit: type=1400 audit(1732568964.674:403): avc: denied { create } for pid=2231 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.913373][ T2228] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.959915][ T24] audit: type=1400 audit(1732568964.674:404): avc: denied { write } for pid=2231 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.025685][ T2232] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 168.035955][ T2232] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 168.049844][ T24] audit: type=1400 audit(1732568964.674:405): avc: denied { read } for pid=2231 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.070474][ T24] audit: type=1400 audit(1732568964.714:406): avc: denied { map } for pid=2231 comm="syz.0.589" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 168.101872][ T2232] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000efe,data=ordered,jqfmt=vfsold,barrier=0x0000000000000648,usrjquota=./file0,,errors=continue [ 168.256147][ T24] audit: type=1400 audit(1732568965.014:407): avc: denied { read write } for pid=2231 comm="syz.0.589" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.335117][ T24] audit: type=1400 audit(1732568965.044:408): avc: denied { open } for pid=2231 comm="syz.0.589" path="/133/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.399181][ T24] audit: type=1400 audit(1732568965.084:409): avc: denied { setattr } for pid=2231 comm="syz.0.589" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.490938][ T24] audit: type=1400 audit(1732568965.254:410): avc: denied { mac_admin } for pid=2245 comm="syz.5.594" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.490954][ T2246] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 168.559560][ T24] audit: type=1400 audit(1732568965.254:411): avc: denied { relabelto } for pid=2245 comm="syz.5.594" name="bus" dev="tmpfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 168.685744][ T2253] xt_hashlimit: size too large, truncated to 1048576 [ 169.811206][ T2259] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue [ 169.879125][ T2259] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.016050][ T2279] xt_bpf: check failed: parse error [ 172.163666][ T2281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2281 comm=syz.3.605 [ 173.388080][ T2299] 9pnet: Insufficient options for proto=fd [ 173.493080][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 173.493114][ T24] audit: type=1400 audit(1732568970.246:424): avc: denied { mount } for pid=2300 comm="syz.5.599" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 174.360707][ T24] audit: type=1400 audit(1732568971.116:425): avc: denied { mounton } for pid=2289 comm="syz.1.609" path="/129/file0" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 174.408265][ T2294] EXT4-fs (loop1): Test dummy encryption mode enabled [ 174.417179][ T24] audit: type=1400 audit(1732568971.156:426): avc: denied { unmount } for pid=807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 174.448905][ T2294] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.609: inline data xattr refers to an external xattr inode [ 174.507427][ T2294] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.609: couldn't read orphan inode 12 (err -117) [ 174.701935][ T2294] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 175.016657][ T2313] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue [ 175.543902][ T2316] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 175.559434][ T2316] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.957423][ T2313] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.440834][ T2331] xt_hashlimit: size too large, truncated to 1048576 [ 176.593718][ T2329] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 176.616464][ T2329] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 176.707497][ T2329] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000efe,data=ordered,jqfmt=vfsold,barrier=0x0000000000000648,usrjquota=./file0,,errors=continue [ 176.863368][ T2333] FAT-fs (loop3): Unrecognized mount option "sh" or missing value [ 177.281113][ T24] audit: type=1400 audit(1732568974.037:427): avc: denied { read } for pid=2339 comm="syz.2.620" name="rtc0" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.177251][ T24] audit: type=1400 audit(1732568974.037:428): avc: denied { open } for pid=2339 comm="syz.2.620" path="/dev/rtc0" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.231181][ T24] audit: type=1400 audit(1732568974.037:429): avc: denied { write } for pid=2339 comm="syz.2.620" name="001" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 178.334603][ T24] audit: type=1400 audit(1732568975.088:430): avc: denied { read } for pid=2350 comm="syz.1.622" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 178.367512][ T2351] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 178.524707][ T24] audit: type=1400 audit(1732568975.118:431): avc: denied { mount } for pid=2354 comm="syz.2.625" name="/" dev="incremental-fs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 178.738615][ T2360] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue [ 178.839858][ T2360] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.056879][ T24] audit: type=1400 audit(1732568975.118:432): avc: denied { read } for pid=2354 comm="syz.2.625" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 179.503718][ T24] audit: type=1400 audit(1732568975.118:433): avc: denied { open } for pid=2354 comm="syz.2.625" path="/119/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 179.544422][ T24] audit: type=1400 audit(1732568975.118:434): avc: denied { ioctl } for pid=2354 comm="syz.2.625" path="/119/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 179.605545][ T24] audit: type=1400 audit(1732568975.128:435): avc: denied { open } for pid=2350 comm="syz.1.622" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.669259][ T24] audit: type=1400 audit(1732568975.128:436): avc: denied { ioctl } for pid=2350 comm="syz.1.622" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.743185][ T24] audit: type=1400 audit(1732568975.228:437): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 179.763851][ T24] audit: type=1400 audit(1732568975.678:438): avc: denied { ioctl } for pid=2368 comm="syz.1.629" path="socket:[20282]" dev="sockfs" ino=20282 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.279310][ T2380] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 180.294926][ T2380] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.617006][ T2394] overlayfs: missing 'lowerdir' [ 183.850443][ T24] audit: type=1400 audit(1732568980.609:439): avc: denied { setopt } for pid=2401 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.966014][ T24] audit: type=1400 audit(1732568980.729:440): avc: denied { map } for pid=2401 comm="syz.1.636" path="socket:[20922]" dev="sockfs" ino=20922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 184.119385][ T24] audit: type=1400 audit(1732568980.729:441): avc: denied { read } for pid=2401 comm="syz.1.636" path="socket:[20922]" dev="sockfs" ino=20922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 184.476708][ T2423] xt_bpf: check failed: parse error [ 184.795529][ T2424] EXT4-fs (loop2): Test dummy encryption mode enabled [ 184.922810][ T2424] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.641: inline data xattr refers to an external xattr inode [ 184.938748][ T2424] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.641: couldn't read orphan inode 12 (err -117) [ 184.952314][ T2424] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 185.439956][ T24] audit: type=1400 audit(1732568982.199:442): avc: denied { ioctl } for pid=2432 comm="syz.3.648" path="socket:[20357]" dev="sockfs" ino=20357 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.286384][ T24] audit: type=1400 audit(1732568982.459:443): avc: denied { read write } for pid=2413 comm="syz.0.642" name="uinput" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 186.330879][ T2435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 186.346414][ T24] audit: type=1400 audit(1732568982.459:444): avc: denied { open } for pid=2413 comm="syz.0.642" path="/dev/uinput" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 186.559979][ T2446] overlayfs: missing 'lowerdir' [ 186.982223][ T24] audit: type=1400 audit(1732568983.739:445): avc: denied { read write } for pid=2458 comm="syz.5.657" name="raw-gadget" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.023059][ T24] audit: type=1400 audit(1732568983.739:446): avc: denied { open } for pid=2458 comm="syz.5.657" path="/dev/raw-gadget" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.048384][ T24] audit: type=1400 audit(1732568983.739:447): avc: denied { ioctl } for pid=2458 comm="syz.5.657" path="/dev/raw-gadget" dev="devtmpfs" ino=249 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.206740][ T2461] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 187.427035][ T2461] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 187.445004][ T2461] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.473106][ T2439] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 187.480854][ T2439] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 187.676293][ T2439] F2FS-fs (loop2): invalid crc value [ 187.756101][ T2439] F2FS-fs (loop2): Found nat_bits in checkpoint [ 188.068012][ T2470] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 188.083600][ T2470] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.937752][ T2439] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 189.983383][ T2439] F2FS-fs (loop2): Start checkpoint disabled! [ 190.082085][ T2488] overlayfs: missing 'lowerdir' [ 190.590481][ T2493] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 190.671377][ T24] audit: type=1400 audit(1732568987.430:448): avc: denied { create } for pid=2490 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.717319][ T24] audit: type=1400 audit(1732568987.470:449): avc: denied { write } for pid=2490 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.823291][ T24] audit: type=1400 audit(1732568987.470:450): avc: denied { nlmsg_write } for pid=2490 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.934082][ T2499] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 