last executing test programs: 3.799410006s ago: executing program 4 (id=2212): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 3.682849728s ago: executing program 4 (id=2217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x7}, {0x0, 0x7}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f00002db000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.swap.current\x00', 0x275a, 0x0) 3.130646209s ago: executing program 0 (id=2222): ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r6 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=@gettaction={0x214, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x94, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x39}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x59}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5b9}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff80}}]}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x214}}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 2.04028897s ago: executing program 3 (id=2229): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0010df", 0x0, 0x4, 0x0, @empty, @empty}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000000203000000080000000000020000002400028014000180080001000000000000001201000000010c0002800500010000000000100003800c000280050001002f000000040001"], 0x4c}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.933755732s ago: executing program 2 (id=2231): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), 0x0, 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000400)=@v2={0x5, 0x1, 0x16, 0x6, 0x2a, "5a4b8751fb4bd120d8f2caece59b0b67f35c4a1bc9748908871d2248dd3e5b2a71909780997fa47d7dd5"}, 0x33, 0x1) 1.871651884s ago: executing program 0 (id=2232): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000400)=@v2={0x5, 0x1, 0x16, 0x6, 0x1f, "5a4b8751fb4bd120d8f2caece59b0b67f35c4a1bc9748908871d2248dd3e5b"}, 0x28, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 1.857132044s ago: executing program 2 (id=2233): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x234041}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x6}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x1) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x2) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x5b0, @dev, 0x9}, 0x1c) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x578}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) 1.673224888s ago: executing program 0 (id=2234): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$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") 1.312581044s ago: executing program 1 (id=2235): openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 1.307965564s ago: executing program 4 (id=2236): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6100272400383afffc000000000000000000000000000004ff020000000000000000000000000001"], 0x0) 1.257790535s ago: executing program 1 (id=2237): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="2800ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.212152576s ago: executing program 4 (id=2238): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="2800ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.203870986s ago: executing program 0 (id=2239): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000005c0)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@discard}, {@grpjquota}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x476, &(0x7f0000000e00)="$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") lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x1) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 1.155127987s ago: executing program 3 (id=2240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1.137448218s ago: executing program 1 (id=2241): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x200000) 1.129583128s ago: executing program 0 (id=2242): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 1.116546528s ago: executing program 1 (id=2243): ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r6 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=@gettaction={0x214, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x94, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x39}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x59}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5b9}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff80}}]}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x214}}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 1.113693889s ago: executing program 3 (id=2244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b000000000014001a80100002800c0001800c001a000400000046e0e0aa8e8c2de1d05fc9c048c221b9a2961aa62fd33d49b4eb8c9c61ba5d7b6c13667549f63431076f795108cedb74d3bad332a5de076d16c128a040b2d0d20d6da6a6422fd7af8bb52ba1c34a53e3e5556181f5e93879b835f2df18c84b4c8fcc1d7552acfe0ffcf93efd83b5ed10e5a9ab63e479a20c"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}], 0x30}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r8}, 0x18) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0be5bc6f1a0101000800000001000000191136b1219cba87c27cedecf3f170cdd518e4569670946c29854d3de8f921d76a03da9ed4793e2cb1c09ee8f82bf4d1c22067975f14d178c4d0e0589b7937f9e425fee98fd6c0d8c4ac27b5bdc98e6f253f6202702b3954d072984a5804cbb1c50779a4761ec11414b1852deeb5b146e8108153da98b6094fa21c5841d26e078ded302ccaa7c11812b3c3a5f8b3c19ce58ee466aa84b9cc9b4cc0a2543e646e67da7616e94fe62ce8474d6b9d105a4dff2aaea5f3ba5c4c9367f9a82bda6e544e086fd505a71463056e642c78dd4a2c31fd5e8bca2c50d360b13c08f757c2d6cebe11b719bc38c751cf872799910c2fad299aafbe0e21b24789b7130eda442e0868ad0b34585d0eca22590c5bf1df26547a5fcb3667246c38ae568caf0900"/318, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(r6) 1.083637759s ago: executing program 4 (id=2245): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x14}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 1.02572156s ago: executing program 4 (id=2246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x8000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x20, 0x5, 0xfe, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x845}, 0x80) 461.55129ms ago: executing program 2 (id=2247): openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 225.777295ms ago: executing program 2 (id=2248): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r1, 0x0, 0x3ffff) fallocate(r0, 0x0, 0x2, 0x1001f0) 216.136395ms ago: executing program 1 (id=2249): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6100272400383afffc000000000000000000000000000004ff020000000000000000000000000001"], 0x0) 181.479736ms ago: executing program 3 (id=2250): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) 158.925867ms ago: executing program 1 (id=2251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f9, &(0x7f0000000a40)="$eJzs3c9vHFcdAPDvjL2x67q1C5UKCGgohYCi7Nqb1qp6KhcQqiohKk4cXGNvLMu7Xsu7LrWJVPt/QCISBwQnzhyQOETKiSOCG9xyCQekABEoRuKwaPaH48S7tpPYu2L385FGM2/e7Hzfy2re23xt7wtgZF2OiL2IuBQRH0XETPt80t7ivdaWXffwwc3lgwc3l5NoND78R9Ksz87FkddkXmzfczIivv+diB8lx+PWdnbXl8rl0la7XKhXNgu1nd1ra5Wl1dJqaaNYXJhfmHvn+tvFc+vr65Xf3P/22vs/uP27L9370943f5I1a7pdd7Qf56nV9dxhnMx4RLx/EcEGYKzdn0tnunr8wtvD00kj4jMR8Ubz+Z+Jsad4j7o81gDA/4FGYyYaM0fLAMCwS5s5sCTNt3MB05Gm+Xwrh/dqTKXlaq1+9UZ1e2OllSubjVx6Y61cmmvnCmcjl2Tl+U+z40flYjxevh4Rr0TETydeaJbzy3JBADAoLz4x//97ojX/AwBDbvK0Cxb70w4AoH9Onf8BgKFj/geA0WP+B4DRY/4HgNFj/geAUXO3M/+PDbolAEBffO+DD7KtcdD+/uuVj3e216sfX1sp1dbzle3l/HJ1azO/Wq2ulkv55WrltPuVq9XN+bdi+5NCvVSrF2o7u4uV6vZGfbH5vd6LpVxfegUAnOSV1+/8JYmIvXdfaG5xZC0HczUMt3TQDQAGRs4fRpdv4YbR5f/4wGlrefb8FeFbzxCs8ekzvAg4b1c+L/8Po0r+H0aX/D+MLvl/GF2NRtJrzf/08BIAYKjI8QN9/fk/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADInp5jZ7pJym+XzESxExG7nkxlq5NBcRL0fEnydyE1l5fqAtBgCeX/q3pL3+15WZN6efrL2U/GeiuY+IH//8w599slSvb81n5/95eL5+q32+OIj2AwCn6czTnXm84+GDm8udrZ/tuf+t1uKiWdyD9taqGY/xbPfHychFxNS/kla5Lfu8MnYO8ff2I+Jz3fqfNHMjs+2VT5+Mn8V+qa/x08fip8261j77t/jssTtP9Ix52lqvMCruZOPPe92evzQuN/eTXRc/nmyOUM+vM/4dHBv/Os/7ZHOs6Tb+XT5rjLd+/92edfsRXxjvFj85jJ/0iP/mGePf/eKX3+hV1/hlxJXoHv9orEK9slmo7exeW6ssrZZWSxvF4sL8wtw7198uFpo56kInU33c39+9+nLP/v86YqpH/MlT+v+1E3vdOByAf/Xfj374lV7x9yO+8dXu7/+rJ8TP5sSvnxj/kaWp3/ZcvjuLv9Lq//7Tvv9Xzxj/3l93V854KQDQB7Wd3fWlcrm0da4HuTjnGx45SC6ozQ6G/CD7PP6893mtnTLres0ffnH7taxy4D09l4MBD0zAhXv00A+6JQAAAAAAAAAAAAAAQC8X/udE6aB7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDD7XwAAAP//I0jLMw==") 134.286637ms ago: executing program 3 (id=2252): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r5 = dup2(r4, r3) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r5, &(0x7f0000007e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 126.755608ms ago: executing program 2 (id=2253): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x200000) 90.191278ms ago: executing program 0 (id=2254): mkdirat(0xffffffffffffff9c, 0x0, 0x0) inotify_init() open(0x0, 0x14000, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 58.028978ms ago: executing program 2 (id=2255): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000400)=@v2={0x5, 0x1, 0x16, 0x6, 0x1f, "5a4b8751fb4bd120d8f2caece59b0b67f35c4a1bc9748908871d2248dd3e5b"}, 0x28, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 0s ago: executing program 3 (id=2256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) kernel console output (not intermixed with test programs): rintk_skb: 49 callbacks suppressed [ 329.143800][ T24] audit: type=1400 audit(1757626052.310:1008): avc: denied { ioctl } for pid=5325 comm="syz.2.1503" path="/280/file0/file0" dev="loop2" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 329.253416][ T5336] usb usb8: usbfs: process 5336 (syz.0.1506) did not claim interface 7 before use [ 329.492768][ T9] attempt to access beyond end of device [ 329.492768][ T9] loop2: rw=2049, want=40968, limit=40427 [ 329.504547][ T9] attempt to access beyond end of device [ 329.504547][ T9] loop2: rw=2049, want=40984, limit=40427 [ 329.642603][ T24] audit: type=1400 audit(1757626052.810:1009): avc: denied { setattr } for pid=5339 comm="syz.1.1509" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 329.705304][ T24] audit: type=1326 audit(1757626052.850:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.3.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1f8e1ba9 code=0x7ffc0000 [ 329.731749][ T24] audit: type=1326 audit(1757626052.850:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.3.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1f8e1ba9 code=0x7ffc0000 [ 329.755704][ T24] audit: type=1326 audit(1757626052.850:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.3.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f5e1f8e1ba9 code=0x7ffc0000 [ 329.779520][ T24] audit: type=1326 audit(1757626052.850:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.3.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1f8e1ba9 code=0x7ffc0000 [ 329.806613][ T5346] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 329.819921][ T24] audit: type=1326 audit(1757626052.850:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.3.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1f8e1ba9 code=0x7ffc0000 [ 329.832509][ T5346] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 329.921139][ T5351] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota, [ 329.935782][ T24] audit: type=1400 audit(1757626053.080:1015): avc: denied { remove_name } for pid=5345 comm="syz.3.1511" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 329.958834][ T5351] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.959194][ T24] audit: type=1400 audit(1757626053.080:1016): avc: denied { unlink } for pid=5345 comm="syz.3.1511" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.982683][ T5352] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 330.360607][ T5371] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1518: invalid indirect mapped block 10 (level 1) [ 330.388016][ T5371] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1518: invalid indirect mapped block 8 (level 1) [ 330.401855][ T5371] EXT4-fs (loop3): 1 truncate cleaned up [ 330.407523][ T5371] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue [ 330.431399][ T5377] EXT4-fs (loop1): Test dummy encryption mode enabled [ 330.441191][ T24] audit: type=1400 audit(1757626053.610:1017): avc: denied { quotaon } for pid=5370 comm="syz.3.1518" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.441207][ T5377] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 330.490186][ T5377] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 330.712626][ T5385] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 331.042311][ T5394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=5394 comm=syz.2.1524 [ 331.612200][ T5404] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 331.641422][ T5404] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 331.650912][ T5404] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 331.879503][ T5404] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 332.171351][ T5404] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 332.206734][ T5394] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1524: Invalid inode bitmap blk 4 in block_group 0 [ 332.403120][ T5394] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,lazytime,,errors=continue [ 332.483121][ T5404] System zones: 0-2, 18-18, 34-34 [ 332.587083][ T5404] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.1527: iget: bad i_size value: 360287970189639680 [ 332.720639][ T5404] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.1527: couldn't read orphan inode 15 (err -117) [ 332.739550][ T5394] EXT4-fs (loop2): re-mounted. Opts: (null) [ 332.790192][ T5404] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue [ 332.908747][ T5417] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 332.925174][ T5415] FAT-fs (loop0): Directory bread(block 64) failed [ 332.932554][ T5415] FAT-fs (loop0): Directory bread(block 65) failed [ 332.939206][ T5415] FAT-fs (loop0): Directory bread(block 66) failed [ 332.946316][ T5415] FAT-fs (loop0): Directory bread(block 67) failed [ 332.961962][ T5417] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 332.963165][ T5415] FAT-fs (loop0): Directory bread(block 68) failed [ 332.969774][ T5372] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 332.969795][ T5372] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 332.976923][ T5415] FAT-fs (loop0): Directory bread(block 69) failed [ 333.000163][ T5415] FAT-fs (loop0): Directory bread(block 70) failed [ 333.007034][ T5415] FAT-fs (loop0): Directory bread(block 71) failed [ 333.014984][ T5415] FAT-fs (loop0): Directory bread(block 72) failed [ 333.021836][ T5415] FAT-fs (loop0): Directory bread(block 73) failed [ 333.060062][ T5372] F2FS-fs (loop4): invalid crc value [ 333.078465][ T5372] F2FS-fs (loop4): Found nat_bits in checkpoint [ 333.124517][ T5424] FAT-fs (loop2): bogus number of FAT sectors [ 333.129653][ T5372] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 333.131081][ T5424] FAT-fs (loop2): Can't find a valid FAT filesystem [ 333.138213][ T5372] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 333.679681][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 333.706628][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.715180][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 334.019046][ T5462] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1541'. [ 334.089180][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.197345][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.308283][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.527277][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.551521][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.004909][ T5466] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 335.013299][ T5466] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 335.022461][ T5466] EXT4-fs (loop4): 1 truncate cleaned up [ 335.028153][ T5466] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,grpid,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue [ 335.061040][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 335.061054][ T24] audit: type=1400 audit(1757626058.220:1021): avc: denied { create } for pid=5463 comm="syz.4.