last executing test programs: 2m22.555791728s ago: executing program 2 (id=6414): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2m22.555149378s ago: executing program 2 (id=6415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2m22.503427082s ago: executing program 2 (id=6416): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 2m22.491607884s ago: executing program 2 (id=6419): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 2m22.369909273s ago: executing program 2 (id=6424): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) 2m21.638077512s ago: executing program 2 (id=6435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000400)='task_rename\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), 0x0, 0x2}, 0x20) 2m20.752824784s ago: executing program 32 (id=6435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000400)='task_rename\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), 0x0, 0x2}, 0x20) 2.343477141s ago: executing program 3 (id=8357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x1, 0xffff, 0x0, 0xffffffff, 0x75, 0x46b, 0x9, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.146267867s ago: executing program 4 (id=8360): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x402, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000180)) 2.143938537s ago: executing program 0 (id=8361): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0xb55b}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005000000080003"], 0x38}}, 0x0) 2.10997103s ago: executing program 0 (id=8362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) capset(&(0x7f0000000040)={0x19980330, r0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 2.10131191s ago: executing program 4 (id=8363): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) get_robust_list(0x0, 0x0, 0x0) 2.062508534s ago: executing program 4 (id=8364): syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040), &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x7) 2.013088998s ago: executing program 3 (id=8366): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) request_key(&(0x7f0000000440)='keyring\x00', &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000480)='\x84\x8d\xdc\x1b\xb1\x1e\x96\xfcT\xc8\x1b\xb3\xd5\xc2jP\x0e\xd5\xef\xc1\x1aJ\xed\xd9D\xaa\x99\xb7\xfb\x18b?E\x8ca|\xa0T\xd7\xef\x97pb\xc9>1y[\x7fG{p$\x18\xe9\xdaj\x8f\xcc\x8d\xd6\x97\x9c\x8cn,v\xc9\xa5\xb7\xfc F', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) 1.899747307s ago: executing program 5 (id=8370): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x0) renameat2(r1, &(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000200)='./file7\x00', 0x0) 1.762147538s ago: executing program 5 (id=8371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000faffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.018341178s ago: executing program 0 (id=8372): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1, @private}}, @sadb_sa={0x2, 0x1, 0x4, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0) 890.190878ms ago: executing program 4 (id=8374): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") lchown(0x0, 0x0, 0xee01) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, 0xca, 0x0, 0x2, 0x8, 0x0, 0x0, 0x9d}) 889.882488ms ago: executing program 0 (id=8375): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x200000000003}, 0x18) mknod$loop(0x0, 0x100000000000600d, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 889.548098ms ago: executing program 5 (id=8377): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0xca, 0x0, 0x2, 0x8, 0x0, 0x0, 0x9d}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 875.649919ms ago: executing program 3 (id=8379): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x200, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1cc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1b4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x180, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x151, 0x6, "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"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 750.13419ms ago: executing program 3 (id=8382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d000000"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000340)=0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x78) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) setregid(0x0, 0xee00) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000840)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x41015500, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x40000012) close(0xffffffffffffffff) syslog(0x4, &(0x7f00000003c0)=""/152, 0x98) 749.86425ms ago: executing program 0 (id=8383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) sendmsg$key(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2, 0x13, 0xa, 0x2, 0x2, 0x0, 0x70bd27, 0x25dfdbfe}, 0x10}}, 0x4048004) socket$inet6(0xa, 0x1, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/78, 0x4e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x3b, 0x39, &(0x7f0000000000)="ac278d4069d82a6f0815f6ebdfbb672ad9138a4cd2ee9a99ac7af5760296eadd63b65b702aa056431f867c05dbf6ed82195e45e92c74343cbf9226", &(0x7f0000000040)=""/57, 0x3, 0x0, 0x5e, 0x96, &(0x7f0000000100)="a18c00d7e4a6711dd0999218c87a1844f9b6f1da49244d7be87b7afe31439c38f0822e1c6b3f187b1ad58ad75aa373af4c53ef4260e74e0facfcda6b45317278b96f17f1fdfca0c53ef630feb7be209ad096dc646622a57a08c94f5dca16", &(0x7f0000000300)="b6ce2af081fc413be4e4dacb022f33be32882d1955c85b5b6b565462c7e5234fca5c5705038c9caf2efa7a8a7acdc47c0f3717d12e523a13c2333941c992baa3ea8c9c20dcfa59d4f53ac01edf33e8c920305dec89e47499af6880398a6db3eb274d453d8ed73ae367fa9e276601891ddb51dc7c7b94464616bc53eeb3cb7e2dda3b5731b35ca09ee201ac0999316d02c61705d954f4", 0x4, 0x0, 0x4}, 0x50) close(r0) 710.534753ms ago: executing program 5 (id=8384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 705.248053ms ago: executing program 1 (id=8385): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) 630.22462ms ago: executing program 1 (id=8386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000180)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 612.273991ms ago: executing program 4 (id=8387): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000700000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 607.352632ms ago: executing program 0 (id=8388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 558.059606ms ago: executing program 1 (id=8389): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x3c) socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x41, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 523.213868ms ago: executing program 4 (id=8390): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) write$binfmt_script(r0, &(0x7f0000000f00)={'#! ', './file0'}, 0xb) 496.20031ms ago: executing program 5 (id=8391): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="9b44875f9fb70f086ecd22d16d2008f8c5cc82ca01c16315e070e3a8ed91aa1cd6274d9b440bf979f0264ed04834b309c377ade4afa74bee93ac62972fd8cb3215ab519fb1b846984b6bbd61360dd91245b42cc8ee9033c02833cc452807b5f7bf11450679b9cbcbef84c55313f49d93d92cbbe7af0237870ff77741c7e6aa"], 0x1c}}, 0x4000054) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$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") creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_getevents(r3, 0xfffffffffffffff9, 0x6, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 442.096655ms ago: executing program 1 (id=8392): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, 0x0, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300)) r2 = inotify_init() readv(r2, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r2, 0x4, 0x42800) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r4, 0x0, 0x0) 84.448264ms ago: executing program 3 (id=8393): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[], 0x1c}}, 0x4000054) 83.433084ms ago: executing program 1 (id=8394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000100000}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) 21.139789ms ago: executing program 5 (id=8395): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") lchown(0x0, 0x0, 0xee01) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0xca, 0x0, 0x2, 0x8, 0x0, 0x0, 0x9d}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 15.611179ms ago: executing program 3 (id=8396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x42ab, 0x24d417d6, 0xffffffffffffffff, 0x800, 0xe26}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) 0s ago: executing program 1 (id=8397): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") lchown(0x0, 0x0, 0xee01) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, 0xca, 0x0, 0x2, 0x8, 0x0, 0x0, 0x9d}) kernel console output (not intermixed with test programs): sadm_t pid=24624 comm="syz.5.7378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1358.293525][ T30] audit: type=1326 audit(1755846750.618:11283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24624 comm="syz.5.7378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1358.351283][ T30] audit: type=1326 audit(1755846750.618:11284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24624 comm="syz.5.7378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1358.353830][ T712] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1358.375617][ T30] audit: type=1326 audit(1755846750.618:11285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24624 comm="syz.5.7378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1358.397992][ T712] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1358.535134][ T30] audit: type=1326 audit(1755846750.618:11286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24624 comm="syz.5.7378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1358.618374][T24643] usb usb1: check_ctrlrecip: process 24643 (syz.5.7386) requesting ep 01 but needs 81 [ 1358.621210][ T30] audit: type=1326 audit(1755846750.618:11287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24624 comm="syz.5.7378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1358.645171][T24643] usb usb1: usbfs: process 24643 (syz.5.7386) did not claim interface 0 before use [ 1358.693935][T24637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7383'. [ 1358.703284][ T30] audit: type=1326 audit(1755846750.618:11288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24624 comm="syz.5.7378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1358.752818][T24649] loop5: detected capacity change from 0 to 1024 [ 1358.777622][ T30] audit: type=1326 audit(1755846750.618:11289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24624 comm="syz.5.7378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1358.825301][ T30] audit: type=1326 audit(1755846750.618:11290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24624 comm="syz.5.7378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1358.854875][ T30] audit: type=1326 audit(1755846750.618:11291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24624 comm="syz.5.7378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1358.891797][T24655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7391'. [ 1358.920611][T24649] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1358.954476][T24649] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1359.005788][T24649] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1359.050920][T24665] device pim6reg1 entered promiscuous mode [ 1359.565679][T24698] 9pnet: Could not find request transport: rdma [ 1359.569605][T10283] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1359.580947][T24695] loop5: detected capacity change from 0 to 128 [ 1359.588375][T10283] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1359.619925][T24695] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1359.638646][T24695] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1359.653374][T24695] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1359.792362][T24711] device pim6reg1 entered promiscuous mode [ 1359.890032][T24714] loop4: detected capacity change from 0 to 512 [ 1359.952927][T24722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7415'. [ 1359.990023][T24714] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1360.164974][T24733] syz.3.7420[24733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1360.165060][T24733] syz.3.7420[24733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1360.223444][T24738] device pim6reg1 entered promiscuous mode [ 1360.742953][ T712] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1360.836650][ T712] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1361.237548][T24778] device pim6reg1 entered promiscuous mode [ 1361.470591][T24789] netlink: 'syz.4.7442': attribute type 3 has an invalid length. [ 1361.483427][T24791] loop3: detected capacity change from 0 to 512 [ 1361.509727][T24793] device pim6reg1 entered promiscuous mode [ 1361.543304][T24791] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1361.574601][T24804] tipc: Enabling of bearer rejected, failed to enable media [ 1361.616510][T24808] device pim6reg1 entered promiscuous mode [ 1361.736846][T10283] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1361.766100][T10283] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1361.787576][T24815] loop4: detected capacity change from 0 to 1024 [ 1362.156499][T24815] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1362.174971][T24815] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1362.270800][T24841] device pim6reg1 entered promiscuous mode [ 1362.386446][T24850] loop3: detected capacity change from 0 to 128 [ 1362.455960][T24850] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1362.469828][T24850] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1362.871619][T24875] loop5: detected capacity change from 0 to 512 [ 1363.463551][T24877] device pim6reg1 entered promiscuous mode [ 1364.231328][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1364.231346][ T30] audit: type=1400 audit(1364.214:11337): avc: denied { ioctl } for pid=24912 comm="syz.0.7491" path="socket:[87821]" dev="sockfs" ino=87821 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1364.570968][T24931] syz.5.7497[24931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1364.571053][T24931] syz.5.7497[24931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1364.648563][T24935] loop5: detected capacity change from 0 to 1024 [ 1364.715629][T24935] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1364.801312][T24935] EXT4-fs error (device loop5): ext4_map_blocks:740: inode #15: block 1: comm syz.5.7499: lblock 1 mapped to illegal pblock 1 (length 15) [ 1364.816254][T24935] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 1364.829001][T24935] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1364.829001][T24935] [ 1364.841779][T24935] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1364.859027][T24935] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7499: lblock 1 mapped to illegal pblock 1 (length 3) [ 1364.874160][T24935] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7499: lblock 1 mapped to illegal pblock 1 (length 3) [ 1364.889018][T24935] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7499: lblock 1 mapped to illegal pblock 1 (length 3) [ 1364.903361][T24935] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7499: lblock 1 mapped to illegal pblock 1 (length 3) [ 1364.909453][T24934] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 4: comm syz.5.7499: lblock 4 mapped to illegal pblock 4 (length 4) [ 1364.918611][T24935] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7499: lblock 1 mapped to illegal pblock 1 (length 3) [ 1364.932361][T24934] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 4: comm syz.5.7499: lblock 4 mapped to illegal pblock 4 (length 4) [ 1364.946925][T24935] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7499: lblock 1 mapped to illegal pblock 1 (length 3) [ 1365.036008][T24941] loop4: detected capacity change from 0 to 1024 [ 1365.096635][T24941] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1365.254183][T24954] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1365.282462][T24954] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 1365.315913][ T30] audit: type=1400 audit(1365.304:11338): avc: denied { create } for pid=24958 comm="syz.3.7505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1365.359908][T24954] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1365.359908][T24954] [ 1365.369666][T24954] EXT4-fs (loop4): Total free blocks count 0 [ 1365.375925][T24954] EXT4-fs (loop4): Free/Dirty block details [ 1365.382062][T24954] EXT4-fs (loop4): free_blocks=4293918720 [ 1365.389679][T24954] EXT4-fs (loop4): dirty_blocks=16 [ 1365.397470][T24954] EXT4-fs (loop4): Block reservation details [ 1365.403613][T24954] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1365.415680][ T30] audit: type=1400 audit(1365.324:11339): avc: denied { bind } for pid=24958 comm="syz.3.7505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1365.442136][T24963] device pim6reg1 entered promiscuous mode [ 1366.026751][T24976] loop4: detected capacity change from 0 to 1024 [ 1366.069347][T24976] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1366.147849][T24988] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: block 1: comm syz.4.7511: lblock 1 mapped to illegal pblock 1 (length 15) [ 1366.162532][T24988] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 1366.175549][T24988] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1366.175549][T24988] [ 1366.189319][T24988] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1366.209348][T24976] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 1: comm syz.4.7511: lblock 1 mapped to illegal pblock 1 (length 3) [ 1366.224049][T24976] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 1: comm syz.4.7511: lblock 1 mapped to illegal pblock 1 (length 3) [ 1366.259346][T24974] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 4: comm syz.4.7511: lblock 4 mapped to illegal pblock 4 (length 4) [ 1366.292769][T24976] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 1: comm syz.4.7511: lblock 1 mapped to illegal pblock 1 (length 3) [ 1366.296346][T24974] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 4: comm syz.4.7511: lblock 4 mapped to illegal pblock 4 (length 4) [ 1366.321757][T24976] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 1: comm syz.4.7511: lblock 1 mapped to illegal pblock 1 (length 3) [ 1366.337875][T24976] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 1: comm syz.4.7511: lblock 1 mapped to illegal pblock 1 (length 3) [ 1366.354055][T24976] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 1: comm syz.4.7511: lblock 1 mapped to illegal pblock 1 (length 3) [ 1366.467874][ T30] audit: type=1326 audit(1366.454:11340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e103bbe9 code=0x7ffc0000 [ 1366.493402][ T30] audit: type=1326 audit(1366.454:11341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e103bbe9 code=0x7ffc0000 [ 1366.554005][ T30] audit: type=1326 audit(1366.454:11342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25e103bbe9 code=0x7ffc0000 [ 1366.583201][ T30] audit: type=1326 audit(1366.454:11343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e103bbe9 code=0x7ffc0000 [ 1366.607411][ T30] audit: type=1326 audit(1366.454:11344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e103bbe9 code=0x7ffc0000 [ 1366.633165][T25007] device pim6reg1 entered promiscuous mode [ 1366.635227][ T30] audit: type=1326 audit(1366.454:11345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f25e103bbe9 code=0x7ffc0000 [ 1366.662814][ T30] audit: type=1326 audit(1366.464:11346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e103bbe9 code=0x7ffc0000 [ 1366.700745][T25008] device syzkaller0 entered promiscuous mode [ 1366.775597][T25014] loop5: detected capacity change from 0 to 128 [ 1366.802218][T25016] loop4: detected capacity change from 0 to 2048 [ 1366.819200][T25014] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1366.836044][T25014] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1366.852060][ T5789] loop4: p1 < > p3 p4 < > [ 1366.857485][ T5789] loop4: p3 start 4284289 is beyond EOD, truncated [ 1366.906647][T25017] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 1366.933963][T25016] loop4: p1 < > p3 p4 < > [ 1366.941136][T25016] loop4: p3 start 4284289 is beyond EOD, truncated [ 1366.974691][T25029] loop3: detected capacity change from 0 to 2048 [ 1367.027429][T25029] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1367.040668][ T101] loop4: p1 < > p3 p4 < > [ 1367.057342][ T101] loop4: p3 start 4284289 is beyond EOD, truncated [ 1367.066108][T25029] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.7533: bg 0: block 120: padding at end of block bitmap is not set [ 1367.160247][T11907] udevd[11907]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1367.182355][ T5889] udevd[5889]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1367.203471][T25040] device pim6reg1 entered promiscuous mode [ 1367.204992][ T5789] udevd[5789]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1367.221978][T11907] udevd[11907]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1367.236836][ T5789] udevd[5789]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1367.249049][T11907] udevd[11907]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1367.709461][T25064] loop5: detected capacity change from 0 to 2048 [ 1367.747153][T25064] loop5: p1 < > p3 p4 < > [ 1367.752488][T25064] loop5: p3 start 4284289 is beyond EOD, truncated [ 1367.815751][T25072] device pim6reg1 entered promiscuous mode [ 1367.966161][ T5789] udevd[5789]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1367.980365][T11907] udevd[11907]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1368.236869][T25090] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 1369.361327][T25117] loop5: detected capacity change from 0 to 512 [ 1369.373802][T25112] loop3: detected capacity change from 0 to 2048 [ 1369.397160][T25123] SELinux: policydb version 0 does not match my version range 15-33 [ 1369.405421][T25123] SELinux: failed to load policy [ 1369.444650][T25128] loop4: detected capacity change from 0 to 1024 [ 1369.452226][T25112] loop3: p1 < > p3 p4 < > [ 1369.457100][T25117] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1369.472722][T25117] EXT4-fs (loop5): Unrecognized mount option "=" or missing value [ 1369.473726][T25112] loop3: p3 start 4284289 is beyond EOD, truncated [ 1369.515408][T25128] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1369.956287][T18652] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: block 1: comm kworker/u4:63: lblock 1 mapped to illegal pblock 1 (length 15) [ 1369.972685][T18652] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 1369.986490][T18652] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1369.986490][T18652] [ 1370.005033][T11907] udevd[11907]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1370.018983][ T5789] udevd[5789]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1370.117449][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1370.117465][ T30] audit: type=1400 audit(1370.104:11375): avc: denied { mount } for pid=25152 comm="syz.3.7582" name="/" dev="ramfs" ino=90244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1370.194304][T25160] device pim6reg1 entered promiscuous mode [ 1370.744834][T25183] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1370.850073][ T30] audit: type=1326 audit(1370.834:11376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.7597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1370.874022][ T30] audit: type=1326 audit(1370.834:11377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.7597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1370.906252][ T30] audit: type=1326 audit(1370.834:11378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.7597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1370.934307][ T30] audit: type=1326 audit(1370.834:11379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.7597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1371.140966][ T30] audit: type=1326 audit(1370.834:11380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.7597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1371.207813][ T30] audit: type=1326 audit(1370.854:11381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.7597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1371.240973][T25191] device pim6reg1 entered promiscuous mode [ 1371.247364][ T30] audit: type=1326 audit(1371.034:11382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.7597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1371.283606][ T30] audit: type=1326 audit(1371.114:11383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.7597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1371.313997][ T30] audit: type=1326 audit(1371.154:11384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.1.7597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1371.457210][T25210] loop4: detected capacity change from 0 to 256 [ 1372.602938][T25210] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1372.622353][T25210] FAT-fs (loop4): Filesystem has been set read-only [ 1372.628726][T25223] hub 9-0:1.0: USB hub found [ 1372.646455][T25223] hub 9-0:1.0: 1 port detected [ 1373.218746][T25256] device syzkaller0 entered promiscuous mode [ 1373.547193][T18792] Bluetooth: hci0: Frame reassembly failed (-84) [ 1373.689039][T25267] loop3: detected capacity change from 0 to 2048 [ 1373.701141][T25267] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1373.720984][T25265] loop5: detected capacity change from 0 to 8192 [ 1373.770894][T25265] attempt to access beyond end of device [ 1373.770894][T25265] loop5: rw=0, want=57848, limit=8192 [ 1373.792399][T25265] Buffer I/O error on dev loop5, logical block 57847, async page read [ 1373.844576][T25279] loop3: detected capacity change from 0 to 1024 [ 1373.865425][T25279] EXT4-fs (loop3): Ignoring removed bh option [ 1373.871743][T25279] EXT4-fs (loop3): Ignoring removed nobh option [ 1373.884732][T25279] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1373.985760][T25289] device pim6reg1 entered promiscuous mode [ 1374.004928][T25279] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,data_err=abort,bh,dioread_lock,data_err=ignore,grpquota,data_err=ignore,grpquota,nobh,usrjquota=,dioread_nolock,minixdf,,errors=continue. Quota mode: writeback. [ 1374.139031][T25308] loop5: detected capacity change from 0 to 128 [ 1374.166136][T25308] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1374.237315][T25308] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1375.076773][T25322] mmap: syz.0.7654 (25322) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 1375.120963][T25328] device pim6reg1 entered promiscuous mode [ 1375.163179][T25329] device syzkaller0 entered promiscuous mode [ 1375.168280][T25332] loop5: detected capacity change from 0 to 1024 [ 1375.195051][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1375.195067][ T30] audit: type=1400 audit(1375.174:11391): avc: denied { mounton } for pid=25334 comm="syz.3.7659" path="/proc/730/task" dev="proc" ino=90533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1375.232546][T25332] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1375.249879][T25332] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1375.259859][ T30] audit: type=1400 audit(1375.184:11392): avc: denied { mount } for pid=25334 comm="syz.3.7659" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1375.292787][T25332] EXT4-fs error (device loop5): ext4_get_journal_inode:5149: inode #32: comm syz.5.7657: iget: special inode unallocated [ 1375.308381][T25332] EXT4-fs (loop5): no journal found [ 1375.313628][T25332] EXT4-fs (loop5): can't get journal size [ 1375.330504][T25332] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 1375.370491][T25332] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1453: inode #12: block 16: comm syz.5.7657: path /207/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 1375.371851][ T30] audit: type=1400 audit(1375.354:11393): avc: denied { watch } for pid=25330 comm="syz.5.7657" path="/207/file0" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1375.444927][T25348] loop4: detected capacity change from 0 to 256 [ 1375.451057][ T30] audit: type=1400 audit(1375.434:11394): avc: denied { write } for pid=25346 comm="syz.0.7666" path="socket:[90563]" dev="sockfs" ino=90563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1375.570471][ T30] audit: type=1400 audit(1375.554:11395): avc: denied { name_bind } for pid=25361 comm="syz.0.7671" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1375.597251][T25360] device pim6reg1 entered promiscuous mode [ 1375.605386][ T712] Bluetooth: hci0: command 0x1003 tx timeout [ 1375.612221][T21593] Bluetooth: hci0: sending frame failed (-49) [ 1376.008266][T25375] loop5: detected capacity change from 0 to 256 [ 1376.033295][T25375] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1376.048975][T25375] FAT-fs (loop5): Filesystem has been set read-only [ 1376.061740][T25379] loop4: detected capacity change from 0 to 1024 [ 1376.079222][T25379] EXT4-fs (loop4): quotafile must be on filesystem root [ 1376.150080][T25379] futex_wake_op: syz.4.7679 tries to shift op by -1; fix this program [ 1376.173313][T25379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7679'. [ 1376.201453][T25387] device syzkaller0 entered promiscuous mode [ 1376.259800][T25391] device pim6reg1 entered promiscuous mode [ 1376.281100][T25393] loop5: detected capacity change from 0 to 128 [ 1376.369797][T25393] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1376.391934][T25403] 9pnet: p9_errstr2errno: server reported unknown error [ 1376.405619][T25393] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1376.735143][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7691'. [ 1377.128974][T25415] loop4: detected capacity change from 0 to 1024 [ 1377.204417][T25415] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1377.238952][T25415] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1377.255942][T25415] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 1377.268932][T25415] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1377.268932][T25415] [ 1377.279099][T25415] EXT4-fs (loop4): Total free blocks count 0 [ 1377.285542][T25415] EXT4-fs (loop4): Free/Dirty block details [ 1377.291920][T25415] EXT4-fs (loop4): free_blocks=4293918720 [ 1377.298230][T25415] EXT4-fs (loop4): dirty_blocks=16 [ 1377.303502][T25415] EXT4-fs (loop4): Block reservation details [ 1377.310025][T25415] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1377.334384][T25415] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: block 1: comm syz.4.7692: lblock 1 mapped to illegal pblock 1 (length 11) [ 1377.349095][T25415] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 11 with error 117 [ 1377.361677][T25415] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1377.361677][T25415] [ 1377.442967][T25420] loop3: detected capacity change from 0 to 1024 [ 1377.616340][T25420] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1377.689381][T14726] Bluetooth: hci0: command 0x1001 tx timeout [ 1377.815017][T21593] Bluetooth: hci0: sending frame failed (-49) [ 1377.890045][T25432] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #15: block 1: comm syz.3.7693: lblock 1 mapped to illegal pblock 1 (length 15) [ 1377.945156][T25432] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 1377.965150][T25432] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1377.965150][T25432] [ 1378.005922][T18652] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1378.026063][T18652] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 192 with error 28 [ 1378.039239][T18652] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1378.039239][T18652] [ 1378.049767][T18652] EXT4-fs (loop3): Total free blocks count 0 [ 1378.055916][T18652] EXT4-fs (loop3): Free/Dirty block details [ 1378.063078][T25434] loop4: detected capacity change from 0 to 128 [ 1378.070160][T18652] EXT4-fs (loop3): free_blocks=4293918720 [ 1378.076056][T18652] EXT4-fs (loop3): dirty_blocks=208 [ 1378.081285][T18652] EXT4-fs (loop3): Block reservation details [ 1378.087465][T18652] EXT4-fs (loop3): i_reserved_data_blocks=13 [ 1378.097112][T25434] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1378.107748][T25434] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1378.207688][ T30] audit: type=1326 audit(1378.194:11396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25443 comm="syz.3.7701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1378.217425][T25446] loop5: detected capacity change from 0 to 512 [ 1378.238451][ T30] audit: type=1326 audit(1378.224:11397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25443 comm="syz.3.7701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1378.262293][ T30] audit: type=1326 audit(1378.224:11398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25443 comm="syz.3.7701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1378.288290][T25446] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 1378.323631][ T30] audit: type=1326 audit(1378.224:11399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25443 comm="syz.3.7701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1378.428581][ T30] audit: type=1326 audit(1378.224:11400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25443 comm="syz.3.7701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1378.476209][T25452] loop3: detected capacity change from 0 to 1024 [ 1378.516228][T25446] EXT4-fs (loop5): Unrecognized mount option "fsuuid=17f8b1U-b55a-š7fe-b0db-7f034a" or missing value [ 1378.541292][T25452] EXT4-fs (loop3): Ignoring removed bh option [ 1378.716967][T25452] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,block_validity,max_dir_size_kb=0x0000000000000009,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1378.994456][T25470] loop5: detected capacity change from 0 to 128 [ 1379.034924][T25470] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1379.048505][T25470] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1379.098096][T25471] device syzkaller0 entered promiscuous mode [ 1379.925794][T14726] Bluetooth: hci0: command 0x1009 tx timeout [ 1380.378774][T25496] loop3: detected capacity change from 0 to 512 [ 1380.387666][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1380.387683][ T30] audit: type=1400 audit(1380.374:11415): avc: denied { watch_reads } for pid=25499 comm="syz.4.7723" path="/317" dev="tmpfs" ino=1662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1380.446914][T25496] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 1380.457063][ T30] audit: type=1326 audit(1380.414:11416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25501 comm="syz.5.7724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1380.531267][T25496] EXT4-fs (loop3): Unrecognized mount option "fsuuid=17f8b1U-b55a-š7fe-b0db-7f034a" or missing value [ 1380.544164][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.551982][ T30] audit: type=1326 audit(1380.414:11417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25501 comm="syz.5.7724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1380.575426][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.575647][ T30] audit: type=1326 audit(1380.424:11418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25501 comm="syz.5.7724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1380.582875][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.609133][ T30] audit: type=1326 audit(1380.424:11419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25501 comm="syz.5.7724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1380.637255][ T30] audit: type=1326 audit(1380.424:11420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25501 comm="syz.5.7724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1380.642346][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.662024][ T30] audit: type=1326 audit(1380.424:11421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25501 comm="syz.5.7724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1380.692008][ T30] audit: type=1326 audit(1380.424:11422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25501 comm="syz.5.7724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1380.697918][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.723292][ T30] audit: type=1326 audit(1380.424:11423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25501 comm="syz.5.7724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1380.746843][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.746870][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.766348][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.774215][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.792611][ T30] audit: type=1326 audit(1380.424:11424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25501 comm="syz.5.7724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1380.794953][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.843995][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.851789][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.869759][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.887546][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.899713][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.907456][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.914890][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.922759][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.930411][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.938110][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.945875][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.953411][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.961227][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.969011][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.976717][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.984243][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.991975][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1380.999718][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1381.007409][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1381.015059][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1381.023220][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1381.031501][T14726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1381.092212][T14726] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 1381.104524][T25519] Restarting kernel threads ... done. [ 1381.144331][T25523] fido_id[25523]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1382.132376][T25544] loop4: detected capacity change from 0 to 128 [ 1382.181237][T25544] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1382.230534][T25544] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1382.407615][T25570] loop5: detected capacity change from 0 to 512 [ 1382.491179][T25570] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1382.516247][T25570] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 1382.553090][T25586] loop3: detected capacity change from 0 to 1024 [ 1382.616481][T25586] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1382.678945][T25586] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1382.799968][T25588] Restarting kernel threads ... done. [ 1383.841724][T25641] device pim6reg1 entered promiscuous mode [ 1383.875736][T25645] loop5: detected capacity change from 0 to 1024 [ 1383.890937][T25647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7783'. [ 1383.912173][T25645] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1383.962824][T25645] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1383.999937][T25657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25657 comm=syz.0.7788 [ 1384.626849][T18792] Bluetooth: hci0: Frame reassembly failed (-84) [ 1384.692571][T18792] Bluetooth: hci0: Frame reassembly failed (-84) [ 1384.898825][T25678] device pim6reg1 entered promiscuous mode [ 1384.935592][T25687] loop4: detected capacity change from 0 to 128 [ 1384.951292][T25689] loop3: detected capacity change from 0 to 1024 [ 1384.969008][T25687] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1385.070134][T25687] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1385.092569][T25689] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1385.110858][T25689] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1385.557256][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 1385.557293][ T30] audit: type=1326 audit(1385.544:11534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1385.663594][ T30] audit: type=1326 audit(1385.584:11535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a01592550 code=0x7ffc0000 [ 1385.748467][ T30] audit: type=1326 audit(1385.584:11536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a01592550 code=0x7ffc0000 [ 1385.993315][ T30] audit: type=1326 audit(1385.584:11537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1386.016837][ T30] audit: type=1326 audit(1385.594:11538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1386.054616][ T30] audit: type=1326 audit(1385.594:11539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1386.093066][ T30] audit: type=1326 audit(1385.594:11540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1386.135262][ T30] audit: type=1326 audit(1385.594:11541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1386.250440][ T30] audit: type=1326 audit(1385.594:11542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1386.513274][ T30] audit: type=1326 audit(1385.604:11543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1386.645993][ T712] Bluetooth: hci0: command 0x1003 tx timeout [ 1386.656458][T21593] Bluetooth: hci0: sending frame failed (-49) [ 1387.023059][T25752] syz.3.7826 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1387.276511][T25765] hub 8-0:1.0: USB hub found [ 1387.281268][T25765] hub 8-0:1.0: 1 port detected [ 1387.569884][T25767] loop5: detected capacity change from 0 to 1024 [ 1387.657034][T25767] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1387.682312][T25767] EXT4-fs error (device loop5): ext4_map_blocks:740: inode #15: block 1: comm syz.5.7832: lblock 1 mapped to illegal pblock 1 (length 15) [ 1387.697433][T25767] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 1387.710395][T25767] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1387.710395][T25767] [ 1387.721833][T25767] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1387.738455][T25767] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7832: lblock 1 mapped to illegal pblock 1 (length 3) [ 1387.753160][T25767] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7832: lblock 1 mapped to illegal pblock 1 (length 3) [ 1387.767588][T25767] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7832: lblock 1 mapped to illegal pblock 1 (length 3) [ 1387.782158][T25767] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7832: lblock 1 mapped to illegal pblock 1 (length 3) [ 1387.793553][T25766] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 4: comm syz.5.7832: lblock 4 mapped to illegal pblock 4 (length 4) [ 1387.796979][T25767] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7832: lblock 1 mapped to illegal pblock 1 (length 3) [ 1387.811587][T25766] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 4: comm syz.5.7832: lblock 4 mapped to illegal pblock 4 (length 4) [ 1387.824946][T25767] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7832: lblock 1 mapped to illegal pblock 1 (length 3) [ 1388.542371][T25796] loop4: detected capacity change from 0 to 1024 [ 1388.606904][T25796] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1388.736468][ T712] Bluetooth: hci0: command 0x1001 tx timeout [ 1388.742699][T21593] Bluetooth: hci0: sending frame failed (-49) [ 1388.961751][T25806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7854'. [ 1389.275560][T25822] loop3: detected capacity change from 0 to 512 [ 1389.299921][T25822] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 1389.330822][T25830] hub 8-0:1.0: USB hub found [ 1389.342837][T25830] hub 8-0:1.0: 1 port detected [ 1389.379612][T25834] loop4: detected capacity change from 0 to 1024 [ 1389.395424][T25836] loop3: detected capacity change from 0 to 128 [ 1389.416319][T25834] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 1389.426530][T25834] EXT4-fs (loop4): Unrecognized mount option "dont_measure" or missing value [ 1389.465750][T25836] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1389.474420][T25836] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1389.569654][T25842] loop4: detected capacity change from 0 to 512 [ 1389.596380][T25842] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1389.603663][T25842] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1389.626337][T25842] EXT4-fs (loop4): 1 truncate cleaned up [ 1389.633840][T25842] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,min_batch_time=0x0000000000000ffd,nolazytime,jqfmt=vfsold,errors=remount-ro,minixdf,errors=remount-ro,. Quota mode: none. [ 1390.189615][T25873] device pim6reg1 entered promiscuous mode [ 1390.805179][ T7747] Bluetooth: hci0: command 0x1009 tx timeout [ 1391.478418][T25900] hub 8-0:1.0: USB hub found [ 1391.493408][T25900] hub 8-0:1.0: 1 port detected [ 1391.669481][T25911] device pim6reg1 entered promiscuous mode [ 1391.754596][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1391.754614][ T30] audit: type=1400 audit(1391.734:11610): avc: denied { read } for pid=25914 comm="syz.4.7891" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1391.804556][ T30] audit: type=1400 audit(1391.774:11611): avc: denied { open } for pid=25914 comm="syz.4.7891" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1391.828714][ T30] audit: type=1400 audit(1391.774:11612): avc: denied { ioctl } for pid=25914 comm="syz.4.7891" path="/dev/usbmon0" dev="devtmpfs" ino=155 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1391.889988][T25923] loop4: detected capacity change from 0 to 512 [ 1391.981760][T25923] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1392.000174][ T30] audit: type=1400 audit(1391.984:11613): avc: denied { mount } for pid=25922 comm="syz.4.7896" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1392.192692][ T30] audit: type=1400 audit(1392.174:11614): avc: denied { unmount } for pid=21503 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1392.318632][ T30] audit: type=1400 audit(1392.304:11615): avc: denied { read write } for pid=25934 comm="syz.4.7900" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1392.344227][ T30] audit: type=1400 audit(1392.334:11616): avc: denied { open } for pid=25934 comm="syz.4.7900" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1392.367823][ T30] audit: type=1400 audit(1392.334:11617): avc: denied { ioctl } for pid=25934 comm="syz.4.7900" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1392.406935][ T30] audit: type=1326 audit(1392.394:11618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1392.441312][ T30] audit: type=1326 audit(1392.394:11619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1392.509983][T25952] loop5: detected capacity change from 0 to 1024 [ 1392.535616][T25952] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1392.560050][T25952] EXT4-fs error (device loop5): ext4_map_blocks:740: inode #15: block 1: comm syz.5.7908: lblock 1 mapped to illegal pblock 1 (length 15) [ 1392.574999][T25952] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 1392.588682][T25952] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1392.588682][T25952] [ 1392.600845][T25952] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1392.618218][T25952] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7908: lblock 1 mapped to illegal pblock 1 (length 3) [ 1392.632814][T25952] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7908: lblock 1 mapped to illegal pblock 1 (length 3) [ 1392.647774][T25952] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7908: lblock 1 mapped to illegal pblock 1 (length 3) [ 1392.667247][T25952] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7908: lblock 1 mapped to illegal pblock 1 (length 3) [ 1392.681974][T25952] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7908: lblock 1 mapped to illegal pblock 1 (length 3) [ 1392.682040][T25951] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 4: comm syz.5.7908: lblock 4 mapped to illegal pblock 4 (length 4) [ 1392.696934][T25952] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.7908: lblock 1 mapped to illegal pblock 1 (length 3) [ 1392.711314][T25951] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 4: comm syz.5.7908: lblock 4 mapped to illegal pblock 4 (length 4) [ 1392.961179][T25972] loop4: detected capacity change from 0 to 4096 [ 1392.988934][T25972] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1393.028378][T25987] device pim6reg1 entered promiscuous mode [ 1393.340873][T26007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7927'. [ 1393.602113][T26013] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7933'. [ 1393.698528][T26029] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7941'. [ 1405.342943][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1405.342961][ T30] audit: type=1326 audit(1405.324:11639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26063 comm="syz.1.7957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1405.377327][T26071] loop5: detected capacity change from 0 to 512 [ 1405.379328][T26068] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1405.401377][T26071] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1405.439252][T26071] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1405.460767][ T30] audit: type=1326 audit(1405.384:11640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26063 comm="syz.1.7957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1405.502091][T26086] loop3: detected capacity change from 0 to 1024 [ 1405.525126][ T30] audit: type=1326 audit(1405.384:11641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26063 comm="syz.1.7957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1405.550250][T26071] EXT4-fs (loop5): 1 truncate cleaned up [ 1405.557148][ T30] audit: type=1326 audit(1405.384:11642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26063 comm="syz.1.7957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1405.560972][T26071] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000004,mblk_io_submit,resuid=0x0000000000000000,norecovery,,errors=continue. Quota mode: none. [ 1405.580485][ T30] audit: type=1326 audit(1405.394:11643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26063 comm="syz.1.7957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1405.633352][ T30] audit: type=1326 audit(1405.394:11644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26063 comm="syz.1.7957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1405.656680][ T30] audit: type=1326 audit(1405.394:11645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26063 comm="syz.1.7957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbd87ba8c23 code=0x7ffc0000 [ 1405.679929][ T30] audit: type=1326 audit(1405.404:11646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26063 comm="syz.1.7957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbd87ba769f code=0x7ffc0000 [ 1405.704976][ T30] audit: type=1326 audit(1405.404:11647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26063 comm="syz.1.7957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbd87ba8c77 code=0x7ffc0000 [ 1405.707123][T26086] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1405.728538][ T30] audit: type=1326 audit(1405.404:11648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26063 comm="syz.1.7957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd87ba7550 code=0x7ffc0000 [ 1405.738744][T26086] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1405.783063][T26086] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1405.798169][T26086] System zones: 0-1, 3-36 [ 1405.807561][T26086] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1405.930874][T26086] capability: warning: `syz.3.7966' uses deprecated v2 capabilities in a way that may be insecure [ 1406.355866][T18792] Bluetooth: hci0: Frame reassembly failed (-84) [ 1406.390863][T18792] Bluetooth: hci0: Frame reassembly failed (-84) [ 1406.624158][T26116] loop3: detected capacity change from 0 to 1024 [ 1406.643135][T18792] tipc: Subscription rejected, illegal request [ 1406.666943][T26116] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1406.711751][T26116] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #15: block 1: comm syz.3.7972: lblock 1 mapped to illegal pblock 1 (length 15) [ 1406.735449][T26116] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 1406.748260][T26116] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1406.748260][T26116] [ 1406.760975][T26116] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1406.789202][T26116] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 1: comm syz.3.7972: lblock 1 mapped to illegal pblock 1 (length 3) [ 1406.819718][T26116] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 1: comm syz.3.7972: lblock 1 mapped to illegal pblock 1 (length 3) [ 1406.873102][T26115] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 4: comm syz.3.7972: lblock 4 mapped to illegal pblock 4 (length 4) [ 1406.891326][T26116] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 1: comm syz.3.7972: lblock 1 mapped to illegal pblock 1 (length 3) [ 1406.906451][T26115] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 4: comm syz.3.7972: lblock 4 mapped to illegal pblock 4 (length 4) [ 1406.925740][T26116] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 1: comm syz.3.7972: lblock 1 mapped to illegal pblock 1 (length 3) [ 1406.940692][T26115] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 1: comm syz.3.7972: lblock 1 mapped to illegal pblock 1 (length 3) [ 1406.969151][T26115] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 1: comm syz.3.7972: lblock 1 mapped to illegal pblock 1 (length 3) [ 1407.108899][T26147] hub 9-0:1.0: USB hub found [ 1407.114192][T26147] hub 9-0:1.0: 1 port detected [ 1407.855743][T26156] loop5: detected capacity change from 0 to 2048 [ 1407.888167][T26156] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1408.070854][T26167] device wireguard0 entered promiscuous mode [ 1408.195781][T26174] loop3: detected capacity change from 0 to 1024 [ 1408.220478][T26174] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1408.252000][T26174] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #15: block 1: comm syz.3.7996: lblock 1 mapped to illegal pblock 1 (length 15) [ 1408.252259][T26174] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 1408.252289][T26174] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1408.252289][T26174] [ 1408.254359][T26174] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1408.292643][T26174] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 1: comm syz.3.7996: lblock 1 mapped to illegal pblock 1 (length 3) [ 1408.318771][T26174] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 1: comm syz.3.7996: lblock 1 mapped to illegal pblock 1 (length 3) [ 1408.318964][T26174] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 1: comm syz.3.7996: lblock 1 mapped to illegal pblock 1 (length 3) [ 1408.319136][T26174] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 1: comm syz.3.7996: lblock 1 mapped to illegal pblock 1 (length 3) [ 1408.319299][T26174] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 1: comm syz.3.7996: lblock 1 mapped to illegal pblock 1 (length 3) [ 1408.348757][T26173] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 4: comm syz.3.7996: lblock 4 mapped to illegal pblock 4 (length 4) [ 1408.362932][T26174] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 1: comm syz.3.7996: lblock 1 mapped to illegal pblock 1 (length 3) [ 1408.378302][T26173] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 4: comm syz.3.7996: lblock 4 mapped to illegal pblock 4 (length 4) [ 1408.421351][ T712] Bluetooth: hci0: command 0x1003 tx timeout [ 1408.421410][T21593] Bluetooth: hci0: sending frame failed (-49) [ 1408.464840][T26181] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7998'. [ 1408.570061][T26184] netlink: 'syz.3.7999': attribute type 4 has an invalid length. [ 1408.897783][T26206] 9pnet: p9_errstr2errno: server reported unknown error [ 1409.021650][T26215] loop0: detected capacity change from 0 to 1024 [ 1409.047014][T26215] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1409.990929][T26245] loop0: detected capacity change from 0 to 1024 [ 1410.040462][T26245] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 1410.048456][T26245] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1410.330993][T26249] loop5: detected capacity change from 0 to 1024 [ 1410.338902][T26245] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1410.347326][T26245] System zones: 0-1, 3-36 [ 1410.353483][T26245] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1410.379141][T26249] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 1410.387055][T26249] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1410.403812][T26249] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1410.412715][T26249] System zones: 0-1, 3-36 [ 1410.419762][T26249] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1410.485352][ T384] Bluetooth: hci0: command 0x1001 tx timeout [ 1410.493207][T21593] Bluetooth: hci0: sending frame failed (-49) [ 1410.517661][T26260] loop0: detected capacity change from 0 to 512 [ 1410.607917][T26260] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1410.619610][T26260] EXT4-fs (loop0): 1 truncate cleaned up [ 1410.625566][T26260] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,nombcache,journal_ioprio=0x0000000000000003,errors=remount-ro,lazytime,minixdf,noquota,usrjquota=,. Quota mode: none. [ 1411.023805][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1411.023826][ T30] audit: type=1400 audit(1411.004:11671): avc: denied { map } for pid=26258 comm="syz.0.8029" path="/322/bus/cpu.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1411.054835][ T30] audit: type=1400 audit(1411.004:11672): avc: denied { execute } for pid=26258 comm="syz.0.8029" path="/322/bus/cpu.