191.004258][ T2499] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.015165][ T24] audit: type=1400 audit(1732568987.530:451): avc: denied { write } for pid=2492 comm="syz.5.665" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.037275][ T24] audit: type=1400 audit(1732568987.530:452): avc: denied { add_name } for pid=2492 comm="syz.5.665" name="blkio.bfq.dequeue" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.073199][ T24] audit: type=1400 audit(1732568987.530:453): avc: denied { associate } for pid=2492 comm="syz.5.665" name="blkio.bfq.dequeue" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 191.096041][ T24] audit: type=1400 audit(1732568987.540:454): avc: denied { append } for pid=2492 comm="syz.5.665" path="/93/file0/blkio.bfq.dequeue" dev="loop5" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 191.227280][ T24] audit: type=1400 audit(1732568987.890:455): avc: denied { write } for pid=2498 comm="syz.3.667" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 191.271530][ T24] audit: type=1400 audit(1732568987.890:456): avc: denied { add_name } for pid=2498 comm="syz.3.667" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 191.312903][ T24] audit: type=1400 audit(1732568987.890:457): avc: denied { create } for pid=2498 comm="syz.3.667" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 191.510109][ T2512] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 191.522284][ T2509] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 191.606916][ T2509] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 191.635659][ T2512] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 191.653759][ T2512] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.664503][ T2509] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.765911][ T311] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 192.948141][ T2539] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 192.963874][ T2539] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.545862][ T2547] kvm: pic: non byte read [ 193.560919][ T2547] kvm: pic: level sensitive irq not supported [ 193.561002][ T2547] kvm: pic: non byte read [ 194.575558][ T2560] 9pnet: Insufficient options for proto=fd [ 194.692585][ T2562] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 194.701511][ T2562] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.803292][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 194.933182][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.953128][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 194.972249][ T311] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.203144][ T311] usb 1-1: string descriptor 0 read error: -71 [ 195.219745][ T311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.280384][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.313428][ T311] usb 1-1: can't set config #1, error -71 [ 195.333161][ T311] usb 1-1: USB disconnect, device number 8 [ 195.609596][ T2587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 195.624196][ T2587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 196.650813][ T2591] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 196.663123][ T2591] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.735784][ T2591] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.693: bg 0: block 393: padding at end of block bitmap is not set [ 196.813969][ T2591] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 117 [ 196.845334][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 196.845372][ T24] audit: type=1400 audit(1732568993.600:462): avc: denied { ioctl } for pid=2599 comm="syz.5.695" path="socket:[21170]" dev="sockfs" ino=21170 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.911598][ T2591] EXT4-fs (loop3): This should not happen!! Data will be lost [ 196.911598][ T2591] [ 197.442404][ T2602] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 197.457962][ T2602] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.174976][ T24] audit: type=1400 audit(1732568994.941:463): avc: denied { unlink } for pid=2615 comm="syz.5.699" name="#26" dev="tmpfs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 199.722789][ T25] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 200.103357][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 200.232969][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.233705][ T2642] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 200.252711][ T2642] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 200.277247][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 200.287296][ T2642] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 200.302783][ T2642] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 200.311634][ T25] usb 2-1: SerialNumber: syz [ 200.318524][ T2642] EXT4-fs (loop0): 1 truncate cleaned up [ 200.330140][ T2642] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1, [ 200.363495][ T25] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 200.371270][ T25] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 200.380141][ T2646] EXT4-fs (loop3): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 200.391319][ T25] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 200.504442][ T24] audit: type=1400 audit(1732568997.271:464): avc: denied { remount } for pid=2641 comm="syz.0.707" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 200.529568][ T2642] EXT4-fs (loop0): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpquota,noquota,quota,noload,noload, [ 200.543813][ T24] audit: type=1400 audit(1732568997.291:465): avc: denied { read write } for pid=2648 comm="syz.2.709" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 200.567433][ T24] audit: type=1400 audit(1732568997.291:466): avc: denied { open } for pid=2648 comm="syz.2.709" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 200.592409][ T24] audit: type=1400 audit(1732568997.291:467): avc: denied { mount } for pid=2648 comm="syz.2.709" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 201.427222][ T24] audit: type=1400 audit(1732568998.191:468): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 202.322561][ T2667] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 202.338274][ T2667] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.486774][ T311] usb 2-1: USB disconnect, device number 6 [ 202.871603][ T2682] 9pnet: Insufficient options for proto=fd [ 202.900859][ T2684] request_module fs-ceph succeeded, but still no fs? [ 203.128845][ T2691] bridge: RTM_NEWNEIGH with invalid ether address [ 203.294713][ T2694] fuse: Bad value for 'fd' [ 204.814160][ T2716] 9pnet: Insufficient options for proto=fd [ 205.369872][ T311] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 205.384598][ T2722] bridge: RTM_NEWNEIGH with invalid ether address [ 205.442446][ T660] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 205.552410][ T292] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 205.822635][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 205.892398][ T660] usb 3-1: Using ep0 maxpacket: 16 [ 206.218379][ T311] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.230224][ T311] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.302856][ T660] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 206.760958][ T292] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 206.972820][ T292] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.053669][ T2737] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 207.069255][ T2737] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.164003][ T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 207.472390][ T660] usb 3-1: config 0 has no interface number 0 [ 207.480894][ T660] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 14385, setting to 1024 [ 207.491948][ T660] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 207.494043][ T292] usb 1-1: SerialNumber: syz [ 207.772412][ T292] usb 1-1: can't set config #1, error -71 [ 207.801279][ T292] usb 1-1: USB disconnect, device number 9 [ 207.971945][ T2753] 9pnet: Insufficient options for proto=fd [ 208.271706][ T24] audit: type=1400 audit(1732569005.031:469): avc: denied { write } for pid=2759 comm="syz.1.747" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 208.511229][ T24] audit: type=1400 audit(1732569005.271:470): avc: denied { setopt } for pid=2769 comm="syz.0.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 208.633282][ T311] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 208.645923][ T311] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 208.673082][ T660] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 208.721359][ T660] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 208.747063][ T2775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 208.757510][ T2775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 208.791472][ T660] usb 3-1: config 0 descriptor?? [ 208.813202][ T311] usb 2-1: can't set config #4, error -71 [ 208.828754][ T311] usb 2-1: USB disconnect, device number 7 [ 208.834894][ T660] usb 3-1: can't set config #0, error -71 [ 208.845019][ T660] usb 3-1: USB disconnect, device number 4 [ 208.909145][ T2777] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 208.985113][ T2777] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 209.019922][ T2777] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.095542][ T24] audit: type=1400 audit(1732569005.861:471): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.157829][ T24] audit: type=1400 audit(1732569005.861:472): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 209.312462][ T2541] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 209.357356][ T24] audit: type=1400 audit(1732569005.871:473): avc: denied { open } for pid=287 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.382907][ T24] audit: type=1400 audit(1732569005.871:474): avc: denied { ioctl } for pid=287 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=111 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.408796][ T24] audit: type=1400 audit(1732569005.901:475): avc: denied { create } for pid=2795 comm="syz.5.