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 335.112004][ T5473] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 335.119931][ T24] audit: type=1400 audit(1757626058.220:1022): avc: denied { setopt } for pid=5463 comm="syz.4.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 335.143627][ T5473] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 335.302996][ T24] audit: type=1326 audit(1757626058.460:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.0.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 335.327530][ T24] audit: type=1326 audit(1757626058.470:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.0.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 335.352009][ T24] audit: type=1326 audit(1757626058.470:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.0.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 335.383920][ T24] audit: type=1326 audit(1757626058.470:1026): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.0.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 335.409077][ T24] audit: type=1326 audit(1757626058.470:1027): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.0.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 335.444809][ T5484] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 335.502569][ T5495] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue [ 335.531887][ T5495] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.591652][ T5513] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 335.598875][ T5513] EXT4-fs (loop4): Test dummy encryption mode enabled [ 335.608769][ T24] audit: type=1326 audit(1757626058.780:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe624c14ba9 code=0x7ffc0000 [ 335.690044][ T5513] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 335.710221][ T24] audit: type=1326 audit(1757626058.780:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe624c14ba9 code=0x7ffc0000 [ 335.712867][ T5513] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 335.775193][ T24] audit: type=1326 audit(1757626058.780:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe624c14ba9 code=0x7ffc0000 [ 335.811586][ T5513] EXT4-fs (loop4): 1 truncate cleaned up [ 335.826174][ T5513] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 335.909948][ T5531] overlayfs: failed to resolve './file2': -2 [ 336.561816][ T5537] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 336.570134][ T5537] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 336.591857][ T5554] syz.0.1572[5554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 336.592215][ T5554] syz.0.1572[5554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 336.842022][ T5537] F2FS-fs (loop1): Found nat_bits in checkpoint [ 337.098404][ T5555] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 337.108311][ T5555] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #16: comm syz.3.1571: mark_inode_dirty error [ 337.122000][ T5555] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 337.131216][ T5555] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #16: comm syz.3.1571: mark_inode_dirty error [ 337.143644][ T5555] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 337.152914][ T5555] EXT4-fs error (device loop3) in ext4_orphan_del:3292: error 27 [ 337.162302][ T5555] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 337.171647][ T5555] EXT4-fs error (device loop3): ext4_truncate:4390: inode #16: comm syz.3.1571: mark_inode_dirty error [ 337.184214][ T5555] EXT4-fs error (device loop3) in ext4_orphan_cleanup:3108: error 27 [ 337.194700][ T5555] EXT4-fs (loop3): 1 truncate cleaned up [ 337.200414][ T5555] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 337.210102][ T5555] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.813166][ T5564] EXT4-fs (loop4): Ignoring removed orlov option [ 337.832126][ T5537] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 337.839724][ T5537] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 337.849044][ T5564] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,orlov,,errors=continue [ 337.863696][ T5564] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.877511][ T5562] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: block 3: comm syz.4.1573: lblock 3 mapped to illegal pblock 3 (length 1) [ 337.892469][ T5562] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 337.905381][ T5562] EXT4-fs (loop4): This should not happen!! Data will be lost [ 337.905381][ T5562] [ 337.916717][ T5562] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 3: comm syz.4.1573: lblock 3 mapped to illegal pblock 3 (length 1) [ 337.981171][ T5562] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 3: comm syz.4.1573: lblock 3 mapped to illegal pblock 3 (length 1) [ 337.995779][ T5562] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 3: comm syz.4.1573: lblock 3 mapped to illegal pblock 3 (length 1) [ 338.051135][ T5562] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 3: comm syz.4.1573: lblock 3 mapped to illegal pblock 3 (length 1) [ 338.058272][ T275] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 338.065410][ T275] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 338.066453][ T5562] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 3: comm syz.4.1573: lblock 3 mapped to illegal pblock 3 (length 1) [ 338.073507][ T275] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 338.082372][ T5562] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 3: comm syz.4.1573: lblock 3 mapped to illegal pblock 3 (length 1) [ 338.096443][ T275] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 338.104196][ T5562] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 3: comm syz.4.1573: lblock 3 mapped to illegal pblock 3 (length 1) [ 338.142474][ T5562] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 3: comm syz.4.1573: lblock 3 mapped to illegal pblock 3 (length 1) [ 338.198510][ T5562] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 3: comm syz.4.1573: lblock 3 mapped to illegal pblock 3 (length 1) [ 338.213417][ T275] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 338.213606][ T275] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 338.230334][ T275] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 338.241803][ T5577] EXT4-fs (loop3): Ignoring removed nobh option [ 338.267775][ T5517] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 338.336823][ T5577] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 338.361296][ T5517] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 338.378555][ T5517] F2FS-fs (loop2): invalid crc value [ 338.395408][ T5577] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,data_err=abort,init_itable,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b0,noblock_validity,grpquota,nobh,user_xattr,inode_readahead_blks=0x0000000000000004,dioread_nolock,,errors=continue [ 338.406151][ T5517] F2FS-fs (loop2): Found nat_bits in checkpoint [ 338.492355][ T5517] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 338.499622][ T5517] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 338.600797][ T5589] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 338.622084][ T5589] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 338.705080][ T5593] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 338.721995][ T5593] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 339.107957][ T5626] xt_hashlimit: size too large, truncated to 1048576 [ 339.364362][ T5631] FAT-fs (loop0): bogus number of FAT sectors [ 339.392946][ T5631] FAT-fs (loop0): Can't find a valid FAT filesystem [ 339.585317][ T5636] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 339.593554][ T5636] EXT4-fs (loop1): Test dummy encryption mode enabled [ 339.602148][ T5636] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 339.610263][ T5636] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 339.631572][ T5636] EXT4-fs (loop1): 1 truncate cleaned up [ 339.637275][ T5636] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 339.762150][ T5644] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 339.772284][ T5644] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 339.808631][ T5639] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 339.852225][ T5639] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 339.887926][ T5639] F2FS-fs (loop0): invalid crc value [ 339.905544][ T5639] F2FS-fs (loop0): Found nat_bits in checkpoint [ 339.949389][ T5639] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 339.956868][ T5639] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 339.987337][ T5652] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 340.313016][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 340.313031][ T24] audit: type=1400 audit(1757626063.230:1051): avc: denied { create } for pid=5649 comm="syz.2.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 340.366333][ T24] audit: type=1400 audit(1757626063.250:1052): avc: denied { write } for pid=5649 comm="syz.2.1600" path="socket:[30669]" dev="sockfs" ino=30669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 340.392677][ T5652] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 340.426170][ T5670] attempt to access beyond end of device [ 340.426170][ T5670] loop0: rw=10241, want=45104, limit=40427 [ 340.456996][ T5639] attempt to access beyond end of device [ 340.456996][ T5639] loop0: rw=2049, want=45104, limit=40427 [ 340.480057][ T5667] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota, [ 340.491655][ T5667] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.563831][ T24] audit: type=1400 audit(1757626063.730:1053): avc: denied { create } for pid=5675 comm="syz.3.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 340.631400][ T24] audit: type=1400 audit(1757626063.790:1054): avc: denied { map } for pid=5678 comm="syz.1.1607" path="socket:[31055]" dev="sockfs" ino=31055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.655632][ T24] audit: type=1400 audit(1757626063.790:1055): avc: denied { read write } for pid=5678 comm="syz.1.1607" path="socket:[31055]" dev="sockfs" ino=31055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.679779][ T24] audit: type=1400 audit(1757626063.790:1056): avc: denied { setopt } for pid=5678 comm="syz.1.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 340.686108][ T5676] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 340.686108][ T5676] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 340.686108][ T5676] [ 340.782205][ T5676] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84e4018, mo2=0002] [ 340.791404][ T5676] System zones: 0-2, 18-18, 34-34 [ 340.805144][ T5676] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,debug,noacl,lazytime,usrquota,,errors=continue [ 340.818169][ T5676] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.890334][ T24] audit: type=1400 audit(1757626064.050:1057): avc: denied { rename } for pid=5675 comm="syz.3.1605" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 340.916672][ T24] audit: type=1400 audit(1757626064.050:1058): avc: denied { rename } for pid=5675 comm="syz.3.1605" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 341.487370][ T24] audit: type=1400 audit(1757626064.050:1059): avc: denied { unlink } for pid=5675 comm="syz.3.1605" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 341.514713][ T5690] syz.2.1610 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 341.987431][ T24] audit: type=1326 audit(1757626065.150:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5691 comm="syz.4.