last executing test programs: 19.399283127s ago: executing program 0 (id=1579): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 16.429361263s ago: executing program 0 (id=1583): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x800) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, r5) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r6, &(0x7f00000008c0)='wchan\x00') 13.599983167s ago: executing program 2 (id=1589): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'erspan0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r0, 0x2, 0x3, r0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@loopback={0xfec0ffffffffffff}, 0x46, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r4, @ANYBLOB], 0x34}}, 0x0) 12.611293289s ago: executing program 2 (id=1591): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',fscache']) chdir(&(0x7f0000000000)='./file0\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 12.52770748s ago: executing program 2 (id=1592): modify_ldt$write2(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(r0, 0x0, 0x0, 0x1ffffffffe) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r4, &(0x7f00000002c0)=""/109, 0x6d, 0x0) 12.442116831s ago: executing program 3 (id=1593): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',fscache']) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 12.341558732s ago: executing program 0 (id=1594): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',fscache']) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 12.340791633s ago: executing program 0 (id=1595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\'\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0xb) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x25) sendto(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xb, 0x7, "86df978be36463552b768254e3036a44a83c50f53dda8ed4cc02ade517e6656e9c9c1bf78f96dfed702d4af81e1d1dbb6e9f2f773c0949fb8606a42cb18f44", 0x24}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000440), 0x1000a) 11.68201092s ago: executing program 4 (id=1596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x35]}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 9.547745806s ago: executing program 3 (id=1597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\'\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0xb) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x25) sendto(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xb, 0x7, "86df978be36463552b768254e3036a44a83c50f53dda8ed4cc02ade517e6656e9c9c1bf78f96dfed702d4af81e1d1dbb6e9f2f773c0949fb8606a42cb18f44", 0x24}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000440), 0x1000a) 9.261477979s ago: executing program 4 (id=1599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\'\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0xb) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x25) sendto(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xb, 0x7, "86df978be36463552b768254e3036a44a83c50f53dda8ed4cc02ade517e6656e9c9c1bf78f96dfed702d4af81e1d1dbb6e9f2f773c0949fb8606a42cb18f44", 0x24}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000440), 0x1000a) 9.049884342s ago: executing program 0 (id=1600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), 0x0}, 0x20) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b120500ab0a0000240012800b0001", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4000051}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x40000) 7.974701405s ago: executing program 2 (id=1601): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'erspan0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r0, 0x2, 0x3, r0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@loopback={0xfec0ffffffffffff}, 0x46, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r4, @ANYBLOB], 0x34}}, 0x0) 6.134255327s ago: executing program 1 (id=1602): prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$link(0x8, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 4.491974226s ago: executing program 4 (id=1603): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',fscache']) chdir(&(0x7f0000000000)='./file0\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 4.489109166s ago: executing program 2 (id=1613): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000100)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32], 0x1, 0x5550, &(0x7f00000024c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0xfffffd48}], 0x1, 0x3, 0x0, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x2, 0x67, 0x3}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 4.275883449s ago: executing program 3 (id=1604): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x800) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, r5) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r6, &(0x7f00000008c0)='wchan\x00') 3.496525748s ago: executing program 4 (id=1605): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000", @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000200)) io_setup(0x402, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[0x0]) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f00000003c0)={@multicast1, @empty, @empty}, 0xc) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3d0, 0xe8, 0x1f8, 0x1f8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'pimreg0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@arp={@private, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac=@random="458aec8c2261"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_bridge\x00', 'pim6reg0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @empty, @multicast2}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team0\x00', 'batadv0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) setitimer(0x0, 0x0, 0x0) 3.494541068s ago: executing program 1 (id=1606): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$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") lchown(0x0, 0x0, 0xee01) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_clone3(&(0x7f0000000480)={0x42030200, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x11}, &(0x7f0000001280)=""/164, 0xa4, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000000c0)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000a40)={[{@minixdf}, {@errors_remount}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x100000000bf}}, {@usrjquota}]}, 0x1, 0x454, &(0x7f0000000400)="$eJzs3M9vFFUcAPDvTH8gArYi/uCHWkVj44+WAioHD2o08YCJiR702LSFIIUaWhMhRMAYPBlj4t149F/wpBdjPJl41bshIYYL4GnM7M7Q3WV3oWWX0e7nkwy8N/OG97775u2+mbdLAANrIv8jidgaEX9ExFg921xgov7XtStn565fOTuXRJa9+3dSK3f1ytm5smh53pYiM5lGpJ8nsbtNvcunzxyfXVxcOFXkp1dOfDS9fPrMC8dOzB5dOLpwcv+hQwcPzLz80v4XexJn3qaruz5d2rPzrQ++fvvwl03xt8TRIxPdDj6dZT2urlrbGtLJcIUNYU2GIiLvrpHa+B+LoVjtvLF487NKGwf0VZZl2ZbOh89nwAaWRHPekIdBUX7Q5/e/5dY6CXi1f9OPyl1+rX4DlMd9rdhqB7IsO1eUGWm5v+2liYh4//w/3+Zb9Oc5BABAkx/z+c/z7eZ/aTzUUO6+Ym1oPCLuj4jtEfFAROyIiAcjamUfjohH1lh/6yLJzfOf9NK6ArtN+fzvlWJtq2n+F2lZZHyoyG2rxT+SHDm2uLCveE0mY2RTnp/pUsdPb/z+VadjjfO/fMvrL+eCRTsuDW9qPmd+dmX2TmJudPlCxK7hdvEnN1YCkojYGRG71lnHsWe/39Pp2K3j76IH60zZdxHP1Pv/fLTEX0q6r09O3xOLC/umy6viZr/+dvGdTvXfUfw9kPf/vW2v/xvxjyeN67XLa6/j4p9fdLynWe/1P5q8V0uPFvs+mV1ZOTUTMZocrje6cf/+1XPLfFk+j39yb/vxvz1WX4ndEZFfxI9GxGMR8XjR9ici4smI2Nsl/l9ef+rD9cffX3n882vq/9XEaLTuaZ8YOv7zD02Vjt8U//Xu/X+wlpos9tzO+9/ttGt9VzMAAAD8/6QRsTWSdOpGOk2npurfl98RkS4uLa88d2Tp45Pz9d8IjMdIWj7pGmt4HjpT3NbX8xciov7VgvL4geK58TdDm2v5qbmlxfmqg4cBt6XD+M/9NVR164C+G47YVHUbgGr4vSYMLuMfBpfxD4OrzfjfXEU7gLuv3ef/uQraAdx9LePfsh8MEPf/MLg6jv+N/D//ADU+/2EgLW+OW/9Ivmui/JfWefqGTcTIf6IZd57IkradG2nVDZPoZ6La9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBe+TcAAP//yinjzA==") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b) 3.195387351s ago: executing program 4 (id=1607): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$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") lchown(0x0, 0x0, 0xee01) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_clone3(&(0x7f0000000480)={0x42030200, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x11}, &(0x7f0000001280)=""/164, 0xa4, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000000c0)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000a40)={[{@minixdf}, {@errors_remount}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x100000000bf}}, {@usrjquota}]}, 0x1, 0x454, &(0x7f0000000400)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b) 2.567709609s ago: executing program 1 (id=1608): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',fscache']) chdir(&(0x7f0000000000)='./file0\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 2.49377412s ago: executing program 1 (id=1609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x35]}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2.397633371s ago: executing program 3 (id=1610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\'\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0xb) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x25) sendto(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xb, 0x7, "86df978be36463552b768254e3036a44a83c50f53dda8ed4cc02ade517e6656e9c9c1bf78f96dfed702d4af81e1d1dbb6e9f2f773c0949fb8606a42cb18f44", 0x24}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000440), 0x1000a) 1.472144212s ago: executing program 1 (id=1611): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r4, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 798.24185ms ago: executing program 3 (id=1612): syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 551.726183ms ago: executing program 1 (id=1614): syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 551.099963ms ago: executing program 2 (id=1615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\'\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0xb) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x25) sendto(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xb, 0x7, "86df978be36463552b768254e3036a44a83c50f53dda8ed4cc02ade517e6656e9c9c1bf78f96dfed702d4af81e1d1dbb6e9f2f773c0949fb8606a42cb18f44", 0x24}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000440), 0x1000a) 550.871673ms ago: executing program 4 (id=1616): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_delete(0x0) 388.737815ms ago: executing program 0 (id=1617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\'\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0xb) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x25) sendto(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xb, 0x7, "86df978be36463552b768254e3036a44a83c50f53dda8ed4cc02ade517e6656e9c9c1bf78f96dfed702d4af81e1d1dbb6e9f2f773c0949fb8606a42cb18f44", 0x24}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000440), 0x1000a) 0s ago: executing program 3 (id=1618): prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$link(0x8, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") kernel console output (not intermixed with test programs): 943][ T796] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 350.018063][ T23] audit: type=1326 audit(1745497288.710:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff368129969 code=0x7ffc0000 [ 350.041794][ T23] audit: type=1326 audit(1745497288.710:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff368129969 code=0x7ffc0000 [ 350.065681][ T23] audit: type=1326 audit(1745497288.710:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff368129969 code=0x7ffc0000 [ 350.089301][ T23] audit: type=1400 audit(1745497288.780:600): avc: denied { rename } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=17679 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 350.111843][ T23] audit: type=1400 audit(1745497288.780:601): avc: denied { unlink } for pid=145 comm="syslogd" name="messages.0" dev="tmpfs" ino=10846 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 350.162886][ T4008] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 350.171624][ T4008] blk_update_request: I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 350.182569][ T4008] EXT4-fs (loop1): couldn't read superblock of external journal [ 350.241040][ T599] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 350.248970][ T599] usb 5-1: config 0 has no interface number 0 [ 350.290895][ T796] usb 4-1: Using ep0 maxpacket: 8 [ 350.320963][ T389] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 350.423501][ T599] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0312, bcdDevice=7f.1c [ 350.433274][ T599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.446271][ T599] usb 5-1: Product: syz [ 350.451864][ T599] usb 5-1: Manufacturer: syz [ 350.458080][ T599] usb 5-1: SerialNumber: syz [ 350.538870][ T599] usb 5-1: config 0 descriptor?? [ 350.561131][ T389] usb 3-1: Using ep0 maxpacket: 8 [ 350.643376][ T4015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.887'. [ 350.676889][ T4015] Zero length message leads to an empty skb [ 350.720998][ T389] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.744813][ T389] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 350.770948][ T389] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 350.788284][ T389] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 350.799627][ T389] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 350.809898][ T389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.832568][ T599] usb 5-1: USB disconnect, device number 9 [ 350.871919][ T389] hub 3-1:1.0: bad descriptor, ignoring hub [ 350.878378][ T389] hub: probe of 3-1:1.0 failed with error -5 [ 350.886404][ T389] cdc_wdm 3-1:1.0: skipping garbage [ 350.891668][ T389] cdc_wdm 3-1:1.0: skipping garbage [ 350.898139][ T389] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 351.000989][ T796] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.011387][ T796] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 351.020525][ T796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 351.032155][ T796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 351.043350][ T796] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 351.052212][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.091336][ T796] hub 4-1:1.0: bad descriptor, ignoring hub [ 351.097096][ T796] hub: probe of 4-1:1.0 failed with error -5 [ 351.103377][ T796] cdc_wdm 4-1:1.0: skipping garbage [ 351.108386][ T796] cdc_wdm 4-1:1.0: skipping garbage [ 351.114690][ T796] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 351.191010][ T401] usb 3-1: USB disconnect, device number 11 [ 351.521014][ T401] usb 4-1: USB disconnect, device number 10 [ 351.700957][ T796] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 352.140993][ T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.151944][ T796] usb 5-1: config 0 has no interfaces? [ 352.157286][ T796] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 352.166500][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.175037][ T796] usb 5-1: config 0 descriptor?? [ 352.462733][ T4072] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 352.471455][ T4072] blk_update_request: I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 352.482358][ T4072] EXT4-fs (loop3): couldn't read superblock of external journal [ 353.300992][ T599] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 353.302733][ T4106] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue [ 353.308520][ T389] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 