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 209.428711][ T24] audit: type=1400 audit(1732569005.911:476): avc: denied { name_bind } for pid=2795 comm="syz.5.761" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 209.451731][ T24] audit: type=1400 audit(1732569005.911:477): avc: denied { node_bind } for pid=2795 comm="syz.5.761" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 209.451776][ T2802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 209.474864][ T24] audit: type=1400 audit(1732569005.931:478): avc: denied { execmem } for pid=2794 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 209.519520][ T2802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 209.545948][ T2799] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 209.602815][ T2806] FAT-fs (loop5): Unrecognized mount option "sh" or missing value [ 209.635188][ T2799] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 209.673556][ T2799] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.692215][ T2541] usb 4-1: Using ep0 maxpacket: 16 [ 209.812366][ T2541] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 209.823941][ T2541] usb 4-1: config 0 has no interface number 0 [ 209.830737][ T2541] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 14385, setting to 1024 [ 209.843862][ T2541] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 210.002506][ T2541] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 210.016817][ T2541] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 210.047006][ T2541] usb 4-1: Product: syz [ 210.051058][ T2541] usb 4-1: SerialNumber: syz [ 210.245601][ T2541] usb 4-1: config 0 descriptor?? [ 210.283243][ T2783] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 211.026708][ T2839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.774'. [ 211.037618][ T2839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.774'. [ 211.314280][ T2541] usb 4-1: invalid MIDI in EP 0 [ 211.319773][ T2541] snd-usb-audio: probe of 4-1:0.2 failed with error -22 [ 211.447308][ T2849] EXT4-fs (loop5): Test dummy encryption mode enabled [ 211.459492][ T2849] EXT4-fs (loop5): Ignoring removed orlov option [ 211.479324][ T2849] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 211.530203][ T1083] usb 4-1: USB disconnect, device number 4 [ 212.546786][ T2870] netlink: 'syz.3.787': attribute type 32 has an invalid length. [ 212.582141][ T1083] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 212.641245][ T2872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'. [ 212.982086][ T1083] usb 3-1: Using ep0 maxpacket: 8 [ 213.102240][ T1083] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.202246][ T1083] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 213.220896][ T1083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 213.239469][ T1083] usb 3-1: SerialNumber: syz [ 213.251900][ T1083] usb 3-1: config 0 descriptor?? [ 213.294752][ T1083] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 213.304507][ T1083] uvcvideo: No valid video chain found. [ 213.497093][ T1083] usb 3-1: USB disconnect, device number 5 [ 213.834229][ T24] kauditd_printk_skb: 56 callbacks suppressed [ 213.834265][ T24] audit: type=1400 audit(1732569010.601:535): avc: denied { read write } for pid=807 comm="syz-executor" name="loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.933013][ T24] audit: type=1400 audit(1732569010.631:536): avc: denied { open } for pid=807 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.998047][ T24] audit: type=1400 audit(1732569010.631:537): avc: denied { ioctl } for pid=807 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.062251][ T24] audit: type=1400 audit(1732569010.631:538): avc: denied { append } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.144044][ T24] audit: type=1400 audit(1732569010.671:539): avc: denied { create } for pid=2893 comm="syz.5.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 214.163965][ T24] audit: type=1400 audit(1732569010.671:540): avc: denied { name_bind } for pid=2893 comm="syz.5.796" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 214.191083][ T24] audit: type=1400 audit(1732569010.671:541): avc: denied { node_bind } for pid=2893 comm="syz.5.796" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 214.214538][ T24] audit: type=1400 audit(1732569010.741:542): avc: denied { execmem } for pid=2895 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 214.236994][ T24] audit: type=1400 audit(1732569010.911:543): avc: denied { map_create } for pid=2897 comm="syz.5.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 214.286590][ T2901] netlink: 'syz.1.797': attribute type 15 has an invalid length. [ 214.389134][ T24] audit: type=1400 audit(1732569010.911:544): avc: denied { map_read map_write } for pid=2897 comm="syz.5.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 214.977827][ T2903] netlink: 200 bytes leftover after parsing attributes in process `syz.2.799'. [ 215.430955][ T2912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 215.444238][ T2912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 216.674390][ T2927] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 216.743284][ T2934] FAT-fs (loop3): Unrecognized mount option "sh" or missing value [ 216.821577][ T2941] netlink: 200 bytes leftover after parsing attributes in process `syz.2.814'. [ 217.227464][ T2956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.815'. [ 217.241366][ T2956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.815'. [ 217.588385][ T2959] netlink: 48 bytes leftover after parsing attributes in process `syz.2.821'. [ 218.133472][ T2961] xt_limit: Overflow, try lower: 0/0 [ 218.145609][ T2963] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 218.217832][ T2968] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 218.309213][ T2963] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 218.363135][ T2968] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 218.430752][ T2963] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.467571][ T2968] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.752127][ T311] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 218.898507][ T1083] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 218.933698][ T24] kauditd_printk_skb: 79 callbacks suppressed [ 218.933730][ T24] audit: type=1400 audit(1732569015.701:624): avc: denied { bpf } for pid=2996 comm="syz.3.834" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 218.981968][ T24] audit: type=1400 audit(1732569015.721:625): avc: denied { perfmon } for pid=2996 comm="syz.3.834" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 219.079380][ T2999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'. [ 219.093069][ T2999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'. [ 219.137522][ T24] audit: type=1400 audit(1732569015.811:626): avc: denied { prog_run } for pid=2993 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 219.157071][ T1083] usb 2-1: Using ep0 maxpacket: 16 [ 219.292993][ T1083] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.370479][ T1083] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 219.414504][ T24] audit: type=1400 audit(1732569015.831:627): avc: denied { read write } for pid=2993 comm="syz.2.833" name="uinput" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 219.526930][ T1083] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 219.658584][ T24] audit: type=1400 audit(1732569015.831:628): avc: denied { open } for pid=2993 comm="syz.2.833" path="/dev/uinput" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 219.691911][ T1083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.704438][ T1083] usb 2-1: config 0 descriptor?? [ 219.710209][ T24] audit: type=1400 audit(1732569016.151:629): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 219.736299][ T24] audit: type=1400 audit(1732569016.151:630): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.785840][ T24] audit: type=1400 audit(1732569016.151:631): avc: denied { open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.808543][ T24] audit: type=1400 audit(1732569016.151:632): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.831355][ T24] audit: type=1400 audit(1732569016.461:633): avc: denied { read write } for pid=3003 comm="syz.5.836" name="raw-gadget" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.892244][ T311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.911940][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.935718][ T311] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 219.947102][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.962900][ T311] usb 1-1: config 0 descriptor?? [ 219.971792][ T1083] usb 2-1: USB disconnect, device number 8 [ 220.003274][ T311] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 220.137313][ T3012] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 220.147176][ T3014] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 220.167111][ T3012] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 220.168524][ T3014] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 220.185250][ T3012] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.201910][ T3014] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.373180][ T3024] overlayfs: unrecognized mount option "uuid=off" or missing value [ 220.751955][ T311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 221.211090][ T3048] EXT4-fs (loop1): Test dummy encryption mode enabled [ 221.755299][ T3048] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.852: inline data xattr refers to an external xattr inode [ 221.774970][ T3048] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.852: couldn't read orphan inode 12 (err -117) [ 221.784002][ T660] usb 1-1: USB disconnect, device number 10 [ 221.792674][ T311] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.805508][ T3048] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 221.810669][ T311] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 221.843403][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.878572][ T311] usb 3-1: config 0 descriptor?? [ 221.879778][ T3053] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 221.958716][ T3053] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 222.002359][ T3053] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.187796][ T660] usb 3-1: USB disconnect, device number 6 [ 222.334933][ T3070] 9pnet: Could not find request transport: fd0x0000000000000003 [ 222.377127][ T3072] fuse: Bad value for 'group_id' [ 222.751983][ T660] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 222.786519][ T3079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 222.808458][ T3079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 223.112013][ T660] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.122629][ T3096] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 223.147302][ T660] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 223.152798][ T3096] EXT4-fs (loop5): failed to initialize system zone (-117) [ 223.165855][ T660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.183272][ T660] usb 3-1: config 0 descriptor?? [ 223.188670][ T3096] EXT4-fs (loop5): mount failed [ 223.833489][ T3116] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 223.861039][ T3116] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 223.878318][ T3116] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.354848][ T3139] netlink: 32 bytes leftover after parsing attributes in process `syz.1.885'. [ 224.461378][ T24] kauditd_printk_skb: 53 callbacks suppressed [ 224.461413][ T24] audit: type=1400 audit(1732569021.222:687): avc: denied { read } for pid=3140 comm="syz.1.886" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 224.493395][ T2541] usb 3-1: USB disconnect, device number 7 [ 224.527935][ T24] audit: type=1400 audit(1732569021.222:688): avc: denied { open } for pid=3140 comm="syz.1.886" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 224.576699][ T3145] netlink: 48 bytes leftover after parsing attributes in process `syz.2.887'. [ 224.584161][ T24] audit: type=1400 audit(1732569021.262:689): avc: denied { ioctl } for pid=3140 comm="syz.1.886" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.926406][ T24] audit: type=1400 audit(1732569022.692:690): avc: denied { connect } for pid=3161 comm="syz.2.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.131461][ T3171] netlink: 32 bytes leftover after parsing attributes in process `syz.0.896'. [ 226.222138][ T24] audit: type=1400 audit(1732569022.952:691): avc: denied { write } for pid=3174 comm="syz.2.898" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 226.377617][ T3181] xt_bpf: check failed: parse error [ 226.394123][ T24] audit: type=1400 audit(1732569023.162:692): avc: denied { write } for pid=3172 comm="syz.1.897" name="ptype" dev="proc" ino=4026532428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 226.445229][ T24] audit: type=1400 audit(1732569023.192:693): avc: denied { sys_admin } for pid=3172 comm="syz.1.897" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 226.576212][ T3185] 9pnet: Insufficient options for proto=fd [ 227.602300][ T24] audit: type=1400 audit(1732569024.302:694): avc: denied { read } for pid=3187 comm="syz.2.902" name="rtc0" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 228.013004][ T24] audit: type=1400 audit(1732569024.302:695): avc: denied { open } for pid=3187 comm="syz.2.902" path="/dev/rtc0" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 228.065465][ T3199] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 228.094600][ T24] audit: type=1400 audit(1732569024.312:696): avc: denied { write } for pid=3187 comm="syz.2.902" name="001" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 228.207184][ T3199] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 228.224948][ T3199] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.430430][ T3220] xt_bpf: check failed: parse error [ 228.792011][ T660] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 229.041859][ T660] usb 4-1: Using ep0 maxpacket: 16 [ 229.161950][ T660] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 230.078496][ T3242] overlayfs: failed to clone upperpath [ 230.162839][ T660] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 230.201527][ T660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.235157][ T660] usb 4-1: Product: syz [ 230.239209][ T660] usb 4-1: Manufacturer: syz [ 230.254051][ T660] usb 4-1: SerialNumber: syz [ 230.265593][ T660] usb 4-1: config 0 descriptor?? [ 230.302597][ T3246] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 230.352774][ T3244] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 230.390847][ T3246] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 230.400774][ T3244] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 230.451457][ T3246] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.451912][ T3244] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.339805][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 231.339838][ T24] audit: type=1400 audit(1732569028.102:701): avc: denied { relabelfrom } for pid=3272 comm="syz.2.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 231.397557][ T24] audit: type=1400 audit(1732569028.132:702): avc: denied { relabelto } for pid=3272 comm="syz.2.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 231.572559][ T24] audit: type=1400 audit(1732569028.332:703): avc: denied { mounton } for pid=3274 comm="syz.1.929" path="/205/file0" dev="tmpfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 231.765255][ T24] audit: type=1400 audit(1732569028.532:704): avc: denied { mounton } for pid=3274 comm="syz.1.929" path="/205/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 231.870211][ T24] audit: type=1400 audit(1732569028.632:705): avc: denied { mount } for pid=3274 comm="syz.1.929" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 232.063274][ T24] audit: type=1400 audit(1732569028.832:706): avc: denied { create } for pid=3290 comm="syz.5.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.172667][ T3295] netlink: 48 bytes leftover after parsing attributes in process `syz.1.936'. [ 232.253689][ T323] usb 4-1: USB disconnect, device number 5 [ 232.380413][ T24] audit: type=1400 audit(1732569029.142:707): avc: denied { ioctl } for pid=3299 comm="syz.3.938" path="socket:[23331]" dev="sockfs" ino=23331 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.526905][ T3300] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 232.555810][ T3302] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 232.573896][ T24] audit: type=1400 audit(1732569029.342:708): avc: denied { create } for pid=3299 comm="syz.3.938" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 232.599459][ T24] audit: type=1400 audit(1732569029.362:709): avc: denied { read write } for pid=3299 comm="syz.3.938" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 232.612311][ T3302] EXT4-fs (loop2): failed to initialize system zone (-117) [ 232.622815][ T24] audit: type=1400 audit(1732569029.362:710): avc: denied { open } for pid=3299 comm="syz.3.938" path="/182/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 232.644402][ T3302] EXT4-fs (loop2): mount failed [ 233.543390][ T3322] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 233.563042][ T3322] EXT4-fs (loop2): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 233.894549][ T3333] Module has invalid ELF structures [ 233.932669][ T3336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'. [ 233.950549][ T3336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.949'. [ 234.214814][ T3348] fuse: Unknown parameter 'grou00000000000000000000' [ 234.455642][ T3360] Module has invalid ELF structures [ 236.358538][ T3374] EXT4-fs (loop2): Test dummy encryption mode enabled [ 236.457116][ T3374] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.964: inline data xattr refers to an external xattr inode [ 236.473138][ T3374] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.964: couldn't read orphan inode 12 (err -117) [ 236.488533][ T3374] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 237.461502][ T3397] Module has invalid ELF structures [ 239.064754][ T3411] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 239.086096][ T3411] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.372807][ T3418] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 239.392336][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 239.392368][ T24] audit: type=1400 audit(1732569036.162:718): avc: denied { write } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.433922][ T3418] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 239.491776][ T24] audit: type=1400 audit(1732569036.162:719): avc: denied { remove_name } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.521853][ T3418] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.621729][ T24] audit: type=1400 audit(1732569036.162:720): avc: denied { rename } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 239.695474][ T24] audit: type=1400 audit(1732569036.162:721): avc: denied { add_name } for pid=76 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.782269][ T24] audit: type=1400 audit(1732569036.162:722): avc: denied { unlink } for pid=76 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 239.816776][ T24] audit: type=1400 audit(1732569036.162:723): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 239.847856][ T24] audit: type=1400 audit(1732569036.362:724): avc: denied { remove_name } for pid=3417 comm="syz.3.978" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.934097][ T24] audit: type=1400 audit(1732569036.362:725): avc: denied { rename } for pid=3417 comm="syz.3.978" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.963841][ T24] audit: type=1400 audit(1732569036.362:726): avc: denied { rmdir } for pid=3417 comm="syz.3.978" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 240.022475][ T3433] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 240.102163][ T3433] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 240.141888][ T3433] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.552585][ T3441] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 240.592290][ T3441] EXT4-fs (loop5): failed to initialize system zone (-117) [ 240.599419][ T3441] EXT4-fs (loop5): mount failed [ 240.612775][ T3444] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 240.655717][ T3444] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 240.691866][ T3444] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.906153][ T24] audit: type=1400 audit(1732569037.672:727): avc: denied { create } for pid=3456 comm="syz.0.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.019073][ T3459] EXT4-fs (loop3): Ignoring removed orlov option [ 241.027751][ T3459] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 241.039534][ T3459] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 241.052171][ T3459] EXT4-fs (loop3): invalid journal inode [ 241.057718][ T3459] EXT4-fs (loop3): can't get journal size [ 241.066524][ T3459] EXT4-fs (loop3): mounted filesystem without journal. Opts: data=writeback,norecovery,orlov,data_err=abort,,errors=continue [ 242.263802][ T3470] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 242.306537][ T3470] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 242.332052][ T3470] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.861577][ T3487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.996'. [ 242.875355][ T3487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.996'. [ 243.791495][ T3489] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 243.852617][ T3495] xt_hashlimit: size too large, truncated to 1048576 [ 243.908742][ T3489] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 243.931847][ T3489] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.009820][ T3498] FAT-fs (loop3): Unrecognized mount option "sh" or missing value [ 244.202733][ T3505] fuse: Unknown parameter 'group_i00000000000000000000' [ 245.646380][ T3512] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue [ 245.720823][ T3512] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.771262][ T3517] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 245.786158][ T3517] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.850360][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 245.850397][ T24] audit: type=1400 audit(1732569042.612:733): avc: denied { read append open } for pid=3511 comm="syz.2.1005" path="/201/bus/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 246.055747][ T24] audit: type=1400 audit(1732569042.662:734): avc: denied { ioctl } for pid=3511 comm="syz.2.1005" path="/201/bus/cgroup.controllers" dev="loop2" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 247.001952][ T3531] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 247.018771][ T3531] EXT4-fs (loop1): invalid journal inode [ 247.024523][ T3531] EXT4-fs (loop1): can't get journal size [ 247.035196][ T3531] EXT4-fs (loop1): 1 truncate cleaned up [ 247.050949][ T3531] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 247.180537][ T24] audit: type=1400 audit(1732569043.942:735): avc: denied { rename } for pid=3530 comm="syz.1.1010" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 247.337518][ T24] audit: type=1400 audit(1732569043.942:736): avc: denied { rmdir } for pid=3530 comm="syz.1.1010" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 247.601703][ T323] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 247.963452][ T3556] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue [ 248.054483][ T3556] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.791837][ T323] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.811692][ T323] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 248.820742][ T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.831066][ T323] usb 2-1: config 0 descriptor?? [ 248.864307][ T3567] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 248.873112][ T323] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 248.918091][ T3567] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x00000000000001ff,data_err=abort,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 248.918569][ T3572] xt_hashlimit: size too large, truncated to 1048576 [ 249.056945][ T24] audit: type=1400 audit(1732569045.822:737): avc: denied { setattr } for pid=3565 comm="syz.0.1020" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 249.114478][ T3574] FAT-fs (loop3): Unrecognized mount option "sh" or missing value [ 249.915019][ T3587] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 249.930873][ T3587] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.316514][ T323] usb 2-1: USB disconnect, device number 9 [ 251.709625][ T3610] bridge0: port 3(vlan2) entered blocking state [ 251.726307][ T3610] bridge0: port 3(vlan2) entered disabled state [ 251.901869][ T323] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 252.214925][ T3624] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1036'. [ 254.104828][ T3628] xt_limit: Overflow, try lower: 0/0 [ 254.856469][ T323] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 254.864215][ T323] usb 2-1: can't read configurations, error -71 [ 254.988051][ T3642] netlink: 'syz.2.1039': attribute type 15 has an invalid length. [ 255.377281][ T3646] xt_hashlimit: size too large, truncated to 1048576 [ 255.413771][ T3635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 255.700503][ T3616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 255.933709][ T3657] syz.2.1046[3657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.933828][ T3657] syz.2.1046[3657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.082695][ T3655] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 256.210425][ T3655] EXT4-fs (loop1): failed to initialize system zone (-117) [ 256.221824][ T3655] EXT4-fs (loop1): mount failed [ 256.531857][ T427] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 257.131953][ T427] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.148817][ T427] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 257.183927][ T24] audit: type=1400 audit(1732569053.952:738): avc: denied { read } for pid=3670 comm="syz.1.1050" name="ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 257.211672][ T427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.221638][ T3674] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1051'. [ 257.264326][ T24] audit: type=1400 audit(1732569053.972:739): avc: denied { open } for pid=3670 comm="syz.1.1050" path="/dev/ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 257.312544][ T24] audit: type=1400 audit(1732569053.972:740): avc: denied { ioctl } for pid=3670 comm="syz.1.1050" path="/dev/ppp" dev="devtmpfs" ino=149 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 257.417993][ T427] usb 4-1: config 0 descriptor?? [ 257.463034][ T427] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 257.547669][ T3677] xt_limit: Overflow, try lower: 0/0 [ 258.359588][ T3687] xt_bpf: check failed: parse error [ 258.662433][ T3695] FAT-fs (loop0): Unrecognized mount option "iocharoet=cp852" or missing value [ 258.856781][ T3699] xt_TPROXY: Can be used only with -p tcp or -p udp [ 259.015991][ T292] usb 4-1: USB disconnect, device number 6 [ 259.143419][ T24] audit: type=1400 audit(1732569055.902:741): avc: denied { ioctl } for pid=3704 comm="syz.3.1060" path="socket:[24204]" dev="sockfs" ino=24204 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 259.522112][ T3711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 259.525378][ T3709] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 259.538658][ T3711] System zones: 1-12 [ 259.569866][ T3711] EXT4-fs error (device loop2): ext4_orphan_get:1395: inode #15: comm syz.2.1062: casefold flag without casefold feature [ 259.592387][ T3711] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.1062: missing EA_INODE flag [ 259.611703][ T3711] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1062: error while reading EA inode 12 err=-117 [ 259.638266][ T3711] EXT4-fs (loop2): 1 orphan inode deleted [ 259.650073][ T3711] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,nojournal_checksum,,errors=continue [ 259.731774][ T24] audit: type=1400 audit(1732569056.502:742): avc: denied { mounton } for pid=3710 comm="syz.2.1062" path="/215/file0/bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 259.788557][ T24] audit: type=1400 audit(1732569056.522:743): avc: denied { write } for pid=3710 comm="syz.2.1062" name="bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 259.841666][ T24] audit: type=1400 audit(1732569056.522:744): avc: denied { add_name } for pid=3710 comm="syz.2.1062" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 259.862484][ T24] audit: type=1400 audit(1732569056.522:745): avc: denied { setattr } for pid=3710 comm="syz.2.1062" name="work" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 259.886602][ T24] audit: type=1400 audit(1732569056.522:746): avc: denied { remove_name } for pid=3710 comm="syz.2.1062" name="#2c" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 259.963011][ T24] audit: type=1400 audit(1732569056.522:747): avc: denied { rename } for pid=3710 comm="syz.2.1062" name="#2c" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 260.149672][ T3731] xt_hashlimit: size too large, truncated to 1048576 [ 260.417268][ T3735] FAT-fs (loop5): Unrecognized mount option "sh" or missing value [ 260.444181][ T3739] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 260.588041][ T3743] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 260.609663][ T3739] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 260.654503][ T3743] EXT4-fs (loop3): failed to initialize system zone (-117) [ 260.672794][ T3743] EXT4-fs (loop3): mount failed [ 261.263059][ T3771] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 261.531844][ T427] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 261.801710][ T427] usb 2-1: Using ep0 maxpacket: 16 [ 261.951768][ T427] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 262.002677][ T7] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 262.027940][ T7] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 262.051911][ T7] EXT4-fs (loop3): This should not happen!! Data will be lost [ 262.051911][ T7] [ 262.061431][ T7] EXT4-fs (loop3): Total free blocks count 0 [ 262.067484][ T7] EXT4-fs (loop3): Free/Dirty block details [ 262.073320][ T7] EXT4-fs (loop3): free_blocks=68451041280 [ 262.078989][ T7] EXT4-fs (loop3): dirty_blocks=64 [ 262.084054][ T7] EXT4-fs (loop3): Block reservation details [ 262.089919][ T7] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 262.141822][ T427] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 262.161151][ T427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.173114][ T427] usb 2-1: Product: syz [ 262.177163][ T427] usb 2-1: Manufacturer: syz [ 262.182472][ T427] usb 2-1: SerialNumber: syz [ 262.211772][ T427] usb 2-1: config 0 descriptor?? [ 262.263582][ T427] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 262.315921][ T427] usb 2-1: Detected FT232RL [ 262.362878][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 262.362910][ T24] audit: type=1400 audit(1732569059.132:753): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 262.481748][ T427] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 262.734271][ T427] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 262.777559][ T3799] xt_TPROXY: Can be used only with -p tcp or -p udp [ 262.792111][ T24] audit: type=1400 audit(1732569059.562:754): avc: denied { bind } for pid=3782 comm="syz.0.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 262.946430][ T427] usb 2-1: USB disconnect, device number 12 [ 262.960022][ T427] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 262.989971][ T427] ftdi_sio 2-1:0.0: device disconnected [ 263.392529][ T3807] netlink: 'syz.0.1084': attribute type 15 has an invalid length. [ 264.658726][ T3816] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 264.689083][ T3826] xt_hashlimit: size too large, truncated to 1048576 [ 264.822686][ T3828] FAT-fs (loop0): Unrecognized mount option "sh" or missing value [ 265.565212][ T3837] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue [ 265.620303][ T3837] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.113658][ T3845] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,abort,data_err=abort,min_batch_time=0x0000000000000800,,errors=continue [ 267.958904][ T3868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 267.975897][ T3868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 269.054986][ T3864] xt_TPROXY: Can be used only with -p tcp or -p udp [ 270.069356][ T3885] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue [ 270.111821][ T3885] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.591642][ T3198] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 271.736783][ T3917] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue [ 271.748655][ T3917] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.861619][ T3198] usb 2-1: Using ep0 maxpacket: 8 [ 272.001696][ T3198] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.131730][ T3198] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 272.140628][ T3198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 272.171608][ T3198] usb 2-1: SerialNumber: syz [ 272.182084][ T3198] usb 2-1: config 0 descriptor?? [ 272.222948][ T3198] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 272.229760][ T3198] uvcvideo: No valid video chain found. [ 272.270317][ T3930] xt_TPROXY: Can be used only with -p tcp or -p udp [ 272.424436][ T311] usb 2-1: USB disconnect, device number 13 [ 273.096229][ T24] audit: type=1400 audit(1732569069.862:755): avc: denied { bind } for pid=3932 comm="syz.0.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.669195][ T3949] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 274.054180][ T3953] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 274.101783][ T3953] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.192653][ T3936] erofs: (device loop3): mounted with root inode @ nid 36. [ 274.248183][ T3936] attempt to access beyond end of device [ 274.248183][ T3936] loop3: rw=0, want=32, limit=16 [ 274.303335][ T3963] fuse: Bad value for 'rootmode' [ 274.971792][ T3198] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 275.100798][ T3975] xt_hashlimit: size too large, truncated to 1048576 [ 275.287457][ T3980] netlink: 'syz.2.1135': attribute type 15 has an invalid length. [ 275.361733][ T3198] usb 2-1: Using ep0 maxpacket: 32 [ 275.439682][ T3978] FAT-fs (loop0): Unrecognized mount option "sh" or missing value [ 275.482333][ T3198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.513691][ T3198] usb 2-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 275.593610][ T3198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.001798][ T3198] usb 2-1: config 0 descriptor?? [ 276.381199][ T3990] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 276.401332][ T3990] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 276.473946][ T3198] hid (null): unknown global tag 0xc [ 276.511114][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.525819][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.541896][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.559531][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.577503][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.587609][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.604676][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.617495][ T4000] netlink: 'syz.2.1144': attribute type 4 has an invalid length. [ 276.625317][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.635537][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.645013][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.652724][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.660054][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.668979][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.677194][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.684860][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.692485][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.699851][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.707630][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.715381][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.723595][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.731168][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.739090][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.746786][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.754447][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.771632][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.784535][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.799619][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.814723][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.829820][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.845722][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.861937][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.877032][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.892135][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.908421][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.921708][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.929329][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.937102][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.944850][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.952810][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.960281][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.968040][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.975822][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.983437][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.990899][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 276.998644][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.006402][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.014504][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.022218][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.029580][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.037606][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.045229][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.052989][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.060355][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.075464][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.090630][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.105954][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.122312][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.134965][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.143477][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x1 [ 277.150878][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.158586][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.166798][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.174393][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.181950][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x2 [ 277.189358][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x5 [ 277.197014][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.213774][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.224416][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.232477][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.239921][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.253823][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.266759][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.279662][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.293701][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.306560][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x1 [ 277.322324][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.336382][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.481643][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.501672][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.508986][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.531676][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.538972][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.546620][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.575348][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.635877][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.667900][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.851689][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.869393][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.887659][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.901673][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.919418][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.929545][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.947318][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.960923][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.978878][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 