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2def0ba9 code=0x7ffc0000 [ 342.063213][ T5694] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 342.130212][ T5694] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 342.196157][ T5704] EXT4-fs (loop2): orphan cleanup on readonly fs [ 342.208776][ T5704] EXT4-fs warning (device loop2): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 342.224019][ T5704] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 342.231100][ T5704] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1614: bg 0: block 64: padding at end of block bitmap is not set [ 342.245958][ T5704] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 342.255658][ T5704] EXT4-fs (loop2): 1 orphan inode deleted [ 342.261810][ T5704] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 343.517271][ T312] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 343.847156][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 344.030965][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.097569][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.152842][ T312] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 344.198505][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.294998][ T312] usb 3-1: config 0 descriptor?? [ 344.337976][ T5743] F2FS-fs (loop0): invalid crc value [ 344.345220][ T5743] F2FS-fs (loop0): Found nat_bits in checkpoint [ 344.400665][ T5743] F2FS-fs (loop0): Start checkpoint disabled! [ 344.407523][ T5743] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 344.555185][ T5764] EXT4-fs (loop4): #blocks per group too big: 466944 [ 346.499544][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 346.521268][ T24] audit: type=1400 audit(1757626068.070:1081): avc: denied { listen } for pid=5763 comm="syz.4.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 346.801085][ T312] usbhid 3-1:0.0: can't add hid device: -71 [ 346.807716][ T312] usbhid: probe of 3-1:0.0 failed with error -71 [ 346.912735][ T312] usb 3-1: USB disconnect, device number 19 [ 347.949105][ T5768] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 347.958222][ T5768] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.162885][ T5790] EXT4-fs warning (device loop1): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 348.178427][ T5790] EXT4-fs (loop1): mount failed [ 348.392762][ T5792] EXT4-fs warning (device loop2): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 348.408183][ T5792] EXT4-fs (loop2): mount failed [ 348.415096][ T5806] exfat: Deprecated parameter 'utf8' [ 348.457683][ T5802] FAT-fs (loop3): Directory bread(block 64) failed [ 348.464424][ T5802] FAT-fs (loop3): Directory bread(block 65) failed [ 348.471286][ T5802] FAT-fs (loop3): Directory bread(block 66) failed [ 348.478142][ T5802] FAT-fs (loop3): Directory bread(block 67) failed [ 348.485214][ T5802] FAT-fs (loop3): Directory bread(block 68) failed [ 348.492135][ T5802] FAT-fs (loop3): Directory bread(block 69) failed [ 348.498716][ T5802] FAT-fs (loop3): Directory bread(block 70) failed [ 348.505331][ T5802] FAT-fs (loop3): Directory bread(block 71) failed [ 348.512289][ T5802] FAT-fs (loop3): Directory bread(block 72) failed [ 348.518838][ T5802] FAT-fs (loop3): Directory bread(block 73) failed [ 348.541348][ T5806] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 348.567197][ T5792] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 348.586656][ T5817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1646'. [ 349.024093][ T24] audit: type=1404 audit(1757626072.180:1082): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 349.070764][ T24] audit: type=1404 audit(1757626072.230:1083): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 349.104668][ T24] audit: type=1400 audit(1757626072.250:1084): avc: denied { read write } for pid=278 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.173683][ T5818] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 349.304393][ T24] audit: type=1400 audit(1757626072.250:1085): avc: denied { open } for pid=278 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.456651][ T24] audit: type=1400 audit(1757626072.300:1086): avc: denied { ioctl } for pid=279 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.510043][ T24] audit: type=1400 audit(1757626072.320:1087): avc: denied { map_create } for pid=5825 comm="syz.4.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.533432][ T24] audit: type=1400 audit(1757626072.320:1088): avc: denied { perfmon } for pid=5825 comm="syz.4.1650" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 349.554888][ T24] audit: type=1400 audit(1757626072.320:1089): avc: denied { map_read map_write } for pid=5825 comm="syz.4.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.600355][ T5829] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 349.609640][ T24] audit: type=1400 audit(1757626072.320:1090): avc: denied { prog_load } for pid=5825 comm="syz.4.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.657578][ T5836] EXT4-fs (loop1): Test dummy encryption mode enabled [ 349.706437][ T5836] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 350.604043][ T5858] syz.3.1658[5858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.604386][ T5858] syz.3.1658[5858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.699485][ T5866] EXT4-fs warning (device loop0): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 351.700621][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 351.700638][ T24] audit: type=1400 audit(1757626074.810:1120): avc: denied { create } for pid=5865 comm="syz.0.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.731284][ T5866] EXT4-fs (loop0): mount failed [ 351.822002][ T5873] FAT-fs (loop2): bogus number of FAT sectors [ 351.842337][ T24] audit: type=1404 audit(1757626075.010:1121): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 351.858165][ T5873] FAT-fs (loop2): Can't find a valid FAT filesystem [ 351.877964][ T24] audit: type=1404 audit(1757626075.030:1122): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 351.914977][ T24] audit: type=1400 audit(1757626075.050:1123): avc: denied { read write } for pid=275 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 351.941589][ T24] audit: type=1400 audit(1757626075.050:1124): avc: denied { open } for pid=275 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 351.966274][ T24] audit: type=1400 audit(1757626075.060:1125): avc: denied { ioctl } for pid=275 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 351.992146][ T24] audit: type=1400 audit(1757626075.070:1126): avc: denied { mounton } for pid=5880 comm="syz.1.1665" path="/362/file0" dev="tmpfs" ino=1913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 352.018070][ T5866] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 352.018442][ T24] audit: type=1400 audit(1757626075.080:1127): avc: denied { mount } for pid=5880 comm="syz.1.1665" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 352.055975][ T24] audit: type=1400 audit(1757626075.080:1128): avc: denied { setattr } for pid=5880 comm="syz.1.1665" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 352.084016][ T24] audit: type=1400 audit(1757626075.100:1129): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 352.151877][ T5860] F2FS-fs (loop4): Unrecognized mount option "active_lows=4" or missing value [ 352.360319][ T5891] fuse: Bad value for 'fd' [ 352.542317][ T5889] EXT4-fs warning (device loop1): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 352.561403][ T5889] EXT4-fs (loop1): mount failed [ 352.832299][ T5903] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 352.865843][ T5907] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 352.905867][ T5907] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 353.002306][ T5922] FAT-fs (loop3): bogus number of FAT sectors [ 353.008576][ T5922] FAT-fs (loop3): Can't find a valid FAT filesystem [ 353.137622][ T5928] EXT4-fs warning (device loop0): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 353.169722][ T5928] EXT4-fs (loop0): mount failed [ 353.271540][ T5928] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 353.807781][ T5943] EXT4-fs warning (device loop4): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 353.853793][ T5943] EXT4-fs (loop4): mount failed [ 354.030394][ T5973] syz.4.1699[5973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.030460][ T5973] syz.4.1699[5973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.727369][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 354.771704][ T5933] F2FS-fs (loop1): Found nat_bits in checkpoint [ 354.830984][ T5933] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 354.908670][ T5995] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 354.945842][ T6002] syz.3.1706[6002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.945906][ T6002] syz.3.1706[6002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.964138][ T6002] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 355.013446][ T5995] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 355.468172][ T6012] usb usb8: usbfs: process 6012 (syz.3.1710) did not claim interface 7 before use [ 355.514746][ T6014] EXT4-fs warning (device loop2): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 355.563050][ T6014] EXT4-fs (loop2): mount failed [ 355.766024][ T6037] syz.0.1717[6037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.766089][ T6037] syz.0.1717[6037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.785973][ T6038] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 355.877660][ T6039] netlink: 'syz.3.1715': attribute type 4 has an invalid length. [ 355.928049][ T6039] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1715'. [ 357.429798][ T24] kauditd_printk_skb: 67 callbacks suppressed [ 357.429813][ T24] audit: type=1400 audit(1757626080.590:1197): avc: denied { write } for pid=6046 comm="syz.4.1721" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 357.580253][ T6048] EXT4-fs (loop4): Ignoring removed orlov option [ 357.587238][ T6052] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 357.612946][ T24] audit: type=1326 audit(1757626080.780:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 357.641247][ T6048] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,orlov,,errors=continue [ 357.656172][ T6052] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 357.701612][ T24] audit: type=1326 audit(1757626080.800:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 357.738027][ T6048] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.749497][ T24] audit: type=1326 audit(1757626080.800:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 357.773990][ T24] audit: type=1326 audit(1757626080.800:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 357.798231][ T24] audit: type=1326 audit(1757626080.800:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 357.840190][ T6048] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: block 3: comm syz.4.1721: lblock 3 mapped to illegal pblock 3 (length 1) [ 357.856764][ T6068] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 357.870446][ T6071] syz.3.1728[6071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.870568][ T6071] syz.3.1728[6071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.961828][ T6048] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 357.994942][ T6048] EXT4-fs (loop4): This should not happen!! Data will be lost [ 357.994942][ T6048] [ 358.381824][ T6076] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 358.405311][ T24] audit: type=1326 audit(1757626081.570:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.4.1732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d2def0ba9 code=0x0 [ 358.429307][ T6080] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 358.454907][ T6080] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 358.611131][ T24] audit: type=1404 audit(1757626081.780:1204): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 358.628881][ T24] audit: type=1404 audit(1757626081.800:1205): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 358.667296][ T24] audit: type=1400 audit(1757626081.820:1206): avc: denied { read write } for pid=275 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 358.743805][ T6104] syz.1.1739[6104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.743872][ T6104] syz.1.1739[6104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.812370][ T6101] EXT4-fs warning (device loop2): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 358.843830][ T6101] EXT4-fs (loop2): mount failed [ 358.858127][ T6116] FAT-fs (loop1): bogus number of FAT sectors [ 358.866619][ T6116] FAT-fs (loop1): Can't find a valid FAT filesystem [ 359.203907][ T6101] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 359.729457][ T6152] fuse: Bad value for 'fd' [ 359.746017][ T6141] EXT4-fs (loop2): Ignoring removed orlov option [ 359.765715][ T6141] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,orlov,,errors=continue [ 359.780141][ T6141] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.800814][ T6157] FAT-fs (loop1): bogus number of FAT sectors [ 359.806995][ T6157] FAT-fs (loop1): Can't find a valid FAT filesystem [ 359.828599][ T6141] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: block 3: comm syz.2.1753: lblock 3 mapped to illegal pblock 3 (length 1) [ 359.849189][ T6141] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 359.862928][ T6141] EXT4-fs (loop2): This should not happen!! Data will be lost [ 359.862928][ T6141] [ 360.023033][ T6170] EXT4-fs warning (device loop3): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 360.055172][ T6170] EXT4-fs (loop3): mount failed [ 360.434318][ T6170] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 360.637146][ T6208] usb usb8: usbfs: process 6208 (syz.2.1775) did not claim interface 7 before use [ 361.655281][ T6214] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 361.670738][ T6214] EXT4-fs (loop2): Test dummy encryption mode enabled [ 361.677723][ T6214] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 361.685400][ T6214] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 361.710979][ T6214] EXT4-fs (loop2): 1 truncate cleaned up [ 361.717306][ T6214] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 361.769838][ T6218] EXT4-fs warning (device loop0): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 361.811506][ T6218] EXT4-fs (loop0): mount failed [ 362.001306][ T6246] fuse: Bad value for 'fd' [ 362.474090][ T24] kauditd_printk_skb: 125 callbacks suppressed [ 362.495066][ T24] audit: type=1400 audit(1757626085.390:1332): avc: denied { write } for pid=6247 comm="syz.0.