353.318857][ T4106] ext4 filesystem being mounted at /176/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 353.580914][ T599] usb 2-1: Using ep0 maxpacket: 8 [ 353.710114][ T599] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 353.718969][ T389] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.728936][ T389] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 353.737811][ T389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.746275][ T389] usb 4-1: config 0 descriptor?? [ 353.901027][ T599] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 353.909963][ T599] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 353.918247][ T599] usb 2-1: Product: syz [ 353.922234][ T599] usb 2-1: Manufacturer: syz [ 353.926581][ T599] usb 2-1: SerialNumber: syz [ 353.932008][ T599] usb 2-1: config 0 descriptor?? [ 354.270670][ T23] kauditd_printk_skb: 4 callbacks suppressed [ 354.270682][ T23] audit: type=1326 audit(1745497292.970:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdd8bb969 code=0x7ffc0000 [ 354.300512][ T23] audit: type=1326 audit(1745497292.970:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdd8bb969 code=0x7ffc0000 [ 354.323834][ T23] audit: type=1326 audit(1745497292.980:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7cdd8ba2d0 code=0x7ffc0000 [ 354.348502][ T23] audit: type=1326 audit(1745497292.980:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7cdd8bd197 code=0x7ffc0000 [ 354.372283][ T23] audit: type=1326 audit(1745497292.980:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cdd8bb969 code=0x7ffc0000 [ 354.396492][ T23] audit: type=1326 audit(1745497292.980:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7cdd8bd197 code=0x7ffc0000 [ 354.419802][ T23] audit: type=1326 audit(1745497292.980:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7cdd8ba5ca code=0x7ffc0000 [ 354.424237][ T599] usb 5-1: USB disconnect, device number 10 [ 354.444015][ T23] audit: type=1326 audit(1745497292.980:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdd8bb969 code=0x7ffc0000 [ 354.501134][ T23] audit: type=1326 audit(1745497292.980:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdd8bb969 code=0x7ffc0000 [ 354.534393][ T23] audit: type=1326 audit(1745497292.980:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7cdd8bb969 code=0x7ffc0000 [ 355.338867][ T2214] usb 2-1: USB disconnect, device number 11 [ 355.432288][ T599] usb 4-1: USB disconnect, device number 11 [ 355.911055][ T106] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 356.230911][ T2214] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 356.269993][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 356.280800][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.288647][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 356.299629][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.307449][ T4186] loop7: unable to read partition table [ 356.312988][ T4186] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 356.324322][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 356.335034][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.346629][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 356.358098][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.367399][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 356.378102][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.386175][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 356.397047][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.405169][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 356.415891][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.497689][ T2214] usb 2-1: Using ep0 maxpacket: 16 [ 356.503859][ T106] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 356.513048][ T106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.520906][ T106] usb 1-1: Product: syz [ 356.524849][ T106] usb 1-1: Manufacturer: syz [ 356.529303][ T106] usb 1-1: SerialNumber: syz [ 356.534358][ T106] usb 1-1: config 0 descriptor?? [ 356.580964][ T599] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 356.880998][ T2214] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 356.889945][ T2214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.897997][ T2214] usb 2-1: Product: syz [ 356.902037][ T2214] usb 2-1: Manufacturer: syz [ 356.906492][ T2214] usb 2-1: SerialNumber: syz [ 356.911669][ T2214] usb 2-1: config 0 descriptor?? [ 356.951039][ T599] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.961684][ T2214] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 356.968997][ T599] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 356.978255][ T2214] usb 2-1: Detected FT-X [ 356.982432][ T599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.990792][ T599] usb 3-1: config 0 descriptor?? [ 357.112317][ T4195] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 357.121243][ T4195] ext4 filesystem being mounted at /209/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 357.160944][ T2214] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 357.451005][ T599] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 357.473463][ T4212] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 357.483223][ T4212] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 357.642131][ T2214] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 357.690925][ T599] usb 4-1: Using ep0 maxpacket: 16 [ 357.731110][ T599] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 357.811050][ T599] usb 4-1: config index 0 descriptor too short (expected 57874, got 18) [ 357.819266][ T599] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.837526][ T599] usb 4-1: config 0 has no interfaces? [ 357.843177][ T2214] usb 1-1: USB disconnect, device number 10 [ 357.843498][ T796] usb 2-1: USB disconnect, device number 12 [ 357.854834][ T106] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 357.863955][ T796] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 357.873499][ T796] ftdi_sio 2-1:0.0: device disconnected [ 357.921001][ T599] usb 4-1: config index 1 descriptor too short (expected 57874, got 18) [ 357.929263][ T599] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.939785][ T599] usb 4-1: config 0 has no interfaces? [ 358.021042][ T599] usb 4-1: config index 2 descriptor too short (expected 57874, got 18) [ 358.029303][ T599] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.039467][ T599] usb 4-1: config 0 has no interfaces? [ 358.110893][ T106] usb 5-1: Using ep0 maxpacket: 16 [ 358.121006][ T599] usb 4-1: config index 3 descriptor too short (expected 57874, got 18) [ 358.129299][ T599] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.139160][ T599] usb 4-1: config 0 has no interfaces? [ 358.230962][ T106] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.241057][ T106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 358.252386][ T106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 358.260998][ T599] usb 4-1: config index 4 descriptor too short (expected 57874, got 18) [ 358.262655][ T106] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 358.271027][ T599] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.280481][ T106] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.299338][ T599] usb 4-1: config 0 has no interfaces? [ 358.308355][ T2214] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 358.310393][ T401] usb 3-1: USB disconnect, device number 12 [ 358.381093][ T106] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 358.390233][ T106] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 358.398085][ T106] usb 5-1: Manufacturer: syz [ 358.406230][ T106] usb 5-1: config 0 descriptor?? [ 358.411000][ T599] usb 4-1: config index 5 descriptor too short (expected 57874, got 18) [ 358.411014][ T599] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.411023][ T599] usb 4-1: config 0 has no interfaces? [ 358.578363][ T599] usb 4-1: config index 6 descriptor too short (expected 57874, got 18) [ 358.587004][ T599] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.597352][ T599] usb 4-1: config 0 has no interfaces? [ 358.661551][ T4240] F2FS-fs (loop1): Unrecognized mount option "discard_unit=segment" or missing value [ 358.681025][ T599] usb 4-1: config index 7 descriptor too short (expected 57874, got 18) [ 358.689386][ T599] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.699376][ T599] usb 4-1: config 0 has no interfaces? [ 358.700983][ T401] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 358.750961][ T2214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.762018][ T2214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.771581][ T2214] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 358.780385][ T2214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.789031][ T2214] usb 1-1: config 0 descriptor?? [ 358.861090][ T599] usb 4-1: New USB device found, idVendor=04e2, idProduct=1402, bcdDevice=71.29 [ 358.870172][ T599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.877970][ T599] usb 4-1: Product: syz [ 358.881957][ T599] usb 4-1: Manufacturer: syz [ 358.886331][ T599] usb 4-1: SerialNumber: syz [ 358.891592][ T599] usb 4-1: config 0 descriptor?? [ 358.970965][ T401] usb 3-1: Using ep0 maxpacket: 32 [ 358.990944][ T106] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 359.090977][ T401] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.101894][ T401] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.111711][ T401] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 359.120541][ T401] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.135073][ T599] usb 4-1: USB disconnect, device number 12 [ 359.161442][ T401] hub 3-1:4.0: USB hub found [ 359.272121][ T2214] hid-steam 0003:28DE:1142.000C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 359.284294][ T2214] hid-steam 0003:28DE:1142.000D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 359.350995][ T106] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.361826][ T106] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.370958][ T2214] hid-steam 0003:28DE:1142.000C: Steam wireless receiver connected [ 359.371657][ T106] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.392057][ T106] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.401070][ T106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.409379][ T106] usb 2-1: config 0 descriptor?? [ 359.430996][ T401] hub 3-1:4.0: config failed, can't read hub descriptor (err -90) [ 359.781065][ T2214] usb 3-1: USB disconnect, device number 13 [ 359.861523][ T401] usb 1-1: USB disconnect, device number 11 [ 359.868239][ T401] hid-steam 0003:28DE:1142.000C: Steam wireless receiver disconnected [ 359.877292][ T106] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 359.888188][ T106] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 360.087038][ T401] usb 2-1: USB disconnect, device number 13 [ 360.166930][ T4254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.967'. [ 360.328011][ T4269] attempt to access beyond end of device [ 360.328011][ T4269] loop2: rw=2049, want=1041, limit=128 [ 360.393443][ T23] kauditd_printk_skb: 7 callbacks suppressed [ 360.393455][ T23] audit: type=1400 audit(1745497299.100:623): avc: denied { getopt } for pid=4275 comm="syz.2.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 360.419476][ T23] audit: type=1400 audit(1745497299.100:624): avc: denied { read } for pid=4277 comm="syz.2.978" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 360.584560][ T2046] usb 5-1: USB disconnect, device number 11 [ 360.632912][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.639950][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.650957][ T401] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 360.746317][ T23] audit: type=1400 audit(1745497299.450:625): avc: denied { ioctl } for pid=4294 comm="syz.1.986" path="/dev/usbmon7" dev="devtmpfs" ino=9459 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 360.780958][ T599] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 360.796581][ T23] audit: type=1400 audit(1745497299.500:626): avc: denied { create } for pid=4296 comm="syz.1.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 360.816593][ T23] audit: type=1400 audit(1745497299.520:627): avc: denied { connect } for pid=4296 comm="syz.1.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 360.847651][ T23] audit: type=1400 audit(1745497299.540:628): avc: denied { ioctl } for pid=4296 comm="syz.1.987" path="socket:[36933]" dev="sockfs" ino=36933 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 360.902455][ T401] usb 1-1: Using ep0 maxpacket: 8 [ 361.020958][ T401] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.030900][ T599] usb 4-1: Using ep0 maxpacket: 16 [ 361.043552][ T401] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 361.053747][ T401] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 361.065488][ T401] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 361.090194][ T401] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 361.100655][ T401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.148259][ T4317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 361.153545][ T401] hub 1-1:1.0: bad descriptor, ignoring hub [ 361.176551][ T401] hub: probe of 1-1:1.0 failed with error -5 [ 361.187720][ T401] cdc_wdm 1-1:1.0: skipping garbage [ 361.198135][ T401] cdc_wdm 1-1:1.0: skipping garbage [ 361.206366][ T401] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 361.281187][ T23] audit: type=1400 audit(1745497299.980:629): avc: denied { create } for pid=4327 comm="syz.2.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 361.379850][ T23] audit: type=1400 audit(1745497300.070:630): avc: denied { connect } for pid=4329 comm="syz.2.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 361.401755][ T4326] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 361.411389][ T599] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 361.421533][ T4326] blk_update_request: I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.432340][ T4326] EXT4-fs (loop1): couldn't read superblock of external journal [ 361.436491][ T23] audit: type=1400 audit(1745497300.130:631): avc: denied { shutdown } for pid=4329 comm="syz.2.