277.989035][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x2 [ 278.006861][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 278.021497][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 278.029414][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x0 [ 278.037052][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x1 [ 278.044860][ T3198] hid-generic 0003:0458:5014.0005: unknown main item tag 0x7 [ 278.052511][ T3198] hid-generic 0003:0458:5014.0005: unknown global tag 0xc [ 278.059735][ T3198] hid-generic 0003:0458:5014.0005: item 0 2 1 12 parsing failed [ 278.068280][ T3198] hid-generic: probe of 0003:0458:5014.0005 failed with error -22 [ 278.086346][ T3198] usb 2-1: USB disconnect, device number 14 [ 278.098679][ T4002] netlink: 'syz.2.1144': attribute type 17 has an invalid length. [ 278.109468][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 278.119708][ T4011] netlink: 'syz.5.1147': attribute type 15 has an invalid length. [ 278.226852][ T4018] exfat: Deprecated parameter 'utf8' [ 278.236350][ T4018] exfat: Deprecated parameter 'namecase' [ 278.242573][ T4018] exfat: Deprecated parameter 'utf8' [ 278.282614][ T4018] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 278.310469][ T24] audit: type=1400 audit(1732569075.072:756): avc: denied { write } for pid=4015 comm="syz.2.1148" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.335654][ T24] audit: type=1400 audit(1732569075.072:757): avc: denied { add_name } for pid=4015 comm="syz.2.1148" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.358497][ T24] audit: type=1400 audit(1732569075.072:758): avc: denied { associate } for pid=4015 comm="syz.2.1148" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 278.397208][ T24] audit: type=1400 audit(1732569075.102:759): avc: denied { write open } for pid=4015 comm="syz.2.1148" path="/235/file0/bus" dev="loop2" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 278.421760][ T427] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 278.423129][ T24] audit: type=1400 audit(1732569075.102:760): avc: denied { read } for pid=4015 comm="syz.2.1148" name="bus" dev="loop2" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 278.451850][ T24] audit: type=1400 audit(1732569075.122:761): avc: denied { getattr } for pid=4015 comm="syz.2.1148" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 278.536466][ T4021] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 278.563530][ T4021] EXT4-fs (loop5): failed to initialize system zone (-117) [ 278.570918][ T4021] EXT4-fs (loop5): mount failed [ 278.592948][ T4028] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 278.602541][ T4028] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 278.691625][ T427] usb 1-1: Using ep0 maxpacket: 8 [ 278.802143][ T24] audit: type=1400 audit(1732569075.572:762): avc: denied { ioctl } for pid=4004 comm="syz.0.1145" path="/dev/raw-gadget" dev="devtmpfs" ino=249 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.824543][ T4030] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 278.836409][ T427] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 278.845537][ T427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.862419][ T427] usb 1-1: config 0 descriptor?? [ 278.868582][ T24] audit: type=1400 audit(1732569075.572:763): avc: denied { read write } for pid=807 comm="syz-executor" name="loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.245369][ T4039] xt_bpf: check failed: parse error [ 279.270697][ T24] audit: type=1400 audit(1732569075.572:764): avc: denied { open } for pid=807 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.317066][ T24] audit: type=1400 audit(1732569075.572:765): avc: denied { mounton } for pid=4029 comm="syz.1.1153" path="/245/file1" dev="tmpfs" ino=1377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 279.363071][ T4030] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue [ 279.416199][ T4030] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.347459][ T4056] netlink: 'syz.5.1160': attribute type 15 has an invalid length. [ 280.883002][ T4058] fuse: Bad value for 'fd' [ 281.054273][ T4065] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 281.073301][ T4065] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 281.106836][ T4067] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1164'. [ 281.149351][ T4069] xt_bpf: check failed: parse error [ 281.196563][ T4074] 9pnet: Insufficient options for proto=fd [ 281.494534][ T4071] xt_limit: Overflow, try lower: 0/0 [ 281.594418][ T4082] netlink: 'syz.2.1170': attribute type 4 has an invalid length. [ 281.607247][ T4082] netlink: 'syz.2.1170': attribute type 4 has an invalid length. [ 281.651624][ T3198] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 281.748395][ T4086] fuse: Unknown parameter 'user_i00000000000000000000' [ 282.121635][ T323] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 282.181796][ T427] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 282.201817][ T427] asix: probe of 1-1:0.0 failed with error -71 [ 282.221771][ T427] usb 1-1: USB disconnect, device number 11 [ 282.391787][ T3198] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 282.400966][ T3198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.422910][ T3198] usb 4-1: config 0 descriptor?? [ 282.481808][ T323] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 282.571971][ T323] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.581126][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 282.589084][ T323] usb 3-1: SerialNumber: syz [ 282.632844][ T323] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 282.640550][ T323] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 282.647064][ T323] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 282.837847][ T3198] usb 3-1: USB disconnect, device number 8 [ 283.107952][ T4103] xt_bpf: check failed: parse error [ 283.268588][ T4105] EXT4-fs error (device loop0): ext4_orphan_get:1395: inode #15: comm syz.0.1178: casefold flag without casefold feature [ 283.287292][ T4105] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.1178: missing EA_INODE flag [ 283.299179][ T4105] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1178: error while reading EA inode 12 err=-117 [ 283.312102][ T4105] EXT4-fs (loop0): 1 orphan inode deleted [ 283.317697][ T4105] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 283.327617][ T24] kauditd_printk_skb: 60 callbacks suppressed [ 283.327649][ T24] audit: type=1400 audit(1732569080.092:826): avc: denied { mount } for pid=4104 comm="syz.0.1178" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 283.356037][ T24] audit: type=1400 audit(1732569080.112:827): avc: denied { setattr } for pid=4104 comm="syz.0.1178" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.379280][ T24] audit: type=1400 audit(1732569080.122:828): avc: denied { write } for pid=4104 comm="syz.0.1178" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.402601][ T24] audit: type=1400 audit(1732569080.122:829): avc: denied { append open } for pid=4104 comm="syz.0.1178" path=2F3235342F66696C65302F233135202864656C6574656429 dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 283.429419][ T24] audit: type=1400 audit(1732569080.122:830): avc: denied { add_name } for pid=4104 comm="syz.0.1178" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.450211][ T24] audit: type=1400 audit(1732569080.122:831): avc: denied { create } for pid=4104 comm="syz.0.1178" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 283.470537][ T24] audit: type=1400 audit(1732569080.162:832): avc: denied { ioctl } for pid=4078 comm="syz.3.1169" path="/dev/raw-gadget" dev="devtmpfs" ino=249 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.523434][ T4111] Quota error (device loop1): find_tree_dqentry: Getting block too big (64 >= 6) [ 283.532835][ T4111] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 283.544156][ T4111] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.1180: Failed to acquire dquot type 0 [ 283.556829][ T4111] EXT4-fs error (device loop1): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 283.559503][ T4116] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue [ 283.572432][ T4111] EXT4-fs error (device loop1) in ext4_do_update_inode:5303: error 27 [ 283.583680][ T4116] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.591159][ T4111] EXT4-fs error (device loop1): ext4_dirty_inode:6107: inode #13: comm syz.1.1180: mark_inode_dirty error [ 283.614735][ T24] audit: type=1400 audit(1732569080.382:833): avc: denied { prog_run } for pid=4115 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 283.628076][ T4111] EXT4-fs error (device loop1) in ext4_do_update_inode:5303: error 27 [ 283.641920][ T4111] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #13: comm syz.1.1180: mark_inode_dirty error [ 283.654048][ T4111] EXT4-fs error (device loop1) in ext4_do_update_inode:5303: error 27 [ 283.662698][ T4111] EXT4-fs error (device loop1) in ext4_orphan_del:3290: error 27 [ 283.670601][ T4111] EXT4-fs error (device loop1) in ext4_do_update_inode:5303: error 27 [ 283.679499][ T4111] EXT4-fs error (device loop1): ext4_truncate:4389: inode #13: comm syz.1.1180: mark_inode_dirty error [ 283.690839][ T4111] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3108: error 27 [ 283.699627][ T4111] EXT4-fs (loop1): 1 truncate cleaned up [ 283.705311][ T4111] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 283.848770][ T427] usb 4-1: USB disconnect, device number 7 [ 283.892614][ T4124] exfat: Deprecated parameter 'namecase' [ 283.969995][ T4124] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 283.975972][ T4130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'. [ 283.990627][ T4130] device bridge_slave_1 left promiscuous mode [ 283.997862][ T4130] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.005893][ T4130] device bridge_slave_0 left promiscuous mode [ 284.012100][ T4130] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.032998][ T4132] fuse: Unknown parameter 'user_i00000000000000000000' [ 284.221912][ T2541] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 284.266728][ T4143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1191'. [ 284.393480][ T4145] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue [ 284.405320][ T4145] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.481643][ T2541] usb 2-1: Using ep0 maxpacket: 16 [ 284.601776][ T2541] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 284.616722][ T4159] 9pnet: Insufficient options for proto=fd [ 284.684214][ T4163] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1198'. [ 284.801799][ T2541] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 284.813030][ T2541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.820888][ T2541] usb 2-1: Product: syz [ 284.835264][ T2541] usb 2-1: Manufacturer: syz [ 284.839848][ T2541] usb 2-1: SerialNumber: syz [ 284.884314][ T2541] usb 2-1: config 0 descriptor?? [ 285.055428][ T4181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1204'. [ 285.111463][ T4182] netlink: 'syz.0.1202': attribute type 15 has an invalid length. [ 286.133667][ T4192] xt_limit: Overflow, try lower: 0/0 [ 286.988006][ T2541] usb 2-1: USB disconnect, device number 15 [ 287.084939][ T4211] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 287.150332][ T4211] EXT4-fs (loop1): 1 truncate cleaned up [ 287.164475][ T4211] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,grpid,errors=remount-ro,max_batch_time=0x0000000000000004, [ 287.239841][ T4216] EXT4-fs (loop0): Test dummy encryption mode enabled [ 287.290314][ T4216] EXT4-fs (loop0): Ignoring removed orlov option [ 287.313711][ T4211] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2210: inode #15: comm syz.1.1212: corrupted in-inode xattr [ 287.334147][ T4216] ================================================================== [ 287.342111][ T4216] BUG: KASAN: use-after-free in __ext4_iget+0x3a0/0x41f0 [ 287.348986][ T4216] Read of size 8 at addr ffff88812d0c6c28 by task syz.0.1213/4216 [ 287.356558][ T4216] [ 287.358760][ T4216] CPU: 1 PID: 4216 Comm: syz.0.1213 Not tainted 5.10.226-syzkaller-00184-g139a6bb26d9d #0 [ 287.368466][ T4216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.378556][ T4216] Call Trace: [ 287.381808][ T4216] dump_stack_lvl+0x1e2/0x24b [ 287.386307][ T4216] ? bfq_pos_tree_add_move+0x43b/0x43b [ 287.391602][ T4216] ? panic+0x812/0x812 [ 287.395514][ T4216] print_address_description+0x81/0x3b0 [ 287.400889][ T4216] kasan_report+0x179/0x1c0 [ 287.405222][ T4216] ? __ext4_iget+0x3a0/0x41f0 [ 287.409742][ T4216] ? __ext4_iget+0x3a0/0x41f0 [ 287.414267][ T4216] __asan_report_load8_noabort+0x14/0x20 [ 287.419720][ T4216] __ext4_iget+0x3a0/0x41f0 [ 287.424065][ T4216] ? ida_alloc_range+0x9c3/0xa30 [ 287.428847][ T4216] ? ext4_get_projid+0x140/0x140 [ 287.433624][ T4216] ? _raw_write_lock+0xa4/0x170 [ 287.438301][ T4216] ? _raw_write_trylock+0x1a0/0x1a0 [ 287.443333][ T4216] ? __proc_create+0x65a/0xa00 [ 287.447949][ T4216] ext4_enable_quotas+0x56f/0x9f0 [ 287.452979][ T4216] ? ext4_fill_flex_info+0x5b0/0x5b0 [ 287.458098][ T4216] ? proc_create_single_data+0x1de/0x240 [ 287.463594][ T4216] ? proc_create_seq_private+0x280/0x280 [ 287.469042][ T4216] ? __kasan_check_write+0x14/0x20 [ 287.474205][ T4216] ? ext4_register_sysfs+0x253/0x290 [ 287.479322][ T4216] ext4_fill_super+0x86dc/0x9150 [ 287.484192][ T4216] ? ext4_mount+0x40/0x40 [ 287.488348][ T4216] ? vscnprintf+0x80/0x80 [ 287.492522][ T4216] ? sb_set_blocksize+0xa8/0xf0 [ 287.495503][ T4211] EXT4-fs (loop1): Remounting filesystem read-only [ 287.497203][ T4216] mount_bdev+0x262/0x370 [ 287.497260][ T4216] ? ext4_mount+0x40/0x40 [ 287.512417][ T4216] ext4_mount+0x34/0x40 [ 287.515436][ T4211] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1744: inode #15: comm syz.1.1212: unable to update i_inline_off [ 287.516420][ T4216] legacy_get_tree+0xf1/0x190 [ 287.533155][ T4216] ? ext4_chksum+0x210/0x210 [ 287.537597][ T4216] vfs_get_tree+0x88/0x290 [ 287.541913][ T4216] do_new_mount+0x2ba/0xb30 [ 287.546341][ T4216] ? do_move_mount_old+0x160/0x160 [ 287.551266][ T4216] ? security_capable+0x87/0xb0 [ 287.555945][ T4216] ? ns_capable+0x89/0xe0 [ 287.560119][ T4216] path_mount+0x56f/0xcb0 [ 287.564287][ T4216] __se_sys_mount+0x2c4/0x3b0 [ 287.568802][ T4216] ? __x64_sys_mount+0xd0/0xd0 [ 287.573400][ T4216] ? debug_smp_processor_id+0x17/0x20 [ 287.578614][ T4216] ? irqentry_exit_to_user_mode+0x41/0x80 [ 287.584165][ T4216] __x64_sys_mount+0xbf/0xd0 [ 287.588583][ T4216] do_syscall_64+0x34/0x70 [ 287.593277][ T4216] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 287.598994][ T4216] RIP: 0033:0x7f6b73e6ffba [ 287.603250][ T4216] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.622689][ T4216] RSP: 002b:00007f6b724e6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 287.630933][ T4216] RAX: ffffffffffffffda RBX: 00007f6b724e6ef0 RCX: 00007f6b73e6ffba [ 287.638760][ T4216] RDX: 0000000020000140 RSI: 00000000200005c0 RDI: 00007f6b724e6eb0 [ 287.646562][ T4216] RBP: 0000000020000140 R08: 00007f6b724e6ef0 R09: 0000000000004000 [ 287.654379][ T4216] R10: 0000000000004000 R11: 0000000000000246 R12: 00000000200005c0 [ 287.662403][ T4216] R13: 00007f6b724e6eb0 R14: 00000000000005d8 R15: 0000000020000380 [ 287.670271][ T4216] [ 287.672439][ T4216] Allocated by task 1917: [ 287.676632][ T4216] __kasan_slab_alloc+0xb1/0xe0 [ 287.681339][ T4216] slab_post_alloc_hook+0x61/0x2f0 [ 287.686271][ T4216] kmem_cache_alloc+0x168/0x2e0 [ 287.690952][ T4216] f2fs_alloc_inode+0x26/0x420 [ 287.695563][ T4216] iget_locked+0x14f/0x870 [ 287.699801][ T4216] f2fs_iget+0x55/0x50a0 [ 287.703889][ T4216] f2fs_fill_super+0x4c90/0x7e30 [ 287.708660][ T4216] mount_bdev+0x262/0x370 [ 287.712840][ T4216] f2fs_mount+0x34/0x40 [ 287.716818][ T4216] legacy_get_tree+0xf1/0x190 [ 287.721336][ T4216] vfs_get_tree+0x88/0x290 [ 287.725580][ T4216] do_new_mount+0x2ba/0xb30 [ 287.729920][ T4216] path_mount+0x56f/0xcb0 [ 287.734105][ T4216] __se_sys_mount+0x2c4/0x3b0 [ 287.738605][ T4216] __x64_sys_mount+0xbf/0xd0 [ 287.743056][ T4216] do_syscall_64+0x34/0x70 [ 287.747290][ T4216] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 287.752983][ T4216] [ 287.755157][ T4216] Last potentially related work creation: [ 287.760750][ T4216] kasan_save_stack+0x3b/0x60 [ 287.765259][ T4216] __kasan_record_aux_stack+0xd3/0x100 [ 287.770550][ T4216] kasan_record_aux_stack_noalloc+0xb/0x10 [ 287.776201][ T4216] call_rcu+0x135/0x11f0 [ 287.780408][ T4216] evict+0x8e8/0x9c0 [ 287.784184][ T4216] iput+0x632/0x7e0 [ 287.787826][ T4216] f2fs_fill_super+0x681b/0x7e30 [ 287.792611][ T4216] mount_bdev+0x262/0x370 [ 287.796860][ T4216] f2fs_mount+0x34/0x40 [ 287.800848][ T4216] legacy_get_tree+0xf1/0x190 [ 287.805354][ T4216] vfs_get_tree+0x88/0x290 [ 287.809704][ T4216] do_new_mount+0x2ba/0xb30 [ 287.814223][ T4216] path_mount+0x56f/0xcb0 [ 287.818495][ T4216] __se_sys_mount+0x2c4/0x3b0 [ 287.822976][ T4216] __x64_sys_mount+0xbf/0xd0 [ 287.827404][ T4216] do_syscall_64+0x34/0x70 [ 287.831655][ T4216] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 287.837469][ T4216] [ 287.839643][ T4216] The buggy address belongs to the object at ffff88812d0c6700 [ 287.839643][ T4216] which belongs to the cache f2fs_inode_cache of size 1520 [ 287.854078][ T4216] The buggy address is located 1320 bytes inside of [ 287.854078][ T4216] 1520-byte region [ffff88812d0c6700, ffff88812d0c6cf0) [ 287.867431][ T4216] The buggy address belongs to the page: [ 287.872941][ T4216] page:ffffea0004b43000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812d0c26a0 pfn:0x12d0c0 [ 287.884286][ T4216] head:ffffea0004b43000 order:3 compound_mapcount:0 compound_pincount:0 [ 287.892528][ T4216] flags: 0x4000000000010200(slab|head) [ 287.897967][ T4216] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888102795980 [ 287.906372][ T4216] raw: ffff88812d0c26a0 000000008013000f 00000001ffffffff 0000000000000000 [ 287.914757][ T4216] page dumped because: kasan: bad access detected [ 287.921199][ T4216] page_owner tracks the page as allocated [ 287.926777][ T4216] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 490, ts 53583824437, free_ts 0 [ 287.947068][ T4216] prep_new_page+0x166/0x180 [ 287.951496][ T4216] get_page_from_freelist+0x2d8c/0x2f30 [ 287.956882][ T4216] __alloc_pages_nodemask+0x435/0xaf0 [ 287.962075][ T4216] new_slab+0x80/0x400 [ 287.965997][ T4216] ___slab_alloc+0x302/0x4b0 [ 287.970423][ T4216] __slab_alloc+0x63/0xa0 [ 287.974584][ T4216] kmem_cache_alloc+0x1b9/0x2e0 [ 287.979282][ T4216] f2fs_alloc_inode+0x26/0x420 [ 287.983865][ T4216] iget_locked+0x14f/0x870 [ 287.988225][ T4216] f2fs_iget+0x55/0x50a0 [ 287.992298][ T4216] f2fs_fill_super+0x4c90/0x7e30 [ 287.997068][ T4216] mount_bdev+0x262/0x370 [ 288.001229][ T4216] f2fs_mount+0x34/0x40 [ 288.005230][ T4216] legacy_get_tree+0xf1/0x190 [ 288.009730][ T4216] vfs_get_tree+0x88/0x290 [ 288.014005][ T4216] do_new_mount+0x2ba/0xb30 [ 288.018302][ T4216] page_owner free stack trace missing [ 288.023515][ T4216] [ 288.025684][ T4216] Memory state around the buggy address: [ 288.031263][ T4216] ffff88812d0c6b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.039170][ T4216] ffff88812d0c6b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.047144][ T4216] >ffff88812d0c6c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.055027][ T4216] ^ [ 288.060253][ T4216] ffff88812d0c6c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 288.068150][ T4216] ffff88812d0c6d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc 00 00 [ 288.076032][ T4216] ================================================================== [ 288.083928][ T4216] Disabling lock debugging due to kernel taint [ 288.151810][ T4216] EXT4-fs warning (device loop0): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 288.332698][ T4216] EXT4-fs (loop0): mount failed [ 288.800197][ T4226] EXT4-fs (loop3): Test dummy encryption mode enabled [ 288.811056][ T4226] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.1215: inline data xattr refers to an external xattr inode [ 288.826445][ T4226] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.1215: couldn't read orphan inode 12 (err -117) [ 288.838542][ T4226] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 288.964214][ T24] kauditd_printk_skb: 39 callbacks suppressed [ 288.964251][ T24] audit: type=1400 audit(1732569085.732:873): avc: denied { append } for pid=4215 comm="syz.0.1213" name="loop1" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1