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 362.498792][ T6253] erofs: (device loop4): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 362.543532][ T775] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 362.553121][ T24] audit: type=1400 audit(1757626085.390:1333): avc: denied { read } for pid=6247 comm="syz.0.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 362.575427][ T24] audit: type=1400 audit(1757626085.750:1334): avc: denied { ioctl } for pid=6236 comm="syz.2.1786" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.990966][ T24] audit: type=1400 audit(1757626086.150:1335): avc: denied { execute } for pid=6263 comm="syz.0.1797" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 363.085280][ T24] audit: type=1400 audit(1757626086.150:1336): avc: denied { execute_no_trans } for pid=6263 comm="syz.0.1797" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 363.241053][ T24] audit: type=1400 audit(1757626086.360:1337): avc: denied { read } for pid=6271 comm="syz.3.1801" name="usbmon7" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 363.320362][ T24] audit: type=1400 audit(1757626086.360:1338): avc: denied { open } for pid=6271 comm="syz.3.1801" path="/dev/usbmon7" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 363.345985][ T24] audit: type=1400 audit(1757626086.360:1339): avc: denied { ioctl } for pid=6271 comm="syz.3.1801" path="/dev/usbmon7" dev="devtmpfs" ino=175 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 363.377294][ T24] audit: type=1326 audit(1757626086.480:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.1804" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f530f790ba9 code=0x0 [ 363.410640][ T775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 363.423143][ T775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.433453][ T775] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 363.437520][ T24] audit: type=1400 audit(1757626086.610:1341): avc: denied { read append } for pid=6279 comm="syz.0.1804" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 363.442851][ T775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.477095][ T775] usb 3-1: config 0 descriptor?? [ 363.482936][ T6286] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 363.502737][ T6286] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 363.550278][ T6288] EXT4-fs warning (device loop1): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 363.571557][ T6288] EXT4-fs (loop1): mount failed [ 363.719276][ T6283] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 363.738996][ T6293] EXT4-fs (loop4): Test dummy encryption mode enabled [ 363.823922][ T6293] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,inlinecrypt,,errors=continue [ 363.836867][ T6293] ext4 filesystem being mounted at /341/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 364.180798][ T775] usbhid 3-1:0.0: can't add hid device: -71 [ 364.186848][ T15] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 364.195864][ T775] usbhid: probe of 3-1:0.0 failed with error -71 [ 364.235780][ T775] usb 3-1: USB disconnect, device number 20 [ 364.286828][ T6313] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota, [ 364.297635][ T6313] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.642112][ T6329] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 364.656381][ T6329] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 364.662141][ T15] usb 4-1: Using ep0 maxpacket: 8 [ 365.112136][ T6336] erofs: (device loop0): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 365.123124][ T15] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 365.156248][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.516788][ T15] usb 4-1: Product: syz [ 365.521480][ T15] usb 4-1: Manufacturer: syz [ 365.526105][ T15] usb 4-1: SerialNumber: syz [ 365.579350][ T6340] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 365.712060][ T6346] EXT4-fs warning (device loop2): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 365.733737][ T6346] EXT4-fs (loop2): mount failed [ 365.851522][ T15] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 365.921497][ T6359] fuse: Bad value for 'fd' [ 366.320736][ T6360] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 366.330006][ T6360] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #16: comm syz.0.1826: mark_inode_dirty error [ 366.343085][ T6360] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 366.352457][ T6360] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #16: comm syz.0.1826: mark_inode_dirty error [ 366.364727][ T6360] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 366.373726][ T6360] EXT4-fs error (device loop0) in ext4_orphan_del:3292: error 27 [ 366.382566][ T6360] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 366.391708][ T6360] EXT4-fs error (device loop0): ext4_truncate:4390: inode #16: comm syz.0.1826: mark_inode_dirty error [ 366.403694][ T6360] EXT4-fs error (device loop0) in ext4_orphan_cleanup:3108: error 27 [ 366.414616][ T6360] EXT4-fs (loop0): 1 truncate cleaned up [ 366.420329][ T6360] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 366.429765][ T6360] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.882857][ T6356] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 366.904229][ T6356] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 366.916248][ T6356] F2FS-fs (loop1): Found nat_bits in checkpoint [ 366.958067][ T6356] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 366.966035][ T6356] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 367.026190][ T275] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 367.026204][ T275] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 367.034364][ T275] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 367.042191][ T275] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 367.050060][ T275] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 367.058318][ T275] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 367.066275][ T275] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 367.113481][ T6380] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 367.134086][ T6380] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 367.146843][ T6380] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #3: comm syz.0.1831: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 367.251084][ T6380] EXT4-fs (loop0): no journal found [ 367.258590][ T6380] EXT4-fs (loop0): can't get journal size [ 367.369086][ T6380] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000002000,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue [ 367.573769][ T6390] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 367.668055][ T6396] fuse: Bad value for 'fd' [ 367.674157][ T24] kauditd_printk_skb: 53 callbacks suppressed [ 367.674173][ T24] audit: type=1326 audit(1757626090.840:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 367.713956][ T6398] fuse: Bad value for 'fd' [ 367.722995][ T24] audit: type=1326 audit(1757626090.890:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 367.755354][ T24] audit: type=1326 audit(1757626090.890:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 367.786536][ T4962] usb 4-1: USB disconnect, device number 14 [ 367.799680][ T4962] usblp0: removed [ 367.812398][ T24] audit: type=1326 audit(1757626090.890:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 367.837886][ T24] audit: type=1326 audit(1757626090.910:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe624c14ba9 code=0x7ffc0000 [ 367.865131][ T6404] device wg2 left promiscuous mode [ 367.879535][ T24] audit: type=1326 audit(1757626090.910:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe624c14ba9 code=0x7ffc0000 [ 367.903515][ T24] audit: type=1326 audit(1757626090.910:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.4.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2def0ba9 code=0x7ffc0000 [ 367.943526][ T6410] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 367.951556][ T24] audit: type=1326 audit(1757626090.910:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.4.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2def0ba9 code=0x7ffc0000 [ 367.976406][ T24] audit: type=1326 audit(1757626090.910:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe624c14ba9 code=0x7ffc0000 [ 368.000430][ T24] audit: type=1326 audit(1757626090.910:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.1.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe624c14ba9 code=0x7ffc0000 [ 368.026890][ T6410] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 368.059619][ T6417] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 368.211921][ T6431] fuse: Bad value for 'fd' [ 368.713359][ T6433] fuse: Bad value for 'fd' [ 368.806027][ T6439] EXT4-fs error (device loop4): ext4_quota_enable:6447: comm syz.4.1849: inode #262144: comm syz.4.1849: iget: illegal inode # [ 368.821418][ T6439] EXT4-fs (loop4): Remounting filesystem read-only [ 368.828107][ T6439] EXT4-fs error (device loop4): ext4_quota_enable:6450: comm syz.4.1849: Bad quota inode: 262144, type: 2 [ 368.840815][ T6439] EXT4-fs warning (device loop4): ext4_enable_quotas:6491: Failed to enable quota tracking (type=2, err=-117, ino=262144). Please run e2fsck to fix. [ 368.858681][ T6439] EXT4-fs (loop4): mount failed [ 369.665068][ T6452] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 369.776871][ T6452] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 369.823772][ T6466] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 370.153969][ T6466] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 371.340221][ T6501] EXT4-fs (loop2): Ignoring removed nobh option [ 371.550233][ T6501] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 371.598005][ T6505] EXT4-fs error (device loop1): ext4_quota_enable:6447: comm syz.1.1871: inode #262144: comm syz.1.1871: iget: illegal inode # [ 371.612761][ T6505] EXT4-fs (loop1): Remounting filesystem read-only [ 371.619337][ T6505] EXT4-fs error (device loop1): ext4_quota_enable:6450: comm syz.1.1871: Bad quota inode: 262144, type: 2 [ 371.632871][ T6505] EXT4-fs warning (device loop1): ext4_enable_quotas:6491: Failed to enable quota tracking (type=2, err=-117, ino=262144). Please run e2fsck to fix. [ 371.650871][ T6505] EXT4-fs (loop1): mount failed [ 371.842146][ T6501] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,data_err=abort,init_itable,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b0,noblock_validity,grpquota,nobh,user_xattr,inode_readahead_blks=0x0000000000000004,dioread_nolock,,errors=continue [ 372.733004][ T24] kauditd_printk_skb: 54 callbacks suppressed [ 372.733020][ T24] audit: type=1400 audit(1757626095.900:1459): avc: denied { append } for pid=6500 comm="syz.2.1875" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 372.768238][ T24] audit: type=1400 audit(1757626095.900:1460): avc: denied { open } for pid=6500 comm="syz.2.1875" path="/339/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 372.893909][ T6516] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 372.912491][ T6516] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 372.988850][ T6530] xt_hashlimit: size too large, truncated to 1048576 [ 373.237385][ T24] audit: type=1326 audit(1757626096.400:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6534 comm="syz.0.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 373.320264][ T24] audit: type=1326 audit(1757626096.470:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6534 comm="syz.0.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 373.452443][ T24] audit: type=1326 audit(1757626096.470:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6534 comm="syz.0.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530f790ba9 code=0x7ffc0000 [ 373.642377][ T24] audit: type=1326 audit(1757626096.800:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca3e5bba9 code=0x7ffc0000 [ 373.673867][ T24] audit: type=1326 audit(1757626096.800:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7feca3e5bba9 code=0x7ffc0000 [ 374.222446][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'. [ 374.231446][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'. [ 374.249304][ T24] audit: type=1326 audit(1757626096.800:1466): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca3e5bba9 code=0x7ffc0000 [ 374.275024][ T24] audit: type=1400 audit(1757626097.390:1467): avc: denied { create } for pid=6546 comm="syz.4.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 374.458456][ T24] audit: type=1400 audit(1757626097.390:1468): avc: denied { write } for pid=6546 comm="syz.4.