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 361.459723][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.470426][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 361.478569][ T599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.482334][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.497277][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 361.505131][ T4333] loop7: unable to read partition table [ 361.510601][ T4333] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 361.524304][ T599] usb 4-1: Product: syz [ 361.529233][ T599] usb 4-1: Manufacturer: syz [ 361.535260][ T599] usb 4-1: SerialNumber: syz [ 361.544152][ T2214] usb 1-1: USB disconnect, device number 12 [ 361.556252][ T599] usb 4-1: config 0 descriptor?? [ 361.665198][ T599] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 361.702508][ T599] usb 4-1: Detected FT232H [ 361.821256][ T599] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 361.970915][ T2214] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 362.044552][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.049557][ T4339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1002'. [ 362.055376][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 362.072128][ T4339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1002'. [ 362.080926][ T4339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1002'. [ 362.091744][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.102447][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 362.110162][ T163] loop7: unable to read partition table [ 362.260890][ T2214] usb 1-1: Using ep0 maxpacket: 8 [ 362.275108][ T23] audit: type=1400 audit(1745497300.980:632): avc: denied { name_bind } for pid=4364 comm="syz.2.1012" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 362.367521][ T599] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 362.481301][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.492466][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 362.500630][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.509767][ T2214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.511502][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 362.521380][ T2214] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 362.529080][ T4377] loop7: unable to read partition table [ 362.543259][ T4377] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 362.544178][ T2214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 362.562837][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.566494][ T2214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 362.573870][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 362.585029][ T2214] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 362.593228][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.601455][ T2214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.612121][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 362.627885][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.638673][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 362.646558][ T401] usb 4-1: USB disconnect, device number 13 [ 362.652629][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 362.660923][ T401] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 362.663367][ T2214] hub 1-1:1.0: bad descriptor, ignoring hub [ 362.672646][ T401] ftdi_sio 4-1:0.0: device disconnected [ 362.676722][ T2214] hub: probe of 1-1:1.0 failed with error -5 [ 362.688886][ T2214] cdc_wdm 1-1:1.0: skipping garbage [ 362.694089][ T2214] cdc_wdm 1-1:1.0: skipping garbage [ 362.700217][ T2214] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 362.711090][ T2046] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 362.950992][ T2046] usb 5-1: Using ep0 maxpacket: 8 [ 363.011061][ T2214] usb 1-1: USB disconnect, device number 13 [ 363.071088][ T2046] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.241258][ T2046] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 363.264973][ T2046] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.275390][ T2046] usb 5-1: Product: syz [ 363.300901][ T2046] usb 5-1: Manufacturer: syz [ 363.332667][ T2046] usb 5-1: SerialNumber: syz [ 363.346388][ T4403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1028'. [ 363.369022][ T2046] usb 5-1: config 0 descriptor?? [ 363.642364][ T2046] usb 5-1: USB disconnect, device number 12 [ 363.710934][ T74] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 363.770948][ T599] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 363.870891][ T2214] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 364.010970][ T599] usb 2-1: Using ep0 maxpacket: 16 [ 364.111065][ T2214] usb 1-1: Using ep0 maxpacket: 16 [ 364.217432][ T4419] loop7: unable to read partition table [ 364.223112][ T4419] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 364.231033][ T74] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 364.265495][ T74] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.273648][ T74] usb 3-1: Product: syz [ 364.277579][ T74] usb 3-1: Manufacturer: syz [ 364.324050][ T599] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 364.333065][ T2214] usb 1-1: unable to get BOS descriptor or descriptor too short [ 364.342432][ T74] usb 3-1: SerialNumber: syz [ 364.346952][ T599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.355871][ T74] usb 3-1: config 0 descriptor?? [ 364.360826][ T599] usb 2-1: Product: syz [ 364.370927][ T599] usb 2-1: Manufacturer: syz [ 364.378186][ T599] usb 2-1: SerialNumber: syz [ 364.383575][ T599] usb 2-1: config 0 descriptor?? [ 364.395592][ T4431] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 364.406049][ T4431] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 364.421035][ T2214] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 364.431558][ T599] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 364.439316][ T599] usb 2-1: Detected FT232H [ 364.601061][ T2214] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=68.f3 [ 364.620323][ T2214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.628677][ T599] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 364.635529][ T2214] usb 1-1: Product: syz [ 364.639582][ T2214] usb 1-1: Manufacturer: syz [ 364.644381][ T2214] usb 1-1: SerialNumber: syz [ 364.932117][ T2214] usb 1-1: USB disconnect, device number 14 [ 365.122059][ T599] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 365.325835][ T2214] usb 2-1: USB disconnect, device number 14 [ 365.332637][ T2214] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 365.342254][ T2214] ftdi_sio 2-1:0.0: device disconnected [ 365.490942][ T599] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 365.670961][ T510] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 365.861301][ T599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.872306][ T599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.882009][ T599] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 365.895238][ T599] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 365.904213][ T599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.912647][ T599] usb 4-1: config 0 descriptor?? [ 365.997754][ T4459] loop7: unable to read partition table [ 366.003732][ T4459] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 366.070982][ T510] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.081171][ T510] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 366.090114][ T510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.100583][ T510] usb 1-1: config 0 descriptor?? [ 366.360932][ T401] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 366.372208][ T599] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 366.381947][ T599] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 366.423092][ T599] usb 3-1: USB disconnect, device number 14 [ 366.580938][ T510] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 366.586096][ T2046] usb 4-1: USB disconnect, device number 14 [ 366.600882][ T401] usb 2-1: Using ep0 maxpacket: 32 [ 366.721022][ T401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.731865][ T401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.741985][ T401] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 366.750805][ T401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.759363][ T401] usb 2-1: config 0 descriptor?? [ 366.801356][ T401] hub 2-1:0.0: USB hub found [ 366.950999][ T510] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.962007][ T510] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.971598][ T510] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 366.980650][ T510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.989111][ T510] usb 5-1: config 0 descriptor?? [ 366.993892][ T599] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 367.021004][ T401] hub 2-1:0.0: 1 port detected [ 367.320945][ T401] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 367.327407][ T401] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 367.361016][ T599] usb 3-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 367.370401][ T599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.370938][ T106] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 367.382042][ T599] usb 3-1: config 0 descriptor?? [ 367.412536][ T509] usb 1-1: USB disconnect, device number 15 [ 367.440958][ T401] usbhid 2-1:0.0: can't add hid device: -71 [ 367.446745][ T401] usbhid: probe of 2-1:0.0 failed with error -71 [ 367.462105][ T510] hid-steam 0003:28DE:1142.0010: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 367.474400][ T510] hid-steam 0003:28DE:1142.0011: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 367.481143][ T401] usb 2-1: USB disconnect, device number 15 [ 367.560985][ T510] hid-steam 0003:28DE:1142.0010: Steam wireless receiver connected [ 367.621022][ T106] usb 4-1: Using ep0 maxpacket: 32 [ 367.741043][ T106] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 367.863546][ T599] logitech-djreceiver 0003:046D:C71C.0012: hidraw1: USB HID v0.00 Device [HID 046d:c71c] on usb-dummy_hcd.2-1/input0 [ 367.911059][ T106] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 367.919986][ T106] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 367.928069][ T106] usb 4-1: Product: syz [ 367.932069][ T106] usb 4-1: Manufacturer: syz [ 367.936396][ T106] usb 4-1: SerialNumber: syz [ 367.941577][ T106] usb 4-1: config 0 descriptor?? [ 367.970950][ T4474] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 367.991360][ T106] hub 4-1:0.0: bad descriptor, ignoring hub [ 367.997146][ T106] hub: probe of 4-1:0.0 failed with error -5 [ 368.057239][ T106] usb 5-1: USB disconnect, device number 13 [ 368.063964][ T106] hid-steam 0003:28DE:1142.0010: Steam wireless receiver disconnected [ 368.075152][ T599] usb 3-1: USB disconnect, device number 15 [ 368.141011][ T510] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 368.311068][ T74] usb 4-1: USB disconnect, device number 15 [ 368.380905][ T510] usb 2-1: Using ep0 maxpacket: 8 [ 368.600964][ T23] kauditd_printk_skb: 8 callbacks suppressed [ 368.600976][ T23] audit: type=1400 audit(1745497307.310:641): avc: denied { rename } for pid=4501 comm="syz.2.1064" name="#1" dev="tmpfs" ino=38363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 368.641428][ T23] audit: type=1400 audit(1745497307.340:642): avc: denied { unlink } for pid=358 comm="syz-executor" name="file1" dev="tmpfs" ino=38363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 368.700924][ T74] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 368.708600][ T510] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 368.717919][ T510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.726064][ T510] usb 2-1: Product: syz [ 368.730208][ T510] usb 2-1: Manufacturer: syz [ 368.734959][ T510] usb 2-1: SerialNumber: syz [ 368.817052][ T510] usb 2-1: config 0 descriptor?? [ 369.010890][ T74] usb 4-1: Using ep0 maxpacket: 32 [ 369.120934][ T599] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 369.131092][ T74] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 369.177324][ T4518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'. [ 369.252185][ T4525] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 369.260912][ T4525] print_req_error: 16 callbacks suppressed [ 369.260926][ T4525] blk_update_request: I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.277877][ T4525] EXT4-fs (loop0): couldn't read superblock of external journal [ 369.360911][ T599] usb 3-1: Using ep0 maxpacket: 16 [ 369.391100][ T74] usb 4-1: string descriptor 0 read error: -22 [ 369.406788][ T74] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 369.563247][ T74] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 369.581231][ T599] usb 3-1: unable to get BOS descriptor or descriptor too short [ 369.782644][ T74] usb 4-1: config 0 descriptor?? [ 369.801683][ T4474] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 369.823341][ T74] hub 4-1:0.0: bad descriptor, ignoring hub [ 369.829932][ T74] hub: probe of 4-1:0.0 failed with error -5 [ 369.837777][ T4531] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 369.861272][ T599] usb 3-1: config 2 has an invalid interface number: 120 but max is 0 [ 369.879336][ T599] usb 3-1: config 2 has no interface number 0 [ 369.885646][ T599] usb 3-1: config 2 interface 120 has no altsetting 0 [ 369.914686][ T4535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1075'. [ 369.941245][ T4535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1075'. [ 369.950980][ T4535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1075'. [ 370.034084][ T4539] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,bsdgroups,auto_da_alloc,jqfmt=vfsv1,nouid32,journal_dev=0x0000000000000007,grpjquota=,usrjquota=, [ 370.071080][ T599] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=68.f3 [ 370.084520][ T599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.092787][ T599] usb 3-1: Product: syz [ 370.096762][ T599] usb 3-1: Manufacturer: syz [ 370.101457][ T599] usb 3-1: SerialNumber: syz [ 370.199715][ T2214] usb 4-1: USB disconnect, device number 16 [ 370.228358][ T23] audit: type=1400 audit(1745497308.920:643): avc: denied { map } for pid=4538 comm="syz.4.1078" path="/224/file0/cpu.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 370.232541][ T4539] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.1078: bg 0: block 234: padding at end of block bitmap is not set [ 370.270658][ T4539] EXT4-fs (loop4): Remounting filesystem read-only [ 370.292922][ T509] usb 2-1: USB disconnect, device number 16 [ 370.355271][ T23] audit: type=1400 audit(1745497309.060:644): avc: denied { create } for pid=4557 comm="syz.1.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 370.365139][ T4558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4558 comm=syz.1.1082 [ 370.376558][ T23] audit: type=1400 audit(1745497309.080:645): avc: denied { write } for pid=4557 comm="syz.1.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 370.409055][ T23] audit: type=1400 audit(1745497309.120:646): avc: denied { read } for pid=4557 comm="syz.1.