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1411.151206][T26288] loop3: detected capacity change from 0 to 128 [ 1411.181712][T26292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8044'. [ 1411.191040][T26292] netlink: 21 bytes leftover after parsing attributes in process `syz.0.8044'. [ 1411.201552][T26292] netlink: 'syz.0.8044': attribute type 2 has an invalid length. [ 1411.209635][T26292] netlink: 21 bytes leftover after parsing attributes in process `syz.0.8044'. [ 1411.220687][T26288] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1411.241108][T26288] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1411.264672][T26292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8044'. [ 1412.165313][ T30] audit: type=1326 audit(1412.124:11673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26303 comm="syz.5.8047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1412.389981][ T30] audit: type=1326 audit(1412.134:11674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26303 comm="syz.5.8047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1412.508558][ T30] audit: type=1326 audit(1412.134:11675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26303 comm="syz.5.8047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1412.579580][ T712] Bluetooth: hci0: command 0x1009 tx timeout [ 1412.585905][ T30] audit: type=1326 audit(1412.134:11676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26303 comm="syz.5.8047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1412.609264][ T30] audit: type=1326 audit(1412.134:11677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26303 comm="syz.5.8047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1412.632633][ T30] audit: type=1326 audit(1412.134:11678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26303 comm="syz.5.8047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1412.702832][T26331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8059'. [ 1412.721379][ T30] audit: type=1326 audit(1412.134:11679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26303 comm="syz.5.8047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1412.752127][ T30] audit: type=1326 audit(1412.134:11680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26303 comm="syz.5.8047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1412.943878][T26341] hub 6-0:1.0: USB hub found [ 1413.073913][T26341] hub 6-0:1.0: 1 port detected [ 1414.425180][T26372] syz.1.8073[26372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1414.425259][T26372] syz.1.8073[26372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1414.843740][T26384] loop0: detected capacity change from 0 to 512 [ 1414.908336][T26384] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 1414.917973][T26384] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1414.932610][T26384] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.8078: corrupted in-inode xattr [ 1414.945320][T26384] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.8078: couldn't read orphan inode 15 (err -117) [ 1414.957721][T26384] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 1415.079785][T26390] loop0: detected capacity change from 0 to 2048 [ 1415.136352][T26098] loop0: p1 < > p3 p4 < > [ 1415.141483][T26098] loop0: p3 start 4284289 is beyond EOD, truncated [ 1415.150392][T26390] loop0: p1 < > p3 p4 < > [ 1415.156052][T26390] loop0: p3 start 4284289 is beyond EOD, truncated [ 1415.206585][ C0] blk_update_request: operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x800800 phys_seg 0 prio class 0 [ 1415.250159][T26392] device syzkaller0 entered promiscuous mode [ 1415.304832][T26098] udevd[26098]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1415.317203][T26073] udevd[26073]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1415.870271][T26412] loop5: detected capacity change from 0 to 1024 [ 1415.946592][T26417] loop1: detected capacity change from 0 to 1024 [ 1415.958296][T26417] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1415.966291][T26417] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1415.967597][T26412] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1416.126689][T26417] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1416.136568][T26417] System zones: 0-1, 3-36 [ 1416.154875][T26417] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1416.284860][T26412] EXT4-fs error (device loop5): ext4_map_blocks:740: inode #15: block 1: comm syz.5.8088: lblock 1 mapped to illegal pblock 1 (length 15) [ 1416.301531][T26412] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 1416.314356][T26412] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1416.314356][T26412] [ 1416.329300][T26412] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1416.350233][T26412] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.8088: lblock 1 mapped to illegal pblock 1 (length 3) [ 1416.365355][T26412] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.8088: lblock 1 mapped to illegal pblock 1 (length 3) [ 1416.381145][T26412] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.8088: lblock 1 mapped to illegal pblock 1 (length 3) [ 1416.395728][T26412] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.8088: lblock 1 mapped to illegal pblock 1 (length 3) [ 1416.398224][T26411] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 4: comm syz.5.8088: lblock 4 mapped to illegal pblock 4 (length 4) [ 1416.418659][T26412] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.8088: lblock 1 mapped to illegal pblock 1 (length 3) [ 1416.451141][T26412] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 1: comm syz.5.8088: lblock 1 mapped to illegal pblock 1 (length 3) [ 1416.483698][T26428] loop3: detected capacity change from 0 to 1024 [ 1416.490797][T26411] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #15: block 4: comm syz.5.8088: lblock 4 mapped to illegal pblock 4 (length 4) [ 1416.515863][T26436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8098'. [ 1416.525888][T26428] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1416.547838][T26428] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1416.583222][T26436] loop1: detected capacity change from 0 to 128 [ 1416.590894][T26441] loop4: detected capacity change from 0 to 1024 [ 1416.597342][T26428] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1416.605755][T26428] System zones: 0-1, 3-36 [ 1416.611537][T26428] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1416.641444][T26436] FAT-fs (loop1): Directory bread(block 32) failed [ 1416.653974][T26441] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz.4.8100: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1416.655165][T26436] FAT-fs (loop1): Directory bread(block 33) failed [ 1416.680010][T26436] FAT-fs (loop1): Directory bread(block 34) failed [ 1416.687195][T26436] FAT-fs (loop1): Directory bread(block 35) failed [ 1416.693843][T26436] FAT-fs (loop1): Directory bread(block 36) failed [ 1416.700836][T26436] FAT-fs (loop1): Directory bread(block 37) failed [ 1416.703636][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1416.703652][ T30] audit: type=1326 audit(1416.684:11723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26443 comm="syz.5.8101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1416.740749][T26436] FAT-fs (loop1): Directory bread(block 38) failed [ 1416.751131][ T30] audit: type=1326 audit(1416.734:11724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26443 comm="syz.5.8101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1416.774595][T26436] FAT-fs (loop1): Directory bread(block 39) failed [ 1416.781733][T26436] FAT-fs (loop1): Directory bread(block 40) failed [ 1416.793438][T26436] FAT-fs (loop1): Directory bread(block 41) failed [ 1416.800392][ T30] audit: type=1326 audit(1416.784:11725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26443 comm="syz.5.8101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1416.834061][ T30] audit: type=1326 audit(1416.784:11726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26443 comm="syz.5.8101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1416.857543][T26441] EXT4-fs error (device loop4): ext4_quota_enable:6409: comm syz.4.8100: Bad quota inode: 3, type: 0 [ 1416.885928][T26449] loop5: detected capacity change from 0 to 128 [ 1416.892617][ T30] audit: type=1326 audit(1416.784:11727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26443 comm="syz.5.8101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1416.893282][T26441] EXT4-fs warning (device loop4): ext4_enable_quotas:6450: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1416.933875][T26449] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1416.946444][T26441] EXT4-fs (loop4): mount failed [ 1417.237480][T26449] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1417.251794][T26453] loop7: detected capacity change from 0 to 7 [ 1417.293286][T18792] loop: Write error at byte offset 4, length 3584. [ 1417.300018][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1417.311340][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1417.320727][T26436] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1417.330896][T26436] FAT-fs (loop1): Filesystem has been set read-only [ 1417.343159][T26436] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 1417.352644][T26436] attempt to access beyond end of device [ 1417.352644][T26436] loop1: rw=2049, want=4216, limit=128 [ 1417.843905][ T30] audit: type=1400 audit(1417.824:11728): avc: denied { mount } for pid=26458 comm="syz.4.8106" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1417.874419][T26460] loop3: detected capacity change from 0 to 1024 [ 1418.011623][T26460] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1418.315419][T18652] Bluetooth: hci0: Frame reassembly failed (-84) [ 1418.345265][T26460] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1418.361709][ T30] audit: type=1400 audit(1417.874:11729): avc: denied { unmount } for pid=26458 comm="syz.4.8106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1418.388985][T26460] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1418.399469][T26466] loop4: detected capacity change from 0 to 4096 [ 1418.421656][T26460] System zones: 0-1, 3-36 [ 1418.441668][T26460] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1418.467611][T26466] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1418.480952][ T30] audit: type=1326 audit(1418.324:11730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26464 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2ded0be9 code=0x7ffc0000 [ 1418.531566][ T30] audit: type=1326 audit(1418.324:11731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26464 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2ded0be9 code=0x7ffc0000 [ 1418.555206][ T30] audit: type=1326 audit(1418.324:11732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26464 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f5a2ded0be9 code=0x7ffc0000 [ 1418.621229][T26476] loop1: detected capacity change from 0 to 1024 [ 1418.635562][T26478] loop5: detected capacity change from 0 to 2048 [ 1418.651663][T26480] loop3: detected capacity change from 0 to 1024 [ 1418.668689][T26476] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1418.675961][T26480] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1418.676451][T26476] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1418.703970][T26478] EXT4-fs (loop5): failed to initialize system zone (-117) [ 1418.711570][T26476] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1418.725822][T26476] System zones: 0-1, 3-36 [ 1418.730469][T26478] EXT4-fs (loop5): mount failed [ 1418.737374][T26476] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1418.790811][T26480] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 1419.018670][T26509] IPv6: sit1: Disabled Multicast RS [ 1419.058870][T26507] loop1: detected capacity change from 0 to 1024 [ 1419.084763][T26507] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1419.221707][T26507] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1419.236067][T26507] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1419.244479][T26507] System zones: 0-1, 3-36 [ 1419.254926][T26507] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1420.411825][ T384] Bluetooth: hci0: command 0x1003 tx timeout [ 1420.418303][T21593] Bluetooth: hci0: sending frame failed (-49) [ 1420.499053][T26532] hub 8-0:1.0: USB hub found [ 1420.507547][T26532] hub 8-0:1.0: 1 port detected [ 1420.533332][T26535] loop1: detected capacity change from 0 to 1024 [ 1420.561962][T26535] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1420.578043][T26535] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1420.606998][T26535] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1420.616087][T26535] System zones: 0-1, 3-36 [ 1420.623523][T26535] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1421.051867][T26551] loop3: detected capacity change from 0 to 1024 [ 1421.069147][T26551] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1421.077526][T26551] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1421.092311][T26551] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1421.100786][T26551] System zones: 0-1, 3-36 [ 1421.108008][T26551] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1421.283564][T26568] loop5: detected capacity change from 0 to 512 [ 1421.296660][T26570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8145'. [ 1421.330668][T26568] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1421.657056][T26568] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e09c, mo2=0002] [ 1421.676389][T26576] loop4: detected capacity change from 0 to 256 [ 1421.681546][T26568] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1421.695243][T26568] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.8146: bad orphan inode 267 [ 1421.737685][T26568] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,minixdf,inode_readahead_blks=0x0000000001000000,errors=continue. Quota mode: none. [ 1421.758780][T26568] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.8146: dx entry: limit 0 != root limit 125 [ 1421.771606][T26568] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.8146: Corrupt directory, running e2fsck is recommended [ 1422.441798][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1422.441815][ T30] audit: type=1326 audit(1422.424:11783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.3.8157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1422.631518][ T384] Bluetooth: hci0: command 0x1001 tx timeout [ 1422.641641][T21593] Bluetooth: hci0: sending frame failed (-49) [ 1422.685566][ T30] audit: type=1326 audit(1422.424:11784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.3.8157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1422.715109][ T30] audit: type=1326 audit(1422.464:11785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.3.8157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1422.744287][ T30] audit: type=1326 audit(1422.464:11786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.3.8157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1422.776700][ T30] audit: type=1326 audit(1422.464:11787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.3.8157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1422.804600][ T30] audit: type=1326 audit(1422.464:11788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.3.8157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1423.115221][ T30] audit: type=1326 audit(1422.464:11789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.3.8157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1423.503847][ T30] audit: type=1326 audit(1422.464:11790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.3.8157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1423.552146][ T30] audit: type=1326 audit(1422.464:11791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.3.8157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1423.576238][ T30] audit: type=1326 audit(1422.464:11792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26598 comm="syz.3.8157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1423.751785][T26617] loop4: detected capacity change from 0 to 1024 [ 1423.912163][T26618] loop9: detected capacity change from 0 to 7 [ 1423.925615][T26617] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1423.951757][T26617] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1424.003685][T26617] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1424.019375][T26617] System zones: 0-1, 3-36 [ 1424.030038][T26617] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1424.072981][T26632] loop1: detected capacity change from 0 to 2048 [ 1424.125960][T26632] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1424.129542][T26640] loop3: detected capacity change from 0 to 1024 [ 1424.162719][T26632] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.8170: bg 0: block 120: padding at end of block bitmap is not set [ 1424.186178][T26640] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 1424.725242][ T1127] Bluetooth: hci0: command 0x1009 tx timeout [ 1424.943680][T26656] loop1: detected capacity change from 0 to 1024 [ 1424.968097][T26656] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1424.975557][T26656] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1424.994753][T26656] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1425.013259][T26656] System zones: 0-1, 3-36 [ 1425.069868][T26663] Invalid ELF header magic: != ELF [ 1425.077107][T26656] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1425.146278][T26667] loop5: detected capacity change from 0 to 1024 [ 1425.172261][T26667] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 1425.181924][T26667] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1425.208975][T26667] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1425.219480][T26667] System zones: 0-1, 3-36 [ 1425.229622][T26667] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1425.268007][T26679] syz.1.8187[26679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1425.268137][T26679] syz.1.8187[26679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1425.293169][T26679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8187'. [ 1425.314348][T26679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8187'. [ 1425.327588][T26679] bridge0: port 3(macsec1) entered blocking state [ 1425.334426][T26679] bridge0: port 3(macsec1) entered disabled state [ 1425.377439][T26686] loop5: detected capacity change from 0 to 128 [ 1425.705716][T26686] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 1425.719596][T26686] FAT-fs (loop5): Filesystem has been set read-only [ 1425.726825][T26686] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 1425.957597][T26695] loop5: detected capacity change from 0 to 128 [ 1426.027654][T26695] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 1426.484256][T26699] loop4: detected capacity change from 0 to 1024 [ 1426.650019][T26699] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1426.781285][T26702] loop3: detected capacity change from 0 to 128 [ 1426.796381][T26699] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1426.819171][T26702] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1426.877156][T26702] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1426.900084][T26699] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1426.917568][T26699] System zones: 0-1, 3-36 [ 1427.040952][T26699] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1427.126963][T26712] loop1: detected capacity change from 0 to 1024 [ 1427.200451][T26712] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1427.225331][T26712] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1427.249261][T26712] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1427.274179][T26712] System zones: 0-1, 3-36 [ 1427.327779][T26712] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1428.210856][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 1428.210873][ T30] audit: type=1400 audit(1428.194:11879): avc: denied { create } for pid=26732 comm="syz.5.8205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1428.277563][ T30] audit: type=1400 audit(1428.264:11880): avc: denied { load_policy } for pid=26732 comm="syz.5.8205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1428.277762][T26733] SELinux: failed to load policy [ 1428.391750][T26735] loop5: detected capacity change from 0 to 512 [ 1428.424893][T26737] loop1: detected capacity change from 0 to 512 [ 1428.447202][T26735] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.8206: inode #1: comm syz.5.8206: iget: illegal inode # [ 1428.485030][ T30] audit: type=1400 audit(1428.464:11881): avc: denied { mounton } for pid=26736 comm="syz.1.8207" path="/541/file2/bus" dev="loop1" ino=1048662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 1428.528552][T26735] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.8206: error while reading EA inode 1 err=-117 [ 1428.546619][T26740] loop4: detected capacity change from 0 to 1024 [ 1428.554181][T26735] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.8206: inode #1: comm syz.5.8206: iget: illegal inode # [ 1428.610236][T26740] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1428.615283][T26737] loop_set_status: loop1 () has still dirty pages (nrpages=1) [ 1428.620048][T26740] EXT4-fs (loop4): group descriptors corrupted! [ 1428.636234][T26735] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.8206: error while reading EA inode 1 err=-117 [ 1428.654240][T26735] EXT4-fs (loop5): 1 orphan inode deleted [ 1428.660598][T26735] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 1428.722421][ T30] audit: type=1400 audit(1428.704:11882): avc: denied { create } for pid=26744 comm="syz.4.8210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1428.738780][T20873] FAT-fs (loop1): error, invalid access to FAT (entry 0x8e210000) [ 1428.751051][T20873] FAT-fs (loop1): Filesystem has been set read-only [ 1428.768814][ T30] audit: type=1400 audit(1428.744:11883): avc: denied { connect } for pid=26744 comm="syz.4.8210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1428.810110][T26747] loop3: detected capacity change from 0 to 1024 [ 1428.817566][ T30] audit: type=1400 audit(1428.744:11884): avc: denied { write } for pid=26744 comm="syz.4.8210" path="socket:[94825]" dev="sockfs" ino=94825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1428.872379][T26753] loop5: detected capacity change from 0 to 1024 [ 1428.899228][T26756] loop1: detected capacity change from 0 to 512 [ 1428.932092][T26747] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1429.991148][T26747] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1430.012488][T26753] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 1430.020220][T26756] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1430.055452][T26760] loop0: detected capacity change from 0 to 512 [ 1430.062210][T26747] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1430.070963][T26753] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1430.108981][T26747] System zones: 0-1, 3-36 [ 1430.113904][T26756] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84fc018, mo2=0002] [ 1430.143085][T26760] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 1430.163872][T26756] System zones: 0-2, 18-18, 34-34 [ 1430.173633][T26747] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1430.194662][T26753] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1430.211026][T26760] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1430.221742][T26756] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,debug,jqfmt=vfsv0,noauto_da_alloc,usrquota,,errors=continue. Quota mode: writeback. [ 1430.239381][T26753] System zones: 0-1, 3-36 [ 1430.256277][T26753] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1430.289679][T26760] EXT4-fs (loop0): 1 truncate cleaned up [ 1430.295643][T26760] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,min_batch_time=0x0000000000000ffd,nolazytime,jqfmt=vfsold,errors=remount-ro,minixdf,errors=remount-ro,. Quota mode: none. [ 1430.342297][T26756] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1430.357701][T26756] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32896 with max blocks 1 with error 28 [ 1430.370434][T26756] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1430.370434][T26756] [ 1430.381147][T26756] EXT4-fs (loop1): Total free blocks count 0 [ 1430.387313][T26756] EXT4-fs (loop1): Free/Dirty block details [ 1430.393572][T26756] EXT4-fs (loop1): free_blocks=39626 [ 1430.399088][T26756] EXT4-fs (loop1): dirty_blocks=1 [ 1430.405758][T26756] EXT4-fs (loop1): Block reservation details [ 1430.411826][T26756] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 1430.423044][T26770] loop5: detected capacity change from 0 to 512 [ 1430.454942][T26772] loop4: detected capacity change from 0 to 128 [ 1430.486356][T26772] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1430.512945][ T30] audit: type=1400 audit(1430.494:11885): avc: denied { ioctl } for pid=26775 comm="syz.0.8221" path="socket:[93875]" dev="sockfs" ino=93875 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1430.538373][T26777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8221'. [ 1430.553754][T26772] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1430.560650][T26770] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.8218: casefold flag without casefold feature [ 1430.583463][T26770] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.8218: couldn't read orphan inode 15 (err -117) [ 1430.596358][T26770] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 1430.720325][T26788] loop0: detected capacity change from 0 to 512 [ 1430.740617][ T30] audit: type=1326 audit(1430.724:11886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26789 comm="syz.1.8227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1430.785473][ T30] audit: type=1326 audit(1430.724:11887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26789 comm="syz.1.8227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1430.815478][T26788] loop_set_status: loop0 () has still dirty pages (nrpages=1) [ 1430.875159][T22467] FAT-fs (loop0): error, invalid access to FAT (entry 0x8e210000) [ 1430.883618][ T30] audit: type=1326 audit(1430.724:11888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26789 comm="syz.1.8227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fbd87ba8be9 code=0x7ffc0000 [ 1430.903059][T22467] FAT-fs (loop0): Filesystem has been set read-only [ 1431.074092][T26803] loop0: detected capacity change from 0 to 128 [ 1431.536577][T26820] loop3: detected capacity change from 0 to 128 [ 1431.628110][T26820] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1431.640444][T26820] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1431.936631][T26830] loop1: detected capacity change from 0 to 512 [ 1431.987023][T26832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8241'. [ 1431.987903][T26830] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1432.034676][T26830] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1432.047200][T26830] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.8240: Block bitmap for bg 0 marked uninitialized [ 1432.051937][T26834] loop5: detected capacity change from 0 to 128 [ 1432.075385][T26830] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1432.094671][T26830] EXT4-fs (loop1): 1 orphan inode deleted [ 1432.100705][T26830] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1432.245440][T26834] FAT-fs (loop5): Directory bread(block 32) failed [ 1432.275025][T26834] FAT-fs (loop5): Directory bread(block 33) failed [ 1432.282412][T26834] FAT-fs (loop5): Directory bread(block 34) failed [ 1432.305153][T26834] FAT-fs (loop5): Directory bread(block 35) failed [ 1432.322049][T26834] FAT-fs (loop5): Directory bread(block 36) failed [ 1432.331305][T26834] FAT-fs (loop5): Directory bread(block 37) failed [ 1432.342541][T26834] FAT-fs (loop5): Directory bread(block 38) failed [ 1432.350654][T18741] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1432.365185][T26834] FAT-fs (loop5): Directory bread(block 39) failed [ 1432.372542][T18741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1432.381667][T26834] FAT-fs (loop5): Directory bread(block 40) failed [ 1432.389494][T18741] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1432.421520][T26834] FAT-fs (loop5): Directory bread(block 41) failed [ 1432.430293][T18741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1432.459735][T18741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1432.479466][T18741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1432.495734][T18741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1432.504450][T18741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1432.518946][T18741] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1432.519955][T26832] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1432.527524][T18741] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1432.543961][T26832] FAT-fs (loop5): Filesystem has been set read-only [ 1432.627255][T26851] syz.4.8250[26851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1432.627335][T26851] syz.4.8250[26851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1433.345177][T26861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8254'. [ 1433.504923][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1433.504981][ T30] audit: type=1400 audit(1433.484:11948): avc: denied { ioctl } for pid=26870 comm="syz.1.8258" path="socket:[94975]" dev="sockfs" ino=94975 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1433.583661][T26869] loop4: detected capacity change from 0 to 1024 [ 1433.636815][T26877] loop5: detected capacity change from 0 to 1024 [ 1433.659924][T26869] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1433.695176][T26869] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1433.708483][T26869] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1433.717088][T26869] System zones: 0-1, 3-36 [ 1433.723771][T26869] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1433.778209][T26883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8263'. [ 1433.798975][T26883] loop1: detected capacity change from 0 to 128 [ 1433.810655][T26877] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 1433.818795][T26877] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1433.837615][T26877] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1433.846153][T26877] System zones: 0-1, 3-36 [ 1433.848523][T26883] FAT-fs (loop1): Directory bread(block 32) failed [ 1433.862875][T26883] FAT-fs (loop1): Directory bread(block 33) failed [ 1433.863346][T26877] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1433.893147][T26883] FAT-fs (loop1): Directory bread(block 34) failed [ 1433.900399][T26883] FAT-fs (loop1): Directory bread(block 35) failed [ 1433.907514][T26883] FAT-fs (loop1): Directory bread(block 36) failed [ 1433.914192][T26883] FAT-fs (loop1): Directory bread(block 37) failed [ 1433.920975][T26883] FAT-fs (loop1): Directory bread(block 38) failed [ 1433.930705][T26883] FAT-fs (loop1): Directory bread(block 39) failed [ 1433.937487][T26883] FAT-fs (loop1): Directory bread(block 40) failed [ 1433.945180][T26883] FAT-fs (loop1): Directory bread(block 41) failed [ 1434.001487][T26883] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1434.011361][T26883] FAT-fs (loop1): Filesystem has been set read-only [ 1435.366537][ T30] audit: type=1326 audit(1435.354:11949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26903 comm="syz.0.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e103bbe9 code=0x7ffc0000 [ 1435.420992][ T30] audit: type=1326 audit(1435.404:11950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26903 comm="syz.0.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e103bbe9 code=0x7ffc0000 [ 1435.453372][ T30] audit: type=1326 audit(1435.424:11951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26903 comm="syz.0.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25e103bbe9 code=0x7ffc0000 [ 1435.498896][T26912] loop4: detected capacity change from 0 to 4096 [ 1435.547131][ T30] audit: type=1326 audit(1435.424:11952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26903 comm="syz.0.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e103bbe9 code=0x7ffc0000 [ 1435.571827][ T30] audit: type=1326 audit(1435.424:11953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26903 comm="syz.0.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e103bbe9 code=0x7ffc0000 [ 1435.596109][ T30] audit: type=1326 audit(1435.424:11954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26903 comm="syz.0.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25e103bbe9 code=0x7ffc0000 [ 1435.598048][T26918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8278'. [ 1435.622447][ T30] audit: type=1326 audit(1435.424:11955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26903 comm="syz.0.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e103bbe9 code=0x7ffc0000 [ 1435.655650][ T30] audit: type=1326 audit(1435.424:11956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26903 comm="syz.0.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e103bbe9 code=0x7ffc0000 [ 1435.679724][ T30] audit: type=1326 audit(1435.424:11957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26903 comm="syz.0.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f25e103bbe9 code=0x7ffc0000 [ 1435.704348][T26916] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8271'. [ 1435.713344][T26912] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1435.729814][T26926] netlink: 39568 bytes leftover after parsing attributes in process `syz.0.8276'. [ 1435.739429][T26926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8276'. [ 1435.769255][T26924] loop1: detected capacity change from 0 to 1024 [ 1435.790447][T26930] loop3: detected capacity change from 0 to 128 [ 1435.810292][T26924] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1435.818254][T26924] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1435.832905][T26924] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1435.861173][T26924] System zones: 0-1, 3-36 [ 1435.868867][T26930] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿ" or missing value [ 1435.884420][T26924] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1436.228382][T26930] loop3: detected capacity change from 0 to 2048 [ 1436.270530][T26930] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1436.351877][T26950] loop1: detected capacity change from 0 to 128 [ 1436.400291][T26950] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 1437.489823][T26963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8292'. [ 1437.661768][T26973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8297'. [ 1437.666766][T26977] loop0: detected capacity change from 0 to 1024 [ 1437.702930][T26973] loop5: detected capacity change from 0 to 128 [ 1437.720015][T26980] loop1: detected capacity change from 0 to 1024 [ 1437.740952][T26977] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1437.756747][T26977] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1437.772420][T26977] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 35 with error 28 [ 1437.786280][T26977] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1437.786280][T26977] [ 1437.804423][T26977] EXT4-fs (loop0): Total free blocks count 0 [ 1437.815351][T26980] EXT4-fs (loop1): Ignoring removed orlov option [ 1437.822302][T26977] EXT4-fs (loop0): Free/Dirty block details [ 1437.833596][T26973] FAT-fs (loop5): Directory bread(block 32) failed [ 1437.842383][T26977] EXT4-fs (loop0): free_blocks=4293918720 [ 1437.848896][T26977] EXT4-fs (loop0): dirty_blocks=64 [ 1437.854257][T26977] EXT4-fs (loop0): Block reservation details [ 1437.855185][T26973] FAT-fs (loop5): Directory bread(block 33) failed [ 1437.860518][T26977] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 1437.874890][T26973] FAT-fs (loop5): Directory bread(block 34) failed [ 1437.883551][T26980] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,barrier,barrier=0x0000000000000000,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 1437.892434][T26973] FAT-fs (loop5): Directory bread(block 35) failed [ 1437.912178][T26973] FAT-fs (loop5): Directory bread(block 36) failed [ 1437.918792][T26973] FAT-fs (loop5): Directory bread(block 37) failed [ 1437.925776][T18791] EXT4-fs error (device loop0): ext4_map_blocks:740: inode #15: block 8: comm kworker/u4:147: lblock 40 mapped to illegal pblock 8 (length 8) [ 1437.935414][T26973] FAT-fs (loop5): Directory bread(block 38) failed [ 1437.946870][T26973] FAT-fs (loop5): Directory bread(block 39) failed [ 1437.953584][T26973] FAT-fs (loop5): Directory bread(block 40) failed [ 1437.960190][T26973] FAT-fs (loop5): Directory bread(block 41) failed [ 1437.967144][T18791] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 40 with max blocks 8 with error 117 [ 1437.987788][T18791] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1437.987788][T18791] [ 1438.007881][T26973] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1438.020288][T26973] FAT-fs (loop5): Filesystem has been set read-only [ 1438.030915][T26980] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.8298: bg 0: block 88: padding at end of block bitmap is not set [ 1438.058007][T26973] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1438.343306][T27007] loop0: detected capacity change from 0 to 512 [ 1438.407142][T27007] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1438.447511][T27007] EXT4-fs (loop0): 1 truncate cleaned up [ 1438.461398][T27007] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,lazytime,journal_path=./bus,bsdgroups,lazytime,noload,,errors=continue. Quota mode: none. [ 1438.524079][T27018] loop1: detected capacity change from 0 to 128 [ 1438.596941][T27022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8315'. [ 1438.610945][T27022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8315'. [ 1438.631026][T27018] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1438.660786][T27018] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1438.663635][T27031] loop3: detected capacity change from 0 to 128 [ 1438.694017][T27033] loop4: detected capacity change from 0 to 512 [ 1438.696174][T27035] hub 8-0:1.0: USB hub found [ 1438.713031][T27035] hub 8-0:1.0: 1 port detected [ 1438.730456][T27033] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1438.741097][T27031] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1438.764193][T27033] EXT4-fs warning (device loop4): ext4_enable_quotas:6450: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1438.780238][T27031] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1438.800598][T27033] EXT4-fs (loop4): mount failed [ 1439.624120][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1439.624136][ T30] audit: type=1326 audit(1439.604:11990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1439.815627][ T30] audit: type=1326 audit(1439.654:11991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1439.907111][ T30] audit: type=1326 audit(1439.654:11992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1439.930330][ T30] audit: type=1326 audit(1439.654:11993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1439.961269][ T30] audit: type=1326 audit(1439.654:11994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb4bbe9 code=0x7ffc0000 [ 1440.021910][ T30] audit: type=1326 audit(1439.994:11995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27076 comm="syz.3.8335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1440.075160][ T7747] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1440.135122][ T30] audit: type=1326 audit(1439.994:11996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27076 comm="syz.3.8335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1440.176381][T27080] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8337'. [ 1440.195122][ T30] audit: type=1326 audit(1440.104:11997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27076 comm="syz.3.8335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1440.200657][T27082] loop3: detected capacity change from 0 to 512 [ 1440.235145][ T30] audit: type=1326 audit(1440.114:11998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27076 comm="syz.3.8335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1440.285208][ T30] audit: type=1326 audit(1440.114:11999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27076 comm="syz.3.8335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01593be9 code=0x7ffc0000 [ 1440.335501][T27082] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1440.346058][T27082] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1440.356002][T27082] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.8338: corrupted inode contents [ 1440.383987][T27082] EXT4-fs (loop3): Remounting filesystem read-only [ 1440.395090][ T7747] usb 5-1: device descriptor read/64, error -71 [ 1440.405279][T27082] EXT4-fs error (device loop3): ext4_dirty_inode:6071: inode #16: comm syz.3.8338: mark_inode_dirty error [ 1440.435573][T27082] EXT4-fs (loop3): Remounting filesystem read-only [ 1440.452488][T27082] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.8338: corrupted inode contents [ 1440.484457][T27082] EXT4-fs (loop3): Remounting filesystem read-only [ 1440.501535][T27082] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.8338: mark_inode_dirty error [ 1440.530809][T27082] EXT4-fs (loop3): Remounting filesystem read-only [ 1440.546856][T27082] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.8338: corrupted inode contents [ 1440.576586][T27082] EXT4-fs (loop3): Remounting filesystem read-only [ 1440.585428][T27082] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 1440.594957][T27082] EXT4-fs (loop3): Remounting filesystem read-only [ 1440.605175][T27082] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.8338: corrupted inode contents [ 1440.632924][T27082] EXT4-fs (loop3): Remounting filesystem read-only [ 1440.640222][T27082] EXT4-fs error (device loop3): ext4_truncate:4304: inode #16: comm syz.3.8338: mark_inode_dirty error [ 1440.655912][T27082] EXT4-fs (loop3): Remounting filesystem read-only [ 1440.662796][T27082] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 1440.676616][T27082] EXT4-fs (loop3): Remounting filesystem read-only [ 1440.684675][T27082] EXT4-fs (loop3): 1 truncate cleaned up [ 1440.700233][T27082] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,discard,. Quota mode: writeback. [ 1440.815171][ T7747] usb 5-1: device descriptor read/64, error -71 [ 1441.085245][ T7747] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1441.145492][T27099] loop3: detected capacity change from 0 to 128 [ 1441.165518][T27099] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1441.188871][T27099] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 1441.378754][ T7747] usb 5-1: device descriptor read/64, error -71 [ 1442.224359][T27114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8350'. [ 1442.278738][T27117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8351'. [ 1442.361150][T27120] loop1: detected capacity change from 0 to 128 [ 1442.423976][T27120] FAT-fs (loop1): Directory bread(block 32) failed [ 1442.441069][T27120] FAT-fs (loop1): Directory bread(block 33) failed [ 1442.461249][T27120] FAT-fs (loop1): Directory bread(block 34) failed [ 1442.492217][T27122] device syzkaller0 entered promiscuous mode [ 1442.505195][T27120] FAT-fs (loop1): Directory bread(block 35) failed [ 1442.512105][T27120] FAT-fs (loop1): Directory bread(block 36) failed [ 1442.545216][T27120] FAT-fs (loop1): Directory bread(block 37) failed [ 1442.552119][T27120] FAT-fs (loop1): Directory bread(block 38) failed [ 1442.555110][ T7747] usb 5-1: device descriptor read/64, error -71 [ 1442.574531][T27120] FAT-fs (loop1): Directory bread(block 39) failed [ 1442.595457][T27120] FAT-fs (loop1): Directory bread(block 40) failed [ 1442.602076][T27120] FAT-fs (loop1): Directory bread(block 41) failed [ 1442.680857][T27127] loop5: detected capacity change from 0 to 1024 [ 1442.688036][T27117] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1442.705260][ T7747] usb usb5-port1: attempt power cycle [ 1442.712102][T27117] FAT-fs (loop1): Filesystem has been set read-only [ 1442.722505][T27117] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 1442.759787][T27127] EXT4-fs (loop5): Ignoring removed orlov option [ 1442.805156][T27127] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 1442.932560][T27134] tipc: Started in network mode [ 1442.955200][T27134] tipc: Node identity , cluster identity 4711 [ 1442.963205][T27134] tipc: Failed to obtain node identity [ 1442.971407][T27134] tipc: Enabling of bearer rejected, failed to enable media [ 1442.999447][T27140] device syzkaller0 entered promiscuous mode [ 1443.006498][T27142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8361'. [ 1443.091604][T27150] loop4: detected capacity change from 0 to 1024 [ 1443.198241][T27150] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1443.244043][T27150] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1443.295985][T27165] loop5: detected capacity change from 0 to 128 [ 1444.268240][T27182] loop5: detected capacity change from 0 to 1024 [ 1444.277610][T27182] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 1444.285599][T27182] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1444.305533][T27187] loop4: detected capacity change from 0 to 1024 [ 1444.316445][T27182] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1444.331033][T27182] System zones: 0-1, 3-36 [ 1444.341987][T27182] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1444.369550][T27187] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1444.399432][T27187] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1444.433959][T27187] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1444.444516][T27187] System zones: 0-1, 3-36 [ 1444.461819][T27187] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1444.464405][T27200] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 1444.547772][T27206] device vlan1 entered promiscuous mode [ 1444.553379][T27206] device veth0_macvtap entered promiscuous mode [ 1444.564520][T27206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1444.618278][T27211] loop4: detected capacity change from 0 to 128 [ 1444.651418][T27211] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1444.659412][T27211] FAT-fs (loop4): Filesystem has been set read-only [ 1444.660450][T27213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8391'. [ 1444.675407][T27211] attempt to access beyond end of device [ 1444.675407][T27211] loop4: rw=524288, want=2073, limit=128 [ 1444.689898][T27211] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1444.704603][T27211] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1444.713611][T27211] attempt to access beyond end of device [ 1444.713611][T27211] loop4: rw=0, want=2073, limit=128 [ 1444.727645][T27218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8388'. [ 1444.741167][T27211] attempt to access beyond end of device [ 1444.741167][T27211] loop4: rw=0, want=2073, limit=128 [ 1444.752567][T27211] attempt to access beyond end of device [ 1444.752567][T27211] loop4: rw=0, want=2073, limit=128 [ 1444.771047][T27213] loop5: detected capacity change from 0 to 128 [ 1444.803690][T27213] FAT-fs (loop5): Directory bread(block 32) failed [ 1444.813003][T27211] attempt to access beyond end of device [ 1444.813003][T27211] loop4: rw=0, want=2073, limit=128 [ 1444.823991][T27213] FAT-fs (loop5): Directory bread(block 33) failed [ 1444.830636][T27213] FAT-fs (loop5): Directory bread(block 34) failed [ 1444.832356][T27211] attempt to access beyond end of device [ 1444.832356][T27211] loop4: rw=0, want=2073, limit=128 [ 1444.837268][T27213] FAT-fs (loop5): Directory bread(block 35) failed [ 1444.849042][T27211] attempt to access beyond end of device [ 1444.849042][T27211] loop4: rw=0, want=2073, limit=128 [ 1444.854957][T27213] FAT-fs (loop5): Directory bread(block 36) failed [ 1444.866796][T27211] attempt to access beyond end of device [ 1444.866796][T27211] loop4: rw=0, want=2073, limit=128 [ 1444.872561][T27213] FAT-fs (loop5): Directory bread(block 37) failed [ 1444.884154][T27211] attempt to access beyond end of device [ 1444.884154][T27211] loop4: rw=0, want=2073, limit=128 [ 1444.890137][T27213] FAT-fs (loop5): Directory bread(block 38) failed [ 1444.901201][T27211] attempt to access beyond end of device [ 1444.901201][T27211] loop4: rw=0, want=2073, limit=128 [ 1444.908166][T27213] FAT-fs (loop5): Directory bread(block 39) failed [ 1444.925520][T27213] FAT-fs (loop5): Directory bread(block 40) failed [ 1444.932178][T27213] FAT-fs (loop5): Directory bread(block 41) failed [ 1444.974852][T27213] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1444.983899][T27213] FAT-fs (loop5): Filesystem has been set read-only [ 1445.080448][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 1445.080466][ T30] audit: type=1400 audit(1445.064:12106): avc: denied { create } for pid=27219 comm="syz.1.8394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1445.142033][ T30] audit: type=1400 audit(1445.094:12107): avc: denied { write } for pid=27219 comm="syz.1.8394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1445.185315][ T30] audit: type=1400 audit(1445.094:12108): avc: denied { nlmsg_write } for pid=27219 comm="syz.1.8394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1445.188048][T27229] loop5: detected capacity change from 0 to 1024 [ 1445.207856][T27226] loop1: detected capacity change from 0 to 1024 [ 1445.220855][T27227] ================================================================== [ 1445.228958][T27227] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 1445.237370][T27227] Read of size 8 at addr ffff88810f06ffc0 by task syz.3.8396/27227 [ 1445.245998][T27227] [ 1445.248368][T27227] CPU: 1 PID: 27227 Comm: syz.3.8396 Tainted: G W 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 1445.260126][T27227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1445.270247][T27227] Call Trace: [ 1445.273547][T27227] [ 1445.276498][T27227] __dump_stack+0x21/0x30 [ 1445.280954][T27227] dump_stack_lvl+0xee/0x150 [ 1445.285576][T27227] ? show_regs_print_info+0x20/0x20 [ 1445.290801][T27227] ? load_image+0x3a0/0x3a0 [ 1445.295358][T27227] print_address_description+0x7f/0x2c0 [ 1445.300948][T27227] ? tc_setup_flow_action+0x870/0x3240 [ 1445.306435][T27227] kasan_report+0xf1/0x140 [ 1445.310909][T27227] ? tc_setup_flow_action+0x870/0x3240 [ 1445.316493][T27227] __asan_report_load8_noabort+0x14/0x20 [ 1445.322243][T27227] tc_setup_flow_action+0x870/0x3240 [ 1445.327567][T27227] mall_replace_hw_filter+0x293/0x820 [ 1445.333055][T27227] ? pcpu_block_update_hint_alloc+0x8c1/0xc50 [ 1445.339163][T27227] ? mall_set_parms+0x520/0x520 [ 1445.344052][T27227] ? tcf_exts_destroy+0xb0/0xb0 [ 1445.348931][T27227] ? mall_set_parms+0x1e8/0x520 [ 1445.353811][T27227] mall_change+0x526/0x740 [ 1445.358254][T27227] ? __kasan_check_write+0x14/0x20 [ 1445.363402][T27227] ? mall_get+0xa0/0xa0 [ 1445.367585][T27227] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 1445.373524][T27227] tc_new_tfilter+0x12a2/0x1870 [ 1445.378508][T27227] ? tcf_gate_entry_destructor+0x20/0x20 [ 1445.384170][T27227] ? update_curr+0x40d/0x5b0 [ 1445.388767][T27227] ? security_capable+0x87/0xb0 [ 1445.393644][T27227] ? ns_capable+0x8c/0xf0 [ 1445.397983][T27227] ? netlink_net_capable+0x125/0x160 [ 1445.403382][T27227] ? tcf_gate_entry_destructor+0x20/0x20 [ 1445.409122][T27227] rtnetlink_rcv_msg+0x81b/0xb90 [ 1445.414431][T27227] ? rtnetlink_bind+0x80/0x80 [ 1445.419116][T27227] ? memcpy+0x56/0x70 [ 1445.423107][T27227] ? avc_has_perm_noaudit+0x2f4/0x460 [ 1445.428484][T27227] ? arch_stack_walk+0xee/0x140 [ 1445.433433][T27227] ? avc_denied+0x1b0/0x1b0 [ 1445.437946][T27227] ? stack_trace_save+0x98/0xe0 [ 1445.442806][T27227] ? avc_has_perm+0x158/0x240 [ 1445.447507][T27227] ? avc_has_perm_noaudit+0x460/0x460 [ 1445.452887][T27227] ? x64_sys_call+0x4b/0x9a0 [ 1445.457518][T27227] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 1445.462939][T27227] netlink_rcv_skb+0x1e0/0x430 [ 1445.467712][T27227] ? rtnetlink_bind+0x80/0x80 [ 1445.472481][T27227] ? netlink_ack+0xb60/0xb60 [ 1445.477073][T27227] ? __netlink_lookup+0x387/0x3b0 [ 1445.482108][T27227] rtnetlink_rcv+0x1c/0x20 [ 1445.486526][T27227] netlink_unicast+0x876/0xa40 [ 1445.491293][T27227] netlink_sendmsg+0x86a/0xb70 [ 1445.496067][T27227] ? netlink_getsockopt+0x530/0x530 [ 1445.501282][T27227] ? security_socket_sendmsg+0x82/0xa0 [ 1445.506751][T27227] ? netlink_getsockopt+0x530/0x530 [ 1445.511954][T27227] ____sys_sendmsg+0x5a2/0x8c0 [ 1445.516729][T27227] ? __sys_sendmsg_sock+0x40/0x40 [ 1445.521762][T27227] ? import_iovec+0x7c/0xb0 [ 1445.526370][T27227] ___sys_sendmsg+0x1f0/0x260 [ 1445.531146][T27227] ? __sys_sendmsg+0x250/0x250 [ 1445.535918][T27227] ? sock_show_fdinfo+0xa0/0xa0 [ 1445.540779][T27227] ? __fdget+0x1a1/0x230 [ 1445.545027][T27227] __x64_sys_sendmsg+0x1e2/0x2a0 [ 1445.549981][T27227] ? ___sys_sendmsg+0x260/0x260 [ 1445.554839][T27227] ? __kasan_check_write+0x14/0x20 [ 1445.560072][T27227] ? switch_fpu_return+0x15d/0x2c0 [ 1445.565430][T27227] x64_sys_call+0x4b/0x9a0 [ 1445.569873][T27227] do_syscall_64+0x4c/0xa0 [ 1445.574323][T27227] ? clear_bhb_loop+0x50/0xa0 [ 1445.579074][T27227] ? clear_bhb_loop+0x50/0xa0 [ 1445.583760][T27227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1445.589669][T27227] RIP: 0033:0x7f2a01593be9 [ 1445.594098][T27227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1445.613710][T27227] RSP: 002b:00007f29ffffc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1445.622440][T27227] RAX: ffffffffffffffda RBX: 00007f2a017bafa0 RCX: 00007f2a01593be9 [ 1445.630427][T27227] RDX: 0000000004000000 RSI: 00002000000006c0 RDI: 0000000000000006 [ 1445.638494][T27227] RBP: 00007f2a01616e19 R08: 0000000000000000 R09: 0000000000000000 [ 1445.646818][T27227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1445.654799][T27227] R13: 00007f2a017bb038 R14: 00007f2a017bafa0 R15: 00007ffc5f55c058 [ 1445.662891][T27227] [ 1445.665936][T27227] [ 1445.668275][T27227] Allocated by task 27227: [ 1445.672778][T27227] __kasan_kmalloc+0xda/0x110 [ 1445.677466][T27227] __kmalloc+0x13d/0x2c0 [ 1445.681712][T27227] tcf_idr_create+0x5f/0x790 [ 1445.686311][T27227] tcf_idr_create_from_flags+0x61/0x70 [ 1445.691787][T27227] tcf_gact_init+0x346/0x580 [ 1445.696387][T27227] tcf_action_init_1+0x3f7/0x6a0 [ 1445.701523][T27227] tcf_action_init+0x1e9/0x710 [ 1445.706297][T27227] tcf_exts_validate+0x217/0x520 [ 1445.711264][T27227] mall_set_parms+0x48/0x520 [ 1445.715874][T27227] mall_change+0x45a/0x740 [ 1445.720506][T27227] tc_new_tfilter+0x12a2/0x1870 [ 1445.725395][T27227] rtnetlink_rcv_msg+0x81b/0xb90 [ 1445.730348][T27227] netlink_rcv_skb+0x1e0/0x430 [ 1445.735115][T27227] rtnetlink_rcv+0x1c/0x20 [ 1445.739538][T27227] netlink_unicast+0x876/0xa40 [ 1445.744301][T27227] netlink_sendmsg+0x86a/0xb70 [ 1445.749067][T27227] ____sys_sendmsg+0x5a2/0x8c0 [ 1445.753988][T27227] ___sys_sendmsg+0x1f0/0x260 [ 1445.758782][T27227] __x64_sys_sendmsg+0x1e2/0x2a0 [ 1445.763735][T27227] x64_sys_call+0x4b/0x9a0 [ 1445.768296][T27227] do_syscall_64+0x4c/0xa0 [ 1445.772827][T27227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1445.778735][T27227] [ 1445.781060][T27227] Last potentially related work creation: [ 1445.786770][T27227] kasan_save_stack+0x3a/0x60 [ 1445.791454][T27227] __kasan_record_aux_stack+0xd2/0x100 [ 1445.797033][T27227] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1445.802848][T27227] kvfree_call_rcu+0xae/0x7e0 [ 1445.807626][T27227] ip_ma_put+0xf7/0x140 [ 1445.811782][T27227] __ip_mc_dec_group+0x44e/0x520 [ 1445.816740][T27227] ip_mc_down+0x1b0/0x240 [ 1445.821094][T27227] inetdev_event+0x2c7/0x10a0 [ 1445.825797][T27227] raw_notifier_call_chain+0x90/0x100 [ 1445.831538][T27227] __dev_notify_flags+0x28f/0x500 [ 1445.836663][T27227] dev_change_flags+0xe8/0x1a0 [ 1445.841553][T27227] do_setlink+0xbed/0x3990 [ 1445.846029][T27227] rtnl_newlink+0xd6b/0x17b0 [ 1445.850632][T27227] rtnetlink_rcv_msg+0x9e4/0xb90 [ 1445.855664][T27227] netlink_rcv_skb+0x1e0/0x430 [ 1445.860514][T27227] rtnetlink_rcv+0x1c/0x20 [ 1445.864938][T27227] netlink_unicast+0x876/0xa40 [ 1445.869716][T27227] netlink_sendmsg+0x86a/0xb70 [ 1445.874602][T27227] ____sys_sendmsg+0x5a2/0x8c0 [ 1445.879480][T27227] ___sys_sendmsg+0x1f0/0x260 [ 1445.884158][T27227] __x64_sys_sendmsg+0x1e2/0x2a0 [ 1445.889099][T27227] x64_sys_call+0x4b/0x9a0 [ 1445.893518][T27227] do_syscall_64+0x4c/0xa0 [ 1445.898060][T27227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1445.903962][T27227] [ 1445.906289][T27227] Second to last potentially related work creation: [ 1445.912876][T27227] kasan_save_stack+0x3a/0x60 [ 1445.917602][T27227] __kasan_record_aux_stack+0xd2/0x100 [ 1445.923086][T27227] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1445.928899][T27227] kvfree_call_rcu+0xae/0x7e0 [ 1445.933587][T27227] ip_ma_put+0xf7/0x140 [ 1445.937747][T27227] __ip_mc_dec_group+0x44e/0x520 [ 1445.942778][T27227] ip_mc_down+0x1b0/0x240 [ 1445.947125][T27227] inetdev_event+0x2c7/0x10a0 [ 1445.951809][T27227] raw_notifier_call_chain+0x90/0x100 [ 1445.957450][T27227] __dev_notify_flags+0x28f/0x500 [ 1445.962484][T27227] dev_change_flags+0xe8/0x1a0 [ 1445.967252][T27227] do_setlink+0xbed/0x3990 [ 1445.971677][T27227] rtnl_newlink+0xd6b/0x17b0 [ 1445.976275][T27227] rtnetlink_rcv_msg+0x9e4/0xb90 [ 1445.981217][T27227] netlink_rcv_skb+0x1e0/0x430 [ 1445.985999][T27227] rtnetlink_rcv+0x1c/0x20 [ 1445.990682][T27227] netlink_unicast+0x876/0xa40 [ 1445.995446][T27227] netlink_sendmsg+0x86a/0xb70 [ 1446.000212][T27227] ____sys_sendmsg+0x5a2/0x8c0 [ 1446.005022][T27227] ___sys_sendmsg+0x1f0/0x260 [ 1446.009716][T27227] __x64_sys_sendmsg+0x1e2/0x2a0 [ 1446.014745][T27227] x64_sys_call+0x4b/0x9a0 [ 1446.019164][T27227] do_syscall_64+0x4c/0xa0 [ 1446.023580][T27227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1446.029697][T27227] [ 1446.032128][T27227] The buggy address belongs to the object at ffff88810f06ff00 [ 1446.032128][T27227] which belongs to the cache kmalloc-192 of size 192 [ 1446.046267][T27227] The buggy address is located 0 bytes to the right of [ 1446.046267][T27227] 192-byte region [ffff88810f06ff00, ffff88810f06ffc0) [ 1446.060159][T27227] The buggy address belongs to the page: [ 1446.065970][T27227] page:ffffea00043c1bc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f06f [ 1446.076721][T27227] flags: 0x4000000000000200(slab|zone=1) [ 1446.082491][T27227] raw: 4000000000000200 ffffea00043ff700 0000000d0000000d ffff888100042c00 [ 1446.091092][T27227] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1446.099759][T27227] page dumped because: kasan: bad access detected [ 1446.106282][T27227] page_owner tracks the page as allocated [ 1446.111992][T27227] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 102, ts 5870036507, free_ts 5870015860 [ 1446.127896][T27227] post_alloc_hook+0x192/0x1b0 [ 1446.132885][T27227] prep_new_page+0x1c/0x110 [ 1446.137426][T27227] get_page_from_freelist+0x2cc5/0x2d50 [ 1446.143003][T27227] __alloc_pages+0x18f/0x440 [ 1446.147616][T27227] new_slab+0xa1/0x4d0 [ 1446.151725][T27227] ___slab_alloc+0x381/0x810 [ 1446.156325][T27227] __slab_alloc+0x49/0x90 [ 1446.160761][T27227] kmem_cache_alloc_trace+0x146/0x270 [ 1446.166138][T27227] kernfs_fop_open+0x343/0xb30 [ 1446.171073][T27227] do_dentry_open+0x834/0x1010 [ 1446.175843][T27227] vfs_open+0x73/0x80 [ 1446.179829][T27227] path_openat+0x2646/0x2f10 [ 1446.184418][T27227] do_filp_open+0x1b3/0x3e0 [ 1446.188923][T27227] do_sys_openat2+0x14c/0x7b0 [ 1446.193609][T27227] __x64_sys_openat+0x136/0x160 [ 1446.198467][T27227] x64_sys_call+0x219/0x9a0 [ 1446.203153][T27227] page last free stack trace: [ 1446.207827][T27227] free_unref_page_prepare+0x542/0x550 [ 1446.213464][T27227] free_unref_page+0xa2/0x550 [ 1446.218158][T27227] __free_pages+0x6c/0x100 [ 1446.222581][T27227] free_pages+0x82/0x90 [ 1446.226829][T27227] selinux_genfs_get_sid+0x20b/0x250 [ 1446.232123][T27227] inode_doinit_with_dentry+0x86e/0xd70 [ 1446.237673][T27227] selinux_d_instantiate+0x27/0x40 [ 1446.242791][T27227] security_d_instantiate+0x9e/0xf0 [ 1446.247999][T27227] d_splice_alias+0x6d/0x390 [ 1446.252615][T27227] kernfs_iop_lookup+0x2c2/0x310 [ 1446.257555][T27227] path_openat+0xfcf/0x2f10 [ 1446.262063][T27227] do_filp_open+0x1b3/0x3e0 [ 1446.267786][T27227] do_sys_openat2+0x14c/0x7b0 [ 1446.272470][T27227] __x64_sys_openat+0x136/0x160 [ 1446.277326][T27227] x64_sys_call+0x219/0x9a0 [ 1446.281835][T27227] do_syscall_64+0x4c/0xa0 [ 1446.286257][T27227] [ 1446.288579][T27227] Memory state around the buggy address: [ 1446.294297][T27227] ffff88810f06fe80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1446.302390][T27227] ffff88810f06ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1446.310459][T27227] >ffff88810f06ff80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1446.318519][T27227] ^ [ 1446.325121][T27227] ffff88810f070000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1446.333205][T27227] ffff88810f070080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1446.341262][T27227] ================================================================== [ 1446.349405][T27227] Disabling lock debugging due to kernel taint [ 1446.403908][T27229] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 1446.415263][T27229] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1446.441192][T27226] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1446.451810][ T30] audit: type=1400 audit(1446.434:12109): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1446.476511][T27226] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1446.489933][T27229] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1446.501501][ T30] audit: type=1400 audit(1446.454:12110): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1446.503321][T27229] System zones: [ 1446.523079][ T30] audit: type=1400 audit(1446.454:12111): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1446.523862][T27229] 0-1 [ 1446.526752][ T30] audit: type=1400 audit(1446.454:12112): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1446.526779][ T30] audit: type=1400 audit(1446.454:12113): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1446.526803][ T30] audit: type=1400 audit(1446.454:12114): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1446.548604][T27226] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1446.550372][ T30] audit: type=1400 audit(1446.454:12115): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1446.571011][T27226] System zones: [ 1446.590808][T27229] , 3-36 [ 1446.613747][T27226] 0-1 [ 1446.621754][T27229] [ 1446.655991][T27226] , 3-36 [ 1446.661343][T27226] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1446.665658][T27229] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.