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 374.587848][ T6569] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 374.609007][ T6569] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 374.654858][ T6576] EXT4-fs (loop0): Ignoring removed orlov option [ 374.678570][ T6576] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,orlov,,errors=continue [ 374.692919][ T6576] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.713986][ T6586] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 374.721492][ T6586] EXT4-fs (loop3): Test dummy encryption mode enabled [ 374.728729][ T6586] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 374.736199][ T6586] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 374.747756][ T6586] EXT4-fs (loop3): 1 truncate cleaned up [ 374.762432][ T6586] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 374.844272][ T6596] FAT-fs (loop1): bogus number of FAT sectors [ 374.853569][ T6596] FAT-fs (loop1): Can't find a valid FAT filesystem [ 374.930858][ T15] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 375.046857][ T6602] EXT4-fs (loop0): Ignoring removed nobh option [ 375.060913][ T6602] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 375.413611][ T6602] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,data_err=abort,init_itable,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b0,noblock_validity,grpquota,nobh,user_xattr,inode_readahead_blks=0x0000000000000004,dioread_nolock,,errors=continue [ 375.440793][ T15] usb 5-1: Using ep0 maxpacket: 8 [ 375.571110][ T6627] usb usb8: usbfs: process 6627 (syz.1.1914) did not claim interface 7 before use [ 375.744711][ T6623] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 375.887472][ T6623] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 375.910749][ T15] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 375.910766][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.910777][ T15] usb 5-1: Product: syz [ 375.910788][ T15] usb 5-1: Manufacturer: syz [ 375.910799][ T15] usb 5-1: SerialNumber: syz [ 376.200201][ T6649] EXT4-fs warning (device loop3): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 376.218663][ T6649] EXT4-fs (loop3): mount failed [ 376.262112][ T15] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 376.333797][ T6662] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 376.368798][ T6662] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 377.044388][ T6682] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 377.497515][ T6686] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 377.507139][ T6686] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #16: comm syz.3.1935: mark_inode_dirty error [ 377.520761][ T6686] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 377.530321][ T6686] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #16: comm syz.3.1935: mark_inode_dirty error [ 377.543366][ T6686] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 377.552626][ T6686] EXT4-fs error (device loop3) in ext4_orphan_del:3292: error 27 [ 377.561748][ T6686] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 377.570923][ T6686] EXT4-fs error (device loop3): ext4_truncate:4390: inode #16: comm syz.3.1935: mark_inode_dirty error [ 377.583167][ T6686] EXT4-fs error (device loop3) in ext4_orphan_cleanup:3108: error 27 [ 377.594167][ T6686] EXT4-fs (loop3): 1 truncate cleaned up [ 377.599898][ T6686] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 377.610055][ T6686] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.851821][ T6682] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 377.879950][ T1871] usb 5-1: USB disconnect, device number 14 [ 377.889928][ T1871] usblp0: removed [ 377.897047][ T24] kauditd_printk_skb: 44 callbacks suppressed [ 377.897063][ T24] audit: type=1400 audit(1757626101.060:1513): avc: denied { read write } for pid=6692 comm="syz.1.1938" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 377.974117][ T24] audit: type=1400 audit(1757626101.100:1514): avc: denied { open } for pid=6692 comm="syz.1.1938" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 378.007875][ T24] audit: type=1326 audit(1757626101.100:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe624c14ba9 code=0x7ffc0000 [ 378.044057][ T24] audit: type=1326 audit(1757626101.100:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe624c14ba9 code=0x7ffc0000 [ 378.068557][ T24] audit: type=1326 audit(1757626101.100:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe624c14ba9 code=0x7ffc0000 [ 378.106379][ T24] audit: type=1326 audit(1757626101.100:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fe624c14ba9 code=0x7ffc0000 [ 378.153311][ T24] audit: type=1326 audit(1757626101.100:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe624c14ba9 code=0x7ffc0000 [ 378.177722][ T24] audit: type=1400 audit(1757626101.130:1520): avc: denied { unmount } for pid=276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 378.202060][ T24] audit: type=1400 audit(1757626101.210:1521): avc: denied { setattr } for pid=6680 comm="syz.2.1936" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 378.226005][ T24] audit: type=1400 audit(1757626101.210:1522): avc: denied { read } for pid=6697 comm="syz.3.1940" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 378.260382][ T6706] usb usb8: usbfs: process 6706 (syz.1.1941) did not claim interface 7 before use [ 378.561836][ T6713] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 378.572719][ T6713] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 378.617505][ T6683] F2FS-fs (loop0): invalid crc value [ 378.625988][ T6683] F2FS-fs (loop0): Found nat_bits in checkpoint [ 378.664006][ T6683] F2FS-fs (loop0): Start checkpoint disabled! [ 378.668772][ T6716] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 378.672101][ T6683] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 378.701876][ T6721] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 378.713398][ T6721] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 378.724676][ T6721] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #3: comm syz.3.1947: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 378.743076][ T6721] EXT4-fs (loop3): no journal found [ 378.748328][ T6721] EXT4-fs (loop3): can't get journal size [ 378.755252][ T6721] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000002000,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue [ 378.783520][ T5460] attempt to access beyond end of device [ 378.783520][ T5460] loop0: rw=2049, want=40968, limit=40427 [ 378.797059][ T5460] attempt to access beyond end of device [ 378.797059][ T5460] loop0: rw=2049, want=40992, limit=40427 [ 378.812671][ T6716] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3342: comm syz.4.1946: Allocating blocks 497-513 which overlap fs metadata [ 378.827232][ T6716] EXT4-fs (loop4): pa ffff88811a03be70: logic 256, phys. 385, len 8 [ 378.835549][ T6716] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 378.946496][ T6731] FAT-fs (loop2): Directory bread(block 64) failed [ 378.984801][ T6731] FAT-fs (loop2): Directory bread(block 65) failed [ 378.991853][ T6731] FAT-fs (loop2): Directory bread(block 66) failed [ 378.998633][ T6731] FAT-fs (loop2): Directory bread(block 67) failed [ 379.010552][ T6739] cgroup: syz.3.1953 (6739) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 379.026981][ T6739] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 379.049174][ T6731] FAT-fs (loop2): Directory bread(block 68) failed [ 379.056794][ T6731] FAT-fs (loop2): Directory bread(block 69) failed [ 379.213184][ T6731] FAT-fs (loop2): Directory bread(block 70) failed [ 379.256334][ T6731] FAT-fs (loop2): Directory bread(block 71) failed [ 379.263156][ T6731] FAT-fs (loop2): Directory bread(block 72) failed [ 379.269925][ T6731] FAT-fs (loop2): Directory bread(block 73) failed [ 379.772577][ T6753] EXT4-fs warning (device loop4): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 379.788834][ T6753] EXT4-fs (loop4): mount failed [ 379.796729][ T6759] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 379.811886][ T6759] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 379.950735][ T295] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 379.972590][ T6760] F2FS-fs (loop3): invalid crc value [ 379.982110][ T6760] F2FS-fs (loop3): Found nat_bits in checkpoint [ 379.989875][ T6770] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 380.001360][ T6770] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 380.012279][ T6770] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #3: comm syz.2.1960: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 380.106267][ T6770] EXT4-fs (loop2): no journal found [ 380.111670][ T6770] EXT4-fs (loop2): can't get journal size [ 380.122524][ T6770] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000002000,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue [ 380.143079][ T6760] F2FS-fs (loop3): Start checkpoint disabled! [ 380.383431][ T6760] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 380.534840][ T5460] attempt to access beyond end of device [ 380.534840][ T5460] loop3: rw=2049, want=40968, limit=40427 [ 380.547379][ T5460] attempt to access beyond end of device [ 380.547379][ T5460] loop3: rw=2049, want=41008, limit=40427 [ 380.652559][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 380.663917][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.674155][ T295] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 380.683294][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.700831][ T295] usb 1-1: config 0 descriptor?? [ 381.209934][ T6799] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 381.232090][ T6799] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 381.961882][ T295] uclogic 0003:2179:0053.0002: unknown main item tag 0x0 [ 381.969015][ T295] uclogic 0003:2179:0053.0002: unknown main item tag 0x0 [ 381.985525][ T295] uclogic 0003:2179:0053.0002: unknown main item tag 0x0 [ 382.335921][ T295] uclogic 0003:2179:0053.0002: unknown main item tag 0x0 [ 382.343138][ T295] uclogic 0003:2179:0053.0002: unknown main item tag 0x0 [ 382.352285][ T295] uclogic 0003:2179:0053.0002: No inputs registered, leaving [ 382.406064][ T295] uclogic 0003:2179:0053.0002: hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.0-1/input0 [ 382.419587][ T295] usb 1-1: USB disconnect, device number 10 [ 382.455159][ T6813] F2FS-fs (loop4): invalid crc value [ 382.493851][ T6813] F2FS-fs (loop4): Found nat_bits in checkpoint [ 382.541106][ T6813] F2FS-fs (loop4): Start checkpoint disabled! [ 382.559148][ T6813] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 382.626088][ T5460] attempt to access beyond end of device [ 382.626088][ T5460] loop4: rw=2049, want=40968, limit=40427 [ 382.638168][ T5460] attempt to access beyond end of device [ 382.638168][ T5460] loop4: rw=2049, want=41000, limit=40427 [ 382.688316][ T6821] F2FS-fs (loop3): invalid crc value [ 382.699305][ T6821] F2FS-fs (loop3): Found nat_bits in checkpoint [ 382.738859][ T6821] F2FS-fs (loop3): Start checkpoint disabled! [ 382.750407][ T6842] fido_id[6842]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 382.777104][ T6821] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 382.835414][ T6839] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 382.852685][ T6839] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 382.876814][ T6843] FAT-fs (loop0): bogus number of FAT sectors [ 382.906414][ T24] kauditd_printk_skb: 81 callbacks suppressed [ 382.906439][ T24] audit: type=1326 audit(1757626106.070:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2def0ba9 code=0x7ffc0000 [ 383.074316][ T6843] FAT-fs (loop0): Can't find a valid FAT filesystem [ 383.183643][ T24] audit: type=1326 audit(1757626106.170:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2def0ba9 code=0x7ffc0000 [ 383.213577][ T24] audit: type=1326 audit(1757626106.260:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2d2def0ba9 code=0x7ffc0000 [ 383.240347][ T24] audit: type=1326 audit(1757626106.260:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2def0ba9 code=0x7ffc0000 [ 383.441727][ T24] audit: type=1400 audit(1757626106.610:1608): avc: denied { mount } for pid=6857 comm="syz.2.1990" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 384.337119][ T24] audit: type=1400 audit(1757626107.010:1609): avc: denied { read } for pid=6820 comm="syz.3.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 384.459551][ T24] audit: type=1326 audit(1757626107.590:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.2.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca3e5bba9 code=0x7ffc0000 [ 384.537046][ T24] audit: type=1326 audit(1757626107.590:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.2.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca3e5bba9 code=0x7ffc0000 [ 384.561669][ T24] audit: type=1326 audit(1757626107.590:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.2.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7feca3e5bba9 code=0x7ffc0000 [ 384.586429][ T24] audit: type=1326 audit(1757626107.590:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.2.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca3e5bba9 code=0x7ffc0000 [ 384.652659][ T299] attempt to access beyond end of device [ 384.652659][ T299] loop3: rw=2049, want=40976, limit=40427 [ 384.888452][ T6886] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 384.960720][ T295] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 384.978325][ T6894] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 384.997720][ T6894] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 385.288679][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2005'. [ 385.298105][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2005'. [ 385.422021][ T6904] EXT4-fs (loop1): Ignoring removed orlov option [ 385.506313][ T6904] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,orlov,,errors=continue [ 385.527541][ T6904] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.549121][ T6904] EXT4-fs error (device loop1): ext4_map_blocks:740: inode #15: block 3: comm syz.1.2006: lblock 3 mapped to illegal pblock 3 (length 1) [ 385.564144][ T6904] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 385.577499][ T6904] EXT4-fs (loop1): This should not happen!! Data will be lost [ 385.577499][ T6904] [ 385.589131][ T6904] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.2006: lblock 3 mapped to illegal pblock 3 (length 1) [ 385.591369][ T295] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 385.604212][ T6904] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.2006: lblock 3 mapped to illegal pblock 3 (length 1) [ 385.621785][ T295] usb 5-1: can't read configurations, error -71 [ 385.628714][ T6904] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.2006: lblock 3 mapped to illegal pblock 3 (length 1) [ 385.647353][ T6904] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.2006: lblock 3 mapped to illegal pblock 3 (length 1) [ 385.662450][ T6904] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.2006: lblock 3 mapped to illegal pblock 3 (length 1) [ 385.680938][ T6904] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.2006: lblock 3 mapped to illegal pblock 3 (length 1) [ 385.699329][ T6904] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.2006: lblock 3 mapped to illegal pblock 3 (length 1) [ 385.714295][ T6904] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.2006: lblock 3 mapped to illegal pblock 3 (length 1) [ 385.729474][ T6904] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.2006: lblock 3 mapped to illegal pblock 3 (length 1) [ 385.753656][ T6920] 9pnet: Insufficient options for proto=fd [ 385.794136][ T6922] EXT4-fs (loop0): Ignoring removed orlov option [ 385.831449][ T6922] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,orlov,,errors=continue [ 385.846061][ T6922] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.892358][ T6956] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 386.912161][ T6956] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 387.281176][ T6967] EXT4-fs (loop1): Ignoring removed orlov option [ 387.300703][ T295] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 387.330364][ T6967] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,orlov,,errors=continue [ 387.351077][ T6967] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.551557][ T6979] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 387.559659][ T6979] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 387.569822][ T6979] F2FS-fs (loop0): invalid crc value [ 387.577879][ T6979] F2FS-fs (loop0): Found nat_bits in checkpoint [ 387.662288][ T6979] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 387.670132][ T6979] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 387.863217][ T6979] attempt to access beyond end of device [ 387.863217][ T6979] loop0: rw=2049, want=78344, limit=40427 [ 387.890812][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 387.902057][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.911936][ T295] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 387.921237][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.931060][ T295] usb 3-1: config 0 descriptor?? [ 388.034301][ T24] kauditd_printk_skb: 131 callbacks suppressed [ 388.034316][ T24] audit: type=1400 audit(1757626111.200:1745): avc: denied { mount } for pid=6991 comm="syz.0.2035" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 388.063121][ T24] audit: type=1400 audit(1757626111.200:1746): avc: denied { setattr } for pid=6991 comm="syz.0.2035" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 388.085604][ T24] audit: type=1400 audit(1757626111.210:1747): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 388.161906][ T24] audit: type=1400 audit(1757626111.330:1748): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 388.201030][ T6994] FAT-fs (loop0): Directory bread(block 64) failed [ 388.207630][ T6994] FAT-fs (loop0): Directory bread(block 65) failed [ 388.214830][ T6994] FAT-fs (loop0): Directory bread(block 66) failed [ 388.222491][ T6994] FAT-fs (loop0): Directory bread(block 67) failed [ 388.231710][ T6994] FAT-fs (loop0): Directory bread(block 68) failed [ 388.238363][ T6994] FAT-fs (loop0): Directory bread(block 69) failed [ 388.245337][ T6994] FAT-fs (loop0): Directory bread(block 70) failed [ 388.251966][ T6994] FAT-fs (loop0): Directory bread(block 71) failed [ 388.258633][ T6994] FAT-fs (loop0): Directory bread(block 72) failed [ 388.265639][ T6994] FAT-fs (loop0): Directory bread(block 73) failed [ 388.274661][ T24] audit: type=1400 audit(1757626111.440:1749): avc: denied { mount } for pid=6993 comm="syz.0.2036" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 388.346648][ T6999] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 388.355036][ T6999] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 388.365482][ T6999] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 388.384654][ T6999] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 388.393572][ T24] audit: type=1400 audit(1757626111.550:1750): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 388.396953][ T24] audit: type=1400 audit(1757626111.570:1751): avc: denied { read write } for pid=7004 comm="syz.1.2040" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 388.420639][ T6999] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 388.445653][ T6999] System zones: 0-2, 18-18, 34-34 [ 388.446938][ T295] uclogic 0003:2179:0053.0003: unknown main item tag 0x0 [ 388.451275][ T24] audit: type=1400 audit(1757626111.610:1752): avc: denied { open } for pid=7004 comm="syz.1.2040" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 388.458766][ T24] audit: type=1326 audit(1757626111.620:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe624c14ba9 code=0x7ffc0000 [ 388.506170][ T24] audit: type=1326 audit(1757626111.680:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe624c14ba9 code=0x7ffc0000 [ 388.534183][ T6999] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.2038: iget: bad i_size value: 360287970189639680 [ 388.547844][ T6999] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.2038: couldn't read orphan inode 15 (err -117) [ 388.547935][ T295] uclogic 0003:2179:0053.0003: unknown main item tag 0x0 [ 388.560735][ T6999] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue [ 388.566982][ T295] uclogic 0003:2179:0053.0003: item fetching failed at offset 2/5 [ 388.589312][ T295] uclogic 0003:2179:0053.0003: parse failed [ 388.595553][ T295] uclogic: probe of 0003:2179:0053.0003 failed with error -22 [ 388.652528][ T295] usb 3-1: USB disconnect, device number 21 [ 389.202274][ T7025] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 389.315774][ T7032] EXT4-fs warning (device loop4): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 389.332056][ T7032] EXT4-fs (loop4): mount failed [ 389.560578][ T295] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 389.615674][ T7046] FAT-fs (loop0): bogus number of FAT sectors [ 389.761488][ T7046] FAT-fs (loop0): Can't find a valid FAT filesystem [ 389.906357][ T7053] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 389.915851][ T7053] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 389.925107][ T7053] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 389.935564][ T7053] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 389.945854][ T7053] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 389.954285][ T7053] System zones: 0-2, 18-18, 34-34 [ 389.964309][ T7056] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 389.975881][ T7053] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.2057: iget: bad i_size value: 360287970189639680 [ 389.989916][ T7053] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.2057: couldn't read orphan inode 15 (err -117) [ 390.002271][ T7053] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue [ 390.003741][ T7056] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 390.060572][ T295] usb 3-1: Using ep0 maxpacket: 16 [ 390.153344][ T7066] syz.1.2060[7066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.153390][ T7066] syz.1.2060[7066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.480761][ T295] usb 3-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 390.503599][ T295] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.540667][ T7072] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 390.555448][ T7072] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 390.681078][ T295] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 390.700925][ T295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.709024][ T295] usb 3-1: Product: syz [ 390.714645][ T295] usb 3-1: Manufacturer: syz [ 390.719400][ T295] usb 3-1: SerialNumber: syz [ 390.735905][ T7081] erofs: (device loop0): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 391.394706][ T7086] FAT-fs (loop3): bogus number of FAT sectors [ 391.400960][ T7086] FAT-fs (loop3): Can't find a valid FAT filesystem [ 391.490825][ T295] usb 3-1: 0:2 : does not exist [ 391.538045][ T295] usb 3-1: USB disconnect, device number 22 [ 391.830001][ T7100] usb usb8: usbfs: process 7100 (syz.4.2071) did not claim interface 7 before use [ 392.207411][ T7094] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 392.219132][ T7094] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 392.250931][ T7094] F2FS-fs (loop1): invalid crc value [ 392.294246][ T7094] F2FS-fs (loop1): Found nat_bits in checkpoint [ 392.339007][ T7094] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 392.803836][ T7114] overlayfs: failed to resolve './file1': -2 [ 392.911637][ T7094] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 393.031182][ T7117] attempt to access beyond end of device [ 393.031182][ T7117] loop1: rw=10241, want=45104, limit=40427 [ 393.048163][ T7120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=7120 comm=syz.3.2075 [ 393.090985][ T24] kauditd_printk_skb: 59 callbacks suppressed [ 393.091000][ T24] audit: type=1400 audit(1757626116.210:1814): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 393.153143][ T7094] attempt to access beyond end of device [ 393.153143][ T7094] loop1: rw=2049, want=45104, limit=40427 [ 394.415333][ T7134] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 394.537316][ T7134] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #16: comm syz.4.2079: mark_inode_dirty error [ 394.576712][ T7134] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 394.603238][ T7134] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #16: comm syz.4.2079: mark_inode_dirty error [ 394.623673][ T7134] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 394.640114][ T7134] EXT4-fs error (device loop4) in ext4_orphan_del:3292: error 27 [ 394.660330][ T7134] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 394.674446][ T7134] EXT4-fs error (device loop4): ext4_truncate:4390: inode #16: comm syz.4.2079: mark_inode_dirty error [ 394.693050][ T7134] EXT4-fs error (device loop4) in ext4_orphan_cleanup:3108: error 27 [ 394.717967][ T24] audit: type=1400 audit(1757626116.320:1815): avc: denied { read } for pid=7125 comm="syz.0.2078" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 394.799246][ T24] audit: type=1400 audit(1757626116.320:1816): avc: denied { open } for pid=7125 comm="syz.0.2078" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 394.846530][ T7142] erofs: (device loop2): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 395.019257][ T7134] EXT4-fs (loop4): 1 truncate cleaned up [ 395.025209][ T7134] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 395.035846][ T7134] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.690618][ T24] audit: type=1400 audit(1757626116.320:1817): avc: denied { ioctl } for pid=7125 comm="syz.0.2078" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 395.751773][ T24] audit: type=1400 audit(1757626116.420:1818): avc: denied { remount } for pid=7119 comm="syz.3.2075" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 395.969869][ T7144] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 395.982776][ T7144] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 396.056174][ T24] audit: type=1400 audit(1757626119.220:1819): avc: denied { read } for pid=7151 comm="syz.2.2085" dev="nsfs" ino=4026532537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 396.104606][ T24] audit: type=1400 audit(1757626119.250:1820): avc: denied { open } for pid=7151 comm="syz.2.2085" path="net:[4026532537]" dev="nsfs" ino=4026532537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 396.128975][ T24] audit: type=1400 audit(1757626119.250:1821): avc: denied { create } for pid=7151 comm="syz.2.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 396.150114][ T24] audit: type=1400 audit(1757626119.250:1822): avc: denied { bind } for pid=7151 comm="syz.2.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 396.170246][ T24] audit: type=1400 audit(1757626119.260:1823): avc: denied { write } for pid=7151 comm="syz.2.2085" path="socket:[35232]" dev="sockfs" ino=35232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 396.208458][ T7156] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 396.245953][ T7156] EXT4-fs (loop4): Test dummy encryption mode enabled [ 396.261217][ T7156] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 396.294361][ T7156] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 396.335526][ T7156] EXT4-fs (loop4): 1 truncate cleaned up [ 396.345698][ T7156] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 396.442184][ T7165] overlayfs: failed to resolve './file1': -2 [ 396.608299][ T7154] F2FS-fs (loop1): invalid crc value [ 396.701922][ T7169] usb usb8: usbfs: process 7169 (syz.4.2088) did not claim interface 7 before use [ 396.917699][ T7154] F2FS-fs (loop1): Found nat_bits in checkpoint [ 397.211697][ T7154] F2FS-fs (loop1): Start checkpoint disabled! [ 397.218590][ T7154] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 397.233785][ T7161] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 397.247588][ T7161] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 397.260960][ T7161] F2FS-fs (loop3): fault_injection options not supported [ 397.268197][ T7161] F2FS-fs (loop3): fault_type options not supported [ 397.276082][ T299] attempt to access beyond end of device [ 397.276082][ T299] loop1: rw=2049, want=40968, limit=40427 [ 397.281287][ T7161] F2FS-fs (loop3): invalid crc value [ 397.293344][ T299] attempt to access beyond end of device [ 397.293344][ T299] loop1: rw=2049, want=40984, limit=40427 [ 397.306561][ T7171] EXT4-fs (loop0): Test dummy encryption mode enabled [ 397.342880][ T7161] F2FS-fs (loop3): Found nat_bits in checkpoint [ 397.349914][ T7171] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,inlinecrypt,,errors=continue [ 397.372674][ T7171] ext4 filesystem being mounted at /440/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 397.445708][ T7161] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 397.453396][ T7161] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 397.542861][ T7189] EXT4-fs warning (device loop4): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 397.547410][ T7161] attempt to access beyond end of device [ 397.547410][ T7161] loop3: rw=2049, want=45120, limit=40427 [ 397.558075][ T7189] EXT4-fs (loop4): mount failed [ 397.637068][ T7202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=7202 comm=syz.0.2097 [ 398.085583][ T7214] syz.3.2098[7214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.085652][ T7214] syz.3.2098[7214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.099421][ T7208] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.2097: Invalid inode bitmap blk 4 in block_group 0 [ 398.124381][ T7208] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,lazytime,,errors=continue [ 398.146418][ T7200] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 398.210776][ T7200] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 398.254304][ T7200] F2FS-fs (loop4): invalid crc value [ 398.308293][ T7219] EXT4-fs (loop3): Ignoring removed orlov option [ 398.322050][ T7200] F2FS-fs (loop4): Found nat_bits in checkpoint [ 398.346326][ T7221] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 398.365563][ T7219] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,orlov,,errors=continue [ 398.380200][ T7219] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.396060][ T7221] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 398.421077][ T7219] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #15: block 3: comm syz.3.2102: lblock 3 mapped to illegal pblock 3 (length 1) [ 398.436638][ T7200] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 398.443811][ T7219] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 398.443821][ T7219] EXT4-fs (loop3): This should not happen!! Data will be lost [ 398.443821][ T7219] [ 398.478933][ T7200] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 398.510637][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 398.510653][ T24] audit: type=1326 audit(1757626121.660:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca3e5bba9 code=0x7ffc0000 [ 398.544815][ T24] audit: type=1326 audit(1757626121.660:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feca3e5bba9 code=0x7ffc0000 [ 398.559440][ T7200] attempt to access beyond end of device [ 398.559440][ T7200] loop4: rw=2049, want=78344, limit=40427 [ 398.569078][ T24] audit: type=1326 audit(1757626121.660:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca3e5bba9 code=0x7ffc0000 [ 398.603813][ T24] audit: type=1326 audit(1757626121.660:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7feca3e5bba9 code=0x7ffc0000 [ 398.629602][ T24] audit: type=1326 audit(1757626121.660:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.2.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca3e5bba9 code=0x7ffc0000 [ 398.670863][ T24] audit: type=1326 audit(1757626121.830:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7238 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1f8e1ba9 code=0x7ffc0000 [ 398.694857][ T24] audit: type=1326 audit(1757626121.830:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7238 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5e1f8e1ba9 code=0x7ffc0000 [ 398.718883][ T24] audit: type=1326 audit(1757626121.830:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7238 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1f8e1ba9 code=0x7ffc0000 [ 398.754101][ T24] audit: type=1326 audit(1757626121.920:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.2.2111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feca3e5bba9 code=0x0 [ 398.851087][ T7246] syz.3.2112[7246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.851151][ T7246] syz.3.2112[7246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.995016][ T7250] netlink: 'syz.1.2107': attribute type 3 has an invalid length. [ 399.015406][ T7250] netlink: 'syz.1.2107': attribute type 3 has an invalid length. [ 399.693498][ T24] audit: type=1400 audit(1757626122.860:1838): avc: denied { append } for pid=7240 comm="syz.2.2111" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 399.862503][ T7272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=7272 comm=syz.3.2119 [ 400.028891][ T7281] syz.0.2123[7281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.028957][ T7281] syz.0.2123[7281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.372981][ T7266] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 400.411289][ T7266] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 400.492596][ T7292] netlink: 'syz.0.2125': attribute type 3 has an invalid length. [ 400.501553][ T7292] netlink: 'syz.0.2125': attribute type 3 has an invalid length. [ 400.807523][ T7266] F2FS-fs (loop4): fault_injection options not supported [ 400.814967][ T7266] F2FS-fs (loop4): fault_type options not supported [ 400.823517][ T7266] F2FS-fs (loop4): invalid crc value [ 400.907426][ T7266] F2FS-fs (loop4): Found nat_bits in checkpoint [ 401.069893][ T7266] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 401.088441][ T7266] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 401.143705][ T7309] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000, [ 401.196574][ T7309] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.308978][ T7318] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2131: bg 0: block 345: padding at end of block bitmap is not set [ 401.318031][ T278] attempt to access beyond end of device [ 401.318031][ T278] loop4: rw=2049, want=45112, limit=40427 [ 401.325178][ T7318] EXT4-fs (loop2): Remounting filesystem read-only [ 401.372364][ T7317] EXT4-fs (loop1): Test dummy encryption mode enabled [ 401.405142][ T7317] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 401.713031][ T7] attempt to access beyond end of device [ 401.713031][ T7] loop4: rw=1, want=1041, limit=128 [ 401.776319][ T7349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=7349 comm=syz.1.2146 [ 401.826217][ T7348] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 401.856458][ T7348] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 402.102098][ T7360] 9pnet: Insufficient options for proto=fd [ 402.172039][ T7365] syz.3.2150[7365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.172110][ T7365] syz.3.2150[7365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.188461][ T7359] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2146: Invalid inode bitmap blk 4 in block_group 0 [ 402.220229][ T7359] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,lazytime,,errors=continue [ 402.648836][ T7396] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2165: inode #1: comm syz.0.2165: iget: illegal inode # [ 402.662808][ T7396] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2165: error while reading EA inode 1 err=-117 [ 402.701037][ T7401] syz.4.2166[7401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.701103][ T7401] syz.4.2166[7401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.746008][ T7396] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 402.774304][ T7403] EXT4-fs warning (device loop4): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 402.776515][ T7396] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2165: inode #1: comm syz.0.2165: iget: illegal inode # [ 402.794807][ T7403] EXT4-fs (loop4): mount failed [ 402.803045][ T7396] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2165: error while reading EA inode 1 err=-117 [ 402.820034][ T7396] EXT4-fs (loop0): 1 orphan inode deleted [ 402.826376][ T7396] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000003,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,max_dir_size_kb=0x000000,errors=continue [ 403.078277][ T7425] 9pnet: Insufficient options for proto=fd [ 403.101633][ T7412] EXT4-fs (loop1): Test dummy encryption mode enabled [ 403.113655][ T7429] syz.0.2177[7429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.113718][ T7429] syz.0.2177[7429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.113880][ T7412] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,inlinecrypt,,errors=continue [ 403.150009][ T7412] ext4 filesystem being mounted at /465/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 403.160999][ T1871] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 403.460571][ T1871] usb 4-1: Using ep0 maxpacket: 8 [ 403.545153][ T24] kauditd_printk_skb: 124 callbacks suppressed [ 403.545169][ T24] audit: type=1400 audit(1757626126.710:1963): avc: denied { read write } for pid=7442 comm="syz.0.2182" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 403.581422][ T24] audit: type=1400 audit(1757626126.740:1964): avc: denied { open } for pid=7442 comm="syz.0.2182" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 403.605337][ T24] audit: type=1400 audit(1757626126.740:1965): avc: denied { mounton } for pid=7442 comm="syz.0.2182" path="/462/file0" dev="tmpfs" ino=2474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 403.628394][ T24] audit: type=1400 audit(1757626126.740:1966): avc: denied { mount } for pid=7442 comm="syz.0.2182" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 403.717106][ T7448] overlayfs: failed to resolve './file0': -2 [ 403.724730][ T24] audit: type=1400 audit(1757626126.880:1967): avc: denied { unlink } for pid=7439 comm="syz.2.2181" name="#19" dev="tmpfs" ino=2195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 403.821045][ T1871] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 403.991181][ T7447] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 403.994606][ T24] audit: type=1400 audit(1757626127.160:1968): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 404.002722][ T1871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.019053][ T7447] EXT4-fs (loop1): Test dummy encryption mode enabled [ 404.027042][ T1871] usb 4-1: Product: syz [ 404.027052][ T1871] usb 4-1: Manufacturer: syz [ 404.027063][ T1871] usb 4-1: SerialNumber: syz [ 404.061499][ T7447] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 404.079206][ T7447] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 404.098364][ T24] audit: type=1326 audit(1757626127.260:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7461 comm="syz.4.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2def0ba9 code=0x7ffc0000 [ 404.128486][ T24] audit: type=1326 audit(1757626127.290:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7461 comm="syz.4.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2d2def0ba9 code=0x7ffc0000 [ 404.154091][ T24] audit: type=1326 audit(1757626127.290:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7461 comm="syz.4.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2def0ba9 code=0x7ffc0000 [ 404.164915][ T7447] EXT4-fs (loop1): 1 truncate cleaned up [ 404.183770][ T7447] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 404.186368][ T24] audit: type=1326 audit(1757626127.290:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7461 comm="syz.4.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f2d2def0ba9 code=0x7ffc0000 [ 404.901258][ T7470] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 404.911966][ T7470] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #16: comm syz.0.2188: mark_inode_dirty error [ 404.925344][ T7470] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 404.934612][ T7470] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #16: comm syz.0.2188: mark_inode_dirty error [ 404.947621][ T7470] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 404.956918][ T7470] EXT4-fs error (device loop0) in ext4_orphan_del:3292: error 27 [ 404.966340][ T7470] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 404.975530][ T7470] EXT4-fs error (device loop0): ext4_truncate:4390: inode #16: comm syz.0.2188: mark_inode_dirty error [ 404.988011][ T7470] EXT4-fs error (device loop0) in ext4_orphan_cleanup:3108: error 27 [ 404.999996][ T7470] EXT4-fs (loop0): 1 truncate cleaned up [ 405.005951][ T7470] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 405.015399][ T7470] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.756333][ T1871] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 406.814422][ T1871] usb 4-1: USB disconnect, device number 15 [ 406.824099][ T1871] usblp0: removed [ 406.873775][ T7500] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 406.912610][ T7500] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 406.947459][ T7503] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 406.955695][ T7503] EXT4-fs (loop4): Test dummy encryption mode enabled [ 406.964000][ T7503] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 406.972823][ T7503] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 406.993674][ T7503] EXT4-fs (loop4): 1 truncate cleaned up [ 406.999482][ T7503] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 407.018090][ T7510] overlayfs: failed to resolve './file0': -2 [ 407.455376][ T7515] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 407.464972][ T7515] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #16: comm syz.2.2203: mark_inode_dirty error [ 407.478603][ T7515] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 407.487961][ T7515] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #16: comm syz.2.2203: mark_inode_dirty error [ 407.500766][ T7515] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 407.510231][ T7515] EXT4-fs error (device loop2) in ext4_orphan_del:3292: error 27 [ 407.519327][ T7515] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 407.528864][ T7515] EXT4-fs error (device loop2): ext4_truncate:4390: inode #16: comm syz.2.2203: mark_inode_dirty error [ 407.541374][ T7515] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3108: error 27 [ 407.552106][ T7515] EXT4-fs (loop2): 1 truncate cleaned up [ 407.558077][ T7515] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 407.567702][ T7515] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.695054][ T7521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=7521 comm=syz.1.2204 [ 407.934967][ T7522] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2204: Invalid inode bitmap blk 4 in block_group 0 [ 407.948104][ T7522] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,lazytime,,errors=continue [ 408.965300][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 408.965336][ T24] audit: type=1400 audit(1757626132.070:1989): avc: denied { mount } for pid=7559 comm="syz.1.2220" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 409.035803][ T7567] EXT4-fs (loop3): Ignoring removed nobh option [ 409.042526][ T7567] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 409.131743][ T7567] EXT4-fs (loop3): orphan cleanup