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 370.484599][ T599] usb 3-1: USB disconnect, device number 16 [ 371.148545][ T2214] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 371.390995][ T2214] usb 4-1: Using ep0 maxpacket: 32 [ 371.460886][ T599] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 371.472210][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 371.482928][ C1] buffer_io_error: 15 callbacks suppressed [ 371.482936][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.496282][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 371.506977][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.514659][ T4593] loop7: unable to read partition table [ 371.520243][ T4593] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 371.530207][ T2214] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.543086][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 371.543113][ T2214] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.554319][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.572069][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 371.572092][ T2214] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 371.582783][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.591700][ T2214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.617984][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 371.628697][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.651569][ T2214] hub 4-1:4.0: USB hub found [ 371.671014][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 371.681826][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.714507][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 371.725248][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.800905][ T599] usb 3-1: Using ep0 maxpacket: 32 [ 371.870987][ T2214] hub 4-1:4.0: 16 ports detected [ 371.875778][ T2214] usb 4-1: selecting invalid altsetting 1 [ 371.881571][ T2214] hub 4-1:4.0: Using single TT (err -22) [ 371.900949][ T2214] hub 4-1:4.0: insufficient power available to use all downstream ports [ 372.081864][ T599] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 372.092491][ T599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.100395][ T599] usb 3-1: Product: syz [ 372.104455][ T599] usb 3-1: Manufacturer: syz [ 372.108842][ T599] usb 3-1: SerialNumber: syz [ 372.114017][ T599] usb 3-1: config 0 descriptor?? [ 372.570925][ T106] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 372.656743][ T2214] usb 4-1: USB disconnect, device number 17 [ 372.942226][ T4623] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,bsdgroups,auto_da_alloc,jqfmt=vfsv1,nouid32,journal_dev=0x0000000000000007,grpjquota=,usrjquota=, [ 372.950941][ T106] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.972461][ T106] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.982572][ T106] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 373.052400][ T4623] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.1105: bg 0: block 234: padding at end of block bitmap is not set [ 373.066767][ T4623] EXT4-fs (loop3): Remounting filesystem read-only [ 373.088682][ T106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.098805][ T106] usb 2-1: config 0 descriptor?? [ 373.572266][ T106] hid-steam 0003:28DE:1142.0013: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 373.584691][ T106] hid-steam 0003:28DE:1142.0014: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 373.660892][ T106] hid-steam 0003:28DE:1142.0013: Steam wireless receiver connected [ 373.711030][ T2214] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 373.784799][ T4643] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 373.810488][ T4643] erofs: (device loop4): vle_extent_lookback: bogus lookback distance @ nid 36 [ 373.819747][ T4643] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress, in[47, 4049] out[1851] [ 373.829952][ T4643] ------------[ cut here ]------------ [ 373.835248][ T4643] WARNING: CPU: 1 PID: 4643 at fs/erofs/decompressor.c:174 z_erofs_lz4_decompress+0x935/0xce0 [ 373.838129][ T4651] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1114'. [ 373.845375][ T4643] Modules linked in: [ 373.845395][ T4643] CPU: 1 PID: 4643 Comm: syz.4.1110 Not tainted 5.4.290-syzkaller-00001-g986c38813dff #0 [ 373.845401][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 373.845420][ T4643] RIP: 0010:z_erofs_lz4_decompress+0x935/0xce0 [ 373.845430][ T4643] Code: 36 03 00 00 4c 8b 65 98 45 8b 0c 24 48 89 df 48 c7 c6 51 97 81 85 48 c7 c2 e0 b4 17 85 8b 5d a4 89 d9 45 89 f0 e8 5b e9 fe ff <0f> 0b 89 d8 48 c7 c7 40 b5 17 85 48 c7 c6 60 b5 17 85 ba 02 00 00 [ 373.845446][ T4643] RSP: 0018:ffff8881e7436c18 EFLAGS: 00010246 [ 373.854773][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 373.858144][ T4643] RAX: f46097350637fd00 RBX: 000000000000002f RCX: f46097350637fd00 [ 373.858151][ T4643] RDX: ffffc90002547000 RSI: 0000000000000f1c RDI: 0000000000000f1d [ 373.858159][ T4643] RBP: ffff8881e7436cd0 R08: ffffffff814e7988 R09: 0000000000000003 [ 373.858167][ T4643] R10: ffffed103ce86ccc R11: dffffc0000000001 R12: ffff8881e7437240 [ 373.858174][ T4643] R13: 1ffff1103ce86e48 R14: 0000000000000fd1 R15: ffff8881cdeb0fd1 [ 373.858184][ T4643] FS: 00007f31ea7e36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 373.858192][ T4643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.858199][ T4643] CR2: 0000001b3201fffc CR3: 00000001ebdc9000 CR4: 00000000003406a0 [ 373.858211][ T4643] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 373.858217][ T4643] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 373.858221][ T4643] Call Trace: [ 373.858238][ T4643] ? show_regs+0x51/0x60 [ 373.858248][ T4643] ? __warn+0x168/0x250 [ 373.858260][ T4643] ? z_erofs_lz4_decompress+0x935/0xce0 [ 373.858272][ T4643] ? report_bug+0x3d7/0x520 [ 373.858282][ T4643] ? z_erofs_lz4_decompress+0x935/0xce0 [ 373.858293][ T4643] ? do_invalid_op+0x75/0x120 [ 373.858303][ T4643] ? z_erofs_lz4_decompress+0x935/0xce0 [ 373.858314][ T4643] ? invalid_op+0x1e/0x30 [ 373.858325][ T4643] ? wake_up_klogd+0xb8/0xf0 [ 373.858335][ T4643] ? z_erofs_lz4_decompress+0x935/0xce0 [ 373.858344][ T4643] ? z_erofs_lz4_decompress+0x935/0xce0 [ 373.858358][ T4643] ? z_erofs_lz4_prepare_destpages+0x690/0x690 [ 373.858368][ T4643] z_erofs_decompress+0xc61/0x1000 [ 373.858380][ T4643] z_erofs_vle_unzip_all+0x1147/0x1bf0 [ 373.858396][ T4643] ? z_erofs_onlinepage_endio+0x150/0x150 [ 373.858425][ T4643] ? __kasan_check_write+0x14/0x20 [ 373.858434][ T4643] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 373.858444][ T4643] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 373.858454][ T4643] ? _raw_spin_lock+0x1b0/0x1b0 [ 373.858464][ T4643] ? prepare_to_wait_event+0x3c1/0x420 [ 373.858475][ T4643] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 373.858485][ T4643] ? finish_wait+0x17f/0x190 [ 373.858501][ T4643] z_erofs_submit_and_unzip+0x12d2/0x13d0 [ 373.868357][ T4651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1114'. [ 373.878003][ T4643] ? z_erofs_do_read_page+0x2580/0x2580 [ 373.878018][ T4643] ? init_wait_entry+0xe0/0xe0 [ 373.878039][ T4643] ? z_erofs_vle_normalaccess_readpages+0xc70/0xc70 [ 373.884055][ T4651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1114'. [ 373.903535][ T4643] z_erofs_vle_normalaccess_readpage+0x30b/0x630 [ 373.903549][ T4643] ? z_erofs_rcu_callback+0x30/0x30 [ 373.903562][ T4643] ? add_to_page_cache_lru+0x221/0x2c0 [ 373.903578][ T4643] ? add_to_page_cache_locked+0x40/0x40 [ 374.172733][ T4643] ? pagecache_get_page+0x6b6/0x790 [ 374.177757][ T4643] ? __kasan_check_write+0x14/0x20 [ 374.182979][ T4643] ? _raw_spin_trylock_bh+0x190/0x190 [ 374.186464][ T106] usb 3-1: USB disconnect, device number 17 [ 374.188274][ T4643] ? z_erofs_rcu_callback+0x30/0x30 [ 374.188293][ T4643] do_read_cache_page+0x677/0xa50 [ 374.204163][ T4643] read_cache_page+0x4e/0x70 [ 374.208676][ T4643] erofs_namei+0x13c/0xfc0 [ 374.210105][ T23] audit: type=1400 audit(1745497312.540:647): avc: denied { append } for pid=4660 comm="syz.2.1119" name="loop6" dev="devtmpfs" ino=9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.212924][ T4643] erofs_lookup+0x145/0x450 [ 374.212934][ T4643] ? erofs_namei+0xfc0/0xfc0 [ 374.212943][ T4643] ? handle_dots+0xf80/0xf80 [ 374.212960][ T4643] ? erofs_namei+0xfc0/0xfc0 [ 374.254415][ T4643] path_openat+0x15c9/0x34b0 [ 374.258839][ T4643] ? getname_flags+0xba/0x520 [ 374.263340][ T4643] ? do_filp_open+0x450/0x450 [ 374.267859][ T4643] do_filp_open+0x20b/0x450 [ 374.272197][ T4643] ? vfs_tmpfile+0x2b0/0x2b0 [ 374.276626][ T4643] ? get_unused_fd_flags+0x96/0xb0 [ 374.281618][ T4643] do_sys_open+0x39c/0x810 [ 374.285827][ T4643] ? file_open_root+0x490/0x490 [ 374.290522][ T4643] ? switch_fpu_return+0x1d4/0x410 [ 374.295812][ T4643] ? __kasan_check_read+0x11/0x20 [ 374.300653][ T4643] __x64_sys_openat+0xa2/0xb0 [ 374.305247][ T4643] do_syscall_64+0xd8/0x170 [ 374.309764][ T4643] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 374.315603][ T4643] RIP: 0033:0x7f31ec17a969 [ 374.319905][ T4643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.339705][ T4643] RSP: 002b:00007f31ea7e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 374.348024][ T4643] RAX: ffffffffffffffda RBX: 00007f31ec3a1fa0 RCX: 00007f31ec17a969 [ 374.355859][ T4643] RDX: 0000000000009080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 374.363660][ T4643] RBP: 00007f31ec1fcab1 R08: 0000000000000000 R09: 0000000000000000 [ 374.371469][ T4643] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000000 [ 374.379623][ T4643] R13: 0000000000000000 R14: 00007f31ec3a1fa0 R15: 00007ffc342d4af8 [ 374.387461][ T4643] ---[ end trace 3556c19dbd370b89 ]--- [ 374.396016][ T4643] erofs: (device loop4): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 374.407154][ T4665] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 374.416836][ T4665] erofs: (device loop4): z_erofs_vle_normalaccess_readpages: readahead error at page 0 @ nid 36 [ 374.427403][ T4665] attempt to access beyond end of device [ 374.427403][ T4665] loop4: rw=0, want=312, limit=16 [ 374.681127][ T2214] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.701199][ T2214] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.868812][ T106] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 374.882712][ T4676] device bond_slave_1 entered promiscuous mode [ 374.885567][ T2214] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.889102][ T4676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 374.903055][ T2214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.914361][ T2214] usb 4-1: Product: syz [ 374.918347][ T2214] usb 4-1: Manufacturer: syz [ 374.922801][ T2214] usb 4-1: SerialNumber: syz [ 374.923717][ T4676] device bond_slave_1 left promiscuous mode [ 375.240983][ T2214] usb 4-1: 0:2 : does not exist [ 375.251097][ T2214] usb 4-1: USB disconnect, device number 18 [ 375.659445][ T4688] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 375.673428][ T4699] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 375.682303][ T4699] blk_update_request: I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.693284][ T4699] EXT4-fs (loop4): couldn't read superblock of external journal [ 376.012826][ T4709] bridge0: port 3(syz_tun) entered disabled state [ 376.138694][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 376.242051][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.252866][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 376.287567][ T4709] device syz_tun left promiscuous mode [ 376.293369][ T4709] bridge0: port 3(syz_tun) entered disabled state [ 376.299865][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.310761][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 376.320257][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.330980][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 376.338835][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.354460][ T599] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 376.362554][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.386359][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.418814][ T106] usb 2-1: device descriptor read/64, error -71 [ 376.426717][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.438331][ T4712] loop7: unable to read partition table [ 376.444924][ T4712] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 376.640880][ T599] usb 4-1: Using ep0 maxpacket: 16 [ 376.800937][ T599] usb 4-1: unable to get BOS descriptor or descriptor too short [ 376.820976][ T106] usb 2-1: device firmware changed [ 376.826149][ T2046] usb 2-1: USB disconnect, device number 17 [ 376.836204][ T2046] hid-steam 0003:28DE:1142.0013: Steam wireless receiver disconnected [ 376.866418][ T2214] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 376.911015][ T599] usb 4-1: config 2 has an invalid interface number: 120 but max is 0 [ 376.919035][ T599] usb 4-1: config 2 has no interface number 0 [ 376.925067][ T599] usb 4-1: config 2 interface 120 has no altsetting 0 [ 376.990917][ T2046] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 377.091289][ T599] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=68.f3 [ 377.100804][ T599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.109609][ T599] usb 4-1: Product: syz [ 377.114053][ T599] usb 4-1: Manufacturer: syz [ 377.118532][ T599] usb 4-1: SerialNumber: syz [ 377.251000][ T2214] usb 1-1: config 0 has an invalid interface number: 5 but max is 0 [ 377.259042][ T2214] usb 1-1: config 0 has no interface number 0 [ 377.320928][ T106] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 377.390959][ T2046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.400750][ T2046] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.413430][ T2046] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 377.420950][ T2214] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e310, bcdDevice=c9.28 [ 377.422285][ T2046] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.431565][ T2214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.440592][ T2046] usb 2-1: config 0 descriptor?? [ 377.451548][ T2214] usb 1-1: Product: syz [ 377.455703][ T2214] usb 1-1: Manufacturer: syz [ 377.460182][ T2214] usb 1-1: SerialNumber: syz [ 377.465525][ T2214] usb 1-1: config 0 descriptor?? [ 377.471893][ T599] usb 4-1: USB disconnect, device number 19 [ 377.704260][ T401] usb 1-1: USB disconnect, device number 16 [ 377.850970][ T106] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 377.860089][ T106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.867969][ T106] usb 3-1: Product: syz [ 377.871974][ T106] usb 3-1: Manufacturer: syz [ 377.876353][ T106] usb 3-1: SerialNumber: syz [ 377.881558][ T106] usb 3-1: config 0 descriptor?? [ 377.933271][ T2046] hid-generic 0003:07B5:0312.0015: item fetching failed at offset 2/5 [ 377.942282][ T2046] hid-generic: probe of 0003:07B5:0312.0015 failed with error -22 [ 377.950882][ T796] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 377.974374][ T4737] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1142'. [ 377.983376][ T4737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1142'. [ 378.159440][ T599] usb 2-1: USB disconnect, device number 18 [ 378.380916][ T796] usb 5-1: Using ep0 maxpacket: 16 [ 378.500955][ T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.500988][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 378.501004][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 378.501017][ T796] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 378.501033][ T796] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 378.591006][ T796] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 378.591016][ T796] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 378.591022][ T796] usb 5-1: Manufacturer: syz [ 378.591585][ T796] usb 5-1: config 0 descriptor?? [ 378.912079][ T4748] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 378.919769][ T4748] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 378.947510][ T4748] F2FS-fs (loop1): Found nat_bits in checkpoint [ 378.982644][ T4748] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 378.982656][ T4748] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 379.031048][ T4757] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 379.042782][ T4757] erofs: (device loop3): vle_extent_lookback: bogus lookback distance @ nid 36 [ 379.052283][ T4757] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress, in[47, 4049] out[1851] [ 379.052366][ T4757] ------------[ cut here ]------------ [ 379.052389][ T4757] WARNING: CPU: 1 PID: 4757 at fs/erofs/decompressor.c:174 z_erofs_lz4_decompress+0x935/0xce0 [ 379.052392][ T4757] Modules linked in: [ 379.052408][ T4757] CPU: 1 PID: 4757 Comm: syz.3.1147 Tainted: G W 5.4.290-syzkaller-00001-g986c38813dff #0 [ 379.052414][ T4757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 379.052428][ T4757] RIP: 0010:z_erofs_lz4_decompress+0x935/0xce0 [ 379.052438][ T4757] Code: 36 03 00 00 4c 8b 65 98 45 8b 0c 24 48 89 df 48 c7 c6 51 97 81 85 48 c7 c2 e0 b4 17 85 8b 5d a4 89 d9 45 89 f0 e8 5b e9 fe ff <0f> 0b 89 d8 48 c7 c7 40 b5 17 85 48 c7 c6 60 b5 17 85 ba 02 00 00 [ 379.052444][ T4757] RSP: 0018:ffff8881e6c16c18 EFLAGS: 00010246 [ 379.052453][ T4757] RAX: 24c478a1602bd100 RBX: 000000000000002f RCX: 24c478a1602bd100 [ 379.052460][ T4757] RDX: ffffc9000314a000 RSI: 0000000000000bd1 RDI: 0000000000000bd2 [ 379.052468][ T4757] RBP: ffff8881e6c16cd0 R08: ffffffff814e7988 R09: 0000000000000003 [ 379.052477][ T4757] R10: ffffed103cd82d04 R11: dffffc0000000001 R12: ffff8881e6c17240 [ 379.052483][ T4757] R13: 1ffff1103cd82e48 R14: 0000000000000fd1 R15: ffff8881eaea0fd1 [ 379.052492][ T4757] FS: 00007efe9a5b06c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 379.052499][ T4757] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.052506][ T4757] CR2: 0000001b3211dff8 CR3: 00000001e4805000 CR4: 00000000003406a0 [ 379.052517][ T4757] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 379.052523][ T4757] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 379.052526][ T4757] Call Trace: [ 379.052548][ T4757] ? show_regs+0x51/0x60 [ 379.052558][ T4757] ? __warn+0x168/0x250 [ 379.052568][ T4757] ? z_erofs_lz4_decompress+0x935/0xce0 [ 379.052581][ T4757] ? report_bug+0x3d7/0x520 [ 379.052592][ T4757] ? z_erofs_lz4_decompress+0x935/0xce0 [ 379.052603][ T4757] ? do_invalid_op+0x75/0x120 [ 379.052613][ T4757] ? z_erofs_lz4_decompress+0x935/0xce0 [ 379.052625][ T4757] ? invalid_op+0x1e/0x30 [ 379.052636][ T4757] ? wake_up_klogd+0xb8/0xf0 [ 379.052648][ T4757] ? z_erofs_lz4_decompress+0x935/0xce0 [ 379.052659][ T4757] ? z_erofs_lz4_decompress+0x935/0xce0 [ 379.052674][ T4757] ? z_erofs_lz4_prepare_destpages+0x690/0x690 [ 379.052685][ T4757] z_erofs_decompress+0xc61/0x1000 [ 379.052699][ T4757] z_erofs_vle_unzip_all+0x1147/0x1bf0 [ 379.052711][ T4757] ? blk_mq_request_issue_directly+0x1c0/0x1c0 [ 379.052728][ T4757] ? z_erofs_onlinepage_endio+0x150/0x150 [ 379.052759][ T4757] ? __kasan_check_write+0x14/0x20 [ 379.052769][ T4757] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 379.052779][ T4757] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 379.052788][ T4757] ? _raw_spin_lock+0x1b0/0x1b0 [ 379.052799][ T4757] ? prepare_to_wait_event+0x3c1/0x420 [ 379.052811][ T4757] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 379.052821][ T4757] ? finish_wait+0x17f/0x190 [ 379.052834][ T4757] z_erofs_submit_and_unzip+0x12d2/0x13d0 [ 379.052851][ T4757] ? z_erofs_do_read_page+0x2580/0x2580 [ 379.052865][ T4757] ? init_wait_entry+0xe0/0xe0 [ 379.052877][ T4757] ? z_erofs_vle_normalaccess_readpages+0xc70/0xc70 [ 379.052891][ T4757] z_erofs_vle_normalaccess_readpage+0x30b/0x630 [ 379.052903][ T4757] ? z_erofs_rcu_callback+0x30/0x30 [ 379.052918][ T4757] ? add_to_page_cache_lru+0x221/0x2c0 [ 379.052929][ T4757] ? add_to_page_cache_locked+0x40/0x40 [ 379.052939][ T4757] ? pagecache_get_page+0x6b6/0x790 [ 379.052950][ T4757] ? __kasan_check_write+0x14/0x20 [ 379.052966][ T4757] ? _raw_spin_trylock_bh+0x190/0x190 [ 379.052975][ T4757] ? z_erofs_rcu_callback+0x30/0x30 [ 379.052987][ T4757] do_read_cache_page+0x677/0xa50 [ 379.052999][ T4757] read_cache_page+0x4e/0x70 [ 379.053009][ T4757] erofs_namei+0x13c/0xfc0 [ 379.053023][ T4757] erofs_lookup+0x145/0x450 [ 379.053033][ T4757] ? erofs_namei+0xfc0/0xfc0 [ 379.053044][ T4757] ? handle_dots+0xf80/0xf80 [ 379.053055][ T4757] ? erofs_namei+0xfc0/0xfc0 [ 379.053066][ T4757] path_openat+0x15c9/0x34b0 [ 379.053085][ T4757] ? getname_flags+0xba/0x520 [ 379.053096][ T4757] ? do_filp_open+0x450/0x450 [ 379.053113][ T4757] do_filp_open+0x20b/0x450 [ 379.053124][ T4757] ? vfs_tmpfile+0x2b0/0x2b0 [ 379.053142][ T4757] ? get_unused_fd_flags+0x96/0xb0 [ 379.053153][ T4757] do_sys_open+0x39c/0x810 [ 379.053164][ T4757] ? file_open_root+0x490/0x490 [ 379.053174][ T4757] ? switch_fpu_return+0x1d4/0x410 [ 379.053188][ T4757] ? __kasan_check_read+0x11/0x20 [ 379.053199][ T4757] __x64_sys_openat+0xa2/0xb0 [ 379.053210][ T4757] do_syscall_64+0xd8/0x170 [ 379.053222][ T4757] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 379.053230][ T4757] RIP: 0033:0x7efe9bf47969 [ 379.053240][ T4757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.053246][ T4757] RSP: 002b:00007efe9a5b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 379.053258][ T4757] RAX: ffffffffffffffda RBX: 00007efe9c16efa0 RCX: 00007efe9bf47969 [ 379.053265][ T4757] RDX: 0000000000009080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 379.053271][ T4757] RBP: 00007efe9bfc9ab1 R08: 0000000000000000 R09: 0000000000000000 [ 379.053277][ T4757] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000000 [ 379.053284][ T4757] R13: 0000000000000000 R14: 00007efe9c16efa0 R15: 00007ffeb577eaf8 [ 379.053294][ T4757] ---[ end trace 3556c19dbd370b8a ]--- [ 379.054229][ T4757] erofs: (device loop3): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 379.063473][ T4757] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 379.063485][ T4757] erofs: (device loop3): z_erofs_vle_normalaccess_readpages: readahead error at page 0 @ nid 36 [ 379.063542][ T4757] attempt to access beyond end of device [ 379.063542][ T4757] loop3: rw=0, want=312, limit=16 [ 379.162235][ T4748] attempt to access beyond end of device [ 379.162235][ T4748] loop1: rw=2049, want=81920, limit=40427 [ 379.239929][ T2214] usb 3-1: USB disconnect, device number 18 [ 379.252846][ T4748] attempt to access beyond end of device [ 379.252846][ T4748] loop1: rw=2049, want=53248, limit=40427 [ 379.712086][ T4748] attempt to access beyond end of device [ 379.712086][ T4748] loop1: rw=2049, want=77824, limit=40427 [ 379.729517][ T4748] attempt to access beyond end of device [ 379.729517][ T4748] loop1: rw=2049, want=85880, limit=40427 [ 379.751888][ T354] attempt to access beyond end of device [ 379.751888][ T354] loop1: rw=2049, want=40968, limit=40427 [ 380.680145][ T4816] overlayfs: missing 'lowerdir' [ 380.774268][ T599] usb 5-1: USB disconnect, device number 14 [ 380.842123][ T4814] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 381.052516][ T4819] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 381.052608][ T4819] blk_update_request: I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 381.052629][ T4819] EXT4-fs (loop3): couldn't read superblock of external journal [ 381.430549][ T4825] overlayfs: unrecognized mount option "/" or missing value [ 381.705745][ T23] audit: type=1326 audit(1745497320.410:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdd8bb969 code=0x7ffc0000 [ 381.753778][ T23] audit: type=1326 audit(1745497320.410:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7cdd8bb969 code=0x7ffc0000 [ 381.807657][ T23] audit: type=1326 audit(1745497320.410:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdd8bb969 code=0x7ffc0000 [ 381.873204][ T23] audit: type=1326 audit(1745497320.410:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cdd8bb969 code=0x7ffc0000 [ 381.897342][ T23] audit: type=1326 audit(1745497320.410:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdd8bb969 code=0x7ffc0000 [ 381.922476][ T23] audit: type=1326 audit(1745497320.410:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cdd8bb969 code=0x7ffc0000 [ 381.946833][ T23] audit: type=1326 audit(1745497320.410:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdd8bb969 code=0x7ffc0000 [ 381.970981][ T23] audit: type=1326 audit(1745497320.410:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cdd8bb969 code=0x7ffc0000 [ 381.995824][ T23] audit: type=1326 audit(1745497320.410:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdd8bb969 code=0x7ffc0000 [ 382.020122][ T23] audit: type=1326 audit(1745497320.410:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7cdd8bb969 code=0x7ffc0000 [ 385.480121][ T4834] FAT-fs (loop1): Directory bread(block 64) failed [ 385.486619][ T4834] FAT-fs (loop1): Directory bread(block 65) failed [ 385.492978][ T4834] FAT-fs (loop1): Directory bread(block 66) failed [ 385.499215][ T4834] FAT-fs (loop1): Directory bread(block 67) failed [ 385.505735][ T4834] FAT-fs (loop1): Directory bread(block 68) failed [ 385.512163][ T4834] FAT-fs (loop1): Directory bread(block 69) failed [ 385.518461][ T4834] FAT-fs (loop1): Directory bread(block 70) failed [ 385.524833][ T4834] FAT-fs (loop1): Directory bread(block 71) failed [ 385.531132][ T4834] FAT-fs (loop1): Directory bread(block 72) failed [ 385.537438][ T4834] FAT-fs (loop1): Directory bread(block 73) failed [ 386.871566][ T4862] overlayfs: missing 'lowerdir' [ 389.653498][ T4868] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 389.742281][ T4875] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 389.752803][ T4871] EXT4-fs (loop1): 1 orphan inode deleted [ 389.756001][ T4875] ext4 filesystem being mounted at /223/bus supports timestamps until (%ptR?) (0x7fffffff) [ 389.761671][ T4871] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 389.780586][ T4871] ext4 filesystem being mounted at /234/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 390.940798][ T4887] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 390.949467][ T4887] blk_update_request: I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 390.960253][ T4887] EXT4-fs (loop3): couldn't read superblock of external journal [ 391.484143][ T4897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12397 sclass=netlink_route_socket pid=4897 comm=syz.0.1177 [ 392.880461][ T4901] F2FS-fs (loop1): invalid crc value [ 392.906375][ T4903] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 392.920897][ T4903] ext4 filesystem being mounted at /227/bus supports timestamps until (%ptR?) (0x7fffffff) [ 393.029593][ T4901] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 393.036265][ T4901] F2FS-fs (loop1): Start checkpoint disabled! [ 393.043081][ T4901] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 393.350154][ T4923] overlayfs: missing 'workdir' [ 394.737263][ T4940] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 394.751686][ T4940] ext4 filesystem being mounted at /226/bus supports timestamps until (%ptR?) (0x7fffffff) [ 396.412074][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 396.422888][ C1] buffer_io_error: 4 callbacks suppressed [ 396.422897][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 396.700184][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 396.710980][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 396.772596][ T4952] loop7: unable to read partition table [ 396.781133][ T4952] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 396.802823][ T4955] F2FS-fs (loop0): invalid crc value [ 396.833974][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 396.844675][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 396.868358][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 396.869278][ T4955] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 396.879254][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 396.990451][ T4955] F2FS-fs (loop0): Start checkpoint disabled! [ 397.013871][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 397.024681][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 397.033622][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 397.044310][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 397.208496][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 397.219330][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 397.258958][ T4964] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 397.268002][ T4964] blk_update_request: I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 397.278823][ T4964] EXT4-fs (loop2): couldn't read superblock of external journal [ 397.289421][ T4955] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 401.610040][ T2392] attempt to access beyond end of device [ 401.610040][ T2392] loop0: rw=2049, want=45104, limit=40427 [ 401.713312][ T4991] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 403.251597][ T5002] overlayfs: missing 'workdir' [ 403.810422][ T4992] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 406.294867][ T5000] EXT4-fs warning (device loop3): ext4_multi_mount_protect:387: Unable to create kmmpd thread for loop3. [ 406.673878][ T5025] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 406.714057][ T5026] overlayfs: unrecognized mount option "/" or missing value [ 406.771755][ T5022] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 410.136123][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.146939][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 410.155120][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.166000][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 410.173799][ T5038] loop7: unable to read partition table [ 410.179319][ T5038] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 410.450911][ T5034] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 410.465121][ T5034] ext4 filesystem being mounted at /233/bus supports timestamps until (%ptR?) (0x7fffffff) [ 410.692863][ T5044] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 410.702633][ T5051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12397 sclass=netlink_route_socket pid=5051 comm=syz.3.1210 [ 412.343498][ T5060] attempt to access beyond end of device [ 412.343498][ T5060] loop2: rw=0, want=1041, limit=128 [ 412.924480][ T5067] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 412.933528][ T5067] blk_update_request: I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 412.944341][ T5067] EXT4-fs (loop3): couldn't read superblock of external journal [ 413.519898][ T5078] overlayfs: overlapping lowerdir path [ 413.967827][ T5089] overlayfs: unrecognized mount option "/" or missing value [ 413.988667][ T5088] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 416.702365][ T5094] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 416.716506][ T5094] ext4 filesystem being mounted at /242/bus supports timestamps until (%ptR?) (0x7fffffff) [ 417.211798][ T5096] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 417.226061][ T5096] ext4 filesystem being mounted at /251/bus supports timestamps until (%ptR?) (0x7fffffff) [ 417.614337][ T5109] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 418.026675][ T5113] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 418.040546][ T5113] ext4 filesystem being mounted at /257/bus supports timestamps until (%ptR?) (0x7fffffff) [ 419.255857][ T5122] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 419.270211][ T5122] ext4 filesystem being mounted at /243/bus supports timestamps until (%ptR?) (0x7fffffff) [ 422.272531][ T5149] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 422.286547][ T5149] ext4 filesystem being mounted at /253/bus supports timestamps until (%ptR?) (0x7fffffff) [ 422.526181][ T5143] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 425.324977][ T5167] overlayfs: unrecognized mount option "/" or missing value [ 425.336522][ T5167] overlayfs: failed to resolve './file1': -2 [ 425.348277][ T5148] EXT4-fs: failed to create workqueue [ 425.353513][ T5148] EXT4-fs (loop0): mount failed [ 425.643531][ T5162] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 425.651152][ T5162] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 425.665766][ T5162] F2FS-fs (loop1): Found nat_bits in checkpoint [ 425.692634][ T5181] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 425.940052][ T5162] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 425.947026][ T5162] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 429.078360][ T5186] EXT4-fs: failed to create workqueue [ 429.083925][ T5186] EXT4-fs (loop0): mount failed [ 429.374538][ T5204] F2FS-fs (loop1): invalid crc value [ 429.387241][ T5198] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 429.401136][ T5198] ext4 filesystem being mounted at /255/bus supports timestamps until (%ptR?) (0x7fffffff) [ 429.437425][ T5204] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 429.444749][ T5204] F2FS-fs (loop1): Start checkpoint disabled! [ 429.453142][ T5220] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 429.758086][ T5204] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 430.878547][ T5232] overlayfs: unrecognized mount option "/" or missing value [ 430.889970][ T5232] overlayfs: failed to resolve './file1': -2 [ 431.128636][ T1640] attempt to access beyond end of device [ 431.128636][ T1640] loop1: rw=2049, want=45104, limit=40427 [ 431.208838][ T5234] overlayfs: missing 'workdir' [ 431.639282][ T5243] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 431.791977][ T5244] overlayfs: missing 'workdir' [ 431.991255][ T5238] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 431.998865][ T5238] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 432.011866][ T5238] F2FS-fs (loop3): Found nat_bits in checkpoint [ 432.038343][ T5238] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 432.045415][ T5238] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 432.720052][ T5253] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 432.734324][ T5253] ext4 filesystem being mounted at /242/bus supports timestamps until (%ptR?) (0x7fffffff) [ 433.396583][ T5269] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 434.795368][ T23] kauditd_printk_skb: 16 callbacks suppressed [ 434.795380][ T23] audit: type=1326 audit(1745497373.500:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.3.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9bf47969 code=0x7ffc0000 [ 434.880897][ T23] audit: type=1326 audit(1745497373.500:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.3.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7efe9bf47969 code=0x7ffc0000 [ 434.904797][ T23] audit: type=1326 audit(1745497373.500:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.3.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9bf47969 code=0x7ffc0000 [ 434.927968][ T23] audit: type=1326 audit(1745497373.500:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.3.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe9bf47969 code=0x7ffc0000 [ 434.985382][ T23] audit: type=1326 audit(1745497373.500:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.3.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9bf47969 code=0x7ffc0000 [ 436.104398][ T5293] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 436.838500][ T23] audit: type=1326 audit(1745497373.500:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.3.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe9bf47969 code=0x7ffc0000 [ 436.901397][ T23] audit: type=1326 audit(1745497373.500:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.3.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9bf47969 code=0x7ffc0000 [ 437.179603][ T5290] attempt to access beyond end of device [ 437.179603][ T5290] loop4: rw=0, want=1041, limit=128 [ 437.223506][ T23] audit: type=1326 audit(1745497373.500:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.3.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe9bf47969 code=0x7ffc0000 [ 437.279099][ T23] audit: type=1326 audit(1745497373.500:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.3.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9bf47969 code=0x7ffc0000 [ 437.636503][ T23] audit: type=1326 audit(1745497373.500:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.3.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7efe9bf47969 code=0x7ffc0000 [ 439.151646][ T5313] overlayfs: missing 'workdir' [ 439.609182][ T5315] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 439.666122][ T5305] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 439.680132][ T5305] ext4 filesystem being mounted at /249/bus supports timestamps until (%ptR?) (0x7fffffff) [ 440.145835][ T5327] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 440.153432][ T5327] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 440.213502][ T5325] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 440.227688][ T5325] ext4 filesystem being mounted at /259/bus supports timestamps until (%ptR?) (0x7fffffff) [ 440.882194][ T5327] F2FS-fs (loop4): Found nat_bits in checkpoint [ 440.941066][ T5327] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 440.947930][ T5327] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 441.094487][ T5327] attempt to access beyond end of device [ 441.094487][ T5327] loop4: rw=2049, want=81920, limit=40427 [ 441.115899][ T5327] attempt to access beyond end of device [ 441.115899][ T5327] loop4: rw=2049, want=53248, limit=40427 [ 441.178662][ T5327] attempt to access beyond end of device [ 441.178662][ T5327] loop4: rw=2049, want=77824, limit=40427 [ 441.209408][ T5327] attempt to access beyond end of device [ 441.209408][ T5327] loop4: rw=2049, want=85880, limit=40427 [ 441.411342][ T357] attempt to access beyond end of device [ 441.411342][ T357] loop4: rw=2049, want=40968, limit=40427 [ 441.651987][ T5355] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 446.094329][ T5371] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 446.517641][ T5383] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 446.531835][ T5383] ext4 filesystem being mounted at /263/bus supports timestamps until (%ptR?) (0x7fffffff) [ 448.303262][ T5392] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 448.310861][ T5392] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 448.352141][ T5392] F2FS-fs (loop4): Found nat_bits in checkpoint [ 448.433182][ T5387] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 448.559540][ T5395] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 448.573814][ T5395] ext4 filesystem being mounted at /244/bus supports timestamps until (%ptR?) (0x7fffffff) [ 448.932121][ T5392] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 448.939003][ T5392] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 449.397294][ T5409] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 449.411758][ T5409] ext4 filesystem being mounted at /253/bus supports timestamps until (%ptR?) (0x7fffffff) [ 451.679282][ T5422] EXT4-fs (loop2): Test dummy encryption mode enabled [ 451.806083][ T5422] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 451.806083][ T5422] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 451.806083][ T5422] [ 452.004829][ T5430] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 452.029885][ T5427] overlayfs: unrecognized mount option "/" or missing value [ 452.039391][ T5427] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 452.065630][ T5422] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 452.077619][ T5422] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 456.167024][ T5444] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 456.181297][ T5444] ext4 filesystem being mounted at /266/bus supports timestamps until (%ptR?) (0x7fffffff) [ 457.486386][ T5445] EXT4-fs: failed to create workqueue [ 457.491865][ T5445] EXT4-fs (loop2): mount failed [ 457.653609][ T5443] EXT4-fs: failed to create workqueue [ 457.658952][ T5443] EXT4-fs (loop1): mount failed [ 457.880492][ T5466] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 458.435223][ T5483] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 458.631513][ T5473] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1294'. [ 458.685786][ T5480] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 458.693432][ T5480] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 458.741266][ T5480] F2FS-fs (loop4): Found nat_bits in checkpoint [ 458.775786][ T5480] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 458.782722][ T5480] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 460.198384][ T5494] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 460.212648][ T5494] ext4 filesystem being mounted at /249/bus supports timestamps until (%ptR?) (0x7fffffff) [ 460.530550][ T5509] overlayfs: unrecognized mount option "/" or missing value [ 460.912653][ T5509] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 461.712475][ T5512] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 462.897229][ T5510] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 462.911530][ T5510] ext4 filesystem being mounted at /256/bus supports timestamps until (%ptR?) (0x7fffffff) [ 464.712330][ T5520] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 464.726953][ T5520] ext4 filesystem being mounted at /252/bus supports timestamps until (%ptR?) (0x7fffffff) [ 466.552483][ T5534] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 467.064522][ T5525] EXT4-fs warning (device loop3): ext4_multi_mount_protect:387: Unable to create kmmpd thread for loop3. [ 467.439121][ T5547] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 467.892780][ T5541] EXT4-fs (loop0): Test dummy encryption mode enabled [ 467.949679][ T5541] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 467.949679][ T5541] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 467.949679][ T5541] [ 468.047340][ T5541] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 468.058244][ T5541] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 468.210692][ T5559] netlink: 620 bytes leftover after parsing attributes in process `syz.4.1309'. [ 468.497489][ T5566] overlayfs: unrecognized mount option "/" or missing value [ 468.757586][ T5569] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 470.145554][ T5576] overlayfs: unrecognized mount option "/" or missing value [ 470.154330][ T5576] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 470.940418][ T5587] EXT4-fs (loop1): 1 orphan inode deleted [ 470.953429][ T5587] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 472.122477][ T5595] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 472.691987][ T5587] ext4 filesystem being mounted at /259/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 472.917454][ T5593] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 472.931542][ T5593] ext4 filesystem being mounted at /272/bus supports timestamps until (%ptR?) (0x7fffffff) [ 474.610170][ T5614] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 474.624353][ T5614] ext4 filesystem being mounted at /273/bus supports timestamps until (%ptR?) (0x7fffffff) [ 478.041936][ T5635] overlayfs: unrecognized mount option "/" or missing value [ 479.231617][ T5637] overlayfs: failed to resolve './file1': -2 [ 482.906827][ T5642] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 483.000449][ T5662] netlink: 620 bytes leftover after parsing attributes in process `syz.3.1327'. [ 484.208750][ T5654] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 484.222954][ T5654] ext4 filesystem being mounted at /261/bus supports timestamps until (%ptR?) (0x7fffffff) [ 484.252019][ T5655] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 484.290240][ T5655] ext4 filesystem being mounted at /259/bus supports timestamps until (%ptR?) (0x7fffffff) [ 488.035526][ T5666] EXT4-fs warning (device loop4): ext4_multi_mount_protect:387: Unable to create kmmpd thread for loop4. [ 490.123337][ T5691] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 490.137609][ T5691] ext4 filesystem being mounted at /255/bus supports timestamps until (%ptR?) (0x7fffffff) [ 491.712527][ T5700] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 491.726533][ T5700] ext4 filesystem being mounted at /277/bus supports timestamps until (%ptR?) (0x7fffffff) [ 491.935231][ T5683] EXT4-fs warning (device loop4): ext4_multi_mount_protect:387: Unable to create kmmpd thread for loop4. [ 493.413657][ T5720] overlayfs: unrecognized mount option "/" or missing value [ 493.428850][ T5720] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 494.671503][ T5733] overlayfs: unrecognized mount option "/" or missing value [ 496.202999][ T5735] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 497.787137][ T5732] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 497.801207][ T5732] ext4 filesystem being mounted at /257/bus supports timestamps until (%ptR?) (0x7fffffff) [ 501.359791][ T5759] EXT4-fs (loop1): Test dummy encryption mode enabled [ 501.366771][ T5759] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 501.366771][ T5759] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 501.366771][ T5759] [ 501.384260][ T5759] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 501.394447][ T5759] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 501.637605][ T5758] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 505.031415][ T5778] EXT4-fs: failed to create workqueue [ 505.036638][ T5778] EXT4-fs (loop4): mount failed [ 505.832803][ T5806] overlayfs: unrecognized mount option "/" or missing value [ 505.849444][ T5800] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 506.155433][ T5807] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 506.170047][ T5807] ext4 filesystem being mounted at /265/bus supports timestamps until (%ptR?) (0x7fffffff) [ 507.109265][ T5820] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 507.417991][ T5824] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1363'. [ 508.448886][ T5841] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 508.463087][ T5841] ext4 filesystem being mounted at /267/bus supports timestamps until (%ptR?) (0x7fffffff) [ 509.512098][ T5853] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 510.328390][ T5867] overlayfs: unrecognized mount option "/" or missing value [ 510.342065][ T5867] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 510.471521][ T5868] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 510.879711][ T5873] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 510.894307][ T5873] ext4 filesystem being mounted at /269/bus supports timestamps until (%ptR?) (0x7fffffff) [ 512.051931][ T5896] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1377'. [ 516.221469][ T5902] EXT4-fs warning (device loop3): ext4_multi_mount_protect:387: Unable to create kmmpd thread for loop3. [ 516.432275][ T5914] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 516.446051][ T5914] ext4 filesystem being mounted at /271/bus supports timestamps until (%ptR?) (0x7fffffff) [ 516.449357][ T5921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12397 sclass=netlink_route_socket pid=5921 comm=syz.1.1383 [ 516.766463][ T5936] overlayfs: unrecognized mount option "/" or missing value [ 516.778684][ T5936] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 517.313089][ T5944] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 518.464829][ T5951] overlayfs: failed to resolve './file1': -2 [ 524.004755][ T5983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12397 sclass=netlink_route_socket pid=5983 comm=syz.0.1399 [ 524.191288][ T5979] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 527.276739][ T5993] EXT4-fs warning (device loop2): ext4_multi_mount_protect:387: Unable to create kmmpd thread for loop2. [ 528.290520][ T6015] overlayfs: unrecognized mount option "/" or missing value [ 528.304719][ T6015] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 528.825323][ T6007] EXT4-fs (loop4): 1 orphan inode deleted [ 528.831347][ T6007] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 528.849436][ T6007] ext4 filesystem being mounted at /293/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 529.380144][ T6036] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1408'. [ 529.468509][ T6034] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 529.482667][ T6034] ext4 filesystem being mounted at /294/bus supports timestamps until (%ptR?) (0x7fffffff) [ 533.377496][ T6052] EXT4-fs (loop4): Test dummy encryption mode enabled [ 533.384383][ T6052] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 533.384383][ T6052] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 533.384383][ T6052] [ 533.402399][ T6052] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 533.422121][ T6052] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 534.234866][ T6058] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 535.566786][ T6066] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 535.581311][ T6066] ext4 filesystem being mounted at /279/bus supports timestamps until (%ptR?) (0x7fffffff) [ 542.041584][ T6098] overlayfs: unrecognized mount option "/" or missing value [ 542.602687][ T6097] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 542.852523][ T6098] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 544.986128][ T6111] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 545.000248][ T6111] ext4 filesystem being mounted at /274/bus supports timestamps until (%ptR?) (0x7fffffff) [ 550.832422][ T6144] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 551.921529][ T6147] overlayfs: unrecognized mount option "/" or missing value [ 552.352495][ T6147] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 554.612415][ T6167] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 557.902373][ T6186] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 559.803571][ T6178] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 559.817872][ T6178] ext4 filesystem being mounted at /283/bus supports timestamps until (%ptR?) (0x7fffffff) [ 560.219034][ T6187] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 560.232993][ T6187] ext4 filesystem being mounted at /300/bus supports timestamps until (%ptR?) (0x7fffffff) [ 561.366852][ T6192] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 563.401188][ T6198] EXT4-fs: failed to create workqueue [ 563.406402][ T6198] EXT4-fs (loop3): mount failed [ 563.501582][ T6214] overlayfs: unrecognized mount option "/" or missing value [ 563.510177][ T6214] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 564.503068][ T6231] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 564.517452][ T6231] ext4 filesystem being mounted at /303/bus supports timestamps until (%ptR?) (0x7fffffff) [ 565.521570][ T6240] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 566.326260][ T6248] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 569.652421][ T6267] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 570.410904][ T23] kauditd_printk_skb: 12 callbacks suppressed [ 570.410915][ T23] audit: type=1400 audit(1745497509.100:696): avc: denied { execmem } for pid=6270 comm="syz.4.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 570.500612][ T23] audit: type=1400 audit(1745497509.200:697): avc: denied { create } for pid=6277 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 572.051100][ T6287] overlayfs: missing 'lowerdir' [ 573.186978][ T6290] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1467'. [ 573.224411][ T23] audit: type=1400 audit(1745497511.920:698): avc: denied { write } for pid=6277 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 573.255117][ T6290] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1467'. [ 573.267257][ T23] audit: type=1400 audit(1745497511.950:699): avc: denied { nlmsg_write } for pid=6277 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 573.400514][ T6284] EXT4-fs warning (device loop0): ext4_multi_mount_protect:387: Unable to create kmmpd thread for loop0. [ 573.646411][ T6299] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 574.128891][ T6297] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 574.745796][ T6311] attempt to access beyond end of device [ 574.745796][ T6311] loop2: rw=0, want=1041, limit=128 [ 574.827061][ T6314] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 574.841436][ T6314] ext4 filesystem being mounted at /282/bus supports timestamps until (%ptR?) (0x7fffffff) [ 575.973752][ T6324] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 577.518389][ T6333] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 577.532476][ T6333] ext4 filesystem being mounted at /309/bus supports timestamps until (%ptR?) (0x7fffffff) [ 578.196537][ T6341] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 578.246039][ T6342] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 581.496058][ T6362] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1484'. [ 581.540032][ T6362] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1484'. [ 581.662118][ T6356] EXT4-fs (loop3): Test dummy encryption mode enabled [ 581.668823][ T6356] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 581.668823][ T6356] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 581.668823][ T6356] [ 581.686373][ T6356] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 581.696262][ T6356] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 582.792762][ T6380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12397 sclass=netlink_route_socket pid=6380 comm=syz.3.1488 [ 582.954765][ T6377] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 582.969307][ T6377] ext4 filesystem being mounted at /292/bus supports timestamps until (%ptR?) (0x7fffffff) [ 584.342525][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 584.353269][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 584.362239][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 584.372969][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 584.380573][ T6385] loop7: unable to read partition table [ 584.387478][ T6385] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 584.659156][ T6396] overlayfs: missing 'lowerdir' [ 585.275551][ T6403] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 585.289923][ T6403] ext4 filesystem being mounted at /294/bus supports timestamps until (%ptR?) (0x7fffffff) [ 587.422396][ T6416] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 588.214690][ T6415] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 588.228819][ T6415] ext4 filesystem being mounted at /292/bus supports timestamps until (%ptR?) (0x7fffffff) [ 597.256320][ T6447] attempt to access beyond end of device [ 597.256320][ T6447] loop3: rw=0, want=1041, limit=128 [ 597.277068][ T6450] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 597.284644][ T6450] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 597.311657][ T6450] F2FS-fs (loop2): Found nat_bits in checkpoint [ 597.339668][ T6450] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 597.346742][ T6450] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 597.800113][ T23] audit: type=1400 audit(1745497536.500:700): avc: denied { unmount } for pid=356 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 599.242399][ T6480] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 599.919520][ T6477] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 599.933524][ T6477] ext4 filesystem being mounted at /290/bus supports timestamps until (%ptR?) (0x7fffffff) [ 603.715669][ T6504] EXT4-fs (loop2): orphan cleanup on readonly fs [ 603.725191][ T6504] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.1507: bg 0: block 248: padding at end of block bitmap is not set [ 603.740655][ T6504] Quota error (device loop2): write_blk: dquota write failed [ 603.748002][ T6504] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 603.759838][ T6504] EXT4-fs (loop2): 1 truncate cleaned up [ 604.018984][ T6504] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 604.390880][ T6517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12397 sclass=netlink_route_socket pid=6517 comm=syz.0.1514 [ 604.418139][ T6516] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 604.425805][ T6516] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 604.629149][ T6516] F2FS-fs (loop3): Found nat_bits in checkpoint [ 604.669412][ T6516] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 604.676430][ T6516] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 605.098065][ T6536] EXT4-fs (loop1): Test dummy encryption mode enabled [ 605.104841][ T6536] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 605.104841][ T6536] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 605.104841][ T6536] [ 605.122479][ T6536] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 605.167569][ T6536] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 607.588647][ T6533] EXT4-fs warning (device loop0): ext4_multi_mount_protect:387: Unable to create kmmpd thread for loop0. [ 608.179857][ T6548] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 608.194158][ T6548] ext4 filesystem being mounted at /301/bus supports timestamps until (%ptR?) (0x7fffffff) [ 610.639078][ T6561] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 610.653859][ T6561] ext4 filesystem being mounted at /319/bus supports timestamps until (%ptR?) (0x7fffffff) [ 611.273304][ T6575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12397 sclass=netlink_route_socket pid=6575 comm=syz.3.1529 [ 613.305026][ T6585] EXT4-fs (loop2): orphan cleanup on readonly fs [ 613.315403][ T6585] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.1530: bg 0: block 248: padding at end of block bitmap is not set [ 613.331170][ T6585] Quota error (device loop2): write_blk: dquota write failed [ 613.338875][ T6585] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 613.578153][ T6585] EXT4-fs (loop2): 1 truncate cleaned up [ 613.584524][ T6585] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 614.261844][ T6586] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 614.276097][ T6586] ext4 filesystem being mounted at /294/bus supports timestamps until (%ptR?) (0x7fffffff) [ 615.509758][ T6606] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 615.523817][ T6606] ext4 filesystem being mounted at /320/bus supports timestamps until (%ptR?) (0x7fffffff) [ 615.834827][ T6618] EXT4-fs (loop3): orphan cleanup on readonly fs [ 615.845512][ T6618] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.1539: bg 0: block 248: padding at end of block bitmap is not set [ 617.021616][ T6618] Quota error (device loop3): write_blk: dquota write failed [ 617.029196][ T6618] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 617.040990][ T6618] EXT4-fs (loop3): 1 truncate cleaned up [ 617.047810][ T6618] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 617.266471][ T6624] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 617.280716][ T6624] ext4 filesystem being mounted at /300/bus supports timestamps until (%ptR?) (0x7fffffff) [ 618.771847][ T6642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12397 sclass=netlink_route_socket pid=6642 comm=syz.1.1542 [ 619.053565][ T6639] EXT4-fs (loop4): Test dummy encryption mode enabled [ 619.060207][ T6639] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 619.060207][ T6639] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 619.060207][ T6639] [ 619.078150][ T6639] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 619.088086][ T6639] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 619.506156][ T6646] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 619.520264][ T6646] ext4 filesystem being mounted at /296/bus supports timestamps until (%ptR?) (0x7fffffff) [ 621.553590][ T6662] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 622.112725][ T6661] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 622.127174][ T6661] ext4 filesystem being mounted at /315/bus supports timestamps until (%ptR?) (0x7fffffff) [ 622.860410][ T6686] EXT4-fs (loop3): orphan cleanup on readonly fs [ 622.901207][ T6686] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.1550: bg 0: block 248: padding at end of block bitmap is not set [ 623.111955][ T6686] Quota error (device loop3): write_blk: dquota write failed [ 623.119432][ T6686] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 623.133313][ T6686] EXT4-fs (loop3): 1 truncate cleaned up [ 623.149342][ T6686] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 623.927739][ T23] audit: type=1400 audit(1745497562.630:701): avc: denied { setattr } for pid=6689 comm="syz.2.1561" name="file0" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 624.887422][ T6699] EXT4-fs (loop0): orphan cleanup on readonly fs [ 624.896176][ T6699] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz.0.1553: bg 0: block 248: padding at end of block bitmap is not set [ 624.911254][ T6699] Quota error (device loop0): write_blk: dquota write failed [ 624.918644][ T6699] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 624.930025][ T6699] EXT4-fs (loop0): 1 truncate cleaned up [ 624.936050][ T6699] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 626.642364][ T6709] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 627.431854][ T6716] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 627.446023][ T6716] ext4 filesystem being mounted at /304/bus supports timestamps until (%ptR?) (0x7fffffff) [ 629.940165][ T6725] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 629.954347][ T6725] ext4 filesystem being mounted at /318/bus supports timestamps until (%ptR?) (0x7fffffff) [ 630.012211][ T6734] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 630.026174][ T6734] ext4 filesystem being mounted at /312/bus supports timestamps until (%ptR?) (0x7fffffff) [ 630.929093][ T6753] overlayfs: missing 'lowerdir' [ 630.940316][ T23] audit: type=1400 audit(1745497569.650:702): avc: denied { write } for pid=6756 comm="syz.0.1566" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 630.945164][ T6742] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 631.082393][ T23] audit: type=1400 audit(1745497569.650:703): avc: denied { add_name } for pid=6756 comm="syz.0.1566" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 631.272606][ T6742] ext4 filesystem being mounted at /324/bus supports timestamps until (%ptR?) (0x7fffffff) [ 631.284585][ T23] audit: type=1400 audit(1745497569.650:704): avc: denied { create } for pid=6756 comm="syz.0.1566" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 631.320420][ T23] audit: type=1400 audit(1745497569.650:705): avc: denied { associate } for pid=6756 comm="syz.0.1566" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 631.371347][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.382136][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 631.400924][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.411611][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 631.419301][ T6763] loop7: unable to read partition table [ 631.424773][ T6763] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 631.433874][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.444570][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 631.491280][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.502192][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 631.512677][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.523377][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 631.532939][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.543914][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 631.552646][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.563334][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 631.826306][ T6770] EXT4-fs (loop0): orphan cleanup on readonly fs [ 631.835804][ T6770] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz.0.1568: bg 0: block 248: padding at end of block bitmap is not set [ 631.851058][ T6770] Quota error (device loop0): write_blk: dquota write failed [ 631.858352][ T6770] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 631.870068][ T6770] EXT4-fs (loop0): 1 truncate cleaned up [ 631.876295][ T6770] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 635.982325][ T6780] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 635.996311][ T6780] ext4 filesystem being mounted at /314/bus supports timestamps until (%ptR?) (0x7fffffff) [ 636.841080][ T6789] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 636.855314][ T6789] ext4 filesystem being mounted at /321/bus supports timestamps until (%ptR?) (0x7fffffff) [ 637.494056][ T6802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1574'. [ 637.687965][ T6809] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1572'. [ 637.944797][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 637.955716][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 637.975987][ T6806] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 637.990073][ T6806] ext4 filesystem being mounted at /304/bus supports timestamps until (%ptR?) (0x7fffffff) [ 638.852390][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 638.863284][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 638.871084][ T6812] loop7: unable to read partition table [ 638.876504][ T6812] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 639.482030][ T6820] attempt to access beyond end of device [ 639.482030][ T6820] loop4: rw=0, want=1041, limit=128 [ 639.655839][ T6832] overlayfs: missing 'lowerdir' [ 640.992373][ T6840] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 644.164460][ T6837] EXT4-fs warning (device loop3): ext4_multi_mount_protect:387: Unable to create kmmpd thread for loop3. [ 644.279173][ T6849] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 644.293191][ T6849] ext4 filesystem being mounted at /318/bus supports timestamps until (%ptR?) (0x7fffffff) [ 644.799462][ T6870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1589'. [ 644.831412][ T6866] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 644.845587][ T6866] ext4 filesystem being mounted at /324/bus supports timestamps until (%ptR?) (0x7fffffff) [ 645.653661][ T6873] EXT4-fs (loop4): 1 orphan inode deleted [ 645.666604][ T6873] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 645.695912][ T6873] ext4 filesystem being mounted at /327/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 646.665222][ T6890] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 646.679381][ T6890] ext4 filesystem being mounted at /319/bus supports timestamps until (%ptR?) (0x7fffffff) [ 648.745840][ T6901] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 648.759735][ T6901] ext4 filesystem being mounted at /308/bus supports timestamps until (%ptR?) (0x7fffffff) [ 652.341870][ T6931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1601'. [ 652.490667][ T6921] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 652.504823][ T6921] ext4 filesystem being mounted at /329/bus supports timestamps until (%ptR?) (0x7fffffff) [ 653.189304][ T6922] EXT4-fs warning (device loop3): ext4_multi_mount_protect:387: Unable to create kmmpd thread for loop3. [ 653.821356][ T6943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1600'. [ 653.995560][ T6939] EXT4-fs (loop1): orphan cleanup on readonly fs [ 654.005210][ T6939] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.1602: bg 0: block 248: padding at end of block bitmap is not set [ 654.020175][ T6939] Quota error (device loop1): write_blk: dquota write failed [ 654.027541][ T6939] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 654.039056][ T6939] EXT4-fs (loop1): 1 truncate cleaned up [ 654.046537][ T6939] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 654.944916][ T6945] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 654.946952][ T6954] EXT4-fs (loop1): 1 orphan inode deleted [ 654.952682][ T6945] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 654.987328][ T6945] F2FS-fs (loop2): Found nat_bits in checkpoint [ 654.988012][ T6954] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 655.010670][ T6954] ext4 filesystem being mounted at /322/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 655.224804][ T6945] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 655.233287][ T6969] EXT4-fs (loop4): 1 orphan inode deleted [ 655.238828][ T6969] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 655.261391][ T6969] ext4 filesystem being mounted at /332/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 655.531092][ T6945] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 655.864035][ T6945] attempt to access beyond end of device [ 655.864035][ T6945] loop2: rw=2049, want=79872, limit=40427 [ 656.289661][ T6991] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 656.303643][ T6991] ext4 filesystem being mounted at /328/bus supports timestamps until (%ptR?) (0x7fffffff) [ 656.536827][ T6945] attempt to access beyond end of device [ 656.536827][ T6945] loop2: rw=2049, want=81920, limit=40427 [ 656.803761][ T6945] attempt to access beyond end of device [ 656.803761][ T6945] loop2: rw=2049, want=53064, limit=40427 [ 656.832975][ T6945] attempt to access beyond end of device [ 656.832975][ T6945] loop2: rw=2049, want=53248, limit=40427 [ 657.174917][ T6999] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 657.488779][ T6945] attempt to access beyond end of device [ 657.488779][ T6945] loop2: rw=2049, want=67496, limit=40427 [ 657.567439][ T6945] attempt to access beyond end of device [ 657.567439][ T6945] loop2: rw=2049, want=74792, limit=40427 [ 657.691049][ T358] attempt to access beyond end of device [ 657.691049][ T358] loop2: rw=2049, want=40968, limit=40427 [ 658.246173][ T7013] ================================================================== [ 658.254135][ T7013] BUG: KASAN: use-after-free in __ext4_iget+0x384/0x4330 [ 658.260919][ T7013] Read of size 8 at addr ffff8881dd26a560 by task syz.0.1617/7013 [ 658.268707][ T7013] [ 658.270850][ T7013] CPU: 0 PID: 7013 Comm: syz.0.1617 Tainted: G W 5.4.290-syzkaller-00001-g986c38813dff #0 [ 658.281862][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 658.292146][ T7013] Call Trace: [ 658.295359][ T7013] dump_stack+0x1d8/0x241 [ 658.299618][ T7013] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 658.305259][ T7013] ? printk+0xd1/0x111 [ 658.309154][ T7013] ? __ext4_iget+0x384/0x4330 [ 658.313670][ T7013] print_address_description+0x8c/0x600 [ 658.319136][ T7013] ? iget_locked+0x850/0x850 [ 658.323561][ T7013] ? __kasan_check_write+0x14/0x20 [ 658.328516][ T7013] ? _raw_spin_lock+0xa4/0x1b0 [ 658.333209][ T7013] ? __ext4_iget+0x384/0x4330 [ 658.337720][ T7013] __kasan_report+0xf3/0x120 [ 658.342145][ T7013] ? __ext4_iget+0x384/0x4330 [ 658.346748][ T7013] kasan_report+0x30/0x60 [ 658.350913][ T7013] __asan_report_load8_noabort+0x14/0x20 [ 658.356383][ T7013] __ext4_iget+0x384/0x4330 [ 658.360725][ T7013] ? idr_replace+0x230/0x230 [ 658.365157][ T7013] ? ext4_get_projid+0x140/0x140 [ 658.369928][ T7013] ? _raw_write_lock+0xa4/0x170 [ 658.374611][ T7013] ? __proc_create+0x65a/0xa00 [ 658.379220][ T7013] ext4_enable_quotas+0x528/0x940 [ 658.384073][ T7013] ? ext4_fill_flex_info+0x5b0/0x5b0 [ 658.389291][ T7013] ? proc_create+0x230/0x230 [ 658.393789][ T7013] ? __kasan_check_write+0x14/0x20 [ 658.398736][ T7013] ? ext4_register_sysfs+0x1f9/0x240 [ 658.403860][ T7013] ext4_fill_super+0x84f0/0x8d90 [ 658.408680][ T7013] ? ext4_mount+0x40/0x40 [ 658.412809][ T7013] ? pointer+0xad/0xb10 [ 658.416790][ T7013] ? set_blocksize+0x156/0x3c0 [ 658.421653][ T7013] ? set_blocksize+0x17d/0x3c0 [ 658.426340][ T7013] ? sb_set_blocksize+0xa8/0xf0 [ 658.431032][ T7013] mount_bdev+0x273/0x380 [ 658.435192][ T7013] ? ext4_mount+0x40/0x40 [ 658.439362][ T7013] ext4_mount+0x34/0x40 [ 658.443353][ T7013] legacy_get_tree+0xee/0x190 [ 658.447923][ T7013] ? ext4_lazyinit_thread+0xc70/0xc70 [ 658.453161][ T7013] vfs_get_tree+0x88/0x290 [ 658.457426][ T7013] do_new_mount+0x292/0x570 [ 658.461760][ T7013] ? cap_capable+0x1ce/0x270 [ 658.466191][ T7013] ? do_move_mount_old+0x160/0x160 [ 658.471147][ T7013] ? security_capable+0x87/0xb0 [ 658.475913][ T7013] ? ns_capable+0x89/0xe0 [ 658.480082][ T7013] do_mount+0x688/0xe10 [ 658.484066][ T7013] ? copy_mount_string+0x30/0x30 [ 658.488835][ T7013] ? copy_mount_options+0x2bf/0x330 [ 658.493875][ T7013] ksys_mount+0xcc/0x100 [ 658.497960][ T7013] __x64_sys_mount+0xbf/0xd0 [ 658.502380][ T7013] do_syscall_64+0xd8/0x170 [ 658.506716][ T7013] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 658.512448][ T7013] RIP: 0033:0x7f7cdd8bd10a [ 658.516699][ T7013] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.536148][ T7013] RSP: 002b:00007f7cdbee1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 658.544396][ T7013] RAX: ffffffffffffffda RBX: 00007f7cdbee1ef0 RCX: 00007f7cdd8bd10a [ 658.552197][ T7013] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f7cdbee1eb0 [ 658.560104][ T7013] RBP: 0000200000000180 R08: 00007f7cdbee1ef0 R09: 000000000021081e [ 658.568007][ T7013] R10: 000000000021081e R11: 0000000000000246 R12: 0000200000000000 [ 658.575815][ T7013] R13: 00007f7cdbee1eb0 R14: 00000000000004fa R15: 00002000000001c0 [ 658.583630][ T7013] [ 658.585792][ T7013] Allocated by task 1914: [ 658.589972][ T7013] __kasan_kmalloc+0x171/0x210 [ 658.594565][ T7013] kasan_slab_alloc+0xe/0x10 [ 658.599014][ T7013] kmem_cache_alloc+0xe0/0x260 [ 658.603695][ T7013] f2fs_alloc_inode+0x26/0x3c0 [ 658.608298][ T7013] new_inode_pseudo+0x64/0x220 [ 658.612879][ T7013] new_inode+0x28/0x1c0 [ 658.617043][ T7013] f2fs_new_inode+0x11a/0x1470 [ 658.621659][ T7013] f2fs_create+0x16e/0x12f0 [ 658.625988][ T7013] path_openat+0x184a/0x34b0 [ 658.630509][ T7013] do_filp_open+0x20b/0x450 [ 658.634847][ T7013] do_sys_open+0x39c/0x810 [ 658.639088][ T7013] __x64_sys_openat+0xa2/0xb0 [ 658.643607][ T7013] do_syscall_64+0xd8/0x170 [ 658.647950][ T7013] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 658.653665][ T7013] [ 658.656099][ T7013] Freed by task 17: [ 658.659759][ T7013] __kasan_slab_free+0x1b5/0x270 [ 658.664521][ T7013] kasan_slab_free+0xe/0x10 [ 658.668873][ T7013] kmem_cache_free+0x1a0/0x410 [ 658.673463][ T7013] f2fs_free_inode+0x24/0x30 [ 658.677888][ T7013] i_callback+0x4b/0x70 [ 658.681888][ T7013] rcu_do_batch+0x492/0xa00 [ 658.686223][ T7013] rcu_core+0x4c8/0xcb0 [ 658.690347][ T7013] rcu_core_si+0x9/0x10 [ 658.694294][ T7013] __do_softirq+0x24a/0x687 [ 658.698636][ T7013] [ 658.700804][ T7013] The buggy address belongs to the object at ffff8881dd26a0a0 [ 658.700804][ T7013] which belongs to the cache f2fs_inode_cache of size 1264 [ 658.715216][ T7013] The buggy address is located 1216 bytes inside of [ 658.715216][ T7013] 1264-byte region [ffff8881dd26a0a0, ffff8881dd26a590) [ 658.728577][ T7013] The buggy address belongs to the page: [ 658.734104][ T7013] page:ffffea0007749a00 refcount:1 mapcount:0 mapping:ffff8881f0fcec80 index:0xffff8881dd26cc20 compound_mapcount: 0 [ 658.746327][ T7013] flags: 0x8000000000010200(slab|head) [ 658.751599][ T7013] raw: 8000000000010200 0000000000000000 0000000100000001 ffff8881f0fcec80 [ 658.760091][ T7013] raw: ffff8881dd26cc20 0000000080170016 00000001ffffffff 0000000000000000 [ 658.768516][ T7013] page dumped because: kasan: bad access detected [ 658.774836][ T7013] page_owner tracks the page as allocated [ 658.780334][ T7013] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE) [ 658.797855][ T7013] prep_new_page+0x192/0x370 [ 658.802284][ T7013] get_page_from_freelist+0x2d13/0x2d90 [ 658.807812][ T7013] __alloc_pages_nodemask+0x393/0x840 [ 658.812980][ T7013] alloc_slab_page+0x3b/0x400 [ 658.817479][ T7013] new_slab+0x98/0x430 [ 658.821516][ T7013] ___slab_alloc+0x2e0/0x460 [ 658.825909][ T7013] __slab_alloc+0x63/0xa0 [ 658.830067][ T7013] kmem_cache_alloc+0x12a/0x260 [ 658.834752][ T7013] f2fs_alloc_inode+0x26/0x3c0 [ 658.839354][ T7013] iget_locked+0x14f/0x850 [ 658.843649][ T7013] f2fs_iget+0x55/0x4c50 [ 658.847685][ T7013] f2fs_fill_super+0x4d1b/0x8330 [ 658.852471][ T7013] mount_bdev+0x273/0x380 [ 658.856630][ T7013] f2fs_mount+0x34/0x40 [ 658.860709][ T7013] legacy_get_tree+0xee/0x190 [ 658.865316][ T7013] vfs_get_tree+0x88/0x290 [ 658.869560][ T7013] page_owner free stack trace missing [ 658.874760][ T7013] [ 658.876968][ T7013] Memory state around the buggy address: [ 658.882479][ T7013] ffff8881dd26a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 658.890474][ T7013] ffff8881dd26a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 658.898496][ T7013] >ffff8881dd26a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 658.906406][ T7013] ^ [ 658.913511][ T7013] ffff8881dd26a580: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 658.921402][ T7013] ffff8881dd26a600: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.929293][ T7013] ================================================================== [ 658.937191][ T7013] Disabling lock debugging due to kernel taint [ 658.943385][ T7013] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 658.958619][ T7013] EXT4-fs (loop0): mount failed [ 660.248328][ T7022] EXT4-fs (loop3): orphan cleanup on readonly fs [ 660.255488][ T7022] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.1618: bg 0: block 248: padding at end of block bitmap is not set [ 660.270689][ T7022] Quota error (device loop3): write_blk: dquota write failed [ 660.278314][ T7022] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 660.695425][ T7022] EXT4-fs (loop3): 1 truncate cleaned up [ 660.706999][ T7022] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 661.835072][ T7029] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 661.849337][ T7029] ext4 filesystem being mounted at /314/bus supports timestamps until (%ptR?) (0x7fffffff)