last executing test programs: 2.506856574s ago: executing program 3: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f0000000140)={[{@fsync_mode_posix}, {@noinline_data}, {@discard}, {@inline_dentry}]}, 0x1, 0x54f3, &(0x7f000000ab40)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0xee01, @ANYBLOB="100003000006000020"], 0x2c, 0x0) 2.176681635s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000080000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000001000080"]) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000410101c0"]) 1.904808917s ago: executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) unshare(0x400) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 1.798497853s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x54}}, 0x0) 1.575071288s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r1, 0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000012c0)={r2, 0x58, &(0x7f00000000c0)}, 0x10) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000023c0)={r2, &(0x7f00000012c0), &(0x7f00000013c0)=""/4096}, 0x20) 1.535216374s ago: executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000010000000000000002"]) 1.521568886s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000400)='kmem_cache_free\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000780), 0x6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@rand_addr=' \x01\x00', r5}, 0x14) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r7, 0x6, 0x0, 0x0, 0x2000e881) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="f3339b1f8c7f0000000000000004aa"], 0x0) 1.283248243s ago: executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x2, 0x1}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) poll(0x0, 0x0, 0x1000005) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}}, 0x20) 1.139191085s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf, 0x13, r2, 0x0) pselect6(0x9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x42400) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0xa, 0x8001) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0xfffffffe, 0x0, 0x1}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 1.053545868s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x54}}, 0x0) 1.052516288s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x5f) 1.04211462s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 997.653716ms ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x28011, r0, 0x0) ftruncate(r0, 0x796c) rt_sigaction(0x1a, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000380)) 982.733159ms ago: executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0x2, 0x4e, 0xce, 0x8, 0x5f9, 0xffff, 0x8fc0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x2, 0xad, 0x0, [], [{{0x9, 0x5, 0x1, 0x2}}]}}]}}]}}, 0x0) mknod$loop(0x0, 0x0, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) rename(0x0, 0x0) 980.073229ms ago: executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 956.597623ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@loopback}]}, 0x28}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 895.033152ms ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x254, &(0x7f0000000840)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 845.97062ms ago: executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) unshare(0x400) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 756.016694ms ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x6, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000980)=[{&(0x7f0000000000)="00000000c47652002f9144cf9f08d0a4d460c44b198217c0950fbedc62ab3497da6e1f75ae5b923fd4dd126a8875e3fcab06de8ec96cf837f48ac157109b9b23", 0x40}, {&(0x7f0000000080)="97f9e4a38f6e13d3d74aa76b4fa48764ce681d9e0abf99f19523f1ff7117cff420d39f14964d98c47159c604c277e7ff6efcf947d8d722f5701ac5ae0111c128f389ea7e130678a08732ec60c62c32ce1979814d44aa2785d1d0c43c4f8e6b3768e6a88f76ac2416008d7b193db8f15ef7a60038bfc1a8897dac3f04d13540ae1d40017fca5dfec93f19a6608d2bc1e8525bcd9ced020e49b42bacf79b498ef103bd095686722ebb7fb133fdc4f66b75adb668b3b4a7a8fb", 0xb8}, {&(0x7f0000000800)="4d58a943fa261343db28edc90040714b5186c4359028afefecf199c7697d7efab053a45b8f753b7ca9c121f46c56c434c1454236d66248148ae67a93ab479c1718477e6f942b0357dc1b7b11598bd89ecf79402cadb01652dcbca21624e6f4ab53cbe6407d42c42d1ac83d2453140e2c91908e77eb771e7a33cd347a57bae419c57243e654262bc4e7588452e3939193578c56108bd3a832d33b07adc116c08d8ac77c356d553891d048d70e33adafaf69867fab574e72801279c4ed37785c7be07037daf24ba254ae3896f244a5fa899c12c7448dea9da266bae31c1da388be9dc3016ad92525", 0xfffffff7}, {&(0x7f0000000340)="ae6edc446eef6a4e611fc2c077335e167a87faa462beead17b00f5bf224e043f16e770e6fd092d12f32cfefd4459ac7ba339376a6b1c91384a2593b2136c756f321e87ca13c6f917f88e1bb53241d00a2f8307c779a2ab248170516df85a0c6983ab044a445d8164edc33a0e2d2c38387c53b7c97f79de22647e6d722768530b4de6e5c4eec54f272baa8b97c5dcedafd7fc00b5bf42c46cfeadd69ad2b0b907ab47e5e02fb615709921751d9323fbdbe2451b52b132b780e80ea785b74cc241", 0x4b}, {&(0x7f0000000400)="0bbe2cdd2e4fe004d572d69b90e1c9a4579eae20805573cc2bed86165f12895f913e603d57573748ef44ea2c851d5b8b625e6ba88baed4f03717d41cb56c3383a4508fe984c9ea02b9faf6d08352a67212a2e83440ac09aa3ef9ba9887a96806a90a3a9087881f7bfca2c3d9f89cbf5a0ec6e89f641c2602db6352a2493f2309796d7951", 0x84}, {&(0x7f00000004c0)="4d51095426027c942814d000a358f4a71d61145aecd3b76364be9f18f483bb20c6136c9e0fa34352c4ea808707a2d50f1eaf5d96349b568e81f747fd94e02e4d7875703f77ed3cd0f3f180abf7ac95bfbdd79308645873c179b711f7c46fcd23c9038c9fd9b434ddb2842f3f40000000000000004bda6a3444aa03d2813eab5e73b32b42b1d83e1ef4f2c235e1be60c3e049a858bd1af49a64de19b101ff6425bce377bbeab01ce1ef5b7231bda512e6fa297a806ef87208e30300eb347cb5249af06d92a4b82c455fa6c314a2a7e08c0800000007259710020faf90ab26d3579ebd787108e559c041", 0xe9}, {&(0x7f00000005c0)="c36268aa080b1d9f42ca338e6577e548e1a286b54056daeb259b8265bb9e5fa5a957a6e52da7fd85f85f3ae70045a5094ac9eba6bb89d6838d0a5b81762bb8b610829e715208e479cd93ab0bcb6695a50877f4420878bbc61a", 0x59}, {&(0x7f0000000640)="d3df78aceb571a3c7ba4ada9bccaa405506cd0a30f751a08e7262b9f564a3e37af3e0739236ffb64e9a6f13c76d5b5ea9cf4499b3e5db8dcbd9b5e290093bf4a73fbc0746ca2b3c9f197af0624f7f391d026aa421eef65e57a2c0ceaa6989f005891bc4800e1043997937f079cb35473809e7cf38631713dd4813fd992f7580347444157436bc5a468841df3ed2f1b8bb0083171e992dff7610497d2b18bcae79f", 0xa1}, {&(0x7f0000000180)="877baa26fd11cf1a593d2506caece0da145bea11120fb527d9d352bbade074870bba9b22759a64a0d3c5009f8bbd79c3f84ca1e6e4f1ca06ff65d98bf9ccef62037c41da266be34d0009de0ef8818dfc5cfa147630dbd027b1b795640542cd3736ff95fb18b4876fd8999e33d36695a354d340000085f9d3ab", 0x79}, {&(0x7f0000000780)="1a206d73fb041d3769fc8017730daea2f64e56fbbddf8fc278584401e0b92779d41d7c503e136dd68b1a3293c457224141bbf954549af02c3e62d626f361c8e68251", 0x42}], 0xa, 0x9) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r5, 0x0, 0x2000000002ffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) 725.050958ms ago: executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x150, 0x150, 0x160, 0x90a, 0x240, 0x238, 0x238, 0x240, 0x238, 0xf, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @private2, [], [], 'vcan0\x00', 'nr0\x00'}, 0x500, 0xf8, 0x160, 0x0, {0x0, 0x74}, [@inet=@rpfilter={{0x28}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @remote, [], [], 'xfrm0\x00', 'macvtap0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x76) 700.550682ms ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x5f) 673.565997ms ago: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1, 0xfffffffffffffffe}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 662.885698ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x54}}, 0x0) 653.36353ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf, 0x13, r2, 0x0) pselect6(0x9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x42400) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0xa, 0x8001) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0xfffffffe, 0x0, 0x1}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 367.486753ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x28011, r0, 0x0) ftruncate(r0, 0x796c) rt_sigaction(0x1a, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000380)) 351.812836ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000280)=""/136}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x20) 344.917917ms ago: executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 341.121408ms ago: executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) pipe2(0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x5f8, 0x368, 0x25, 0x148, 0x0, 0x60, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2a0, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x658) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) ioctl$F2FS_IOC_GET_PIN_FILE(r9, 0x8004f50e, &(0x7f0000000000)) ioctl$UI_DEV_CREATE(r0, 0x5501) 287.344536ms ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 0s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x254, &(0x7f0000000840)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 4.644632][ T23] audit: type=1400 audit(1718888382.419:10): avc: denied { getattr } for pid=144 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=864 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 4.905385][ T161] udevd[161]: starting version 3.2.11 [ 4.938465][ T162] udevd[162]: starting eudev-3.2.11 [ 6.162665][ T140] rcS (140) used greatest stack depth: 21496 bytes left [ 15.027293][ T23] kauditd_printk_skb: 50 callbacks suppressed [ 15.027301][ T23] audit: type=1400 audit(1718888392.829:61): avc: denied { transition } for pid=288 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.031475][ T23] audit: type=1400 audit(1718888392.829:62): avc: denied { noatsecure } for pid=288 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.034669][ T23] audit: type=1400 audit(1718888392.829:63): avc: denied { write } for pid=288 comm="sh" path="pipe:[9800]" dev="pipefs" ino=9800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.038714][ T23] audit: type=1400 audit(1718888392.829:64): avc: denied { rlimitinh } for pid=288 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.041981][ T23] audit: type=1400 audit(1718888392.829:65): avc: denied { siginh } for pid=288 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. 2024/06/20 13:00:00 fuzzer started 2024/06/20 13:00:00 dialing manager at 10.128.0.163:30000 [ 22.674391][ T23] audit: type=1400 audit(1718888400.469:66): avc: denied { node_bind } for pid=347 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 22.694827][ T23] audit: type=1400 audit(1718888400.469:67): avc: denied { name_bind } for pid=347 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 22.736816][ T23] audit: type=1400 audit(1718888400.539:68): avc: denied { setattr } for pid=356 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.763158][ T355] cgroup1: Unknown subsys name 'net' [ 22.772473][ T355] cgroup1: Unknown subsys name 'net_prio' [ 22.779915][ T355] cgroup1: Unknown subsys name 'devices' [ 22.783655][ T23] audit: type=1400 audit(1718888400.559:69): avc: denied { mounton } for pid=355 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.810927][ T23] audit: type=1400 audit(1718888400.559:70): avc: denied { mount } for pid=355 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.830154][ T364] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.832957][ T23] audit: type=1400 audit(1718888400.559:71): avc: denied { mounton } for pid=357 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.865733][ T23] audit: type=1400 audit(1718888400.559:72): avc: denied { mount } for pid=357 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.888628][ T23] audit: type=1400 audit(1718888400.609:73): avc: denied { unmount } for pid=355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.908330][ T23] audit: type=1400 audit(1718888400.639:74): avc: denied { relabelto } for pid=364 comm="mkswap" name="swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.933535][ T23] audit: type=1400 audit(1718888400.639:75): avc: denied { write } for pid=364 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.933727][ T358] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.989325][ T355] cgroup1: Unknown subsys name 'hugetlb' [ 22.994964][ T355] cgroup1: Unknown subsys name 'rlimit' 2024/06/20 13:00:01 starting 5 executor processes [ 23.635392][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.642273][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.650014][ T371] device bridge_slave_0 entered promiscuous mode [ 23.657113][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.663930][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.671323][ T371] device bridge_slave_1 entered promiscuous mode [ 23.794396][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.801364][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.808762][ T376] device bridge_slave_0 entered promiscuous mode [ 23.815632][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.822623][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.829920][ T376] device bridge_slave_1 entered promiscuous mode [ 23.922304][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.929451][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.936575][ T381] device bridge_slave_0 entered promiscuous mode [ 23.946722][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.953540][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.960913][ T381] device bridge_slave_1 entered promiscuous mode [ 23.995878][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.003086][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.010387][ T375] device bridge_slave_0 entered promiscuous mode [ 24.017236][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.024054][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.031482][ T375] device bridge_slave_1 entered promiscuous mode [ 24.049250][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.056066][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.063433][ T379] device bridge_slave_0 entered promiscuous mode [ 24.070364][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.077193][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.084316][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.091167][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.110047][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.117046][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.124185][ T379] device bridge_slave_1 entered promiscuous mode [ 24.257497][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.264335][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.271463][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.278226][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.299783][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.306618][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.313771][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.320518][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.331727][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.339033][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.346257][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.353703][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.361008][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.368050][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.375395][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.382706][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.420143][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.428356][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.435167][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.442622][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.450657][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.457486][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.487975][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.495252][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.503179][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.511450][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.519490][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.526305][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.533599][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.555257][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.562744][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.570895][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.577715][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.584909][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.593081][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.599909][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.621504][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.628892][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.650401][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.659066][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.665880][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.673656][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.682030][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.690212][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.697904][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.705507][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.713662][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.721430][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.729467][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.746891][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.754730][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.762941][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.770886][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.779000][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.788194][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.811868][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.819261][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.826450][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.834641][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.843223][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.850051][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.857319][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.865376][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.873360][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.880180][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.887636][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.895671][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.903682][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.910505][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.917685][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.925721][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.933703][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.940516][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.957845][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.965740][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.974113][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.982665][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.990689][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.998531][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.006174][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.013944][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.021642][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.047099][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.055329][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.063796][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.073437][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.082404][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.090322][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.122186][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.132136][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.163697][ T404] ====================================================== [ 25.163697][ T404] WARNING: the mand mount option is being deprecated and [ 25.163697][ T404] will be removed in v5.15! [ 25.163697][ T404] ====================================================== [ 25.191648][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.200971][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.207788][ T404] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 25.209103][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.216122][ T404] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 25.216177][ T404] System zones: 0-1, 15-15, 18-18, 34-34 [ 25.225083][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.232178][ T404] EXT4-fs (loop1): orphan cleanup on readonly fs [ 25.237594][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.244891][ T404] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 25.251648][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.259003][ T404] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 25.273819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.281128][ T404] EXT4-fs error (device loop1): ext4_orphan_get:1260: comm syz-executor.1: bad orphan inode 16 [ 25.288013][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.295610][ T404] ext4_test_bit(bit=15, block=18) = 1 [ 25.306534][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.313285][ T404] is_bad_inode(inode)=0 [ 25.329868][ T404] NEXT_ORPHAN(inode)=0 [ 25.333761][ T404] max_ino=32 [ 25.334292][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.336970][ T404] i_nlink=2 [ 25.337000][ T404] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 25.357505][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.359731][ T404] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 25.365943][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.381038][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.388750][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.396853][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.404930][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.413050][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.431661][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.439708][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.447956][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.472121][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.480586][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.489057][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.498048][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.506228][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.518319][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.526522][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.537127][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.545376][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.553736][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.350894][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.360278][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.374015][ T425] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.396955][ T424] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 26.469442][ T431] overlayfs: upper fs does not support tmpfile. [ 26.475547][ T431] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 26.486144][ T431] overlayfs: failed to resolve './file0': -2 [ 26.638470][ T444] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 26.646194][ T444] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 26.654297][ T444] System zones: 0-1, 15-15, 18-18, 34-34 [ 26.660748][ T444] EXT4-fs (loop0): orphan cleanup on readonly fs [ 26.665686][ T429] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 26.671399][ T444] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 26.683998][ T429] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 26.692363][ T444] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 26.703996][ T444] EXT4-fs error (device loop0): ext4_orphan_get:1260: comm syz-executor.0: bad orphan inode 16 [ 26.707498][ T429] F2FS-fs (loop1): invalid crc value [ 26.728546][ T444] ext4_test_bit(bit=15, block=18) = 1 [ 26.734623][ T444] is_bad_inode(inode)=0 [ 26.739000][ T444] NEXT_ORPHAN(inode)=0 [ 26.740318][ T429] F2FS-fs (loop1): Found nat_bits in checkpoint [ 26.742906][ T461] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 26.758719][ T444] max_ino=32 [ 26.761750][ T444] i_nlink=2 [ 26.764689][ T444] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 26.797020][ T444] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 26.818170][ T429] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 26.825026][ T429] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 26.918094][ T469] device syzkaller0 entered promiscuous mode [ 27.050746][ T480] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 27.141807][ T488] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 27.285832][ T490] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 27.294057][ T490] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 27.302110][ T490] System zones: 0-1, 15-15, 18-18, 34-34 [ 27.308462][ T490] EXT4-fs (loop1): orphan cleanup on readonly fs [ 27.314833][ T490] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 27.329345][ T490] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 27.347621][ T490] EXT4-fs error (device loop1): ext4_orphan_get:1260: comm syz-executor.1: bad orphan inode 16 [ 27.369569][ T490] ext4_test_bit(bit=15, block=18) = 1 [ 27.375220][ T490] is_bad_inode(inode)=0 [ 27.379525][ T490] NEXT_ORPHAN(inode)=0 [ 27.383446][ T490] max_ino=32 [ 27.386620][ T490] i_nlink=2 [ 27.391553][ T490] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 27.415105][ T490] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 27.435252][ T508] device syzkaller0 entered promiscuous mode [ 27.611062][ T504] F2FS-fs (loop0): Found nat_bits in checkpoint [ 27.611798][ T527] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 27.676268][ T504] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 27.745883][ T23] kauditd_printk_skb: 59 callbacks suppressed [ 27.745894][ T23] audit: type=1400 audit(1718888405.539:132): avc: denied { create } for pid=538 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.773397][ T23] audit: type=1400 audit(1718888405.549:133): avc: denied { write } for pid=538 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.795451][ T23] audit: type=1400 audit(1718888405.549:134): avc: denied { nlmsg_write } for pid=538 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.816003][ T541] device syzkaller0 entered promiscuous mode [ 27.922607][ T23] audit: type=1400 audit(1718888405.719:135): avc: denied { create } for pid=542 comm="syz-executor.4" dev="anon_inodefs" ino=12798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.954400][ T547] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 27.965186][ T23] audit: type=1400 audit(1718888405.759:136): avc: denied { mount } for pid=546 comm="syz-executor.0" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.019486][ T23] audit: type=1400 audit(1718888405.819:137): avc: denied { unmount } for pid=375 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.026816][ T179] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 28.052179][ T375] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 28.193640][ T568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 28.333173][ T574] device syzkaller0 entered promiscuous mode [ 28.396240][ T576] syz-executor.3 (pid 576) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 28.603408][ T23] audit: type=1400 audit(1718888406.399:138): avc: denied { ioctl } for pid=588 comm="syz-executor.1" path="/dev/uinput" dev="devtmpfs" ino=845 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.667310][ T584] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 28.716127][ T420] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 28.733893][ T375] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 28.791665][ T593] input: syz1 as /devices/virtual/input/input4 [ 28.826711][ T23] audit: type=1400 audit(1718888406.579:139): avc: denied { create } for pid=588 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.883992][ T23] audit: type=1400 audit(1718888406.579:140): avc: denied { setopt } for pid=588 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.963795][ T599] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 28.972817][ T599] ext4 filesystem being mounted at /root/syzkaller-testdir1617715314/syzkaller.ztc2vR/13/file1 supports timestamps until 2038 (0x7fffffff) [ 29.032772][ T23] audit: type=1400 audit(1718888406.829:141): avc: denied { read write } for pid=596 comm="syz-executor.3" name="fuse" dev="devtmpfs" ino=9170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 29.059070][ T602] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 29.079178][ T602] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.093959][ T602] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 201 with error 28 [ 29.106690][ T602] EXT4-fs (loop2): This should not happen!! Data will be lost [ 29.106690][ T602] [ 29.116173][ T602] EXT4-fs (loop2): Total free blocks count 0 [ 29.123092][ T602] EXT4-fs (loop2): Free/Dirty block details [ 29.129457][ T602] EXT4-fs (loop2): free_blocks=2415919104 [ 29.135047][ T602] EXT4-fs (loop2): dirty_blocks=224 [ 29.140276][ T602] EXT4-fs (loop2): Block reservation details [ 29.146316][ T602] EXT4-fs (loop2): i_reserved_data_blocks=14 [ 29.153942][ T613] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 29.166001][ T613] EXT4-fs (loop2): This should not happen!! Data will be lost [ 29.166001][ T613] [ 29.188396][ T379] EXT4-fs error (device loop3): ext4_validate_block_bitmap:409: comm syz-executor.3: bg 0: block 18: invalid block bitmap [ 29.194660][ T615] device syzkaller0 entered promiscuous mode [ 29.202112][ T379] EXT4-fs error (device loop3) in ext4_free_blocks:5019: Corrupt filesystem [ 29.289995][ T623] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 29.370058][ T633] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 29.379904][ T627] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.392539][ T627] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.400160][ T627] device bridge_slave_0 entered promiscuous mode [ 29.408497][ T627] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.415347][ T627] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.422659][ T627] device bridge_slave_1 entered promiscuous mode [ 29.760322][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.768589][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.769112][ T645] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 29.784170][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.793945][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.804680][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.811540][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.815935][ T645] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.820213][ T649] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.833167][ T645] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 201 with error 28 [ 29.842027][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.854009][ T645] EXT4-fs (loop1): This should not happen!! Data will be lost [ 29.854009][ T645] [ 29.862400][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.871688][ T645] EXT4-fs (loop1): Total free blocks count 0 [ 29.879404][ T649] ext4 filesystem being mounted at /root/syzkaller-testdir129300468/syzkaller.Fe473L/18/file1 supports timestamps until 2038 (0x7fffffff) [ 29.884917][ T645] EXT4-fs (loop1): Free/Dirty block details [ 29.899231][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.904529][ T645] EXT4-fs (loop1): free_blocks=2415919104 [ 29.911340][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.926786][ T645] EXT4-fs (loop1): dirty_blocks=224 [ 29.932117][ T645] EXT4-fs (loop1): Block reservation details [ 29.938349][ T645] EXT4-fs (loop1): i_reserved_data_blocks=14 [ 29.945365][ T654] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 29.957915][ T654] EXT4-fs (loop1): This should not happen!! Data will be lost [ 29.957915][ T654] [ 29.968070][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.976052][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.983954][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.002819][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.013646][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.038730][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.057483][ T375] EXT4-fs error (device loop0): ext4_validate_block_bitmap:409: comm syz-executor.0: bg 0: block 18: invalid block bitmap [ 30.071253][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.076587][ T375] EXT4-fs error (device loop0) in ext4_free_blocks:5019: Corrupt filesystem [ 30.080174][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.131122][ T657] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 30.140658][ T657] ext4 filesystem being mounted at /root/syzkaller-testdir3191090095/syzkaller.mgnEBU/20/bus supports timestamps until 2038 (0x7fffffff) [ 30.160437][ T657] fs-verity: sha512 using implementation "sha512-generic" [ 30.172246][ T657] syz-executor.1 (657) used greatest stack depth: 20376 bytes left [ 30.188904][ T420] device bridge_slave_1 left promiscuous mode [ 30.204486][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.212066][ T420] device bridge_slave_0 left promiscuous mode [ 30.218516][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.300779][ T673] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 30.341904][ T682] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 30.428021][ T676] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.435630][ T676] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.443234][ T676] device bridge_slave_0 entered promiscuous mode [ 30.449956][ T676] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.456948][ T676] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.464101][ T676] device bridge_slave_1 entered promiscuous mode [ 30.518158][ T688] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 30.527714][ T688] ext4 filesystem being mounted at /root/syzkaller-testdir2965575166/syzkaller.4cainF/23/bus supports timestamps until 2038 (0x7fffffff) [ 30.570748][ T701] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 30.579779][ T701] ext4 filesystem being mounted at /root/syzkaller-testdir3191090095/syzkaller.mgnEBU/26/bus supports timestamps until 2038 (0x7fffffff) [ 30.946522][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.954773][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.971488][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.194318][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.202525][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.209391][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.217257][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.244882][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.254009][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.262864][ T702] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.269765][ T702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.318136][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.327537][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.491153][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.500527][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.526314][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.535358][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.586888][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.594661][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.627365][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.635874][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.659354][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.677209][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.695704][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.703993][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.782468][ T748] __nla_validate_parse: 1 callbacks suppressed [ 31.782476][ T748] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 31.817751][ T733] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 31.825348][ T733] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 31.843828][ T733] F2FS-fs (loop3): invalid crc value [ 31.867446][ T733] F2FS-fs (loop3): Found nat_bits in checkpoint [ 31.894776][ T733] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 31.901686][ T733] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 31.909165][ T420] device bridge_slave_1 left promiscuous mode [ 31.917127][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.929901][ T420] device bridge_slave_0 left promiscuous mode [ 31.937685][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.945863][ T735] F2FS-fs (loop1): Found nat_bits in checkpoint [ 31.993173][ T735] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 32.013968][ T371] attempt to access beyond end of device [ 32.013968][ T371] loop1: rw=2049, want=45104, limit=40427 [ 32.264085][ T773] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 32.275326][ T773] ext4 filesystem being mounted at /root/syzkaller-testdir2164147540/syzkaller.DiGAAi/4/bus supports timestamps until 2038 (0x7fffffff) [ 32.377405][ T781] loop1: p1 p2 [ 32.380883][ T781] loop1: p1 start 16777472 is beyond EOD, truncated [ 32.387329][ T781] loop1: p2 start 67698708 is beyond EOD, truncated [ 33.038793][ T162] loop1: p1 p2 [ 33.042238][ T162] loop1: p1 start 16777472 is beyond EOD, truncated [ 33.053862][ T23] kauditd_printk_skb: 146 callbacks suppressed [ 33.053872][ T23] audit: type=1326 audit(1718888410.209:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=780 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f2dfe86a7 code=0x7ffc0000 [ 33.083115][ T162] loop1: p2 start 67698708 is beyond EOD, truncated [ 33.084333][ T23] audit: type=1326 audit(1718888410.209:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=780 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f2dfae379 code=0x7ffc0000 [ 33.094602][ T789] audit: audit_backlog=65 > audit_backlog_limit=64 [ 33.119630][ T23] audit: type=1326 audit(1718888410.209:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=780 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f2dfe86a7 code=0x7ffc0000 [ 33.119645][ T23] audit: type=1326 audit(1718888410.209:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=780 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f2dfae379 code=0x7ffc0000 [ 33.119659][ T23] audit: type=1326 audit(1718888410.209:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=780 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f2dfe86a7 code=0x7ffc0000 [ 33.119673][ T23] audit: type=1326 audit(1718888410.209:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=780 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f2dfae379 code=0x7ffc0000 [ 33.119688][ T23] audit: type=1326 audit(1718888410.209:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=780 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f2dfe86a7 code=0x7ffc0000 [ 33.119702][ T23] audit: type=1326 audit(1718888410.209:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=780 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f2dfae379 code=0x7ffc0000 [ 33.119716][ T23] audit: type=1326 audit(1718888410.209:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=780 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f2dfe86a7 code=0x7ffc0000 [ 33.291055][ T789] binder: BINDER_SET_CONTEXT_MGR already set [ 33.316951][ T789] binder: 788:789 ioctl 4018620d 20000100 returned -16 [ 33.397537][ T804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 33.412539][ T804] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 33.488389][ T808] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 33.543349][ T808] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.558367][ T808] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 201 with error 28 [ 33.570642][ T808] EXT4-fs (loop4): This should not happen!! Data will be lost [ 33.570642][ T808] [ 33.581545][ T818] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 33.590348][ T818] ext4 filesystem being mounted at /root/syzkaller-testdir3191090095/syzkaller.mgnEBU/31/bus supports timestamps until 2038 (0x7fffffff) [ 33.604167][ T808] EXT4-fs (loop4): Total free blocks count 0 [ 33.609999][ T808] EXT4-fs (loop4): Free/Dirty block details [ 33.615762][ T808] EXT4-fs (loop4): free_blocks=2415919104 [ 33.621288][ T808] EXT4-fs (loop4): dirty_blocks=224 [ 33.626314][ T808] EXT4-fs (loop4): Block reservation details [ 33.632130][ T808] EXT4-fs (loop4): i_reserved_data_blocks=14 [ 33.673983][ T828] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 33.702257][ T828] EXT4-fs (loop4): This should not happen!! Data will be lost [ 33.702257][ T828] [ 34.396308][ T395] Bluetooth: hci0: command 0x1003 tx timeout [ 34.402277][ T764] Bluetooth: hci0: sending frame failed (-49) [ 34.430731][ T845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 34.440295][ T845] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 34.700645][ T860] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 34.733387][ T860] ext4 filesystem being mounted at /root/syzkaller-testdir3191090095/syzkaller.mgnEBU/32/file1 supports timestamps until 2038 (0x7fffffff) [ 34.904225][ T371] EXT4-fs error (device loop1): ext4_validate_block_bitmap:409: comm syz-executor.1: bg 0: block 18: invalid block bitmap [ 34.916960][ T371] EXT4-fs error (device loop1) in ext4_free_blocks:5019: Corrupt filesystem [ 34.939199][ T863] F2FS-fs (loop4): Found nat_bits in checkpoint [ 34.975127][ T863] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 34.995027][ T381] attempt to access beyond end of device [ 34.995027][ T381] loop4: rw=2049, want=45104, limit=40427 [ 35.080073][ T371] syz-executor.1 (371) used greatest stack depth: 19416 bytes left [ 35.157775][ T880] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.164603][ T880] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.172570][ T880] device bridge_slave_0 entered promiscuous mode [ 35.175748][ T882] FAT-fs (loop3): Directory bread(block 64) failed [ 35.179546][ T880] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.191918][ T880] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.198407][ T882] FAT-fs (loop3): Directory bread(block 65) failed [ 35.199285][ T880] device bridge_slave_1 entered promiscuous mode [ 35.211586][ T882] FAT-fs (loop3): Directory bread(block 66) failed [ 35.218158][ T882] FAT-fs (loop3): Directory bread(block 67) failed [ 35.224560][ T882] FAT-fs (loop3): Directory bread(block 68) failed [ 35.230965][ T882] FAT-fs (loop3): Directory bread(block 69) failed [ 35.237362][ T882] FAT-fs (loop3): Directory bread(block 70) failed [ 35.243657][ T882] FAT-fs (loop3): Directory bread(block 71) failed [ 35.250028][ T882] FAT-fs (loop3): Directory bread(block 72) failed [ 35.256314][ T882] FAT-fs (loop3): Directory bread(block 73) failed [ 35.272612][ T882] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 35.281005][ T882] FAT-fs (loop3): Filesystem has been set read-only [ 35.321860][ T880] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.328706][ T880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.335784][ T880] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.342588][ T880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.365800][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.376509][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.383862][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.397573][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.405569][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.412395][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.419978][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.428180][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.435209][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.447826][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.456061][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.458542][ T892] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 35.473735][ T892] ext4 filesystem being mounted at /root/syzkaller-testdir2164147540/syzkaller.DiGAAi/15/bus supports timestamps until 2038 (0x7fffffff) [ 35.475775][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.496193][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.554304][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.562938][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.571215][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.579252][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.587078][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.595044][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.163563][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.171940][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.182131][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.190664][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.786319][ T395] Bluetooth: hci0: command 0x1001 tx timeout [ 36.787782][ T420] device bridge_slave_1 left promiscuous mode [ 36.792534][ T764] Bluetooth: hci0: sending frame failed (-49) [ 36.804459][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.815185][ T420] device bridge_slave_0 left promiscuous mode [ 36.821633][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.045182][ T929] input: syz1 as /devices/virtual/input/input5 [ 37.274870][ T926] FAT-fs (loop3): Directory bread(block 64) failed [ 37.281350][ T926] FAT-fs (loop3): Directory bread(block 65) failed [ 37.288328][ T926] FAT-fs (loop3): Directory bread(block 66) failed [ 37.294689][ T926] FAT-fs (loop3): Directory bread(block 67) failed [ 37.301277][ T926] FAT-fs (loop3): Directory bread(block 68) failed [ 37.307755][ T926] FAT-fs (loop3): Directory bread(block 69) failed [ 37.314105][ T926] FAT-fs (loop3): Directory bread(block 70) failed [ 37.320552][ T926] FAT-fs (loop3): Directory bread(block 71) failed [ 37.326930][ T926] FAT-fs (loop3): Directory bread(block 72) failed [ 37.333180][ T926] FAT-fs (loop3): Directory bread(block 73) failed [ 37.358903][ T926] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 37.367720][ T926] FAT-fs (loop3): Filesystem has been set read-only [ 37.458701][ T936] FAT-fs (loop3): Directory bread(block 1285) failed [ 37.465883][ T936] FAT-fs (loop3): Directory bread(block 1285) failed [ 37.472723][ T936] FAT-fs (loop3): Directory bread(block 1285) failed [ 37.479282][ T936] FAT-fs (loop3): Directory bread(block 1285) failed [ 37.485990][ T936] FAT-fs (loop3): Directory bread(block 1285) failed [ 37.492593][ T936] FAT-fs (loop3): Directory bread(block 1285) failed [ 37.499064][ T936] FAT-fs (loop3): Directory bread(block 1285) failed [ 37.505922][ T936] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 37.653228][ T947] mmap: syz-executor.3 (947) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 38.333521][ T954] F2FS-fs (loop1): Found nat_bits in checkpoint [ 38.839213][ T954] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 38.862728][ T18] Bluetooth: hci0: command 0x1009 tx timeout [ 38.875664][ T968] FAT-fs (loop4): Directory bread(block 64) failed [ 38.882068][ T968] FAT-fs (loop4): Directory bread(block 65) failed [ 38.888983][ T968] FAT-fs (loop4): Directory bread(block 66) failed [ 38.896427][ T968] FAT-fs (loop4): Directory bread(block 67) failed [ 38.903202][ T968] FAT-fs (loop4): Directory bread(block 68) failed [ 38.909705][ T880] attempt to access beyond end of device [ 38.909705][ T880] loop1: rw=2049, want=45104, limit=40427 [ 38.910166][ T968] FAT-fs (loop4): Directory bread(block 69) failed [ 38.931808][ T968] FAT-fs (loop4): Directory bread(block 70) failed [ 38.938614][ T968] FAT-fs (loop4): Directory bread(block 71) failed [ 38.963022][ T968] FAT-fs (loop4): Directory bread(block 72) failed [ 38.976674][ T968] FAT-fs (loop4): Directory bread(block 73) failed [ 39.041465][ T968] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 39.050791][ T968] FAT-fs (loop4): Filesystem has been set read-only [ 39.678478][ T994] F2FS-fs (loop1): Invalid segment/section count (31, 64 x 1) [ 39.681029][ T998] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.685752][ T994] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 39.687270][ T994] F2FS-fs (loop1): invalid crc value [ 39.706860][ T994] F2FS-fs (loop1): Found nat_bits in checkpoint [ 39.725378][ T998] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.745334][ T994] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 39.752472][ T994] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 39.752559][ T376] attempt to access beyond end of device [ 39.752559][ T376] loop2: rw=2049, want=45104, limit=40427 [ 40.004053][ T1019] syz-executor.1[1019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.004104][ T1019] syz-executor.1[1019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.016622][ T1019] syz-executor.1[1019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.085630][ T1027] FAT-fs (loop1): Directory bread(block 64) failed [ 40.106748][ T1027] FAT-fs (loop1): Directory bread(block 65) failed [ 40.113113][ T1027] FAT-fs (loop1): Directory bread(block 66) failed [ 40.133922][ T1027] FAT-fs (loop1): Directory bread(block 67) failed [ 40.146834][ T1027] FAT-fs (loop1): Directory bread(block 68) failed [ 40.163350][ T1027] FAT-fs (loop1): Directory bread(block 69) failed [ 40.177098][ T1027] FAT-fs (loop1): Directory bread(block 70) failed [ 40.193595][ T1027] FAT-fs (loop1): Directory bread(block 71) failed [ 40.218313][ T1027] FAT-fs (loop1): Directory bread(block 72) failed [ 40.226115][ T1027] FAT-fs (loop1): Directory bread(block 73) failed [ 40.321095][ T1027] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 40.321593][ T1044] EXT4-fs (loop4): #blocks per group too big: 16384 [ 40.329996][ T1027] FAT-fs (loop1): Filesystem has been set read-only [ 40.492745][ T1055] syz-executor.1[1055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.492797][ T1055] syz-executor.1[1055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.505850][ T1055] syz-executor.1[1055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.835194][ T1078] FAT-fs (loop1): Directory bread(block 64) failed [ 40.853128][ T1078] FAT-fs (loop1): Directory bread(block 65) failed [ 40.859627][ T1078] FAT-fs (loop1): Directory bread(block 66) failed [ 40.865927][ T1078] FAT-fs (loop1): Directory bread(block 67) failed [ 40.872379][ T1078] FAT-fs (loop1): Directory bread(block 68) failed [ 40.878628][ T1078] FAT-fs (loop1): Directory bread(block 69) failed [ 40.884987][ T1078] FAT-fs (loop1): Directory bread(block 70) failed [ 40.892160][ T1078] FAT-fs (loop1): Directory bread(block 71) failed [ 40.898645][ T1078] FAT-fs (loop1): Directory bread(block 72) failed [ 40.903226][ T1085] syz-executor.3[1085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.903272][ T1085] syz-executor.3[1085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.904915][ T1078] FAT-fs (loop1): Directory bread(block 73) failed [ 40.943335][ T1085] syz-executor.3[1085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.988325][ T1094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1094 comm=syz-executor.1 [ 41.043248][ T1096] fscrypt (sda1, inode 1965): Direct key flag not allowed with different contents and filenames modes [ 41.096744][ T74] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 41.456697][ T74] usb 5-1: Using ep0 maxpacket: 8 [ 41.548385][ T1113] F2FS-fs (loop1): Invalid segment/section count (31, 64 x 1) [ 41.555682][ T1113] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 41.564881][ T1113] F2FS-fs (loop1): invalid crc value [ 41.571377][ T1113] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.586771][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 41.596296][ T74] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 41.606619][ T1113] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 41.613747][ T1113] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 41.766796][ T74] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=8f.c0 [ 41.775808][ T74] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.783649][ T74] usb 5-1: Product: syz [ 41.787629][ T74] usb 5-1: Manufacturer: syz [ 41.791999][ T74] usb 5-1: SerialNumber: syz [ 41.797371][ T74] usb 5-1: config 0 descriptor?? [ 41.837080][ T74] usbserial_generic 5-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 41.848326][ T74] usbserial_generic 5-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 41.858834][ T74] usbserial_generic 5-1:0.0: generic converter detected [ 41.866454][ T74] usb 5-1: generic converter now attached to ttyUSB0 [ 41.884079][ T1120] FAT-fs (loop1): Directory bread(block 64) failed [ 41.890479][ T1120] FAT-fs (loop1): Directory bread(block 65) failed [ 41.896764][ T1120] FAT-fs (loop1): Directory bread(block 66) failed [ 41.903247][ T1120] FAT-fs (loop1): Directory bread(block 67) failed [ 41.909928][ T1120] FAT-fs (loop1): Directory bread(block 68) failed [ 41.916277][ T1120] FAT-fs (loop1): Directory bread(block 69) failed [ 41.923795][ T1120] FAT-fs (loop1): Directory bread(block 70) failed [ 41.931386][ T1120] FAT-fs (loop1): Directory bread(block 71) failed [ 41.937797][ T1120] FAT-fs (loop1): Directory bread(block 72) failed [ 41.944159][ T1120] FAT-fs (loop1): Directory bread(block 73) failed [ 42.041283][ T395] usb 5-1: USB disconnect, device number 2 [ 42.050786][ T395] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 42.059717][ T395] usbserial_generic 5-1:0.0: device disconnected [ 42.114321][ T1127] cgroup: syz-executor.3 (1127) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 42.130950][ T1127] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 42.204544][ T23] kauditd_printk_skb: 1101 callbacks suppressed [ 42.204552][ T23] audit: type=1400 audit(1718888419.899:1390): avc: denied { create } for pid=1122 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.232744][ T23] audit: type=1400 audit(1718888419.909:1391): avc: denied { getopt } for pid=1122 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.304132][ T23] audit: type=1400 audit(1718888420.099:1392): avc: denied { connect } for pid=1129 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.308601][ T1127] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 42.327268][ T1136] fscrypt (sda1, inode 1965): Direct key flag not allowed with different contents and filenames modes [ 42.355132][ T23] audit: type=1400 audit(1718888420.099:1393): avc: denied { shutdown } for pid=1129 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.378014][ T23] audit: type=1400 audit(1718888420.149:1394): avc: denied { read } for pid=1131 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.439318][ T1146] EXT4-fs (loop0): #blocks per group too big: 16384 [ 42.859933][ T1161] input: syz1 as /devices/virtual/input/input6 [ 43.170688][ T1175] fscrypt (sda1, inode 1948): Direct key flag not allowed with different contents and filenames modes [ 43.199156][ T23] audit: type=1400 audit(1718888420.999:1395): avc: denied { write } for pid=1182 comm="syz-executor.3" name="001" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.207353][ T1183] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 43.298743][ T1186] EXT4-fs (loop4): #blocks per group too big: 16384 [ 43.408107][ T23] audit: type=1326 audit(1718888421.209:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1196 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe68ec6ef29 code=0x0 [ 43.505153][ T1201] FAT-fs (loop3): Directory bread(block 1285) failed [ 43.513144][ T1201] FAT-fs (loop3): Directory bread(block 1285) failed [ 43.519959][ T1201] FAT-fs (loop3): Directory bread(block 1285) failed [ 43.552004][ T1201] FAT-fs (loop3): Directory bread(block 1285) failed [ 43.700496][ T1201] FAT-fs (loop3): Directory bread(block 1285) failed [ 43.707280][ T1201] FAT-fs (loop3): Directory bread(block 1285) failed [ 43.713774][ T1201] FAT-fs (loop3): Directory bread(block 1285) failed [ 43.720817][ T1201] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 43.726711][ T395] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 43.768154][ T1207] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 43.853053][ T1216] FAT-fs (loop0): Directory bread(block 64) failed [ 43.859447][ T1216] FAT-fs (loop0): Directory bread(block 65) failed [ 43.865764][ T1216] FAT-fs (loop0): Directory bread(block 66) failed [ 43.872111][ T1216] FAT-fs (loop0): Directory bread(block 67) failed [ 43.878507][ T1216] FAT-fs (loop0): Directory bread(block 68) failed [ 43.884755][ T1216] FAT-fs (loop0): Directory bread(block 69) failed [ 43.891105][ T1216] FAT-fs (loop0): Directory bread(block 70) failed [ 43.897528][ T1216] FAT-fs (loop0): Directory bread(block 71) failed [ 43.903876][ T1216] FAT-fs (loop0): Directory bread(block 72) failed [ 43.910395][ T1216] FAT-fs (loop0): Directory bread(block 73) failed [ 43.966750][ T395] usb 2-1: Using ep0 maxpacket: 8 [ 44.002453][ T1231] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 44.087032][ T395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 44.096478][ T395] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 44.211861][ T1237] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.237970][ T23] audit: type=1326 audit(1718888422.039:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1247 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016b9acf29 code=0x7ffc0000 [ 44.251657][ T1237] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 44.269096][ T395] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=8f.c0 [ 44.292542][ T23] audit: type=1326 audit(1718888422.049:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1247 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016b9acf29 code=0x7ffc0000 [ 44.316623][ T395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.324468][ T395] usb 2-1: Product: syz [ 44.331155][ T395] usb 2-1: Manufacturer: syz [ 44.332666][ T23] audit: type=1326 audit(1718888422.069:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1247 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f016b9acf29 code=0x7ffc0000 [ 44.335735][ T395] usb 2-1: SerialNumber: syz [ 44.371772][ T395] usb 2-1: config 0 descriptor?? [ 44.380365][ T627] attempt to access beyond end of device [ 44.380365][ T627] loop3: rw=2049, want=45104, limit=40427 [ 44.397610][ T1252] FAT-fs (loop4): Directory bread(block 64) failed [ 44.404089][ T1252] FAT-fs (loop4): Directory bread(block 65) failed [ 44.410578][ T1252] FAT-fs (loop4): Directory bread(block 66) failed [ 44.417465][ T395] usbserial_generic 2-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 44.417687][ T1252] FAT-fs (loop4): Directory bread(block 67) failed [ 44.428629][ T395] usbserial_generic 2-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 44.453508][ T1252] FAT-fs (loop4): Directory bread(block 68) failed [ 44.460320][ T1252] FAT-fs (loop4): Directory bread(block 69) failed [ 44.466772][ T1252] FAT-fs (loop4): Directory bread(block 70) failed [ 44.479755][ T395] usbserial_generic 2-1:0.0: generic converter detected [ 44.486557][ T1252] FAT-fs (loop4): Directory bread(block 71) failed [ 44.494371][ T395] usb 2-1: generic converter now attached to ttyUSB0 [ 44.500959][ T1252] FAT-fs (loop4): Directory bread(block 72) failed [ 44.510103][ T1252] FAT-fs (loop4): Directory bread(block 73) failed [ 44.523016][ T1265] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 44.639292][ T428] usb 2-1: USB disconnect, device number 2 [ 44.645500][ T428] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 44.653967][ T428] usbserial_generic 2-1:0.0: device disconnected [ 44.668322][ T1277] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 44.677209][ T1277] ext4 filesystem being mounted at /root/syzkaller-testdir2965575166/syzkaller.4cainF/72/bus supports timestamps until 2038 (0x7fffffff) [ 44.695273][ T1280] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue [ 44.707529][ T1280] ext4 filesystem being mounted at /root/syzkaller-testdir1230857579/syzkaller.DHeNHx/57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 44.972512][ T1292] EXT4-fs (loop0): Ignoring removed orlov option [ 44.991007][ T1292] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 45.029139][ T1292] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 45.056325][ T1292] EXT4-fs error (device loop0): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.0: corrupt xattr in inline inode [ 45.069807][ T1292] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2221: inode #12: comm syz-executor.0: corrupted in-inode xattr [ 45.096961][ T1304] [ 45.099104][ T1304] ********************************************************** [ 45.106369][ T1304] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 45.113539][ T1304] ** ** [ 45.120884][ T1304] ** trace_printk() being used. Allocating extra memory. ** [ 45.128397][ T1304] ** ** [ 45.135548][ T1304] ** This means that this is a DEBUG kernel and it is ** [ 45.142780][ T1304] ** unsafe for production use. ** [ 45.150514][ T1304] ** ** [ 45.154202][ T1309] fscrypt (sda1, inode 1965): Direct key flag not allowed with different contents and filenames modes [ 45.157743][ T1304] ** If you see this message and you are not debugging ** [ 45.182777][ T1304] ** the kernel, report this immediately to your vendor! ** [ 45.204324][ T1304] ** ** [ 45.227147][ T1304] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 45.236705][ T1304] ********************************************************** [ 45.291727][ T1311] kvm: emulating exchange as write [ 45.398895][ T1321] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue [ 45.415997][ T1321] ext4 filesystem being mounted at /root/syzkaller-testdir2968340541/syzkaller.pB8Vyq/26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 45.525968][ T1330] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 45.541601][ T1330] File: /root/syzkaller-testdir1230857579/syzkaller.DHeNHx/62/memory.events PID: 1330 Comm: syz-executor.4 [ 45.588298][ T1337] EXT4-fs (loop3): Ignoring removed orlov option [ 45.595257][ T1337] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 45.611288][ T1337] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 45.644755][ T1337] EXT4-fs error (device loop3): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.3: corrupt xattr in inline inode [ 45.664457][ T1337] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #12: comm syz-executor.3: corrupted in-inode xattr [ 45.714544][ T1355] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue [ 45.726887][ T1355] ext4 filesystem being mounted at /root/syzkaller-testdir2965575166/syzkaller.4cainF/77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 45.866738][ T74] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 45.888755][ T1364] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 45.897761][ T1364] ext4 filesystem being mounted at /root/syzkaller-testdir2965575166/syzkaller.4cainF/78/bus supports timestamps until 2038 (0x7fffffff) [ 46.259226][ T74] usb 5-1: Using ep0 maxpacket: 8 [ 46.307972][ T1389] EXT4-fs (loop1): Ignoring removed orlov option [ 46.314164][ T1389] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 46.416549][ T1392] input: syz1 as /devices/virtual/input/input7 [ 46.425324][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 46.463999][ T74] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 46.495423][ T1389] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 46.525655][ T1389] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.1: corrupt xattr in inline inode [ 46.539182][ T1389] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2221: inode #12: comm syz-executor.1: corrupted in-inode xattr [ 46.556920][ T880] ================================================================== [ 46.564881][ T880] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xc1f/0xc30 [ 46.572678][ T880] Read of size 4 at addr ffff8881d27de000 by task syz-executor.1/880 [ 46.580658][ T880] [ 46.582841][ T880] CPU: 1 PID: 880 Comm: syz-executor.1 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 46.592726][ T880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 46.602618][ T880] Call Trace: [ 46.605752][ T880] dump_stack+0x1d8/0x241 [ 46.609918][ T880] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 46.615555][ T880] ? printk+0xd1/0x111 [ 46.619460][ T880] ? ext4_xattr_delete_inode+0xc1f/0xc30 [ 46.624930][ T880] print_address_description+0x8c/0x600 [ 46.630323][ T880] ? ext4_xattr_delete_inode+0xc1f/0xc30 [ 46.635784][ T880] __kasan_report+0xf3/0x120 [ 46.640204][ T880] ? ext4_xattr_delete_inode+0xc1f/0xc30 [ 46.645670][ T880] kasan_report+0x30/0x60 [ 46.649838][ T880] ext4_xattr_delete_inode+0xc1f/0xc30 [ 46.655133][ T880] ? check_preemption_disabled+0x9f/0x320 [ 46.660687][ T880] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 46.666605][ T880] ? __ext4_journal_start_sb+0x295/0x460 [ 46.672057][ T880] ext4_evict_inode+0x1378/0x1ac0 [ 46.676919][ T880] ? ext4_truncate_restart_trans+0xe0/0xe0 [ 46.682559][ T880] ? wb_io_lists_depopulated+0x85/0x170 [ 46.687936][ T880] ? ext4_truncate_restart_trans+0xe0/0xe0 [ 46.693581][ T880] evict+0x29b/0x6a0 [ 46.697312][ T880] vfs_rmdir+0x24b/0x3c0 [ 46.701390][ T880] do_rmdir+0x2c1/0x580 [ 46.705382][ T880] ? d_delete_notify+0xc0/0xc0 [ 46.709982][ T880] ? _raw_spin_unlock_irq+0x4a/0x60 [ 46.715020][ T880] do_syscall_64+0xca/0x1c0 [ 46.719357][ T880] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 46.725096][ T880] RIP: 0033:0x7f8a48db2707 [ 46.729338][ T880] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.748776][ T880] RSP: 002b:00007ffc168c1d98 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 46.757020][ T880] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f8a48db2707 [ 46.764862][ T880] RDX: 0000000000000200 RSI: 00007ffc168c2f40 RDI: 00000000ffffff9c [ 46.772644][ T880] RBP: 00007f8a48e0f6c6 R08: 0000000000000000 R09: 0000000000000000 [ 46.780457][ T880] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffc168c2f40 [ 46.788265][ T880] R13: 00007f8a48e0f6c6 R14: 000000000000b4ad R15: 0000000000000007 [ 46.796079][ T880] [ 46.798244][ T880] The buggy address belongs to the page: [ 46.803726][ T880] page:ffffea000749f780 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 [ 46.812655][ T880] flags: 0x8000000000000000() [ 46.817174][ T880] raw: 8000000000000000 ffffea00074a6048 ffff8881f6f5c320 0000000000000000 [ 46.825592][ T880] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 46.834003][ T880] page dumped because: kasan: bad access detected [ 46.840265][ T880] page_owner tracks the page as freed [ 46.845552][ T880] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|0x1000000) [ 46.857714][ T880] prep_new_page+0x18f/0x370 [ 46.862128][ T880] get_page_from_freelist+0x2d13/0x2d90 [ 46.867509][ T880] __alloc_pages_nodemask+0x393/0x840 [ 46.872715][ T880] wp_page_copy+0x20f/0x1820 [ 46.877141][ T880] handle_mm_fault+0x18cc/0x4990 [ 46.881918][ T880] __do_page_fault+0x509/0xbb0 [ 46.886514][ T880] page_fault+0x2f/0x40 [ 46.890504][ T880] page last free stack trace: [ 46.895047][ T880] free_unref_page_prepare+0x297/0x380 [ 46.900324][ T880] free_unref_page_list+0x10a/0x590 [ 46.905349][ T880] release_pages+0xad8/0xb20 [ 46.909775][ T880] tlb_finish_mmu+0x177/0x320 [ 46.914289][ T880] exit_mmap+0x2dc/0x520 [ 46.918370][ T880] __mmput+0x8e/0x2c0 [ 46.922187][ T880] do_exit+0xc08/0x2bc0 [ 46.926179][ T880] do_group_exit+0x138/0x300 [ 46.930604][ T880] __x64_sys_exit_group+0x3b/0x40 [ 46.935465][ T880] do_syscall_64+0xca/0x1c0 [ 46.939807][ T880] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 46.945529][ T880] [ 46.947699][ T880] Memory state around the buggy address: [ 46.953171][ T880] ffff8881d27ddf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2024/06/20 13:00:24 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 46.961154][ T880] ffff8881d27ddf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.969053][ T880] >ffff8881d27de000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.976947][ T880] ^ [ 46.980856][ T880] ffff8881d27de080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.988755][ T880] ffff8881d27de100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.996654][ T880] ================================================================== [ 47.004553][ T880] Disabling lock debugging due to kernel taint