on readonly fs [ 409.133240][ T24] audit: type=1400 audit(1757626132.100:1990): avc: denied { read } for pid=7559 comm="syz.1.2220" name="4:1" dev="overlay" ino=7232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 409.152594][ T7567] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 409.175876][ T7567] EXT4-fs (loop3): Remounting filesystem read-only [ 409.181689][ T24] audit: type=1400 audit(1757626132.120:1991): avc: denied { create } for pid=7559 comm="syz.1.2220" name="#21" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 409.183085][ T7567] Quota error (device loop3): write_blk: dquota write failed [ 409.210445][ T7567] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 409.220319][ T7567] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.2221: Failed to acquire dquot type 0 [ 409.240745][ T7567] EXT4-fs (loop3): 1 truncate cleaned up [ 409.255499][ T7567] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,noblock_validity,nolazytime,journal_dev=0x0000000000000d41,nogrpid,nobh,errors=remount-ro,noinit_itable,min_batch_time=0x00000000000000012 [ 409.256295][ T24] audit: type=1400 audit(1757626132.120:1992): avc: denied { associate } for pid=7559 comm="syz.1.2220" name="#21" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 409.304722][ T7565] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 409.312117][ T24] audit: type=1400 audit(1757626132.120:1993): avc: denied { rmdir } for pid=7559 comm="syz.1.2220" name="#21" dev="tmpfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 409.314073][ T7565] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #16: comm syz.4.2217: mark_inode_dirty error [ 409.335497][ T24] audit: type=1400 audit(1757626132.470:1994): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 409.347621][ T7565] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 409.376075][ T7565] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #16: comm syz.4.2217: mark_inode_dirty error [ 409.389532][ T7565] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 409.398895][ T7565] EXT4-fs error (device loop4) in ext4_orphan_del:3292: error 27 [ 409.408028][ T7565] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 409.417430][ T7565] EXT4-fs error (device loop4): ext4_truncate:4390: inode #16: comm syz.4.2217: mark_inode_dirty error [ 409.438646][ T7579] netlink: 'syz.0.2222': attribute type 3 has an invalid length. [ 409.447147][ T7579] netlink: 'syz.0.2222': attribute type 3 has an invalid length. [ 409.480882][ T24] audit: type=1400 audit(1757626132.620:1995): avc: denied { read write } for pid=7575 comm="syz.0.2222" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 409.661698][ T7565] EXT4-fs error (device loop4) in ext4_orphan_cleanup:3108: error 27 [ 409.671258][ T7565] EXT4-fs (loop4): 1 truncate cleaned up [ 409.676997][ T7565] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 409.686172][ T7565] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.728644][ T24] audit: type=1400 audit(1757626132.630:1996): avc: denied { open } for pid=7575 comm="syz.0.2222" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 409.985814][ T7597] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 410.002761][ T7597] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 410.027457][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2229'. [ 410.036675][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2229'. [ 410.131029][ T7602] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 410.210708][ T7602] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 410.546697][ T7611] EXT4-fs warning (device loop0): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 410.563933][ T7611] EXT4-fs (loop0): mount failed [ 410.744022][ T7624] EXT4-fs (loop0): 1 truncate cleaned up [ 410.749854][ T7624] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nobarrier, [ 410.846028][ T7632] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 410.854313][ T7632] EXT4-fs (loop0): Test dummy encryption mode enabled [ 410.861781][ T7632] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 410.869250][ T7632] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 410.888207][ T7632] EXT4-fs (loop0): 1 truncate cleaned up [ 411.389266][ T7641] netlink: 'syz.1.2243': attribute type 3 has an invalid length. [ 411.397126][ T7641] netlink: 'syz.1.2243': attribute type 3 has an invalid length. [ 411.632078][ T7632] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 411.851118][ T7659] EXT4-fs error (device loop1): ext4_quota_enable:6447: comm syz.1.2251: inode #262144: comm syz.1.2251: iget: illegal inode # [ 411.864897][ T7659] EXT4-fs (loop1): Remounting filesystem read-only [ 411.871821][ T7659] EXT4-fs error (device loop1): ext4_quota_enable:6450: comm syz.1.2251: Bad quota inode: 262144, type: 2 [ 411.884002][ T7659] EXT4-fs warning (device loop1): ext4_enable_quotas:6491: Failed to enable quota tracking (type=2, err=-117, ino=262144). Please run e2fsck to fix. [ 411.899775][ T7659] EXT4-fs (loop1): mount failed [ 411.978901][ T7674] ================================================================== [ 411.987026][ T7674] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 411.995212][ T7674] Read of size 8 at addr ffff8881110403c0 by task syz.3.2256/7674 [ 412.003023][ T7674] [ 412.005353][ T7674] CPU: 1 PID: 7674 Comm: syz.3.2256 Not tainted syzkaller #0 [ 412.012734][ T7674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 412.022925][ T7674] Call Trace: [ 412.026221][ T7674] __dump_stack+0x21/0x24 [ 412.030564][ T7674] dump_stack_lvl+0x169/0x1d8 [ 412.035258][ T7674] ? show_regs_print_info+0x18/0x18 [ 412.040467][ T7674] ? thaw_kernel_threads+0x220/0x220 [ 412.045768][ T7674] print_address_description+0x7f/0x2c0 [ 412.051321][ T7674] ? tc_setup_flow_action+0x842/0x3280 [ 412.056904][ T7674] kasan_report+0xe2/0x130 [ 412.061322][ T7674] ? flow_action_cookie_create+0x28/0x90 [ 412.066958][ T7674] ? tc_setup_flow_action+0x842/0x3280 [ 412.072429][ T7674] __asan_report_load8_noabort+0x14/0x20 [ 412.078063][ T7674] tc_setup_flow_action+0x842/0x3280 [ 412.083467][ T7674] ? __kmalloc+0x1a7/0x330 [ 412.087903][ T7674] ? flow_rule_alloc+0x32/0x2c0 [ 412.092774][ T7674] mall_replace_hw_filter+0x293/0x810 [ 412.098164][ T7674] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 412.104238][ T7674] ? mall_set_parms+0x410/0x410 [ 412.109152][ T7674] ? tcf_exts_destroy+0xb0/0xb0 [ 412.114018][ T7674] ? pcpu_alloc+0xf8a/0x16b0 [ 412.118631][ T7674] ? mall_set_parms+0x19d/0x410 [ 412.123602][ T7674] mall_change+0x528/0x750 [ 412.128046][ T7674] ? __kasan_check_write+0x14/0x20 [ 412.133168][ T7674] ? mall_get+0xa0/0xa0 [ 412.137351][ T7674] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 412.143256][ T7674] ? nla_strcmp+0xf4/0x140 [ 412.147683][ T7674] tc_new_tfilter+0x13f6/0x1a10 [ 412.152533][ T7674] ? mall_get+0xa0/0xa0 [ 412.156692][ T7674] ? tcf_gate_entry_destructor+0x20/0x20 [ 412.162328][ T7674] ? perf_callchain_kernel+0x50c/0x5c0 [ 412.167799][ T7674] ? security_capable+0x87/0xb0 [ 412.172685][ T7674] ? ns_capable+0x8c/0xf0 [ 412.177103][ T7674] ? netlink_net_capable+0x125/0x160 [ 412.182433][ T7674] ? tcf_gate_entry_destructor+0x20/0x20 [ 412.188093][ T7674] rtnetlink_rcv_msg+0x800/0xb90 [ 412.193036][ T7674] ? rtnetlink_bind+0x80/0x80 [ 412.197711][ T7674] ? arch_stack_walk+0xee/0x140 [ 412.202595][ T7674] ? stack_trace_save+0x98/0xe0 [ 412.207489][ T7674] ? stack_trace_snprint+0xf0/0xf0 [ 412.212622][ T7674] ? memcpy+0x56/0x70 [ 412.216634][ T7674] ? avc_has_perm+0x234/0x360 [ 412.221325][ T7674] ? __kasan_slab_alloc+0xbd/0xf0 [ 412.226496][ T7674] ? slab_post_alloc_hook+0x5d/0x2f0 [ 412.231833][ T7674] ? ___sys_sendmsg+0x1f0/0x260 [ 412.236839][ T7674] ? avc_has_perm_noaudit+0x240/0x240 [ 412.242233][ T7674] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 412.247721][ T7674] netlink_rcv_skb+0x1e0/0x430 [ 412.252496][ T7674] ? rtnetlink_bind+0x80/0x80 [ 412.257208][ T7674] ? netlink_ack+0xb80/0xb80 [ 412.261803][ T7674] ? __netlink_lookup+0x387/0x3b0 [ 412.266829][ T7674] rtnetlink_rcv+0x1c/0x20 [ 412.271248][ T7674] netlink_unicast+0x876/0xa40 [ 412.276026][ T7674] netlink_sendmsg+0x88d/0xb30 [ 412.280810][ T7674] ? netlink_getsockopt+0x530/0x530 [ 412.286040][ T7674] ? security_socket_sendmsg+0x82/0xa0 [ 412.291536][ T7674] ? netlink_getsockopt+0x530/0x530 [ 412.296741][ T7674] ____sys_sendmsg+0x5a2/0x8c0 [ 412.301599][ T7674] ? __sys_sendmsg_sock+0x40/0x40 [ 412.306628][ T7674] ? import_iovec+0x7c/0xb0 [ 412.311249][ T7674] ___sys_sendmsg+0x1f0/0x260 [ 412.315937][ T7674] ? __sys_sendmsg+0x250/0x250 [ 412.320886][ T7674] ? __fdget+0x1a1/0x230 [ 412.325251][ T7674] __x64_sys_sendmsg+0x1e2/0x2a0 [ 412.330218][ T7674] ? ___sys_sendmsg+0x260/0x260 [ 412.335089][ T7674] ? switch_fpu_return+0x197/0x340 [ 412.340359][ T7674] do_syscall_64+0x31/0x40 [ 412.344787][ T7674] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 412.350689][ T7674] RIP: 0033:0x7f5e1f8e1ba9 [ 412.355241][ T7674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.375110][ T7674] RSP: 002b:00007f5e1e34a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.383762][ T7674] RAX: ffffffffffffffda RBX: 00007f5e1fb28fa0 RCX: 00007f5e1f8e1ba9 [ 412.392182][ T7674] RDX: 0000000004004810 RSI: 0000200000000580 RDI: 0000000000000004 [ 412.400278][ T7674] RBP: 00007f5e1f964e19 R08: 0000000000000000 R09: 0000000000000000 [ 412.408258][ T7674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.416233][ T7674] R13: 00007f5e1fb29038 R14: 00007f5e1fb28fa0 R15: 00007fff5c3694d8 [ 412.424297][ T7674] [ 412.426646][ T7674] Allocated by task 7674: [ 412.431071][ T7674] __kasan_kmalloc+0xda/0x110 [ 412.435883][ T7674] __kmalloc+0x1a7/0x330 [ 412.440129][ T7674] tcf_idr_create+0x5f/0x790 [ 412.444733][ T7674] tcf_idr_create_from_flags+0x61/0x70 [ 412.450312][ T7674] tcf_gact_init+0x2b4/0x520 [ 412.455009][ T7674] tcf_action_init_1+0x3e1/0x670 [ 412.459945][ T7674] tcf_action_init+0x1e6/0x700 [ 412.464830][ T7674] tcf_exts_validate+0x215/0x510 [ 412.469766][ T7674] mall_set_parms+0x4b/0x410 [ 412.474356][ T7674] mall_change+0x45c/0x750 [ 412.478780][ T7674] tc_new_tfilter+0x13f6/0x1a10 [ 412.483653][ T7674] rtnetlink_rcv_msg+0x800/0xb90 [ 412.488785][ T7674] netlink_rcv_skb+0x1e0/0x430 [ 412.493571][ T7674] rtnetlink_rcv+0x1c/0x20 [ 412.497986][ T7674] netlink_unicast+0x876/0xa40 [ 412.502748][ T7674] netlink_sendmsg+0x88d/0xb30 [ 412.507615][ T7674] ____sys_sendmsg+0x5a2/0x8c0 [ 412.512377][ T7674] ___sys_sendmsg+0x1f0/0x260 [ 412.517071][ T7674] __x64_sys_sendmsg+0x1e2/0x2a0 [ 412.522118][ T7674] do_syscall_64+0x31/0x40 [ 412.526555][ T7674] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 412.532568][ T7674] [ 412.534921][ T7674] The buggy address belongs to the object at ffff888111040300 [ 412.534921][ T7674] which belongs to the cache kmalloc-192 of size 192 [ 412.549126][ T7674] The buggy address is located 0 bytes to the right of [ 412.549126][ T7674] 192-byte region [ffff888111040300, ffff8881110403c0) [ 412.562747][ T7674] The buggy address belongs to the page: [ 412.568406][ T7674] page:ffffea0004441000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111040 [ 412.578681][ T7674] flags: 0x4000000000000200(slab) [ 412.583709][ T7674] raw: 4000000000000200 ffffea0004603600 0000000300000003 ffff888100043380 [ 412.592472][ T7674] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 412.601055][ T7674] page dumped because: kasan: bad access detected [ 412.607479][ T7674] page_owner tracks the page as allocated [ 412.613231][ T7674] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 5460, ts 350388793107, free_ts 350333177829 [ 412.630964][ T7674] prep_new_page+0x179/0x180 [ 412.635650][ T7674] get_page_from_freelist+0x2235/0x23d0 [ 412.641195][ T7674] __alloc_pages_nodemask+0x268/0x5f0 [ 412.646562][ T7674] new_slab+0x84/0x3f0 [ 412.650639][ T7674] ___slab_alloc+0x2a6/0x450 [ 412.655332][ T7674] __slab_alloc+0x63/0xa0 [ 412.659669][ T7674] __kmalloc+0x201/0x330 [ 412.663920][ T7674] ext4_find_extent+0x36b/0xe20 [ 412.668780][ T7674] ext4_ext_map_blocks+0x1de/0x5d40 [ 412.674342][ T7674] ext4_map_blocks+0x978/0x1bc0 [ 412.679200][ T7674] ext4_convert_unwritten_extents+0x21c/0x3f0 [ 412.685308][ T7674] ext4_convert_unwritten_io_end_vec+0x103/0x180 [ 412.691827][ T7674] ext4_end_io_rsv_work+0x2b9/0x600 [ 412.697026][ T7674] process_one_work+0x6e1/0xba0 [ 412.701879][ T7674] worker_thread+0xa6a/0x13b0 [ 412.706582][ T7674] kthread+0x346/0x3d0 [ 412.710736][ T7674] page last free stack trace: [ 412.715489][ T7674] free_unref_page_prepare+0x2b7/0x2d0 [ 412.720951][ T7674] __free_pages+0x14b/0x380 [ 412.725568][ T7674] free_pages+0x82/0x90 [ 412.729728][ T7674] tlb_finish_mmu+0x248/0x300 [ 412.734410][ T7674] exit_mmap+0x2fc/0x540 [ 412.738681][ T7674] __mmput+0x93/0x2f0 [ 412.742669][ T7674] mmput+0x4e/0x150 [ 412.746481][ T7674] do_exit+0x9ae/0x2480 [ 412.750641][ T7674] do_group_exit+0x141/0x310 [ 412.755227][ T7674] get_signal+0xf7d/0x12e0 [ 412.759657][ T7674] arch_do_signal_or_restart+0xbf/0x10f0 [ 412.765286][ T7674] exit_to_user_mode_loop+0xa2/0xe0 [ 412.770561][ T7674] syscall_exit_to_user_mode+0x68/0x90 [ 412.776029][ T7674] do_syscall_64+0x3d/0x40 [ 412.780459][ T7674] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 412.786351][ T7674] [ 412.788766][ T7674] Memory state around the buggy address: [ 412.794446][ T7674] ffff888111040280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 412.802635][ T7674] ffff888111040300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.810696][ T7674] >ffff888111040380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 412.818755][ T7674] ^ [ 412.824908][ T7674] ffff888111040400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 412.832977][ T7674] ffff888111040480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 412.841571][ T7674] ================================================================== [ 412.849641][ T7674] Disabling lock debugging due to kernel taint [ 413.220800][ T7671] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 413.232357][ T7671] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue